ioctl$KVM_ENABLE_CAP(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) 2018/06/04 21:21:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) [ 114.208858] QAT: Invalid ioctl 2018/06/04 21:21:40 executing program 0: gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='U'}]}]}, 0x20}, 0x1}, 0x0) 2018/06/04 21:21:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000002b40)=[@text64={0x40, &(0x7f0000002ac0)="66b839010f00d8460f0666baa000ec470ff5b671000000c421f913b24ea5f4b80f32f240dff066410f744de2400f01f848b801000000000000000f23c80f21f835000020000f23f8", 0x48}], 0x1, 0x0, &(0x7f0000002b80), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="266464f2f0806ead000f08c744240007000000c744240200980000c7442406000000000f011c24d0f0c4e1fc5a685866baa000ed66baf80cb8b14cb385ef66bafc0cb033ee0f20c035040000000f22c064f4c4e1781726", 0x57}], 0x1, 0x63, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/04 21:21:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) [ 114.315375] sg_write: data in/out 151/65104 bytes for SCSI command 0x0-- guessing data in; [ 114.315375] program syz-executor4 not setting count and/or reply_len properly 2018/06/04 21:21:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 2018/06/04 21:21:40 executing program 0: gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='U'}]}]}, 0x20}, 0x1}, 0x0) 2018/06/04 21:21:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e308"}], 0x28}}], 0x2, 0x0) 2018/06/04 21:21:40 executing program 7: r0 = socket$kcm(0x29, 0x200000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0042fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x43}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/06/04 21:21:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 2018/06/04 21:21:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x0, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0x8008ae9d, &(0x7f0000000040)) 2018/06/04 21:21:40 executing program 0: gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='U'}]}]}, 0x20}, 0x1}, 0x0) 2018/06/04 21:21:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e308"}], 0x28}}], 0x2, 0x0) [ 114.970552] QAT: Invalid ioctl 2018/06/04 21:21:40 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc)=@assoc_id=0x0, &(0x7f0000005ffc)=0x4) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed, r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r5, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f000000f000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380)='/dev/loop-control\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000007ffc)=0x10000000006) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000001200)=""/170, &(0x7f0000001180)=0xaa) r6 = socket(0x2, 0x1, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") arch_prctl(0x2002, &(0x7f0000000180)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r2, 0x400, 0x1) getpeername$unix(r0, &(0x7f00000012c0), &(0x7f0000001340)=0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r1, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}, {&(0x7f0000011fff)=""/1, 0x1}], 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) read(r1, &(0x7f0000000000)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 2018/06/04 21:21:40 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) setresuid(0x0, r1, 0x0) setgid(r2) [ 115.135402] QAT: Invalid ioctl [ 115.169991] QAT: Invalid ioctl [ 115.928518] QAT: Invalid ioctl 2018/06/04 21:21:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x103}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454dd, &(0x7f0000000180)) 2018/06/04 21:21:41 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x200000000000, 0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc)=@assoc_id=0x0, &(0x7f0000005ffc)=0x4) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed, r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r5, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f000000f000)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001380)='/dev/loop-control\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000007ffc)=0x10000000006) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000001200)=""/170, &(0x7f0000001180)=0xaa) r6 = socket(0x2, 0x1, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") arch_prctl(0x2002, &(0x7f0000000180)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r2, 0x400, 0x1) getpeername$unix(r0, &(0x7f00000012c0), &(0x7f0000001340)=0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r1, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}, {&(0x7f0000011fff)=""/1, 0x1}], 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) read(r1, &(0x7f0000000000)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 2018/06/04 21:21:41 executing program 3: r0 = socket(0x90000000000010, 0x3, 0x0) write(r0, &(0x7f0000f56fdc)="240000002e001f811f101a00000000002300f9ffffffffffffffffff08ffffff04010061", 0x24) 2018/06/04 21:21:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) perf_event_open(&(0x7f00004e7000)={0x2, 0x78, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 2018/06/04 21:21:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r0, 0x660c, &(0x7f0000000040)) 2018/06/04 21:21:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}}, 0x31) 2018/06/04 21:21:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e308"}], 0x28}}], 0x2, 0x0) 2018/06/04 21:21:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fc3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/04 21:21:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4}}) [ 116.062317] QAT: Invalid ioctl 2018/06/04 21:21:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x80045105, &(0x7f0000a07fff)) 2018/06/04 21:21:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e308"}], 0x28}}], 0x2, 0x0) 2018/06/04 21:21:41 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$binfmt_aout(r3, &(0x7f0000000080)={{0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x1f4) [ 116.091450] QAT: Invalid ioctl 2018/06/04 21:21:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000f1dff8)) 2018/06/04 21:21:41 executing program 7: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff88, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x7}}}}}}, &(0x7f0000000040)) [ 116.847347] QAT: Invalid ioctl 2018/06/04 21:21:42 executing program 6: r0 = inotify_init1(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 2018/06/04 21:21:42 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x42, 0x0) 2018/06/04 21:21:42 executing program 5: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 2018/06/04 21:21:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000000), 0x0) 2018/06/04 21:21:42 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="d13deceac12e245038b4103a4731509c", 0x10) accept(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000140)=0x80) 2018/06/04 21:21:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x1) 2018/06/04 21:21:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x80, 0x0, 'client0\x00', 0x0, "cf5493b26d7da4bb", "cf061369767509a2cbf0594d12105f3df9c75c9b7dbbab40123dd35fe184e054"}) 2018/06/04 21:21:42 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfeffffff, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/06/04 21:21:42 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x3) 2018/06/04 21:21:42 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x3a000000}) 2018/06/04 21:21:42 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40043311, &(0x7f0000000080)) 2018/06/04 21:21:42 executing program 6: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x4, 0x7}], 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x14}, {}], 0x26a) 2018/06/04 21:21:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") prctl$intptr(0x1a, 0x1) pipe2(&(0x7f0000000000), 0x0) 2018/06/04 21:21:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x1) 2018/06/04 21:21:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000fc0)=[{&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000e00), 0x0, &(0x7f0000000f40)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8000}}], 0x30}], 0x1, 0x0) 2018/06/04 21:21:42 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = msgget$private(0x0, 0x0) exit(0x0) msgrcv(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000240)) 2018/06/04 21:21:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x400000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x11) close(r1) 2018/06/04 21:21:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 117.327167] binder_alloc: 8049: binder_alloc_buf failed to map page at 20002000 in userspace [ 117.353318] binder: 8049:8053 transaction failed 29201/-12, size 0-12288 line 2971 [ 117.365418] binder_alloc: binder_alloc_mmap_handler: 8049 20001000-20004000 already mapped failed -16 [ 117.381774] binder: BINDER_SET_CONTEXT_MGR already set [ 117.387349] binder: 8049:8053 ioctl 40046207 0 returned -16 [ 117.430651] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/04 21:21:44 executing program 5: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 2018/06/04 21:21:44 executing program 7: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1a89, 0x1, [0x0]}, 0xa) 2018/06/04 21:21:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x1) 2018/06/04 21:21:44 executing program 2: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x9]) 2018/06/04 21:21:44 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x4008240b, 0xffffffffffffffff) 2018/06/04 21:21:44 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 2018/06/04 21:21:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 2018/06/04 21:21:44 executing program 4: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000001fe8)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7}, 0x2c) 2018/06/04 21:21:44 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 118.283853] binder_alloc: 8100: binder_alloc_buf failed to map page at 20002000 in userspace 2018/06/04 21:21:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f00007ed000)=0x2, 0x1) 2018/06/04 21:21:44 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/06/04 21:21:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f20f2d7e00c4e3bd40ce630f07f7cd0c000000660f01c90ff8cd0fc7588ab8ad6e00000f23d80f21f835000000c00f23f8c4e3cd6971f500f20f08", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x0) 2018/06/04 21:21:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) [ 118.335971] binder: 8100:8101 transaction failed 29201/-12, size 0-12288 line 2971 2018/06/04 21:21:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x6, 0x100062}) 2018/06/04 21:21:44 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x20000000002284, &(0x7f0000000000)) 2018/06/04 21:21:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) [ 118.502841] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.568622] binder_alloc: 8139: binder_alloc_buf failed to map page at 20001000 in userspace [ 118.607295] binder: 8139:8140 transaction failed 29201/-12, size 0-0 line 2971 [ 118.634823] binder_alloc: binder_alloc_mmap_handler: 8139 20001000-20004000 already mapped failed -16 [ 118.649790] binder: BINDER_SET_CONTEXT_MGR already set [ 118.655311] binder: 8139:8140 ioctl 40046207 0 returned -16 [ 118.676538] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/04 21:21:44 executing program 5: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 2018/06/04 21:21:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 2018/06/04 21:21:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000031dffc)=0x1, 0x8, 0x0, &(0x7f0000004000), &(0x7f0000000000), 0x0) 2018/06/04 21:21:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x6, 0x100062}) 2018/06/04 21:21:44 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecaffc)=0x0) setpriority(0x0, r2, 0x0) 2018/06/04 21:21:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002a7ffc)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ioctl$GIO_SCRNMAP(r0, 0x5420, &(0x7f0000000000)=""/216) 2018/06/04 21:21:44 executing program 4: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8}}) 2018/06/04 21:21:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000002c0)='/\x00', &(0x7f0000000300)={0x8}, &(0x7f0000000380), 0x0) 2018/06/04 21:21:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000000), 0xffffffffffffffce, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 2018/06/04 21:21:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x9, 0x1) read$eventfd(r1, &(0x7f0000000040), 0x8) [ 119.245808] binder_alloc: 8162: binder_alloc_buf failed to map page at 20002000 in userspace [ 119.284290] binder: 8162:8168 transaction failed 29201/-12, size 0-12288 line 2971 2018/06/04 21:21:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x6, 0x100062}) 2018/06/04 21:21:45 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)="6e732f7069e109666f725f6368696c6472656e00") 2018/06/04 21:21:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002a7ffc)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ioctl$GIO_SCRNMAP(r0, 0x5420, &(0x7f0000000000)=""/216) 2018/06/04 21:21:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000300019010000000000000000030000004c0000000800010055000000"], 0x1}, 0x1}, 0x0) 2018/06/04 21:21:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mlock(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 119.409580] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/04 21:21:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080), 0x0) [ 119.510625] binder_alloc: 8197: binder_alloc_buf failed to map page at 20002000 in userspace [ 119.554230] binder: 8197:8199 transaction failed 29201/-12, size 0-12288 line 2971 [ 119.593684] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/04 21:21:46 executing program 5: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 2018/06/04 21:21:46 executing program 2: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 2018/06/04 21:21:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002a7ffc)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ioctl$GIO_SCRNMAP(r0, 0x5420, &(0x7f0000000000)=""/216) 2018/06/04 21:21:46 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 2018/06/04 21:21:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x6, 0x100062}) 2018/06/04 21:21:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)={0xd, 0x0, "b917e1a158"}, 0x0) io_setup(0x0, &(0x7f0000000040)) 2018/06/04 21:21:46 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x4000) 2018/06/04 21:21:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000140)=[0xff02]) 2018/06/04 21:21:46 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) 2018/06/04 21:21:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00002a7ffc)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x615}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ioctl$GIO_SCRNMAP(r0, 0x5420, &(0x7f0000000000)=""/216) 2018/06/04 21:21:46 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = epoll_create(0x20) fcntl$notify(r1, 0x0, 0x284) pselect6(0xfe13, &(0x7f0000000680), &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000000)={&(0x7f00000003c0), 0x8}) 2018/06/04 21:21:46 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x3a}) 2018/06/04 21:21:46 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/06/04 21:21:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4004556a, 0x0) 2018/06/04 21:21:46 executing program 0: sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) move_pages(0x0, 0x200000000000001b, &(0x7f0000000280), 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0) io_setup(0x5, &(0x7f0000000000)) 2018/06/04 21:21:46 executing program 2: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40106309}], 0x0, 0x0, &(0x7f00000000c0)}) [ 120.663464] binder: 8263:8264 BC_ACQUIRE_DONE u0000000000000000 no match [ 120.718651] binder: 8263:8268 unknown command 0 [ 120.734285] binder: 8263:8268 ioctl c0306201 20a20000 returned -22 2018/06/04 21:21:47 executing program 0: sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) move_pages(0x0, 0x200000000000001b, &(0x7f0000000280), 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0) io_setup(0x5, &(0x7f0000000000)) 2018/06/04 21:21:47 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") poll(&(0x7f0000000580)=[{r0}], 0x1, 0x1) 2018/06/04 21:21:47 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x3a}) 2018/06/04 21:21:47 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/06/04 21:21:47 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) dup2(r1, r0) 2018/06/04 21:21:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) close(r0) 2018/06/04 21:21:47 executing program 6: add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000)={0x73, 0x79, 0x7a}, &(0x7f0000001000)='\x00', 0x1, 0xfffffffffffffffc) 2018/06/04 21:21:47 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/04 21:21:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xa}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000480)=@query={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1, 0x2}}, 0x18) 2018/06/04 21:21:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2018/06/04 21:21:48 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x2000000}) 2018/06/04 21:21:48 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000100)=@ipx={0x4, 0x0, 0x0, "fcd9e775b51e"}, 0x80) 2018/06/04 21:21:48 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/04 21:21:48 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/04 21:21:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x3a}) 2018/06/04 21:21:48 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/06/04 21:21:48 executing program 0: sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) move_pages(0x0, 0x200000000000001b, &(0x7f0000000280), 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0) io_setup(0x5, &(0x7f0000000000)) 2018/06/04 21:21:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f75702e76746174003c23fb57e6c60f0e1f0294e69d9a1f63f8785ad188c26c2ce15b26e518a4cb3a9cd12dce8640d899c22c652b3a471b4a7db7f3fdf6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340874133c9aebf5c26ebb6a58766736f4869e", 0x2761, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0) 2018/06/04 21:21:48 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/04 21:21:48 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setitimer(0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) 2018/06/04 21:21:48 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)) 2018/06/04 21:21:48 executing program 3: sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000480)=0x53aa) r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000380000)={0x101}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) 2018/06/04 21:21:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_X86_SET_MCE(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x3a}) 2018/06/04 21:21:48 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900020000000000000000000000030006000000000002000000e0000054d81458186fe8b90002000100000000000000060200000000030005000000000002000000e00000010000000000000000"], 0x60}, 0x1}, 0x0) 2018/06/04 21:21:49 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10dd}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0x43c, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/04 21:21:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4}, 0x20) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) 2018/06/04 21:21:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000a40)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14}, @in6=@remote={0xfe, 0x80, [], 0xbb}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}}, @in6}}, [@mark={0xc, 0x15}]}, 0x104}, 0x1}, 0x0) 2018/06/04 21:21:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1d2d, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffea0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x29a, 0x4) readv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/41, 0xd80}], 0x1) 2018/06/04 21:21:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f75702e76746174003c23fb57e6c60f0e1f0294e69d9a1f63f8785ad188c26c2ce15b26e518a4cb3a9cd12dce8640d899c22c652b3a471b4a7db7f3fdf6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340874133c9aebf5c26ebb6a58766736f4869e", 0x2761, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0) 2018/06/04 21:21:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f75702e76746174003c23fb57e6c60f0e1f0294e69d9a1f63f8785ad188c26c2ce15b26e518a4cb3a9cd12dce8640d899c22c652b3a471b4a7db7f3fdf6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340874133c9aebf5c26ebb6a58766736f4869e", 0x2761, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0) 2018/06/04 21:21:49 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000c40)=ANY=[], 0x30c) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x29, &(0x7f0000002900)=""/4096, 0x1000}, 0x0) 2018/06/04 21:21:49 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) dup2(r3, r2) 2018/06/04 21:21:50 executing program 0: sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) move_pages(0x0, 0x200000000000001b, &(0x7f0000000280), 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0) io_setup(0x5, &(0x7f0000000000)) 2018/06/04 21:21:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}, 0x1}, 0x0) 2018/06/04 21:21:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f75702e76746174003c23fb57e6c60f0e1f0294e69d9a1f63f8785ad188c26c2ce15b26e518a4cb3a9cd12dce8640d899c22c652b3a471b4a7db7f3fdf6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340874133c9aebf5c26ebb6a58766736f4869e", 0x2761, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0) 2018/06/04 21:21:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x88}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x18) 2018/06/04 21:21:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x19, &(0x7f0000000080)={@dev={0xfe, 0x80}}, 0x20) 2018/06/04 21:21:50 executing program 7: r0 = socket(0x2, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/04 21:21:50 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) dup2(r3, r2) 2018/06/04 21:21:50 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff88, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) [ 124.496270] openvswitch: netlink: Either Ethernet header or EtherType is required. 2018/06/04 21:21:50 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) dup2(r3, r2) 2018/06/04 21:21:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x50f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 2018/06/04 21:21:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x11000000, 'lblc\x00'}, 0x2c) 2018/06/04 21:21:50 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)}], 0x0) 2018/06/04 21:21:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x41, 0x13, r0, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], &(0x7f0000001ffc), 0x1400) 2018/06/04 21:21:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xbfb, 0x214) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/06/04 21:21:50 executing program 2: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6009, 0x1) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) syz_mount_image$xfs(&(0x7f0000000280)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={'nouuid,', {[{@logdev={'logdev', 0x3d, './file0'}, 0x2c}]}}) 2018/06/04 21:21:50 executing program 3: r0 = socket(0x1e, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r2 = fcntl$dupfd(r0, 0x0, r0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000440)}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000540), 0x0, 0xffffffffffffffff}]) [ 125.028615] XFS (loop2): Invalid device [./file0], error=-16 [ 125.292732] XFS (loop2): Invalid device [./file0], error=-16 2018/06/04 21:21:51 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000019c0)={&(0x7f0000001840)={0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r0, 0x201, 0x0, 0x0, {0x11}}, 0x14}, 0x1}, 0x0) 2018/06/04 21:21:51 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:21:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x34}, 0x1}, 0x0) 2018/06/04 21:21:51 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40000007, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) dup2(r3, r2) 2018/06/04 21:21:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00P\v\x00']) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/04 21:21:51 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xff, 0x40010, r0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001300)}], 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0xfffffffffffffffa, &(0x7f0000000240)="67e65128d1c5ae0154c0c4") getsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000580)=""/22, &(0x7f00000005c0)=0x16) readlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/115, 0x73) r3 = socket$inet6(0xa, 0x202000000802, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ashmem\x00', 0x100, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x3, 0x80000000000041, 0x0, 0x0, 0x100}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000000020000010000000000000012bfbf2090d5e200800000000006000400000000000000ffff000000d5f40900009211efc1e6f4229a000000000000dda7ea03bfd0a2576da54c603ca1000000000000000000000000000000000000000000000000"]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e24, @rand_addr=0x3f}}}, &(0x7f0000000480)=0x84) recvfrom$ipx(0xffffffffffffffff, &(0x7f0000000100)=""/220, 0xfffffdb5, 0x40000000, 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000000), &(0x7f0000000080)) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') r8 = socket(0xa, 0x1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/22, 0x16}], 0x1, &(0x7f0000000a00)=""/4096, 0x1000, 0x1}, 0x0) ioctl(r8, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendfile(r7, r7, &(0x7f00000000c0)=0x202, 0xdd) 2018/06/04 21:21:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f00000016c0)=""/4096, 0x11fd, 0x40000122, 0x0, 0x0) r2 = dup(r0) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}], 0x1, 0x0) 2018/06/04 21:21:51 executing program 0: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001400)=@add_del={0x2, &(0x7f0000001540)='bpq0\x00', 0x3ff}) 2018/06/04 21:21:52 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400042, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/189) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4606800563000040000000000003000600090000000400ea000000000040000000004000004300000000000000010001000500380002000100ffff090007000070040000000300000000000000050000000000000039840000000000000600000000000000080000000000000025bc0000000000000700000000020000040000000000000000010000000000000500000000000000060000000000000009000000000000000600000000000000b3cf356bb86f39b118811d8b4e36833c7137e12a9b59c44b8366a399aa599a11e09534dfa9d6a341c773d06ac130be27768e32714766be85fe9a24587aa225b992a55ab767aceae3540f59ffa44cc282784ebb5e12ece402717f470867abe2dc7e275545db669bfa1c51c215833f11809f044a7037a512a216404f5147903ede7d81f714eef73a2d59eec6a4cbb20ed45b327b1708fb2c460d4e8fede010c82457285d1179e04c0b8b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007429187c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e08c3c5cfa2d92e44f88d641dc10544afecbed95809d86587b531cffb3363a6b91a1d3b072f2d4efa874d316f51fce647a7b3aab21409aa9c3b5ee19593009ebb19fd460731c01093913359c7ca3ff08da064181bd304f8dd2fe7856d0fc4d7236dc835203b78f836b25c5e597d59dfc5c25b34a06bffab1fd66bb85eb44b99c379c6997fa87f4dbfdf050bff7d79b0a947c14b678a6cd4515d075a9bce723317ad05c9369436bf93dd04cac48442f1aeae4c052db02eac16ee14342455fce28a273f976fde28789673d4fab68250b615a390ee0af80ed490f3d241737a823d0000000000"], 0x659) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000013c0)="df6ee06b", 0x4}], 0x1, &(0x7f0000007000)}, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) fchdir(r0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) 2018/06/04 21:21:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x71d7) ioctl$TIOCSTI(r0, 0x5412, 0x0) 2018/06/04 21:21:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000005480)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) mkdir(&(0x7f0000000680)='./file0/file0\x00', 0x0) 2018/06/04 21:21:52 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x80000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0xd2, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x6) 2018/06/04 21:21:52 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x1) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000040)=""/184) ioperm(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='keyringem0%ppp1\x00', 0x3) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x99, 0x4) 2018/06/04 21:21:52 executing program 0: 2018/06/04 21:21:52 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x480) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)=@pic={0x81, 0xe88, 0x2, 0x200, 0xbf, 0x1, 0x8, 0x401, 0x9, 0x7, 0x5, 0x34, 0x3fa9, 0x6e, 0x0, 0x400}) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r1, 0x7ffffffffffffffb, 0x800000402) read(r1, &(0x7f0000000080)=""/241, 0xf1) 2018/06/04 21:21:52 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x71, &(0x7f0000000140)=@assoc_value={r1}, &(0x7f0000000180)=0x8) 2018/06/04 21:21:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000001d40)={0x0, 0x989680}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 126.491655] sctp: [Deprecated]: syz-executor7 (pid 8510) Use of int in maxseg socket option. [ 126.491655] Use struct sctp_assoc_value instead 2018/06/04 21:21:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x12621d13c9a1637d, 0x7, 0x2}}) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 2018/06/04 21:21:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c0000000000029078ac141400e000000000000000000005aa"], 0x0) syz_emit_ethernet(0x33d, &(0x7f0000000280)={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, [{[{0x9100, 0x4, 0x80000000, 0x3}], {0x8100, 0x7, 0x7, 0x3}}], {@mpls_mc={0x8848, {[{0xff, 0x80000000, 0x7, 0x20}, {0x7ff, 0x5, 0x5, 0x2}, {0x5, 0x0, 0x7624664e, 0xfffffffffffff991}, {0x8, 0xffff, 0xfff, 0x9}, {0x7ff, 0x20, 0x4, 0x80000001}, {0x80000000, 0x7, 0x1, 0x3ab}], @ipv6={0x80, 0x6, "6d50d8", 0x2e7, 0x84, 0x100, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, {[@routing={0xbb, 0x6, 0x0, 0x8, 0x0, [@remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0xa}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}]}, @fragment={0x0, 0x0, 0x1, 0x14, 0x0, 0x2, 0x66}, @dstopts={0x3f, 0x2, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x1, 0x2, 0xffffffff7fffffff, [@empty, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}]}, @fragment={0x3c, 0x0, 0x200, 0x40, 0x0, 0xd56, 0x68}], @gre={{0x0, 0x0, 0x1, 0xffffffffffff8001, 0x0, 0x7, 0x0, 0x1, 0x880b, 0xce, 0x3, [], "572caa7aa20973d251d1ee6270afc621be789518045bb836fe082e2d189552670a17f069ca1fe86c4dc2f4347994bb9d5036f0c2378395e23957855b22bb1a0e70444955c8e5bee0cb18320403bcbcfe38613feec2bbc5e034043d88e8b6e4a8980cf69b07c559c67bc94b3764fe391a0a1fe5cd849e487fc537656b51cc282e67af88393c60c5694fe673a2cdb4b275413155f78af36470078106358674591b7e39d86349ae37026af68697fab2f569d298cde4309a54d8a7691f7912da4e76ac1d2c4b48e65c4136629cdf9957"}, {0x0, 0x0, 0xa0, 0x6, 0x0, 0x0, 0x800, [0x2, 0x8, 0x8000], "1f22dfe2a8bdf7d4adeccb18d535aae8afcf70d3b947e2dfdfb23b4bc05a5ec18738ded016f2ea878b8f3f761f338899237a26e5534a3a6c9be28a3ebe964b5f6ee7ff6699c7438fc0ca73aa992b1acd9fe37d12dfe1996d6a71185c70ab42e20d48068f246dbbb1662c4e904a40afa02ed29e8dcd997e25bfcd8ab742205be2fcee81783afdb6e572f84572fd3a9a5d84cf750aa3d62b9ff0ce4e8d4266522108dafb4649ab6debbf79f4364f8ab9845c63d34f"}, {0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x86dd, [], "3e032d71010acca45343899401e4776b63a10dba2a9fd2d69ada2e22b9c647297d37f8ebfad4890d53258ec5756b6c331ffd0abf86e2a3734b66c02f3aeb2928e6f0ea50d5628a2dc0534265dc59b28597fe7cb33de597c9a2"}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x40, 0xffffffffffffff01, 0x3, 0x5000, 0x2, 0xbf8}, 0x1, 0x1}}, {0x8, 0x22eb, 0x1, {{0xfffffffffffffeff, 0x2, 0x1, 0x4, 0xf4e7, 0x10001, 0x7, 0x6}, 0x2, 0x3, 0xe9, 0x1, 0x5, 0x7, 0xa49, 0x7, 0x200000000000, 0x40}}, {0x8, 0x6558, 0x1, "9d890d3c174b40909f7452aaa0450c69538e"}}}}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf6b, 0xb23, 0x27c, 0xa51]}) 2018/06/04 21:21:52 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) listen(r0, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000c90000/0xd000)=nil, 0xd000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x5) r2 = socket(0x200000000002, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) connect$inet(r1, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) 2018/06/04 21:21:52 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) setpgid(r2, r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f0000000040)={{0xfffffffffffffffd, 0x3f, 0x1, 0x8, 0x7}}) [ 126.533389] sctp: [Deprecated]: syz-executor7 (pid 8519) Use of int in maxseg socket option. [ 126.533389] Use struct sctp_assoc_value instead 2018/06/04 21:21:52 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x17, r0, 0x0, &(0x7f00000002c0)='\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) 2018/06/04 21:21:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) ioctl$TIOCSSOFTCAR(r0, 0x5413, &(0x7f0000000080)) 2018/06/04 21:21:52 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x3ff, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x18}}, 0x40, {0x2, 0x4e24, @broadcast=0xffffffff}, 'bpq0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="df338224000000", @ANYRES16=r1, @ANYBLOB="000225bd7000fedbdf2506000000080004001f00000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x20000000000003a8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3}, @jmp={0x5, 0x2c, 0xc, 0x7, 0x7, 0x0, 0x10}, @map={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000040)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x14c) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2d, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x24) 2018/06/04 21:21:52 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffff, 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}, 0xffffffffffffff00}, @in6={0xa, 0x4e24, 0x10000, @loopback={0x0, 0x1}, 0x9}, @in6={0xa, 0x4e21, 0x3f, @empty, 0x4}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0xfffffffffffffffb, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0xc}, 0x66}], 0xb0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x400, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={0x0, 0x100000001, 0x5, 0x20, &(0x7f0000ffb000/0x2000)=nil, 0x1}) getsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/06/04 21:21:52 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x2, 0x4, 0x2, 0x20, '\x00', 0x5ed7}, 0x6, 0x40, 0x1, r1, 0x5, 0x7fffffff, 'syz1\x00', &(0x7f00000000c0)=['[/\x00', '\x00', "6b657972696e67b000", 'wlan0&*self\x00', '\x00'], 0x1a, [], [0x7, 0x0, 0xffffffffffff0000, 0x6]}) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/06/04 21:21:52 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x88, 0xfffffffffffffffc}, 0x0) poll(&(0x7f0000000080), 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mincore(&(0x7f0000d1e000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/206) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000480)={0x74, 0x0, [0x80000000, 0x3f, 0x9, 0x3]}) r3 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x2, 0x400) sendmsg$netrom(r3, &(0x7f0000002440)={&(0x7f0000000100)=@full={{0x3, {"d32db9672226b3"}}, [{"9e86be228cfd10"}, {"a3e0ed9296e35f"}, {"4d5a42493ebbc7"}, {"973fe212d4fd6f"}, {"c719e748399a98"}, {"529a5ac8ede769"}, {"0d66db085c8966"}, {"7f91d3b171df12"}]}, 0x48, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=ANY=[]}, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000400)={0x9, 0xfffffffffffffff7, 0x1f, 0x0, 0x3, 0xc9, 0x3b79bf4c, 0x1, 0xf8fd, 0x101, 0x3, 0x7}) mbind(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x45, 0x10000000002) renameat(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f00000003c0)='./file0\x00') r4 = accept(0xffffffffffffff9c, &(0x7f0000000280)=@hci, &(0x7f0000000040)=0x80) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x1, 0x2, 0x1124, 0x2, 0x5, 0x6, 0x0, 0xe2a2, 0x0, 0xffff, 0x1}, 0xb) 2018/06/04 21:21:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000100)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/229, 0xe5}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/13, 0xd}, {&(0x7f00000024c0)=""/32, 0x20}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x9, &(0x7f00000035c0)=""/185, 0xb9, 0x206}, 0x7}, {{&(0x7f0000003680)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003700)=""/136, 0x88}, {&(0x7f00000037c0)=""/166, 0xa6}, {&(0x7f0000003880)=""/203, 0xcb}, {&(0x7f0000003980)=""/86, 0x56}], 0x4, &(0x7f0000003a40)=""/30, 0x1e, 0x10001}, 0x3c}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a80)=""/70, 0x46}, {&(0x7f0000003b00)=""/91, 0x5b}, {&(0x7f0000003b80)=""/28, 0x1c}, {&(0x7f0000003bc0)=""/102, 0x66}, {&(0x7f0000003c40)=""/248, 0xf8}], 0x5, 0x0, 0x0, 0x80000001}, 0x7790}], 0x3, 0x40000002, &(0x7f0000003e80)={0x77359400}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003f00)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x22000001}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x163, &(0x7f00006a4000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x155, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000001}, @igmp={0x11, 0x0, 0x0, @empty, "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"}}}}}, &(0x7f0000aed000)={0xffffffffffffffff, 0x1, [0x6, 0x0, 0x0, 0x100000]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000040)=""/104, &(0x7f00000000c0)=0x68) 2018/06/04 21:21:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() getpgid(r1) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018002100000000005fa0c5010cab88ab6a50fae3e97fb6ff000000001c140000fe00fe01893c385f4e571b1f616fd95100200080"], 0x1c}, 0x1}, 0x0) 2018/06/04 21:21:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xfdfdffff}) ioctl$KDDISABIO(r1, 0x4b37) [ 127.387982] syz-executor6 (8557) used greatest stack depth: 12360 bytes left 2018/06/04 21:21:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ndinfo\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='4/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/04 21:21:53 executing program 4: clone(0x200, &(0x7f0000001900), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="014f318f03f6f4c89a4f51fae74cfb14b8acb9be842a45ed33e52b5d7a37b2744e644db40a7bf8b8a0ac9765be857e4482160b17c5dcc1fb312e990c88aedfeaebfd29441684671eda53c2de3f2116f85a01839ca5625d7940bedd1a491a8d8cd45e2f74c1180db0ff7d6ffa1a1ba6fa5a702d5d28f3e2a1947588f9c785208855cae22c7f5838b0c9e6db1b723ece86418dce714672d53711b8702d65beded59f0bae1094e2c2f04d3bacbd921135db3a37", 0xb2, 0x0, &(0x7f0000000480)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f00000000c0), &(0x7f0000775000)) r0 = gettid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x208000, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000080)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstatfs(r1, &(0x7f0000000140)=""/106) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000200)={0x6, 0x2, 0xffffffffffff8001, 0xf1f7}) 2018/06/04 21:21:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x777) 2018/06/04 21:21:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xffff, 0x30}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r2, 0xf2, "dc4faeb55b448f02cd82f3c4d8d5028701c0d6ac2a45c1703046adc8400ccb6a020b1039bf2216d476b0418d7a1f3ceba50681cb8b474663c93ab390a8c52c93820715f7c3bde1995e776cc5de44cc4768763f79ce6bea9da14c23a558fd5604a0c4534b33399df92cb1004beca7e486039675da6a42dd405d6eeb431c558a4cb92a480ec87013eab69f1ed99f06d5f05adaaeb1975945eb272bee015d80df0cafd0e34187a83f5dd868cc16a3d07cfdeb48c7e806f1845adb59069cd7b0ab2930377ed6aa710398746bd8527a820d2a1fd9dc085b013cf8ffd0e715eebbea6ba0d7d7d75ea0be1c7c83067bfccde1b72b99"}, &(0x7f0000000580)=0xfa) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='/\x00', 0x3, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="80f2cc2a73c95d07e54e16780d9f24cfbb8be873", 0x14, 0x3}, {&(0x7f0000000100)="fe9987406ba159f16626b0e70ded1ec80e66a6a9afd3d83d903ab5681d4df448b2ef8c4c9b97484f6af42ec44e7b04d37170e5907e4a3cda0359a0d49c77ebdab3408bd103fbd2f7162ba7c66443d33aa23e7b67906433d872cb08ebd3472b08c3748f34b34999cd13da7cf44c23d7b30f5852ac49e98e596626079568de7c3754b499c22e", 0x85, 0x6}, {&(0x7f00000001c0)="f2d98f0075a9325b90cfca28200544ce4603674e55a1322816a51360927b74e5c1672d199e6f8cdc1c", 0x29, 0x2}, {&(0x7f0000000200)="f13d8c7be04732a6f5ce7218b23d366240ed1a261aa06d66e89e29ac8b060754145a0d49d7dfff2ccb3a227de1263de73c06e89585a5ebcd6d9d93b63c51f01515e1e9ec5dcd3fc2f57b786e03a35d29b09d91b9ed971b6b5172a039615c38ccbedaf4f2102b8429ac267a948536f3feafcedad234dd6b9320ebcbfadab9133a396ef51c2c6532be4a1c88906c165389824d914271796276337c80ada0ae4073cdc093cf4adf457d7b1b2920efa55746b3964c3ff550d08ccc35ce536688ce27fa4be3327f13744adbbb5ffcad51895c9a06eacfbec20ca367dd7f826ce18359749835205ffd7d974082e116491e63b4", 0xf0, 0x5}], 0x0, &(0x7f0000000380)={[{@flushoncommit='flushoncommit', 0x2c}]}) 2018/06/04 21:21:53 executing program 3: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) ftruncate(r0, 0x1000000) finit_module(r0, &(0x7f0000000080)='b\n\x00', 0x0) lseek(r0, 0xc, 0x6) 2018/06/04 21:21:53 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x88, 0xfffffffffffffffc}, 0x0) poll(&(0x7f0000000080), 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mincore(&(0x7f0000d1e000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/206) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000480)={0x74, 0x0, [0x80000000, 0x3f, 0x9, 0x3]}) r3 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x2, 0x400) sendmsg$netrom(r3, &(0x7f0000002440)={&(0x7f0000000100)=@full={{0x3, {"d32db9672226b3"}}, [{"9e86be228cfd10"}, {"a3e0ed9296e35f"}, {"4d5a42493ebbc7"}, {"973fe212d4fd6f"}, {"c719e748399a98"}, {"529a5ac8ede769"}, {"0d66db085c8966"}, {"7f91d3b171df12"}]}, 0x48, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=ANY=[]}, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000400)={0x9, 0xfffffffffffffff7, 0x1f, 0x0, 0x3, 0xc9, 0x3b79bf4c, 0x1, 0xf8fd, 0x101, 0x3, 0x7}) mbind(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x45, 0x10000000002) renameat(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f00000003c0)='./file0\x00') r4 = accept(0xffffffffffffff9c, &(0x7f0000000280)=@hci, &(0x7f0000000040)=0x80) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x1, 0x2, 0x1124, 0x2, 0x5, 0x6, 0x0, 0xe2a2, 0x0, 0xffff, 0x1}, 0xb) 2018/06/04 21:21:53 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x2, 0x4, 0x2, 0x20, '\x00', 0x5ed7}, 0x6, 0x40, 0x1, r1, 0x5, 0x7fffffff, 'syz1\x00', &(0x7f00000000c0)=['[/\x00', '\x00', "6b657972696e67b000", 'wlan0&*self\x00', '\x00'], 0x1a, [], [0x7, 0x0, 0xffffffffffff0000, 0x6]}) fcntl$setstatus(r0, 0x4, 0x4000) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x10000001b) 2018/06/04 21:21:53 executing program 0: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623040faffffffffffffff00", 0x5001}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000140)="3bcccc2336323b0e51ffc7b7b5f05ec3f18520336d62d56f4725931a71b5a100a9bcbdd7c510e958fa71c120ee129e94d9cdd6d20197e219b64c2420bcf63cec21829647ef947aa518f428d53ddd1d72feaa3758add1f3536cdf57cba95c61ec8568bca4c644f174dba41a27ee94c82a5ce451f18801478db9fe0fe93a6bc7b6119d6843cd0f8845e67e19ee4d1bd9b50c633ed9136fb6797a6daada9554630ac3665d3075dfaefaf6948628a1f347a6cf77cda3ff2c546a1b0e9717d657b706feccca38be8b686913a3ece50bcd98c40b3debdebad8a9982ed95a7df51c46f1a92e85f7") write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="11bf00000000000000004500001c00000000000100000100000000000000000000"], 0x26) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x1, {{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2, 0x4e23, @broadcast=0xffffffff}}}, 0x108) [ 127.982785] rpcbind: RPC call returned error 22 [ 127.994911] rpcbind: RPC call returned error 22 2018/06/04 21:21:53 executing program 1: socketpair$inet6(0xa, 0x800, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x7, 0x6}, &(0x7f0000000100)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x106d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x34d, &(0x7f00001a7f05)=""/251}, 0x48) 2018/06/04 21:21:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0163b005", 0xfffffffffffffd6f) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000180)=@pppoe, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/135, 0x87}], 0x2, &(0x7f0000000400)=""/166, 0xa6}, 0x0) 2018/06/04 21:21:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600ff0002040000000000000003000300ce000000600000003800000043010000020000000000200001005800810000000000000057e5746408000000020000000000000002000000050000000010000000800000243505419e02aa35021ea882e42bddbdbd38b4a3c7031fd96a9b1af6319ed800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x777) 2018/06/04 21:21:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x500) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x14) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x60000) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x10000, 0x4c5b, 0x0, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a687700000000", @ANYRES64=0x0, @ANYBLOB="0000010002000000"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000340)}) 2018/06/04 21:21:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCSBRK(r0, 0x5427) 2018/06/04 21:21:54 executing program 3: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) ftruncate(r0, 0x1000000) finit_module(r0, &(0x7f0000000080)='b\n\x00', 0x0) lseek(r0, 0xc, 0x6) 2018/06/04 21:21:54 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x900, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0) 2018/06/04 21:21:54 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000dbf000), 0x3a8, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000fc2000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = socket(0x15, 0x80005, 0x0) dup2(r1, r0) 2018/06/04 21:21:54 executing program 7: r0 = socket$l2tp(0x2b, 0x1, 0x1) r1 = fcntl$getown(r0, 0x9) migrate_pages(r1, 0x8, &(0x7f0000000000)=0xb3, &(0x7f0000000040)=0x7) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000fc0)=0xfffffde4) 2018/06/04 21:21:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") pipe2(&(0x7f0000000000), 0x4000) creat(&(0x7f0000001380)='./file0\x00', 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0x40086602, &(0x7f0000000040)={0xe1, &(0x7f0000000080)}) [ 128.968184] binder: 8648:8649 transaction failed 29189/-22, size 24-8 line 2856 [ 128.972455] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? [ 128.991720] rpcbind: RPC call returned error 22 2018/06/04 21:21:54 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000340)={0x303, 0x33}, 0x4) unshare(0x40000000) keyctl$assume_authority(0x10, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000380)='stack\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140)=0x8, 0x4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x7, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x0, 0x7, 0xe46, 0x9, 0xa2d}, &(0x7f00000002c0)=0x98) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) 2018/06/04 21:21:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x7, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000082a0000000707000000000b00950000000082b900"], &(0x7f0000010ff6)='syzkaller\x00', 0x6, 0x13a1, &(0x7f000000d000)=""/4096}, 0x48) 2018/06/04 21:21:54 executing program 5: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0), 0x1) 2018/06/04 21:21:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = socket(0x2, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000380)=""/120) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) fadvise64(r1, 0x0, 0x81, 0x3) [ 129.083411] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? 2018/06/04 21:21:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x3, 0x9, 0x59597266, 0x9, 0x4}, &(0x7f0000000100)=0x98) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000180)) [ 129.143171] IPVS: ftp: loaded support on port[0] = 21 2018/06/04 21:21:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40101283, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0xf9) 2018/06/04 21:21:54 executing program 5: pipe2(&(0x7f0000f14000), 0x0) io_setup(0x80, &(0x7f0000a8aff8)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100, 0x0) io_submit(r0, 0x0, &(0x7f0000b52fd8)) 2018/06/04 21:21:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)={0x1000000003, 0x7ff}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 2018/06/04 21:21:54 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c756d61736ba8382c00f109c3eb2f6378349cfb6013f2aaa09569bfab4e895ef6210350fcbd0a529156fcd33ed46a1222bbff73df8523c661862d4201b8e922f7532160cfad7440748a4603bc67fb475cadac5f4020f5071e646b222e9684756291de8ec05889de260df83f7856c4dce111fe51"]) [ 129.181861] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/04 21:21:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @empty, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8481004e, r1}) 2018/06/04 21:21:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x3c, @multicast1=0xe0000001, 0x4e21, 0x0, 'sed\x00', 0x7, 0x6, 0x24}, 0x2c) r2 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r2, 0x4004af07, 0xfffffffffffffffa) 2018/06/04 21:21:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3f, 0x12002) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/97) ioctl$KVM_ENABLE_CAP(r1, 0x4040ae79, &(0x7f00000005c0)={0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffc]}) [ 129.340774] JFS: discard option not supported on device [ 129.346629] jfs: Unrecognized mount option "umask¨8" or missing value 2018/06/04 21:21:55 executing program 2: r0 = socket$inet6(0xa, 0xf, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r1, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f0000314f64)={0x10}, 0x2f9}], 0x1, &(0x7f0000414000)}, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000078dffc), 0x4) write(r1, &(0x7f0000b43a67)='.', 0x1) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) r3 = dup2(r1, r1) write$evdev(r3, &(0x7f0000000080)=[{{0x77359400}}], 0x18) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000238000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) sendmsg(r2, &(0x7f0000785fc8)={0x0, 0x0, &(0x7f0000c62ff0)=[{&(0x7f0000895000)="e5", 0x1}], 0x1, &(0x7f0000f2d000)}, 0x0) 2018/06/04 21:21:55 executing program 5: getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002480)={0x0, 0x4}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002500)=@assoc_id=r0, 0x4) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) socket$nl_xfrm(0xa, 0x3, 0x87) socket$kcm(0x29, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00a58700fe8000000000000000000000000000aafe8000000000000000000000000000aa000001f4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="03ea818cc1f0a4cc397a7843dd7550000000907852cc"], &(0x7f00000002c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, {0x10000, 0xa5, 0x0, 0x6, 0x1, 0x20}, 0x3f, 0x5}, 0xe) [ 129.437749] JFS: discard option not supported on device [ 129.443386] jfs: Unrecognized mount option "umask¨8" or missing value 2018/06/04 21:21:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ustat(0x2, &(0x7f0000000000)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x6, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100) inotify_rm_watch(r1, r2) 2018/06/04 21:21:55 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000040000000003, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7e) membarrier(0x50, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7ff4, 0x200000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr=0x5, @dev={0xac, 0x14, 0x14, 0x10}, r3}, 0xc) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x0, 0x80000001, 0x7f, 0xe43}) sendto(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f0000000140)=@nl=@unspec, 0x80) [ 129.548462] bridge0: renamed from tunl0 [ 129.603005] IPVS: ftp: loaded support on port[0] = 21 [ 129.639458] device bridge_slave_1 left promiscuous mode [ 129.645949] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.689560] device bridge_slave_0 left promiscuous mode [ 129.695227] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.732541] IPVS: ftp: loaded support on port[0] = 21 [ 129.773830] team0 (unregistering): Port device team_slave_1 removed [ 129.785933] team0 (unregistering): Port device team_slave_0 removed [ 129.797191] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 129.808826] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 129.830832] bond0 (unregistering): Released all slaves [ 130.731966] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.738401] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.763961] device bridge_slave_0 entered promiscuous mode [ 130.825966] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.832405] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.840174] device bridge_slave_1 entered promiscuous mode [ 130.877438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.913926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.089322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.129513] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.367652] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.375601] team0: Port device team_slave_0 added [ 131.436490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.445168] team0: Port device team_slave_1 added [ 131.522289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 131.529578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.544641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.589239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.622246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 131.629382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.637897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.664808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 131.672243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.683598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.969313] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.975765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.982464] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.988844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.996742] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 132.319511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.249610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.328459] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.406632] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.412892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.420509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.495962] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/04 21:21:59 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000001c0)={0x9, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r2, r0, 0x8, 0x5, &(0x7f0000000200), 0x8, 0x1, 0x4, 0x80, 0x81, 0x1400000000, 0x7, "f8821e9973ee5fbd1667b4ece6bdff2eabf55afda1f099a57b8dfc562eee898562639e85047cae30fbc715524dfc6b367ca3e762d09511bf478d1787dc913d8b06765a23173c7d0e5d48e6752330a703f6b27e468601ec85e9c077f8eccc65e3bcfcabe9960d68caa5084dcf755206ae9afad50aff6b6193d6dce367bd691a67188de1fbb1bdb979602d06fd361d887485deb91d76bc728ff85a07282bc946c84cfcc2a8ab6779e60b391706f285e9ddc4214060137d3f600263a736324231fbca82bbcf1f1448f57a3acdb32bae08e78a390d3a625c7c2f54cfc000310cdde20727"}) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2}, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can={0x1d}, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000c40)=@can={0x1d}, 0x10, &(0x7f0000001e00), 0x367, &(0x7f0000001e40)}, 0x8}], 0x2, 0x0) 2018/06/04 21:21:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 2018/06/04 21:21:59 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$inet_sctp(r1, &(0x7f00000035c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="30000000000000008400000001000000fcfffaff080000000500000000000000faffffffffffffff05000000", @ANYRES32=0x0, @ANYBLOB="18000000d7295b8140e448096b52310000000700018030e0ff6a48ff0334a624afe2ba670000000000840500000000000000007f000100000004000400070800000100000000000000", @ANYRES32=0x0], 0x78, 0x4000}, 0x20000000) 2018/06/04 21:21:59 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000040)=0x98) clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000)) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") close(r1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) 2018/06/04 21:21:59 executing program 5: process_vm_writev(0x0, &(0x7f0000000180), 0x10f, &(0x7f0000000440)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x201) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 2018/06/04 21:21:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(crct10dif-pclmul,ctr-twofish-avx)\x00'}, 0xf) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c504", 0x5) accept$alg(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 2018/06/04 21:21:59 executing program 4: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="72f35301a28f8e81154ff105650cd179fdae1ec4d8e782a685afc58fe9a9808cf71e59e86fd4df45d70335465eb3524794820ac7e774134e43463cfcdae5108f849b08b20050e5a7840211e13b702b369442795864a8eb34b2a759698104685e733170b7120d8d607f46e3b2920af45a3aeb2545017faf8f44e37f084d1ce3d8fdae8222ed9d4575d22a81562daf28a141c23eea6b6b077a37f49fdbca0fe36b5cc7031fe62df1f4f7f16400e6b9826413f846e1426ddbf1272c700c8594e41fa3df20af26e5a865583c46330d225e906bf3bb13929c2a2df768c8684ad139eeb33da5cfb760f72584fdcbdc3fde079d4b289088e0166dc679393e8b0cf9621718c71e9d5f86df69d0e569d5712f935c2c3717709269491d97dd820b843c0df080fce0f0194e09d1d22d697e1f11e04a6aa5ec47bafcbab9727c9ea4cbfe5687ff6fb7741801dafce497d75b4de8f6438c03df056a776535100c6fab84d2d5c45ad743fedc3ff058d3ccffc3e1a8546cee79cec1ac31e016e56d0bd938877d3ad09fa0ab30a91c0e57f6dc36725f5fc28927061d84838ee94097521652bb920655e886561e2d7d4ece20b700bd0a4cd8e79e03df72182809f1f73b6200388ac65656ab6725a77acfe6300805e610a46136dfe206c7f9e3339e13f3ae4179e86e82a47b7ab7a2f1c4de29f7455cdf30ee6fd2e4f107f1859e43d3c911f308d73f69dd7390535181ac8907723842b9236c0ed6d2a3213baab88ec8cbf3e3e81c939877f81f7c2448f56f0cdea670c4f72bb7fb80f0a64c6e9c11a187770986993b52d5eb8d98704dac18090aadcaec0f64a9e2a269e9af386543a7f81c9634106836df048194f9f87b850112d4b7564cd272789b1be65ee67608985ce86d62354c8a48613d968c76b8191bb46a8c8bcf11bddb67872043f7605493f3b71b83efe45d92d9066d692a13eb52798d877ef12749ce41ebfe0a612ff6278a39042569c009575615ec0079a84fd5aacd6df493c4b17c9cace7d436bfb265385522c9e9a110b902d0a40c6eb65d206a215e6a1a2930c18fe6e6bf1d29b87d04c1543f4b8db573f2ca1ef9e67c90a7d3afca756cea38afbfb5fe2f43a8d8f913f8cd27d9c74c2e86f889c9a103f4d4fcd91642788886548b8bbba751405e37752978a9b3aa685dcb37519d71f399dc7ec7561024e463e35ecca30537c6e6569417a72c04272cc87f02f0c919084aad7c6a4c29913da04e5097ebdd169059070c9611c546cccf5369b56af02fb9a471167bf94dad9ff277901b3a5046e934b7c08068e212ce81744f7f89fa40dcf72cee409f11c77ce83c97447ed39f3b205afdfe605c424bfe8dcd1d2aef6234fcf5eb6be259915839d8190247cd165f155aaee354eb2f64635228cc5604e38db68f9babb5828c72c816d6865332f6af4eb036bcdcf0706f12b717ae14630eeb4a6f7dc2cca118322bb95264e24702d874cb0ad4e8543bc341e317e55d78ff29d9e0fffa0971880fa62e354ef26dfd3f16e8833d53feb0fa2c01ce422dad6b2f69557dd108a998237d4d4ed229d63cb5c662ed71d02d508dc2d673b21e25b1c0ce598fd7d0ca9912fefe6ba03e9a81a7d015a15f5268bc2ab4986dccbb33d3859d38ae7d5b08f1fdc74f430f01d88c415b2be91f029388ff75de04288c87fd5ef23f658b6c7847bcb123de382fc15f8383f0488575b07afe5bedbe2b3d774f243c322fb454ac2fb4c4", 0x4d1, 0xfffffffffffffffb) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 2018/06/04 21:21:59 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000580)=""/172) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000340)=0x1) sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:00 executing program 1: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000001, 0x6, &(0x7f0000000480)=[{&(0x7f0000000100)="4c609e043410ea8e2bbe9b2f78b6e5cd39e396decef084b232424055429781963202017410670ad672", 0x29, 0x6}, {&(0x7f00000001c0)="7569f191b510437ab52dbd174b189f8c19b20880c9a509fb0b839e9978e3299d3025ceb7fb4ab0c3d4847055d8da3cdc798501f1df0e9a2dcc5e7e611df9c3663b585ca0f664e3bc027f6171058a0e91d6425d6eaf4be1ffb143ddfda29a7c795e08ee", 0x63, 0x100000000}, {&(0x7f0000000240)="967b061597", 0x5, 0xded}, {&(0x7f0000000280)="c8d7fee4d5da21c7b92f9a4bec5e25ff071a325f1f7ea81e47fe0ad19a9e333586a2c7e7199481734decd442d8327c36fe98f711df687b7f5569eb8259311e4edc9e6c009b9e18f11cd4b832f6cdf8718534a7e409949ed4fe04a598a77675de76f21f2379232491e5e5ac7d1a13db6d6012033a1947423e056b1425cb5e8253a9f720f2d922526182a8e2388759f75a10be46e0a84f9a28f05da9ee709597b45b73ac708f287baebdcca27ec59321d1cb92fe5adb22c1acb7245861a2a3fdbbb67cf373724d2b3c379c69a6cbf4582dfb0973bc1b9bb300e1d4ea9c4c93d24688e2c4108b8e8a3f073e25840298de6ae7c081e405", 0xf5}, {&(0x7f0000001040)="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", 0x1000, 0xfffffffffffffff4}, {&(0x7f0000000380)="67fd5e206314d6a70c30f6388868ed058598e24bc134a552163fa9b0b12365aaf2384eaa5588cf73b0900b02c946afa693beaf7d68cb80e8498cf17878e6162b3fa88bdd7c11c901ad8dd54ec135c39aca7ee4ecf10caba73bd1b64a64bc9f524fb03852764b9f2f2fd84210d478aa9a2f9dda3fbe5ac3c3c26a47a84451d41e7204579bb5af43e8d99dd17ec1b772636411627659a01849eec2f36cc6b875320136f062711bcc692cd1db7adb96d4a52fdb9145762c8f7a3159c423e86571a38a0067c8ece86a6ae54af70f", 0xcc, 0x100000000}], 0x100000, &(0x7f0000000680)=ANY=[@ANYBLOB="696e746567726974792c7569643d373137373900382c752d61736b3d2d3531302c006c7df1e6531a43617e581f143610cc7511cfc1ac8c5121d2b8379c9fb306dd669527063be776818e5f9bfddab94a33244dcbe5c163fc60b4e6ff9897e0c5bc2e503009297994a9c35172578beb52cbdd8161b992c68b1a3c7c9babf13215299b46b993759a357ae4182aac94f16c8376680a9d3eef3948da0e58be384aad2f8c69a2a7616db6afd9ec1c3b024ca1e6731f6bc648b80de882615058f7a19187ca62b5088b8e43cc0381030dc1ef6f7c"]) timer_create(0x3, &(0x7f0000000580)={0x0, 0x27, 0x2, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000640)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x77359400}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 2018/06/04 21:22:00 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0x10001, 0x103280) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={r3, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r2, 0x5, 0x2, [0x401, 0x100000001]}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x8}], 0x1c) r4 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) accept(r4, &(0x7f00000003c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x14) r6 = getuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e20, 0x83c1, 0x4e22, 0x80, 0xa, 0x20, 0x80, 0x3d, r5, r6}, {0x7, 0x4, 0x800, 0x6, 0x400, 0x800, 0x5, 0x7fff}, {0x2, 0x80, 0x98, 0x80000000}, 0x3, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x3, 0x4d6, 0x32}, 0x2, @in=@broadcast=0xffffffff, 0x3500, 0x3, 0x3, 0x1, 0xe6, 0x3, 0x9}}, 0xe8) sendmmsg(r4, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}], 0x1, 0x900) 2018/06/04 21:22:00 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80200, 0x100) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000200)=0x81, 0x4) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000540)={@multicast1, @loopback, 0x0}, &(0x7f0000000580)=0xc) bind$can_raw(r1, &(0x7f00000005c0)={0x1d, r3}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) ioctl$int_out(r4, 0x5462, &(0x7f00000009c0)) io_setup(0xb619, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000980)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000280)="bbe0927855ca4e24134b8a5e6dae4886e46352c6a0dc0260a84af3bd5db18acab0a9f0ab", 0x24, 0xc6, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000300)="d65ae0fdbfa73041b2917a5c26e5c101a92c8e57a94b9316f721091981a8337228588c5422fa4973896919cae5008a96bd1c28c70dddeac3cd3bc63c9e45b6106b0f25a349e34e7cdbba00b2d4698533ee3cd321c472b1c77f8f2fd7f1176a50054bccada7d1a5fc371218d24e71e3d6059187e5fb0b3376d31d57ad5a415404c00840ca568fdfc7bc1b1571839d8eb4b25364d710d93a8123aebc8556e301afbebdcf19720949605a760447cc80089c44794d23ab9f2ce5c150371f3b52", 0xbe, 0x80000001, 0x0, 0x0, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000400)="304d25c34b63b47f9c77bf1a42e6f300d7ac6a6af0deb99a6f8c7184434ce614063eb6dc0ee8ca36fd5ceabb93817449072beea0d9e7415c168df092e974e0a9f5e7dcfacfa43360ae9c91e81bbe6004d49c", 0x52, 0x2, 0x0, 0x1, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f00000004c0)="f2ef07eedc22e79c4fcac79ae987ea5aeccd408e1bcda24a44d73b714a4c3dc2747dcab5d044561563fb3d8433d5f2586bd5fec45d7535aa026301d1d3e7ee36fdc03a9ef78747", 0x47, 0x1, 0x0, 0x1, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000000640)="ab8e47b320eb7f212d6930fdc673f8bb36f6b52eb3e75781440d408e8d21704f8f661192dbe14738022219dd27a5b5c0c2788171f1491d7363f9332eb29f77d77002946d35776302de8758c980623de4ffd33523a928a5a44800cac85cae532739e0a7cdffa874d93726be4a9323b769f2f292bed466529967c4804e240c08d82ae044adc9b7fb19affc39845be33f75b03d388fcaf79ba05c2e673d80a93d2fb497f62cc2ef2230ba80567f0d8111cc71c677de93a680e438b024e723f3784964cad7a060bcbef1541eea", 0xcb, 0x9, 0x0, 0x0, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000780)="3c1559f83a1b958865dcce693d57c448dad2ea6c45ced5d75e9959be5b3f045853ad46c1f54c710e6bd03d162daf2c1ff6f54ac1dd5707c8fd7b3f36808442c61e3e6022b2112bb02502e3", 0x4b, 0xe26, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0xf, 0x0, r2, &(0x7f0000000840)="d3e82d8e5d", 0x5, 0x1, 0x0, 0x1, r2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f00000008c0)="2ae5ee218c16e5ca79ffea9bcb221a11d444847622660a8db6d3f4e855c3b8fc244c9508ae78ae44f89e3bdc94f9c3360b4033eddec30aa2c1b3959b71a3b6e6a7", 0x41, 0x1ff, 0x0, 0x1, r2}]) fsync(r2) 2018/06/04 21:22:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x15, 0x3, @thr={&(0x7f00000002c0)="d8d9306ec435ab93bbfe8d1f5c29339aa197ea264c842fdcb9f48d486864a497b7bde5935b92b19c45a4d27023c0fca90598b7f6bbaa4a630f93d8b0773690868170ee86f6438644870084d4787b6a6c52951418ab9c1d5e6606dc6775dbae5d2187cb4a57647a1032b98e4098d6a030019957d77d9ea960a6dc88369291560167915f86e31bbe518f757c", &(0x7f0000000380)="7e3770394163f6cf49951db3977f0a947a8af3a5b9902ecb63e2f2a4e494e8f3f853a26ffe4ac34805b673512238081fcab395597f9b838913016b42d7e264240a525d802c838dc9a407dc5786c2d6b388a2fa7d2dfd0afc406ccd4001a09e6c0461f72320f50275a43f375ca9bdaf0b7fdbbc148bc9fdde6784f2e63efdd77fb0b6f288e83a228df34bea4cfa1041784d2fe0a5185e036aa1a0182046bbfc6c1d61d231ba786e49b50d5551906f8f10d69031846f05e7a9988f2c"}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40400, 0x100) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) tkill(r0, 0x1000000000016) futex(&(0x7f0000000140)=0x2, 0x5, 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)=0x2, 0x2) 2018/06/04 21:22:00 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000580)=""/172) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000340)=0x1) sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xbb0d, 0x20000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0xff, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xfffffffffffffdc4, "2ea402d9d7476b6f6299e19b77f8467885769c9be0264a4071aeb58a6151cc96606d5694cff5c07ca871d47947cc88d1040648cc8e4f80ca516ed954b92ba34738a1a5f438e4f1a8065e92cebeb88f647340abdf313815e48de63af0cd5ab0c11fecd38648e8183da98f66d6d4ebaf0189cbe78f39ad12869e50513b0825e5c64a1c7cbab2d41dd1242895de947d0b47a2a559a7d957bebb354603bb40f73be647750052f1bd2b2af33d4b8ae6b008cca353c7a852365b11b9764e96"}, &(0x7f0000000140)=0xe0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000200)=""/109, &(0x7f0000000280)=0x6d) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), 0xffffff98) 2018/06/04 21:22:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x3b9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r3, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x717}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0xc}, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x800}, @in={0x2, 0x4e20}], 0x84) 2018/06/04 21:22:00 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x1, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') 2018/06/04 21:22:00 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) close(r2) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/06/04 21:22:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x5, 0x0, [{0xa708, 0x0, 0x2}, {0xffffffffffff01c6, 0x0, 0x2}, {0x4, 0x0, 0x81}, {0x18da3e64, 0x0, 0x20}, {0xa26, 0x0, 0x1}]}) 2018/06/04 21:22:00 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000580)=""/172) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000340)=0x1) sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x81}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={r2, 0x0, r3}) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080), &(0x7f0000013000)=0x4) 2018/06/04 21:22:01 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe(&(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x4b, &(0x7f0000000080)=0x2, 0x4) 2018/06/04 21:22:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000003, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x20000000001, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x80000001, 0x20}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x3}, 0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8901, &(0x7f0000000140)={'bcsh0\x00', r2}) 2018/06/04 21:22:01 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000580)=""/172) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000340)=0x1) sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:01 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xff, 0x18000) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = accept4(r1, 0x0, &(0x7f0000000000), 0x3) dup2(r1, r2) munlockall() finit_module(r3, &(0x7f0000000180)='trustedm\x00', 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{r4, r5/1000+30000}, {0x0, 0x7530}}, 0x100) 2018/06/04 21:22:01 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/06/04 21:22:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/4\x00') exit(0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x47) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/106) 2018/06/04 21:22:01 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[]}, 0x1}, 0x0) mq_open(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xbb6c}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) ioctl(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)) 2018/06/04 21:22:02 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8000) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x91, "ad57c243e6751cb24616ba3bdfc0255200be89c17a9b7edaacc826e694f822eee8d751f4e7babb1efa2012b4a27b9903bf6e20ac9b03355a64d8c49a6cb682d34fea43be5868a0a5a496e15e242b7128cb19cb4fa66754b560940e54dd2d76b17d88c882e8995ee9449085a8b814f895b4e84585cb17e9d344fec59b0ff671ca3e6dfae3ffcc694c364f838f7f676ce802"}, &(0x7f00000001c0)=0xb5) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x2, 0x1}, 0x48}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="00010000002f000066000000c9030000ec00002f000000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="32f46a00"]) 2018/06/04 21:22:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)={[{@lockproto_nolock='lockproto=lock_nolock', 0x2c}]}) getegid() 2018/06/04 21:22:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f000068cffc)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000080)=0x9, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x80000000009, &(0x7f0000f0fffc)=0x77a, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) 2018/06/04 21:22:02 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000580)=""/172) sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) fcntl$addseals(r0, 0x409, 0xb) sigaltstack(&(0x7f00002cb000/0x3000)=nil, &(0x7f0000ef9ff8)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffffffbfffffff}, &(0x7f0000000040)=0x8) ioctl$sock_ifreq(r0, 0x89bb, &(0x7f0000000100)={'ip6gretap0\x00', @ifru_ivalue=0x1}) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xffffffff, 0x7fffffff, 0x8, 0xfff, 0xff, 0x1, 0x81, 0xfffffffffffff001, r2}, &(0x7f00000000c0)=0x20) mincore(&(0x7f00003a0000/0x600000)=nil, 0x600000, &(0x7f0000000500)=""/184) 2018/06/04 21:22:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/11) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/46) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x10200) ioctl$TTUNGETFILTER(r3, 0x801054db, &(0x7f0000000140)=""/178) 2018/06/04 21:22:02 executing program 5: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)="626465762c768d7f2d6264aff157cb141fdf65766c696d655f74797064637075", 0x0) dup2(r1, r0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x80000000, 0x4) 2018/06/04 21:22:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$TIOCEXCL(r0, 0x540c) mkdir(&(0x7f0000000000)='./control\x00', 0xd0) r1 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) unshare(0x400) r2 = socket(0xb, 0x2, 0xfffffffffffffffe) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0xffffffff00000001, 0x0, 0x101}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x20d}, &(0x7f00000001c0)=0x8) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = openat(r1, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x40049409, r4) set_mempolicy(0x0, &(0x7f0000000200)=0x100000001, 0x8) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) 2018/06/04 21:22:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x2, 0x6, 0x0, 0xfffffffb, 0x3c}, &(0x7f0000000100)=0x98) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x105000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000002c0)={0x5, 0x8000000000000, 0x200}) [ 136.564190] EXT4-fs (loop4): Unrecognized mount option "2ôj" or missing value 2018/06/04 21:22:02 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r3, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:02 executing program 1: openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8880, 0x0) r1 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x800) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0xc6d6, 0x3, 0x9}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) [ 136.656715] gfs2: not a GFS2 filesystem 2018/06/04 21:22:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400240, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x7, 0x1000, 0x6, 0x101, 0x5, 0x0, 0x101, 0x80000001, 0xffffffff, 0x7}) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) [ 136.767093] gfs2: not a GFS2 filesystem 2018/06/04 21:22:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000400)=@alg, &(0x7f0000000480)=0x80, 0x80000) getsockname$netlink(r2, &(0x7f00000004c0), &(0x7f0000000500)=0xc) listen(r1, 0x0) r3 = getpgrp(0x0) ptrace$getregs(0xe, r3, 0xfe5, &(0x7f00000002c0)=""/16) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="f80fbd5da1b3c0f09d3d94815745711bc76fe5db01b2fc2212e65d8952d0e6c6a78d9f733c0b2e6e682851541ccb5deb7457e151cc1b5b5f36b48923af79e3e31d74d21dc9276ec6f239daf8840b23b84d41ef4054d550e46cfccfc13cb3a98b0115acdeb9a444078b26402b41c98ab137b29323385056b60a526b3761a836df03793a0d70bc210cdffb72830619e25a176e9093cd2f7638c729ff1729c356aa239337240d338a81f3518edc86ef1b5c6cd42d1cb29af9759c30b7c23ffae4fecf251357f1393e3a0323f95bd74bbf0ef60ffaf5f145b6f799b8b78adeefd3fdd5e5c640aeef43a440e9ff23509a446d6fa8496d4d073d1b98352d9ad48c32cc08b80ddf39dd47ed07b16dc93e526db098de8a840c9c65cbdbae98c40da0ef48e76429d4a74a2b228bfba5ed2eaf754154621255f65595ffaa2d79c49efd77849986e5dc12189002f11145da3d56c1ce8cac370b43b3cee8e8071c44f54f94f17368586f53dbaf3be6e5aba47cccac708235c3d6f75e18d397fd167aee63522153e59d14fc28996fae0c2ee0a6c582146530547829808681f6f631ece598d63118a08a4550534ac8ad228c05182eb2fee2a304b6d27db943307578e78c68b2b3889abf3158ec7fd4603aa7a6b601769724e669c4a3dc74afaeba1ed37b00ec985b1553e3452de574312e12114412bbefa695ac9d613fe505421f835f8c3a17aa04f20be028c321f176205f7da29dd81393125e99b68832a2", 0x218, 0x8000, &(0x7f0000000000)={0xa}, 0x1c) close(r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x101402, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x4}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r5, 0x4) 2018/06/04 21:22:02 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r0, r1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xffffffffffffff81, 0x100000001, 0x7fffffff, 0x0, 0x9, 0x6, 0x35191c8, 0xffff, 0x101, 0x0, 0x9, 0x6, 0x0, 0x100000000, 0x8000, 0x80000000, 0x4, 0x800, 0x3f}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x42, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d0035c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/06/04 21:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000210001f8ee2b87cd3b2e52a82e10060000000000"], 0x20}, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2018/06/04 21:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x84) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x103}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00', 0x400}) close(r2) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 2018/06/04 21:22:02 executing program 5: r0 = socket(0x10, 0x4, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/midi#\x00', 0x0) ioctl$TCXONC(r1, 0x540a, 0x6) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x0) dup2(r2, r0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x100, 0x4) 2018/06/04 21:22:02 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10800) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, 0x1d, 0x1, 0x70bd25, 0x25dfdbfd, {0x19}, [@generic="ac3ec07a6bc601ccead7805c755ae167f56eaf8fb5dfcf5186090da549a007a38d49ba6182e2ebfda376a71e14667707ad8e7480691d8409142760d48ebbe7eff5f57d5b0fe74e097d19da1e99a413e66e5783167b59f36f83b016e56fd6b71534a5ef96310a09fead5e728764bfeebe57ab5bfd4b3097395e6385b6edc683de39052f9a4da97ae073d6aa1a3a1d5a6895b5f71a23038accf090a2eb862f7c668a7c337233a4d6b01809", @nested={0x8, 0x15, [@typed={0x4, 0x94}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_FIOGETOWN(r0, 0x2, &(0x7f0000000080)) 2018/06/04 21:22:02 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='threaded\x00') write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @loopback}, &(0x7f0000000380)=0xc) recvfrom$packet(r0, &(0x7f0000000100)=""/224, 0xe0, 0x40000000, &(0x7f00000003c0)={0x11, 0x6, r1, 0x1, 0x2, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x14) fallocate(r0, 0x0, 0x7fff, 0x8001) fallocate(r0, 0x0, 0x5e89, 0xfff9) 2018/06/04 21:22:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x53, &(0x7f0000005780)={{{@in6, @in6=@loopback}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005880)=0x7) close(r2) close(r1) 2018/06/04 21:22:02 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r2, &(0x7f0000000000), 0x80000003) [ 136.899626] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 136.915089] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/04 21:22:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x1ff, 0x1f, 0x6, 0x1, 0x9, 0x4, 0x1ff, 0x6, 0x4, 0x5}, 0xb) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x80000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000300)={0x2, 0x3, 0x0, 0xc7, &(0x7f0000000140)=""/199, 0x3b, &(0x7f0000000240)=""/59, 0x48, &(0x7f0000000280)=""/72}) r2 = msgget$private(0x0, 0x410) msgctl$IPC_RMID(r2, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x60000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x69bda88882f30dcc, r3}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) close(r0) 2018/06/04 21:22:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e24, @multicast2=0xe0000002}, 'rose0\x00'}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/114) sendfile(r0, r0, 0x0, 0xffffffff) [ 136.957070] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 137.021270] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/04 21:22:03 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@multicast2=0xe0000002]}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2018/06/04 21:22:03 executing program 0: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)="ed", 0x1, 0xfffffffffffffffd) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, 0xc, r2}) keyctl$revoke(0x3, r0) socketpair$inet6(0xa, 0x80007, 0x2f7, &(0x7f0000000000)) keyctl$revoke(0x3, r0) 2018/06/04 21:22:03 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x2}, 0x1c) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x4, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000cf000/0x4000)=nil, 0x4000}, 0x2}) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xff0, 0x2000) fstat(r0, &(0x7f0000000300)) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000380)={0x2, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240)=0x9, 0x4) r1 = getpid() wait4(r1, &(0x7f0000000100), 0x80000000, &(0x7f0000000140)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000200)={0x4, 0x40, 0x1, 0x3, 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)) 2018/06/04 21:22:03 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000080)='./file0\x00') r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x7e) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_IOEVENTFD(r2, 0x40086602, &(0x7f0000000100)={0x5804}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x4, r3, 0x2, 0x3}) r4 = getpgid(0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) waitid(0x1, r4, 0x0, 0x9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setuid(r5) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x200000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40004880}, 0x1, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78000000320004022dbd7000fcdbdf25000107003c00010010001d00000008000300ff070000000014001e0000000c000100706f6c6963650000000014001d0000000c00010073616d0000000000ffff001400050000000c00010073616d706c650000000008000400040000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 2018/06/04 21:22:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e24, @multicast2=0xe0000002}, 'rose0\x00'}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/114) sendfile(r0, r0, 0x0, 0xffffffff) 2018/06/04 21:22:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) r2 = dup3(r1, r0, 0x80000) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xba}) 2018/06/04 21:22:03 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) [ 137.881296] Process accounting resumed 2018/06/04 21:22:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r1, 0x125d, 0x907000) sendto$inet6(r0, &(0x7f0000000280)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x4}, 0x1c) 2018/06/04 21:22:03 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getpeername$ipx(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000340)=@rc={0x1f, {0x1, 0xffffffffffff8acc}, 0x3}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) [ 137.931390] device lo entered promiscuous mode 2018/06/04 21:22:03 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xdb, 0x4a8401) getsockname$packet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0xffffffffffffffe0) sendmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000570400000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="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"], 0x48}, 0x1}, 0x0) [ 137.987653] device lo left promiscuous mode 2018/06/04 21:22:03 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x200, 0x40) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200)=0x200, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x7f, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x1, 'sh\x00', 0x0, 0x80000001, 0x35}, {@multicast2=0xe0000002, 0x4e23, 0x10004, 0x6, 0x7fff, 0x5}}, 0x44) setsockopt$inet6_int(r1, 0x29, 0x53, &(0x7f0000000140), 0xfffffffffffffdfd) close(r1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7ff) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) [ 138.010710] Process accounting resumed [ 138.045100] Process accounting resumed 2018/06/04 21:22:03 executing program 1: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="676979066362038c7d6c286e799cdc3c2bbea425beb37a889c417722948bee17145823aa66c01120bb01556b52615559afa2d8efcf44d6e70efbca2a4dff8e939a7dc6692fa95b04f76a7ee23d495002659c2e322251e15be19fe1520d9e75c46810065a59b86e7b7707c1753bc061017bb1495d903e5318a0663511a0d1c9c7f1bad2395dcf218fb4cd77fb8d91ead0ac0b2e7cfd6875f9ed857dfb968a9eab81a12c78fdc2b1d0f95daa3477713fb6a63380528baa796cbe7ec0bce80d4e6b126884a03a7f6ae0737ba7f22754678e184e6484b520e7ac783a4e0d422a39fb89d92e519e10"]) [ 138.067104] device lo entered promiscuous mode 2018/06/04 21:22:03 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:03 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setpipe(r0, 0x407, 0x2) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000002180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)}}], 0x1, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1d0}) flistxattr(r0, &(0x7f0000000000)=""/37, 0x25) [ 138.100469] device lo left promiscuous mode 2018/06/04 21:22:03 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000001c0)="39317bbec015eb5b0c7f71277dd6ff7be35f2872f572f68cbc926fd58df7bfe719d5d48c3a22d7ea35ec12a4cbc98a011a17") sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x118, r0, 0x100, 0x70bd28, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51214d8}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x880) listen(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='.\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000280)={[{@data_err_abort='data_err=abort', 0x2c}, {@dax='dax', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@orlov='orlov', 0x2c}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) [ 138.121777] Process accounting resumed [ 138.208196] ntfs: (device loop1): parse_options(): Unrecognized mount option giycbŒ}l(nyœÜ<+¾¤%¾³zˆœAw"”‹îX#ªfÀ »UkRaUY¯¢ØïÏDÖçûÊ*MÿŽ“š}Æi/©[÷j~â. [ 138.222260] ntfs: (device loop1): parse_options(): Unrecognized mount option xý±Ðù]ª4wq?¶¦3€R‹ªyl¾~À¼è Nkh„ :jàs{§ò'TgŽNd„µ ç¬x:N B*9û‰Ù.Qž. 2018/06/04 21:22:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00@\x00', 0x101}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@multicast2=0xe0000002]}, 0x14) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2018/06/04 21:22:04 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/04 21:22:04 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000080)='./file0\x00') r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0x7e) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_IOEVENTFD(r2, 0x40086602, &(0x7f0000000100)={0x5804}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x4, r3, 0x2, 0x3}) r4 = getpgid(0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) waitid(0x1, r4, 0x0, 0x9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setuid(r5) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x200000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40004880}, 0x1, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78000000320004022dbd7000fcdbdf25000107003c00010010001d00000008000300ff070000000014001e0000000c000100706f6c6963650000000014001d0000000c00010073616d0000000000ffff001400050000000c00010073616d706c650000000008000400040000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 2018/06/04 21:22:04 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x4002, 0x0, 0x0, 0x0, 0x1) syz_fuseblk_mount(&(0x7f0000000200)='/\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_mount(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x3f}, 0x8) umount2(&(0x7f00000000c0)='./file0\x00', 0x1000000000000003) 2018/06/04 21:22:04 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x8000007) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:04 executing program 0: r0 = socket$kcm(0x29, 0x40000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000040), 0x4) [ 138.279546] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 138.287713] EXT4-fs (loop3): Ignoring removed orlov option [ 138.293431] EXT4-fs (loop3): DAX unsupported by block device. Turning off DAX. [ 138.300879] EXT4-fs (loop3): bad geometry: first data block 1 is beyond end of filesystem (0) [ 138.346231] Process accounting resumed [ 138.347350] ntfs: (device loop1): parse_options(): Unrecognized mount option giycbŒ}l(nyœÜ<+¾¤%¾³zˆœAw"”‹îX#ªfÀ »UkRaUY¯¢ØïÏDÖçûÊ*MÿŽ“š}Æi/©[÷j~â. [ 138.364231] ntfs: (device loop1): parse_options(): Unrecognized mount option xý±Ðù]ª4wq?¶¦3€R‹ªyl¾~À¼è Nkh„ :jàs{§ò'TgŽNd„µ ç¬x:N B*9û‰Ù.Qž. [ 138.387522] device lo entered promiscuous mode [ 138.448138] device lo left promiscuous mode [ 138.499798] Process accounting resumed 2018/06/04 21:22:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80000) fcntl$addseals(r0, 0x409, 0x8) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x8000000000005, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) 2018/06/04 21:22:04 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname(r0, &(0x7f0000000580)=@can={0x0, 0x0}, &(0x7f0000000600)=0x80) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', 'posix_acl_access$@system[selinuxvboxnet0\x00'}, &(0x7f0000000100)="e700", 0x2, 0x3) get_thread_area(&(0x7f0000000140)={0x3c12, 0x20001000, 0xfffffffe, 0x2, 0x0, 0x14a, 0x5, 0x6994, 0x4}) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e24, 0x0, 0x4e23, 0x401, 0x2, 0x20, 0x80, 0x73, r2, r3}, {0x400, 0xffffffff, 0x5, 0x2, 0x9, 0xf0dc, 0xb0, 0x4}, {0x8, 0x9, 0x8, 0x6}, 0xcb4, 0x6e6bb6, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d6, 0xff}, 0xa, @in=@multicast1=0xe0000001, 0x0, 0x1, 0x3, 0xe9, 0x81, 0x40, 0x99c}}, 0xe8) 2018/06/04 21:22:04 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x4) 2018/06/04 21:22:04 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0x2000003fe, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x410002, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x40716c69ff445e7e, './file0\x00'}, 0x6e) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x10002, 0x7, &(0x7f0000000280)="c3", 0x1) 2018/06/04 21:22:04 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000740)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=""/45, 0x2d}, 0x0) recvfrom(r0, &(0x7f0000000200)=""/249, 0xf9, 0x0, &(0x7f0000001900)=@hci={0x1f}, 0x707000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x9a9d}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x3b1, 0x1, 0x1}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000001980)=""/4096, &(0x7f0000000100)=0x1000) write(r0, &(0x7f0000000000)="220000005e000721004f4da761424d0bbc54b190243105ebd900001a000000000000", 0x22) 2018/06/04 21:22:04 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x10000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x10d, 0xb, &(0x7f0000000040), 0xc) 2018/06/04 21:22:04 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000dd3ff8)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/04 21:22:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x200000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/146) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="c26beb6cafb7be011f7c35e36fe4b8c8f2d77b0dfe0c333acaf1dcda7bfe772ee887f710fead99cd4fd1beb49fd0a280bae63b69fc174fa555bda1ec68e311d31c97cef36cf0730d3e2584031e695adc30df3d76d33a7bec8c7d0e63f041d2f6c1b1667a68901864da447645cfbb2a3aa64eedf94e49b64e15aaba2366cec9bf7864fd58dc4173fe4c2a2f52bf03d2a5896cf80ea8da3ceccfff7cf8602da9ae0b4f59bff7f897fe4e791e0d4498b99b220dc835d47e1b0ea516b68ca09bfe606b3fb7a5aef05136a967cb6dd36f66e07c2706cc9ebed4ad9efcbdf3e800b967565d081e03803d683ff63f743ed6db", 0xef}, {&(0x7f00000002c0)="f2ade3d7644d18a475e10d1aa4bb7bf8924a805565c2f23fd801c050e21701a9b7bfed1ab3c6eb588664987205252e05b1c2db7da1dba6bff42cedd73d0ee2d385b577233ca324802a2c2d877cf399754c4b30851c504fe16e92dd835a69d1784892105c492bd011cd6754a67ba66788978b225b25b5aa3563eca044154096cd1a23f61c3981916194c396bc6c743cd9be0f9bc7fec03c01afc9b1333e178e70a7b6cab269e047e6c1417f88649a28dca70b", 0xb2}], 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000100)=""/36) 2018/06/04 21:22:05 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00|', 0x3) mq_unlink(&(0x7f0000000040)='\x00 ') r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x7) 2018/06/04 21:22:05 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffa}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x20, &(0x7f0000000040)) rt_sigprocmask(0x2, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 2018/06/04 21:22:05 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0xa2f83051797647c8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/209) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r3 = epoll_create1(0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x400, 0x2, 0x1d4, 'queue1\x00', 0xffffffff80000001}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r0) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000011000/0x4000)=nil, 0x4000}) 2018/06/04 21:22:05 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) listen(r1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xffffffff00000000}}, 0x1c) getpeername$llc(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000018c0)=0x10) 2018/06/04 21:22:05 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="94", 0x1}], 0x1}}], 0x1, 0x4000000) sendto$inet(r0, &(0x7f0000000000)="cf", 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xa, "1fde2c8f228d727e63c7"}, &(0x7f0000000180)=0x2e) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x282500, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000200)) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000240)) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/06/04 21:22:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x0, 0x401, 0x8000000000000000, 0x8, 0x4a7, 0x10000}) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/dev_mcast\x00') read(r1, &(0x7f0000000100)=""/205, 0x200001cd) 2018/06/04 21:22:05 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x1, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}, 0x1}, 0x0) 2018/06/04 21:22:05 executing program 3: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x100000001, 0x8000) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x80) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='U', 0x1}], 0x1) close(r0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x3) 2018/06/04 21:22:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000500)='bic\x00', 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0xffd2}], 0x1, &(0x7f0000000080)=""/92, 0xfffffffffffffe56}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x100000001, 0x5, 0x0, 0x7f, 0x3, 0x40, 0x7fffffff, 0x249, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r3, 0x0, 0x200}, &(0x7f00000004c0)=0x10) ioctl$int_out(r2, 0xc0305710, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000380)={0x20, 0x6, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) 2018/06/04 21:22:05 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0xa2f83051797647c8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/209) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r3 = epoll_create1(0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x400, 0x2, 0x1d4, 'queue1\x00', 0xffffffff80000001}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r0) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000011000/0x4000)=nil, 0x4000}) [ 140.136555] netlink: 'syz-executor7': attribute type 1 has an invalid length. 2018/06/04 21:22:05 executing program 3: r0 = getpgrp(0x0) r1 = gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x488c00, 0x0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f00000000c0)={0x13, 0xbd2b, 0x8, 0x8ba}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 2018/06/04 21:22:05 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8000023, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvfrom$unix(r1, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x709000) 2018/06/04 21:22:06 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045530, &(0x7f0000000100)={0xfdfdffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/06/04 21:22:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettaction={0x28, 0x32, 0x801, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}]}]}, 0x28}, 0x1}, 0x80000000000) 2018/06/04 21:22:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000000c0)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800103ffe, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000080)={0x6, 0x20}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000200)=""/201, &(0x7f0000000000)=0xc9) 2018/06/04 21:22:06 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) flistxattr(r0, &(0x7f0000000240)=""/122, 0x7a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr(r2, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)="020000001000000000000000f51b3412a4131c9aa78c5c850870ddd72c53473e896da61fe04c68547b732b425d4ffc0eb36a643b893d7f0001813c562dbc65f3b13b2ea9ac14b8715836008b1502c54dcc6c47f311b697e78a5c0c8691448d2fa761f000a07b86824e3b123c", 0xfccc, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xde, &(0x7f0000000080)=0x4) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x7) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x254b40, 0x0) socketpair(0xa, 0x3, 0x3, &(0x7f00000002c0)) 2018/06/04 21:22:06 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:06 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000340)="03"}) r0 = socket(0xa, 0x401, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x1017fe) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0xc0145401, &(0x7f0000000340)=""/4096) 2018/06/04 21:22:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bcsh0\x00'}) ioctl(r0, 0xfffffffffffffff8, &(0x7f0000000280)="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") r1 = openat$cgroup_ro(r0, &(0x7f0000000040)="2f3264f8bd702ee32bf000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40286608, 0x442ff5) 2018/06/04 21:22:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000001200)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) fallocate(r0, 0x0, 0x0, 0x7) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000065bbf9300c0573cbc650e6dd316477d25490c261fe318021932afe4757a0c2ca458c30bb0c313243d5"], &(0x7f0000000540)=0x22) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000580)={0x4f3, 0x0, 0x2, 0xad, 0xff, 0x6, 0x4, 0x6, r1}, &(0x7f00000005c0)=0x20) open(&(0x7f0000000080)='./file0/file0\x00', 0x40000, 0xc4) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffc012, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="7e1508fd9a06bbb296bcb6c94cc5ce6cbdce870de2937b8d9abfd6346aaa7a06fbc7f769ae5deaeb31b9376bbb846cd08273de21fb6ef3df5643108d6482cc72a236589efeb7c71432a6d7206defd268a8d969bb63c6d9988e34eab9b2d4d5831cf9f9c93c3b179d518b57f6260a2a3abd61ad9997d6914a51c80f80209425dcf682e079f229d299bc50af9821ce616a8f428799806eaccf18e9e5acd3ab9b6ed03e29cb382df13c68a1e28e64c98e89b7da234536b6ed282807b19e668dcca98ff312d5192bd28d7f922eafd6c871482f57b343077f88c5bf0b581897d49e0930cb45bc6d3f39b8", 0xe8, 0x5}, {&(0x7f0000000280)="6905ea899c544d03de78974f90d74fa12dde36d745e4fd762c3c613d6724227ef50ffc16c2f36ad66a2743d5452eb78c35", 0x31, 0x8}, {&(0x7f00000002c0)="3f8799ef3e1c0f88d7e6e3ef6d25859673d82290dcbb7845d656ad578ce60f613f2e88b7a6d26a83bdf7fe3439715074e2e5aedbafaeaaec79f1a998362c491a2f5aa83ad1297beac562b591991a38254073da12bee91eac39800a4f230b43379bb4c6b29fc7a5030bc2ad2f0a87b5535121eaeb419142adb9eb51958cf3d9e932b65845015a5d5cc0b8bdde4acc7fb0d19f30a239e6fb499008ee3843998ee688c9af0296eb5b7b2fc697025f3ff1008bd4da6b1f577fe207958613481893856d199df928ca20d6c4e64b2703cc0c4d103b7bc993f38d6402bf12c56fd4a6d3579aafe2208eb40931c6f51701a7552206d4ee2aba851196", 0xf8, 0x9}], 0x8000, &(0x7f0000000440)={[{@resuid={'resuid', 0x3d, [0x7f, 0x38, 0x35, 0x32, 0x79, 0x3d, 0x31, 0x7b]}, 0x2c}, {@discard='discard', 0x2c}, {@grpid='grpid', 0x2c}, {@block_validity='block_validity', 0x2c}, {@nodelalloc='nodelalloc', 0x2c}]}) 2018/06/04 21:22:06 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000002da1c83a241ef3f00f929cae38c37abdc832c59e1bdb71bd6bc6ed210582fdb696fa8a229266bb50da9c4859c84b4fe60d92c46d977086bd75ac7218348771a7760eb047fbb55503be1d1ae53d84088f9d63912047670798bb53bf5583a0e371c1a5faab6eae4a987fcd65df67d6e0a0235b93ac49b94c0effd5aada36eaf4d3cfa488502c2deb6f5e6c2059caa6892468b913fa15e94d6cef41f8829deaaaf4bc6bf5f66a93a0f99aece4901cf3d5285e3a40037d50b21f3b72b0672f5ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000000)=0x1) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0xfd, 0x0, 0x15, &(0x7f0000000040)="ecb3b18b5ba672d5faaa0a8124338758868c9febc6"}) [ 140.522429] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2303517783 (only 16 groups) [ 140.581704] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 2303517783 (only 16 groups) 2018/06/04 21:22:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=""/143, 0x8f) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x200, 0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf30, 0x2, [0xffffffffffff8000, 0x3fc000]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r5, 0x0, 0x9, 0x3}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) rmdir(&(0x7f0000000000)='.\x00') 2018/06/04 21:22:06 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = semget(0x1, 0x0, 0x470) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101000, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000000)=""/60) 2018/06/04 21:22:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x15}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x233}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x80) 2018/06/04 21:22:06 executing program 6: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:06 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x0, 0x8, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/06/04 21:22:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000000840)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6", 0x3c, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x101000, &(0x7f0000000300)) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/06/04 21:22:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x6, 0xfbf, &(0x7f0000000980)="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", &(0x7f0000001980)="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", 0x1000, 0x1000}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) rename(&(0x7f00000008c0)='./file1\x00', &(0x7f0000000940)='./file0/file0\x00') 2018/06/04 21:22:06 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c62cf66f") rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x4024b2, {0x3f7c6bbd}}, &(0x7f0000000140), 0x8, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) rt_sigsuspend(&(0x7f0000000040)={0x9}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000280)=""/187, 0x9bb}) 2018/06/04 21:22:06 executing program 5: r0 = socket$inet(0x2, 0x80a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x2a8) tee(r0, r0, 0x6c, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x22000, 0x0) 2018/06/04 21:22:06 executing program 6: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:06 executing program 4: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) 2018/06/04 21:22:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r2 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297}}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7d1, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c906a38cbda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) vmsplice(r1, &(0x7f0000001b00)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000140)="fc6afa18da6cf40a2e0fa65fe46010d2111557359c2fe2771081a9e2e3f9d9d0f51f0ca4e2520fba1f6806e62f1dc59cf0e12a3fb95470b2413926e5ab38de5951ae0a22ef27190ab71d25aafc9d9aef3918b2059dfdf1c1e89d763211b9a490bdf18314ab77f0795cf01ff499ee1c422ac71b8e2fd92c2c8bbf5fd389e393", 0x7f}, {&(0x7f00000001c0)="9f8fb733b48a84b9904a6af3ea4161dd662c", 0x12}, {&(0x7f0000001840)="dba4d4fa12946380781fc5a1b08e42ce3c9f3619b53389d4a4cb65276fcac629f29bc80efb", 0x25}, {&(0x7f0000001880)="6908d0eaafa3f91502d9ad308397ac9617b2f4e2c49e57298d1704158d2d8dba", 0x20}, {&(0x7f00000018c0)="6d0b02e7b7dd2a8713bca4c385a485839adfb017847e8db528940169bc9742ca2f6f89680c6e29f6d8a2e21a9c319d3eb88f", 0x32}, {&(0x7f0000001900)="85c52c43772423c742e99aa7b41f22aaa1074e2e4efbc90d277b31a00200da378d56b82d48471670053c7cdd09c633ce53322e2e361d3934af359fea128aeb4d6ea7942c1119d1eec0352a712f1dfc71f2f13d7cf1d43110cf23eaa105517039090f503be47cead943d6f5290905ff29dee2d506bc52361997cbf46303eb29423a", 0x81}, {&(0x7f00000019c0)="b2569d29fe66d3e14d5f2d78d1cdb3a58a31d360244237f624836f41f2fd04c34c4779bba1221e3addb7600ce8cdde91ed927657eb052e5de5", 0x39}, {&(0x7f0000001a00)="36138df5adc4c6ccab1d11dfd6723ae1270eead945e1f1793c0d18b3fcf220fd359ef9bfd9e3248673204b8dafad1b4d52cbac9e7076b551d927d7bde6c54144069e147742eb684f2a36ed5ed5abdf49311c52a9379bda29b3b1cfc96fb73104f086c956fb5203eb7405fc4e4a03c80d81deca050245e40427c62894f5c4d86b6553ac04399c44ab82ab4136a5a1690ff4e665481389374029784ea5953b44413354a68f2020f30156dbf3b21cc372fb707ddeeb6160f603e4f0bf73f4bbc6f9e62968983645b8", 0xc7}], 0x9, 0x7) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) [ 140.775892] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 2018/06/04 21:22:07 executing program 4: r0 = socket$inet6(0xa, 0x10000080003, 0x85) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) epoll_create(0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 2018/06/04 21:22:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x40000020, 0x0, 0x0, 0x200}) 2018/06/04 21:22:07 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:07 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x200, 0x8001, 0xffffffff80000001}, 0x10) 2018/06/04 21:22:07 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x1, 0x1, [0xd14, 0x32a, 0x90c, 0xa3b]}) r0 = socket(0x14a11809cb26ee37, 0x5, 0x1000) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240), &(0x7f00000003c0)) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bind$inet6(r0, &(0x7f0000000b80)={0xa, 0x4e20, 0xffffffffffffffff, @loopback={0x0, 0x1}, 0x9}, 0xffffff29) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000001c0)=0x9) r3 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000a00)=@full, &(0x7f0000000500)=0x48, 0x80800) getpeername$netrom(r3, &(0x7f0000000d40)=@full, &(0x7f0000000580)=0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x41, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x3aed}, {0xa, 0x4e24, 0x101, @mcast2={0xff, 0x2, [], 0x1}, 0x39c9}, 0x9, [0x8, 0x5, 0x72, 0x8, 0x7, 0x9, 0x0, 0x101]}, 0x5c) sendto$ax25(r1, &(0x7f0000000780)="30dbb632cb7bf7e070679e5827f1690ad8cdb2c00dbc752f5ef21661519e252835232a7aa66d17bf3741dd9146e7c657f1e453e88cc92754d022a4bd112771d4b743f1f6dbfa92c3c0fcc6a75c96a766b54128b3ce2ce6f0ed7b808c3f9748e276613e5c7322d7c6010741d6890366ff1db7f1dec2e6bf23f092d73d786868da349804e38b603a4c9c1c980b4cf699948ee55716a3e1bb15aeb81fd2ea559a24bf8f12d3bdef96c6ade237013322388901bb755088d94116e4d0888888cbd5d01cec3b85b0db036f9dc462b1792d9253ce044bf8012bfa052be358f5699f989f", 0xe0, 0x8000, &(0x7f0000000000)={0x3, {"909fb6682f873c"}, 0x5}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000001100)=ANY=[@ANYPTR64, @ANYBLOB="0ae50b6c770b0b0a52849a120fe9"], &(0x7f0000000100)=0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYBLOB="d407000000040000006430d4011f966afc5b45061e44fbffdeb305e884e9a9cad336c5ba7c1349d685809b10ab42008139231688885dd3ca7bc02111d1534813f06435a202b6232590a52296dd1a7a9d779a8d355123429daf6726aab1eaaddf399d8ceae06a499c1e1630185793f5f20f89eb1c138baf026883dedbd72cfc69b0c1f1292601693fac2dab27239d0605d2660e1c0a56d40c0ac75463f87c81a98ae8e7d907801cb7b2f2b1ac7913ca02581162196df4fe3a2d7d1fad89e41cdad7e65c0daa36cc3bb656"], &(0x7f0000000740)=0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) getpeername(r6, &(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000180), 0x4) read(r1, &(0x7f00000005c0)=""/141, 0x8d) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=0xffffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r8, 0x4) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00003a4000)={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) close(r4) 2018/06/04 21:22:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=""/143, 0x8f) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x200, 0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf30, 0x2, [0xffffffffffff8000, 0x3fc000]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r5, 0x0, 0x9, 0x3}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) rmdir(&(0x7f0000000000)='.\x00') 2018/06/04 21:22:07 executing program 2: socket$kcm(0x29, 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000301ff8)=0xd00, 0xffffffff) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x81007) 2018/06/04 21:22:07 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fffffff, 0x101000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0xa}, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x58, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3f}}, @IFA_LOCAL={0x8, 0x2, @loopback=0x7f000001}, @IFA_FLAGS={0x8, 0x8}, @IFA_ADDRESS={0x8, 0x1, @rand_addr}]}, 0x58}, 0x1}, 0x0) 2018/06/04 21:22:07 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x7fffffff, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r0, 0x6, 0x6, r2}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0xfffffffffffffdc2) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000001c0)={{0x1, 0xe65a918, 0x4, 0xf121, 0xffffffffffff285d, 0x3}, 0x5, 0x4, 0x0, 0x8000000, 0x1, "a234eaa547cf660de483f87d931b9c0ff769f42ce2d1687fcf7c171a19b9691ad03215ce026930d9dc83777ea169831a7e474dd434d7851567d1c8c8000b7868b2b457dbc4c1d00bfffc8ce074fe945b93b9681df4b478a24ac89a674ba15cf28e67c9a9c7fe3d0a1d8585414e0ca4ba5020f3e074fb1e233f6e2d35e8d2aecd"}) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x1000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 2018/06/04 21:22:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000140)=0x78) close(r2) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0xd2, 0xf4d}) close(r1) [ 141.835912] kvm [9529]: vcpu4, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/06/04 21:22:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000005, 0x3) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") getrlimit(0x1000005, &(0x7f0000000700)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x100000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0xce, "c8a8f6eb23f0841f9eace516b1efd81e8838ce2ea934c49bce6c86e1c1a837a1d48d820f8cf85c7bbc6c7c401c4f43f6542b2288432f474c170775022fcc3625e23a35b4998cea454b080d5ebff089d4dd9b9b670354943b17a4fce682d0d15a4a569b69102a7fed62590eaceef383ae0d6052086ac1680061c6eb78d042f582ed96f9a37f945a90a234494a0861227f89ed3a422be3b74232e517c833e1afcf1408932830f517901b0730e9b1fd953c43ff18594291ff442df7dff2a39580a58940a42d605f80208cb70c5f65dc"}, &(0x7f00000001c0)=0xd6) 2018/06/04 21:22:07 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x0}, {}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="6ca8d36208d7663626fc0cbc4c9e562eb37cdd547689125d51e26d234eeab59d6299d6d3f400fb25aeedcc975b7b596bcfbdf151e7e6749406418f1b0a8b564fac748ceba66a0336fa4cb57cb0cd283f73d9da56c528cf034a8de2e9838ffaa5675078efb32b643c734ab0c47597aa2b608b80e0105a", 0x76) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000003c0)={r1, 0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x3}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0x1}, 0xfffffffffffffffc}}, [0x8, 0x8001, 0x3ff, 0x3, 0x4, 0x7fff, 0x5, 0x5, 0x1, 0x3, 0x7ff, 0x4, 0x1, 0x0, 0x2]}, &(0x7f0000000600)=0x100) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfe, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000640)=""/136, 0xc8, &(0x7f0000000280)=""/200}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) [ 141.905999] kvm [9529]: vcpu4, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000020 data 0x0 2018/06/04 21:22:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae91, &(0x7f0000000000)) socket$pptp(0x18, 0x1, 0x2) 2018/06/04 21:22:07 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 2018/06/04 21:22:07 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 2018/06/04 21:22:07 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x4008b100, &(0x7f00000000c0)) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) 2018/06/04 21:22:07 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f0000002901)='dev ', 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) write(r1, &(0x7f0000000100)='V', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'}) 2018/06/04 21:22:07 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) 2018/06/04 21:22:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x3, {0xffffffbfffbff270}}, &(0x7f0000000040), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') 2018/06/04 21:22:07 executing program 4: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000340)='active_logs=4') restart_syscall() 2018/06/04 21:22:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000003c0)='{\x00') stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) link(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setresgid(r3, r4, r5) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000340)={0x8, 0xc8}) fremovexattr(r0, &(0x7f0000000480)=@known='security.evm\x00') ioctl$KVM_IRQ_LINE(r6, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_PPC_GET_SMMU_INFO(r6, 0x8250aea6, &(0x7f0000000200)=""/94) statfs(&(0x7f0000000600)='./file1\x00', &(0x7f00000006c0)=""/56) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000100)={0xfffffffffffffffe, 0x14000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000300)={r7}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 2018/06/04 21:22:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nojoliet='nojoliet', 0x2c}, {@cruft='cruft', 0x2c}, {@map_off='map=off', 0x2c}]}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$TIOCNOTTY(r1, 0x5422) 2018/06/04 21:22:08 executing program 0: r0 = fanotify_init(0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x8001) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x40, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) fanotify_mark(r0, 0x11, 0x20000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000180)='./file0\x00', 0x0) 2018/06/04 21:22:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bond0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"6c6f0000000002000000008c00", 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000040)={'bond0\x00', r2}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x1e) 2018/06/04 21:22:08 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x0) [ 142.827677] ISOFS: Unable to identify CD-ROM format. [ 142.925959] ISOFS: Unable to identify CD-ROM format. 2018/06/04 21:22:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) ioctl$KVM_SMI(r0, 0xaeb7) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x4, 0xfffffffffffffd0a) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/06/04 21:22:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x7fffffff, 0x6, 0x8001, 0x3, 0x1}, 0x98) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa}}}, &(0x7f0000000040)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/06/04 21:22:09 executing program 7: syz_emit_ethernet(0x144, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@mpls_uc={0x8847, {[{0x0, 0x8000, 0xd5, 0x1}, {0xa8, 0x9, 0x800, 0x4}, {0x4, 0x52, 0x5, 0x75}, {0x3ac9, 0x2, 0x3, 0x4}, {0xfff, 0x7, 0xfffffffffffffff8, 0x6}, {0x4, 0x71, 0x9, 0x3}, {0x81, 0x7f, 0x9, 0x3ff}, {0x81, 0x5a2, 0x10000, 0x20}], @ipv4={{0x20, 0x4, 0x3, 0x15ac, 0x116, 0x65, 0x7, 0x3, 0x85, 0x0, @rand_addr=0x9, @multicast2=0xe0000002, {[@generic={0x7, 0x8, "c7676602bbbb"}, @timestamp={0x44, 0x38, 0x4, 0x0, 0x6, [{[@loopback=0x7f000001], 0x8}, {[@dev={0xac, 0x14, 0x14, 0x12}], 0xd1}, {[@dev={0xac, 0x14, 0x14, 0x18}], 0x8}, {[], 0x18d00000000000}, {[], 0x4}, {[@dev={0xac, 0x14, 0x14, 0x1c}], 0x3}, {[], 0x2}, {[@rand_addr=0xd5], 0x2}]}, @rr={0x7, 0x13, 0x3, [@local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x8001, @empty]}, @ra={0x94, 0x6, 0x9d9c}, @cipso={0x86, 0xd, 0x101, [{0x1, 0x7, "3103ce1cdf"}]}, @lsrr={0x83, 0x3, 0x8001}]}}, @dccp={{0x4e24, 0x4e23, 0x4, 0x1, 0x494, 0x0, 0x0, 0xe, 0x10000, "b9bc29", 0xffffffff00000001, "81c7ab"}, "401f17653b5d5704dd0d0287300a04ad2f588b874a9ee985757ba213bb70e3093daa937647c74715e19630e2c44d5ce8b40640fe94f77b49bdb0ac9e81f6c95d82476e6540a87adee8a40bdcef392143f10fb659e4787e82c4206999dc354d0f7083646dc8c300ef587f9826777aa6e656ef696413cc11d572121878d60e19661b6c4acb8b33"}}}}}}, &(0x7f0000b0c000)={0x0, 0xfffffffffffffffd, [0x267, 0x311]}) 2018/06/04 21:22:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f00d82c99240970") socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff69, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a00090000e8001d85680c1ba3001165995cc236169547d3ae820a00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac4", 0xfffffd8e}], 0x1}, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x8000, 0x4, &(0x7f0000001380)=[{&(0x7f0000000140)="7ac5d28ab6b39efa3d6d1e5be08e5a677d773424f3a98f42b5cb8b282ea39556ded1b3d256926f3d77488423cbde8f820d40428026c0b729e5845b5e7a90ef66493897e309c6ea1ba6", 0x49, 0x8001}, {&(0x7f00000001c0)="e4a4ff4292c6203a91b8419091de9fe8a805da376e26c59dec7ad2807bac9033acb19618559c2acb9201d01eae7dbefbdae5e7bacf7e6fb95f374cc1c50d5f09897af29e97f69a5e9c9f51a5c6cb6c2aadc6c74eed8d260a4527f7cb2fba05dfefee59c0558660ff1b33d276b632a006335ddb4885a02df3114619aa01b1a8c1ae2863c7845c045a221c0f89224c45a1ebe54d926bc47df8f94db9ec7ab612bcf574e065b77e328d098f0717e1aa9904018da9812b90c6462f9597f304e4f45c081ef29191ad4f3cd3563ba5f18a0c77bbce5d130814c5a0e22dd6bad275a3e24a97ee0ae2521439710640a840fcd6438f2726043be86ca906", 0xf9, 0x20}, {&(0x7f00000002c0)="9f3d3fdaca5db028fe4ffbe7bbc875f0529c0e91b74b5cff350ce23b1a48580197650a2c5c1f79364716ef5a5c9c47f5ad6e9c7a8a52287ed13510579caf1665c561adbfc9e1dcadfdf59338b4d226dd3de92b4c53248a85dc36ef1887014f4d3669b5aa19b77399630fee65fa38d7f86d9acfbd7df3399663552168c48d339663cfd38778204b1d1bd1dcccd4c8299c348e1989d1112fb7bbe2", 0x9a, 0x4}, {&(0x7f0000000380)="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", 0x1000, 0x6}], 0x2100000, 0x0) 2018/06/04 21:22:09 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x81, "afa418dc46867d1bea5b2a14cd193d85bb3fb61a17b24e3bc6a1992c833cbd10d1bb5c6532399508b0bc74caccb9898233e13c315d842f110156d17fd6d96fefdc04a66be85ee1c5ba87779b9327708259a2f03a24076eddb6281bd74c54ceff73d8d94c636f8e0af09d5acb8fe1f9f87df3b84a57b55087af53252fab60ed59b6"}, &(0x7f00000001c0)=0x89) keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}) 2018/06/04 21:22:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x1, 0x7}) 2018/06/04 21:22:09 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x801) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x8000, 0x4) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0xfdfdffff, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 2018/06/04 21:22:09 executing program 4: clone(0x0, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f00000001c0), &(0x7f0000000200)="df05de2501cb098ec19ae0461042d7903589b72081f7b309d37573317d1d1db78ba0db85ae04445b1a93b34ed034153be7d83c0f66f57279bbe7e5373a3ecfe5f1a9fe1f937eb17167991b446b3767d89bd6a5f96ddcd7b23fe1502b68f5e6ccbd9564ab2c673da828ecc769e618336a3ebff57d110976e511") r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) pause() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x5f, 0xe6d, {0x0, 0x989680}, 0x1c00000000000, 0xffffffff}) 2018/06/04 21:22:09 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x2, 0x4) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x7530}}, &(0x7f0000000200)) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x58) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) 2018/06/04 21:22:09 executing program 5: r0 = epoll_create(0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f00000000c0)="a2fe899507512ec20fc05519ab18630000000000000000000000000000"}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x22040) ioctl$TIOCCONS(r2, 0x541d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0x5}}, [0x400, 0x8, 0x3, 0x8, 0x6, 0x2, 0x10000, 0x7fffffff, 0x2, 0x0, 0x7fff, 0x1, 0x400, 0x4, 0x100000000]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r3, 0xffffffff}, 0x8) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f0000000240), &(0x7f0000000280)) 2018/06/04 21:22:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) socketpair(0x19, 0x80000, 0x8000, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/170) 2018/06/04 21:22:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2801) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000001c0)=0x2, 0x4) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/93) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) dup3(r1, r0, 0x0) 2018/06/04 21:22:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) unlink(&(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000100)) getsockopt$inet_mreqsrc(r0, 0x0, 0x8000000000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2018/06/04 21:22:10 executing program 0: clone(0x20800000, &(0x7f00000000c0), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000040)) prctl$intptr(0x24, 0x800f90) 2018/06/04 21:22:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x0, 0x805, 0xedbe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@empty, 0x0}, &(0x7f0000000640)=0xfffffffffffffed7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001100)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000001140)={@remote, @loopback}, &(0x7f0000001180)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'vcan0\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000015c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r4, @ANYBLOB="02062dbd7000fecc4984dbdf250300000008", @ANYRES32=r5, @ANYBLOB="c000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r9 = socket(0xc, 0x1, 0x0) ioctl(r9, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[]}, 0x1}, 0x0) accept$packet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={"77797a5f74756eb921f9848000", r11}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000c3bff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r13, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) r15 = socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000180)="260f4ec2ba4300b85b1aef64660f7e9260006766c74424000c0000006766c74424023bfed4516766c744240600000000670f0114240f01ca640f2210ea080006000f01bf0098c12f0c0f20e06635020000000f22e0", 0x55}], 0x1, 0x20, &(0x7f00000003c0)=[@vmwrite={0x8, 0x0, 0x39e, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x6}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x401, 0x6, 0x0, 0x1bad7940, 0x7f9865cc, 0x1, 0x5, 0xaab7, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={r16, 0xc7, "dee9a19d651dd73102c8cd21fa8c035bd517aec8efa4255fb05f0680e2d4f45ef3aea54e64fe412c60b94ffb240cbf58f1442671ad151f651ba057e5860c86fd41ef0e0ce726ffcba7fc8c5032489f49ce39503d9b01f096202f0f37088cdf4d06833884cda099f0719618d88eb2ade8e172fffb14536b4cc58e28e5eb2372d498a44bd7fa7644ef4c11b43b9b7560a4583c14804c2e13e51562ee4cc6984bcc48da2a8e004231c06768362abe4dc7d34b79bfbe855a0e630993f9d392c123f497d996f53d6bc7"}, &(0x7f0000000580)=0xcf) r17 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r17, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r15, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) getpeername(r17, &(0x7f0000000b00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000b80)=0x80) 2018/06/04 21:22:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x100) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000400)={@dev, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000640)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000006c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000800)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000008c0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000940)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003880)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000003980)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000003d80)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000003d40)={&(0x7f00000039c0)={0x374, r0, 0x316, 0x70bd2c, 0x25dfdbfb, {0x2}, [{{0x8, 0x1, r2}, {0x25c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0xe9b7, 0xfffffffffffffff7, 0x80000000, 0x7ff}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x439, 0x4, 0xfb4, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}, {0x8, 0x7}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x80}, 0x4) r11 = inotify_init1(0x0) mq_getsetattr(r1, &(0x7f0000000140)={0x7ff, 0x6, 0x7f, 0x3, 0x8001, 0x4, 0xb, 0x3ff}, &(0x7f0000000180)) r12 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r12, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") inotify_add_watch(r11, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r13 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) mknodat(r13, &(0x7f0000000040)='./file1\x00', 0x1000, 0x0) 2018/06/04 21:22:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) listen(r0, 0x110000000012) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, r1) accept(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) 2018/06/04 21:22:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='smaps\x00') r2 = socket(0x10, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x9) 2018/06/04 21:22:10 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000000000000e"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000"], 0x1, 0x0, &(0x7f0000000040)="f0"}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, &(0x7f0000000280)}) 2018/06/04 21:22:10 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x3) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000006c00004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f0000000140)) 2018/06/04 21:22:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x10000) recvfrom$inet(r0, &(0x7f00000001c0)=""/93, 0x5d, 0x2100, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x7faf8532e756b501, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x1f, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') getpeername$packet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000580)=0x14) accept4$packet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000006c0)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) getsockname$packet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001c80)=0x14) getsockname$packet(r1, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e40)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001f40)=0xe8) accept4$packet(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0x14, 0x80000) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002000)={@remote, @loopback, 0x0}, &(0x7f0000002040)=0xc) accept4$packet(r1, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000020c0)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000021c0)={0x0, @empty, @remote}, &(0x7f0000002200)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002240)={'bcsf0\x00', 0x0}) accept4$packet(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000022c0)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002300)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000002400)=0xe8) getpeername$packet(r1, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002480)=0x14) getpeername$packet(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002500)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002540)={'veth1_to_bond\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002700)={@dev, @multicast2, 0x0}, &(0x7f0000002740)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002840)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000002940)=0xe8) accept$packet(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002a80)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000002b40)={@mcast2, 0x0}, &(0x7f0000002b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002bc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003380)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000003340)={&(0x7f0000002c00)={0x720, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {0x2}, [{{0x8, 0x1, r3}, {0x90, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3b95}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x258, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x30}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x24c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0x4, 0x9, 0x3, 0x8}, {0x26, 0x2, 0x3, 0x7ff}, {0x8, 0x4, 0x8, 0x3ff}, {0xffffffffffff0000, 0x8, 0xfffffffffffffc00, 0x10000}, {0x8000, 0x100, 0x5, 0xffffffff}, {0xff, 0x10001, 0x5, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x12c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r22}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x330}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffff7f}}}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000380)=""/205, &(0x7f0000000480)=0xcd) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0xa, 0x6) setsockopt$IP_VS_SO_SET_ADD(r25, 0x0, 0x482, &(0x7f0000000100)={0x11, @empty, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r25, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=r26, @ANYBLOB="7c000000adb18be5165c200a060a4d03740f5037cd82b3f215dbcc25a2ae0473004430a0683b00d5727ec3c96a5229464cea1507a99ae6be1511ce0768bcae8bf8b4acc8a41442f2d5e05ec5e4fde9db1f2b8afb23c3238396af5223a426967fe503750661da17afc709f8b6a3774baab5b2d2628bc1b2b4ec756ff4687d1cda"], &(0x7f0000000340)=0x84) 2018/06/04 21:22:10 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x5) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) [ 145.124772] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 28 transid 756082810144684242 /dev/loop2 [ 145.131102] binder: 9726:9727 unknown command 5 2018/06/04 21:22:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000180)="272a2600924651abe373641d085cda675ca86468057d208f94e2eed6612f4cfdcf34d47c3adc085ed3a1d90e6525f743f0d4141d4bd20b9ff1655e729ba64975d337", 0x42) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x5bda, 0xffffffff}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x0, 0xfffffffffffffffa]) [ 145.174137] binder: 9726:9727 ioctl c0306201 20000140 returned -22 [ 145.198493] binder: 9726:9727 got reply transaction with bad transaction stack, transaction 25 has target 9726:0 [ 145.209354] binder: 9726:9727 transaction failed 29201/-71, size 0-0 line 2778 [ 145.268952] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 145.275961] binder: BINDER_SET_CONTEXT_MGR already set [ 145.276541] BTRFS error (device loop2): superblock checksum mismatch [ 145.289263] binder: 9726:9751 ioctl 40046207 0 returned -16 [ 145.300270] BTRFS error (device loop2): open_ctree failed [ 145.300423] binder_alloc: 9726: binder_alloc_buf, no vma [ 145.307619] binder: 9726:9751 unknown command 5 2018/06/04 21:22:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x200000000000003, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x2, 0x318, [0x0, 0x20000880, 0x200009c0, 0x20000b68], 0x0, &(0x7f0000000480), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'bcsh0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xe0, 0xe0, 0x110, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x7fffffe}}}, @vlan={'vlan\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'ifb0\x00', 'bcsf0\x00', 'gre0\x00', 'rose0\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x100, 0x178, [@m802_3={'802_3\x00', 0x8}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@redirect={'redirect\x00', 0x8}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bde61f96ad140bf31c52adfce88ba14aaa5708b1e3b94b8fe5821cafe5683d4cae815faf77d30635b4d7e26ce8a6a975654dcf2bc4aaada7a86664db3dbde2bf"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x390) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x161402, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 2018/06/04 21:22:11 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@local}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setreuid(0x0, r1) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x80000000) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 2018/06/04 21:22:11 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1454cf4b, 0x400080) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r1 = socket$inet(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x1, 0x8, 0xe9, 0x0, 0x0, 0x1, 0x20, 0x7, 0x6, 0x8, 0x9, 0x986, 0x17, 0x8b4, 0xb05a, 0x3ff, 0x1, 0x0, 0x2, 0x80, 0x2, 0x10002000000000, 0x9, 0x8, 0x1, 0x200, 0xdc5, 0x9, 0x6, 0x6, 0x1000, 0xf5, 0x10001, 0xec, 0x800, 0x3, 0x0, 0x49, 0x2, @perf_config_ext={0x6, 0x7e}, 0x40, 0x7, 0x7, 0x4, 0x7, 0x4113, 0xde8}, 0x0, 0x0, 0xffffffffffffff9c, 0x2) fstatfs(r2, &(0x7f0000000080)=""/11) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) [ 145.311562] binder: 9726:9727 transaction failed 29189/-3, size 0-0 line 2971 [ 145.324295] binder: 9726:9751 ioctl c0306201 20000140 returned -22 [ 145.381908] binder: 9726:9751 got reply transaction with no transaction stack [ 145.389422] binder: 9726:9751 transaction failed 29201/-71, size 0-0 line 2763 [ 145.397616] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 145.404915] BTRFS error (device loop2): superblock checksum mismatch 2018/06/04 21:22:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)=ANY=[@ANYBLOB="14000000170a0100000000040000000000000000"], 0x14}, 0x1}, 0x0) 2018/06/04 21:22:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x100000001, 0x600100) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup2(r0, r4) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000"]) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f0000000040)=0x3) 2018/06/04 21:22:11 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) sendto$ipx(r2, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 145.426641] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 145.442637] BTRFS error (device loop2): open_ctree failed [ 145.456336] xt_time: invalid argument - start or stop time greater than 23:59:59 2018/06/04 21:22:11 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x3) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000006c00004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f0000000140)) 2018/06/04 21:22:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="19ca84279fa73333240970") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) 2018/06/04 21:22:11 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007a080000000000003f0000000000000000000000000000000400f7"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 145.595288] binder: undelivered TRANSACTION_ERROR: 29189 [ 145.600944] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.626364] binder: release 9726:9727 transaction 25 out, still active [ 145.633284] binder: undelivered TRANSACTION_COMPLETE [ 145.638453] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.692325] binder: send failed reply for transaction 25, target dead [ 145.711106] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 145.718387] BTRFS error (device loop2): superblock checksum mismatch [ 145.736535] BTRFS error (device loop2): open_ctree failed 2018/06/04 21:22:11 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x2000000000000003) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0x17, r2, 0x1, 0x100000000, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/06/04 21:22:11 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000000000000e"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000"], 0x1, 0x0, &(0x7f0000000040)="f0"}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, &(0x7f0000000280)}) 2018/06/04 21:22:11 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) sendto$ipx(r2, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xc0000, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::]:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 2018/06/04 21:22:11 executing program 3: r0 = getpgrp(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x81, 0xad, 0x7, 0x1000, 0x0, 0x43, 0x1000, 0x4, 0x1, 0x5, 0x5, 0x3c, 0x2, 0x1f, 0x6, 0x9, 0x41e7, 0x81, 0x9, 0xffffffffffffffcb, 0x401, 0x6, 0x4, 0x800, 0x81, 0x3, 0x8, 0xfffffffffffffffd, 0x1ff, 0x7, 0x4, 0xffffffffffffff81, 0x7, 0x6, 0x5066, 0xffffffffffffff80, 0x0, 0x8000, 0x2, @perf_config_ext={0x6}, 0x20028, 0x1, 0x8, 0x7, 0x8, 0x4, 0x2}, r0, 0x1, r1, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe) 2018/06/04 21:22:11 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x3) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000006c00004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614c672ecdecd385a1a7b8cac7cca0eb0cdbf1c", 0xca, 0x10000}], 0x0, &(0x7f0000000140)) 2018/06/04 21:22:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0xe476, 0x9, 0x9}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000007c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 146.066097] libceph: parse_ips bad ip '[::]:e' [ 146.080240] binder: 9816:9820 unknown command 5 [ 146.096007] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.102638] bridge0: port 1(bridge_slave_0) entered forwarding state 2018/06/04 21:22:11 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x82) r1 = syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x82400) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000100a000225bd7000ffdbdf250f00000008001700", @ANYRES32=r1, @ANYBLOB="4abf3fad221a4f5ccc151b106ca0fd0b41608922f75fcc95e528982b13c87b1ae7ff24c52453d1e578270e52d7260feaafc1854e484c347e536a02000019b2592fcb5a98c4c88a972bbedb3c1f97740fd8f8dcec6ce37138a9be366f19a08e7b752ac88fd1e66f88302a646fb5f8c25270156a68243fbf6286700245db4c40aba4d338"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r2 = socket$inet(0x2, 0x840000000003, 0x20000000002) setsockopt$inet_int(r2, 0x0, 0xc6, &(0x7f0000000100), 0x4) ioctl$int_in(r2, 0x5473, &(0x7f0000000000)=0x3) timer_create(0x7, &(0x7f0000000240)={0x0, 0x3, 0x4}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x1, &(0x7f00000002c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000300)) setsockopt$inet_int(r2, 0x0, 0x40000000000c9, &(0x7f0000000080), 0x4) 2018/06/04 21:22:11 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) sendto$ipx(r2, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 146.116932] BTRFS error (device loop2): unsupported checksum algorithm 3786 [ 146.122761] binder: 9816:9820 ioctl c0306201 20000140 returned -22 [ 146.124239] BTRFS error (device loop2): superblock checksum mismatch [ 146.139329] libceph: parse_ips bad ip '[::]:e' [ 146.155434] bridge0: port 1(bridge_slave_0) entered blocking state 2018/06/04 21:22:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0xc0000, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::]:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) [ 146.158205] binder: 9816:9820 got reply transaction with bad transaction stack, transaction 30 has target 9816:0 [ 146.161914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.172280] binder: 9816:9820 transaction failed 29201/-71, size 0-0 line 2778 [ 146.187557] BTRFS error (device loop2): open_ctree failed 2018/06/04 21:22:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x21, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x0, @time, 0x0, {0x0, 0x4}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1695) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/04 21:22:12 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000000000000e"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000"], 0x1, 0x0, &(0x7f0000000040)="f0"}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, &(0x7f0000000280)}) 2018/06/04 21:22:12 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) sendto$ipx(r2, &(0x7f0000000080), 0x0, 0x4, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:12 executing program 3: r0 = getpgrp(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x81, 0xad, 0x7, 0x1000, 0x0, 0x43, 0x1000, 0x4, 0x1, 0x5, 0x5, 0x3c, 0x2, 0x1f, 0x6, 0x9, 0x41e7, 0x81, 0x9, 0xffffffffffffffcb, 0x401, 0x6, 0x4, 0x800, 0x81, 0x3, 0x8, 0xfffffffffffffffd, 0x1ff, 0x7, 0x4, 0xffffffffffffff81, 0x7, 0x6, 0x5066, 0xffffffffffffff80, 0x0, 0x8000, 0x2, @perf_config_ext={0x6}, 0x20028, 0x1, 0x8, 0x7, 0x8, 0x4, 0x2}, r0, 0x1, r1, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe) 2018/06/04 21:22:12 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) uname(&(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0x9) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") fallocate(r2, 0x3, 0x0, 0xffff) [ 146.293118] binder: send failed reply for transaction 30 to 9816:9820 [ 146.306213] libceph: parse_ips bad ip '[::]:e' [ 146.314264] binder: undelivered TRANSACTION_COMPLETE [ 146.319520] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.325054] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/04 21:22:12 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000200)={0x9, 0x6, 0x200, 'queue1\x00', 0x20}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 146.412749] binder: 9846:9851 unknown command 5 [ 146.438403] binder: 9846:9851 ioctl c0306201 20000140 returned -22 [ 146.477499] binder: 9846:9851 got reply transaction with bad transaction stack, transaction 33 has target 9846:0 [ 146.488129] binder: 9846:9851 transaction failed 29201/-71, size 0-0 line 2778 [ 146.567558] binder: send failed reply for transaction 33 to 9846:9851 [ 146.578565] binder: undelivered TRANSACTION_COMPLETE [ 146.583803] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.589312] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/04 21:22:13 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000140)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4000002, 0x100020001) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x7, 0x80000000, 0x9, 0x101, 0x5}) 2018/06/04 21:22:13 executing program 3: r0 = getpgrp(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x81, 0xad, 0x7, 0x1000, 0x0, 0x43, 0x1000, 0x4, 0x1, 0x5, 0x5, 0x3c, 0x2, 0x1f, 0x6, 0x9, 0x41e7, 0x81, 0x9, 0xffffffffffffffcb, 0x401, 0x6, 0x4, 0x800, 0x81, 0x3, 0x8, 0xfffffffffffffffd, 0x1ff, 0x7, 0x4, 0xffffffffffffff81, 0x7, 0x6, 0x5066, 0xffffffffffffff80, 0x0, 0x8000, 0x2, @perf_config_ext={0x6}, 0x20028, 0x1, 0x8, 0x7, 0x8, 0x4, 0x2}, r0, 0x1, r1, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00') getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)) connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe) 2018/06/04 21:22:13 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x40000) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) uname(&(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0x9) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") fallocate(r2, 0x3, 0x0, 0xffff) 2018/06/04 21:22:13 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="24d2453b8f401cf5aaa067988d9584fb4ec3020180e5ee87326b772d9a551d346082e88b8fda83a2e16017dbe1b03ffd9fe3cfe847a7d0cd4c0c493c70e89f67435c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) uname(&(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0x9) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") fallocate(r2, 0x3, 0x0, 0xffff) 2018/06/04 21:22:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x21, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000480)={0x0, @time, 0x0, {0x0, 0x4}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1695) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/06/04 21:22:13 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000001c0)=0x8) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) dup2(r2, r3) shutdown(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x6001}, {r0, 0x40}, {r0, 0x200}, {r0}, {r0, 0x80}], 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000100), 0xfffffffffffffe8b) 2018/06/04 21:22:13 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x7fff) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0x0, 0x7}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=[{0x18, 0x29, 0x4, "f1"}], 0x18}, 0x0) splice(r0, &(0x7f0000000180), r1, &(0x7f00000001c0), 0x2, 0xf) 2018/06/04 21:22:14 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x240400) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) r2 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)}, 0x10) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) r4 = syz_open_procfs(r2, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf00c63fe3e5f381d30ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5af3b2d5bb59193eefb2eccd199833e59529345baa5c2ffa515f03cacccd2bc6291791e049197747c603b753eb6e0476d92de4e53c27302b99159c02355082e99062d1") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r7 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r7, 0x0) setregid(r5, r6) ioctl$DRM_IOCTL_RES_CTX(r4, 0x40286608, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) 2018/06/04 21:22:14 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0xc6e00, 0x0) faccessat(r0, &(0x7f0000000200)='./file0\x00', 0x140, 0x600) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x9, &(0x7f00000003c0)="0047fc2f2bb466e0e0667a0e07000000000970") r2 = socket$inet6(0xa, 0x3, 0x87) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000100)={0xffffffff, 0x0, 0x33, 'queue1\x00', 0x200}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/04 21:22:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x2a14, 0x3}, 0x2c) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/224}, 0x18) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) ioctl$TTUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/182) 2018/06/04 21:22:14 executing program 3: socketpair$inet(0x2, 0x8080f, 0xfffffffffffffffd, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x200000000000000) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') ftruncate(r2, 0x0) 2018/06/04 21:22:14 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="c4dc5046de3ab66eae280fc122fd099c013feeaa3ad8076b1a9ce5db1c96d1c3b4d5b2e9672a1ea9a77bbaea62f878a95401c7f618b68f6734d25a9831726d90bf11f064", 0x44, 0x5}, {&(0x7f0000000200)="231aa3ea1eb626689aaf0fe03c45be0e1a714db0e6486067d219a33a31a75db8826b1311500352aefe3d8c488816486da7807827736fc957d2ec939e42fa84b34e367b9eb9090a89285a74cedba1a7d4cfd4338f3fe05e6ce516f11b08d7e025842542f02f0f3745d12a5a14d8bfd73d937fc3b2499e16f4eb22fccd465f64f0348acf4d47d64eda4a91ffd8f37ca19efbba1d84850f66afe7680ac83f8b17d808242a4082d84502c53e1f1c0881f128469fb0a14de293fd1a6d495d4d85c8d714d29968318248e1ddfdffe9c72dac1df1", 0xd1, 0x7}], 0x840, &(0x7f0000000340)={[{@noauto_da_alloc='noauto_da_alloc', 0x2c}, {@resuid={'resuid', 0x3d, [0x7f]}, 0x2c}]}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 2018/06/04 21:22:14 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000972ffc)=0x1, 0x4) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000001180)={{&(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000000c0), 0x77aba87407190600}, 0x20) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100)="253308d785833900d24844a8061aa3d386ff7f000052cb93f5184d3fb7d43019342cafd5e493b694c64378a64d71edb9d0787bcfce4c7e9ec4d785a9609c641f9fd62e6ff14eef8700dd02be04ef9a67", 0x50, 0x10000004003ffa, &(0x7f0000be1000)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) [ 148.335950] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 2018/06/04 21:22:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x80) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x2}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002fd000/0x4000)=nil, 0x4000, 0x1, 0x401, 0x10000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000a9d000/0x1000)=nil, 0x100000001, 0x4, 0x40, &(0x7f0000f27000/0x3000)=nil, 0x4c0ae4b5}) 2018/06/04 21:22:14 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000005780)=[{{&(0x7f00000004c0)=@vsock, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/138, 0x8a}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000740)=""/201, 0xc9}], 0x5, &(0x7f00000008c0)=""/248, 0xf8}}], 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000000840), 0x3d0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x32240, 0x40) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000009c0)={"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"}) 2018/06/04 21:22:14 executing program 3: mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) clock_getres(0x0, &(0x7f0000000180)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x387000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000280)={0x4, 0x7ff, 0x2, 0x20, 0x100, 0x7}) r2 = dup2(r0, r0) clock_getres(0x2, &(0x7f0000000540)) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000200)={0xfb, &(0x7f0000000340)="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"}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x0) r4 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x2, r4}) connect$netlink(r3, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0xa080040}, 0xc) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x21d895b91500927, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000002c0)=0x8, &(0x7f0000000300)=0x4) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={{r6, r7/1000+30000}, {r8, r9/1000+10000}}) sendmmsg(r0, &(0x7f000000df40)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f000000b7c0)}}, {{&(0x7f000000b980)=@hci={0x1f}, 0x80, &(0x7f000000bdc0)=[{&(0x7f0000001b40)='J', 0x1}], 0x1, &(0x7f0000000000)}}], 0x2, 0x0) 2018/06/04 21:22:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r2 = accept$alg(r1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) sendmmsg(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000005840)}}], 0x1500, 0x0) [ 148.394468] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 2018/06/04 21:22:14 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) [ 148.493398] mmap: syz-executor4 (9944) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 2018/06/04 21:22:14 executing program 1: r0 = inotify_init1(0x0) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032cbd7000fcdbdf251000000028000200080002004e21000014000100000000000000000000000000000000010800060000020000080004000001000008000400080000003c0001000c00070014000000200000000800090079000000080004004e2100000c0006006c626c630000000008000800020000000800050001000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x420a, r3) tgkill(r3, r3, 0x32) tgkill(r3, r3, 0x2f) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x80000001, 0x3f, 0x9, 0x5}, 0x10) ptrace$getregs(0x4209, r3, 0x730002, &(0x7f0000000000)=""/38) 2018/06/04 21:22:14 executing program 2: setrlimit(0xa, &(0x7f0000000080)={0xfffffffb, 0x2}) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) setrlimit(0x7, &(0x7f0000becff0)) open_by_handle_at(r0, &(0x7f0000000000)={0x9, 0x2, "9f"}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x40, 0x4, 0x8, 0x100000001, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, 0x4) 2018/06/04 21:22:14 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_emit_ethernet(0x271, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x21, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2018/06/04 21:22:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x31) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x4, 0x200) openat$cgroup_type(r1, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0xf526}, @in6={0xa, 0x4e20, 0x20, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffff9}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0xfffffffffffffffc, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffd}], 0xb0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe8) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000003c0)={{0xffffffffffffffff, 0x2, 0x1, 0x1, 0x200}, 0x2, 0x2aae, 'id1\x00', 'timer0\x00', 0x0, 0x2e, 0x2, 0xa13, 0x6}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={r6, @dev={0xac, 0x14, 0x14, 0xf}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/06/04 21:22:14 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0xa, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 2018/06/04 21:22:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xc0000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x9d) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000000)=""/130, 0x82}}], 0x1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 2018/06/04 21:22:14 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) futex(&(0x7f0000000000)=0x1, 0x0, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/06/04 21:22:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) flistxattr(r0, &(0x7f0000000000)=""/161, 0xa1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) [ 148.750921] dccp_v6_rcv: dropped packet with invalid checksum 2018/06/04 21:22:14 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) ioctl$TCXONC(r1, 0x540a, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x1, 0x40, &(0x7f0000002000)={0x0, 0x989680}) [ 148.796528] dccp_v6_rcv: dropped packet with invalid checksum 2018/06/04 21:22:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet(0x2, 0x0, 0x4, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x16}, [@typed={0x8, 0x1, @u32}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x40, {0x4, 0xb808000000000000, 0xfff, 0x0, 0xffffffffffff0000, 0x200}, 0x100, 0x7fff}, 0xe) 2018/06/04 21:22:14 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0xa, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 2018/06/04 21:22:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) kexec_load(0x9, 0x7, &(0x7f00000025c0)=[{&(0x7f0000000040)="a36e4cb5ca29227439c71a46138e0c75d8dc60b456fb989aa1cc05d59d6790fefdda04b9e81254cf8bac9d52f3bdc2", 0x2f, 0x62e0, 0x8}, {&(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffb, 0xfffffffffffffff7}, {&(0x7f0000000280)="05d6915171810a38b6190f55ce7c660f7b56e40443166a89a7bcfaff9e70f6b799f2bd9c284052ab80a0abee22f4e4defda0bc267bd1ab68bba3801bf8d6c33ddd1b", 0x42, 0x4, 0x1}, {&(0x7f0000001400)="2e37e2b395eefdfadb8a7a571a72b3251d98a5128ef607a3a4ea328fbfe5f91eeea7338ce9814a455c35ee7af9c81407d292b810d7a41fe328425aae7f7875d34fde53459f47c76171a54b2473c60d56e4c5ac01330f281626a0c624f0bc87702dea955a558b2b869781a29bc7424947cfcb5b1eea52e4bd2c37a16cd63037c5fe99", 0x82, 0x2, 0x2}, {&(0x7f00000014c0)="e61edc3db30ad969ba012459e4939f7542df26b4f649885228f6b4ac6d7d34c78d4a8142c8eed90c1246b7a5b0013aa5c9833ae0c8b2f356d8f547bf3676dc78485ee1a1d8cf62e4ac26c5d30c8b221be90971828f98558634f0989a174fc8993e12155d43330479e107772d", 0x6c, 0x10001, 0x2d84}, {&(0x7f0000001540)="9c57f22f91556d3aa343fda359cc44612c91b2b1ad17ceaa3872227b33056119c07badc67832d2d7b7ea048e5217c2c4026838de118c75645be27ccab4f4b18afe3be4d756", 0x45, 0x80000001, 0x8}, {&(0x7f00000015c0)="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", 0x1000, 0x7f, 0xfffffffffffffff8}], 0x2) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x24000, &(0x7f0000000340)) 2018/06/04 21:22:14 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xc0000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x9d) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000001140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000000)=""/130, 0x82}}], 0x1, 0x0, &(0x7f00000013c0)={0x0, 0x1c9c380}) 2018/06/04 21:22:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x300200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c520001002dbd7000030000000000000008000200fffbffff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000001280)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000001c0)) [ 149.060181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 149.094250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/06/04 21:22:15 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r4, 0xe08, 0x70bd28, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9360}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r4, 0x0, 0x70bd29, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}]}, 0xa0}, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000018c0)={{0x0, 0x6, 0xd37, 0x1, 'syz1\x00', 0x7}, 0x1, [0x0, 0x58f, 0xd9, 0x4, 0x5, 0x100000001, 0x7, 0x764, 0x48, 0x1, 0x0, 0x7e, 0x80000000, 0xff, 0x0, 0x2, 0x0, 0xffffffff, 0x10001, 0xe338, 0x1, 0x8, 0x1f, 0x5, 0x1d2, 0x800, 0x8, 0x8, 0xffffffff, 0x3f, 0x1000, 0x18c2, 0xb34b, 0x4, 0x10001, 0x8000, 0x17, 0x1, 0x3, 0x1c, 0x0, 0x0, 0x6, 0x101, 0x5, 0xfff, 0xe9fe, 0x0, 0xbb79, 0x4, 0x7, 0x1, 0x2, 0x1, 0x10001, 0xffff, 0x8, 0x5, 0x1fd, 0x9ef, 0xfffffffffffffffb, 0xddb0, 0x906, 0xf4, 0x62df, 0x10000, 0x7fff, 0x9, 0x0, 0x0, 0x33e, 0x7, 0x4, 0xb03, 0x7fffffff, 0x10001, 0x5, 0x9, 0x5, 0x2, 0xd13, 0x437, 0x9, 0x1, 0x0, 0x8001, 0x3a8, 0x0, 0xff, 0xe3, 0x100000000, 0x1, 0x4, 0xef, 0x4, 0xb768, 0x0, 0x2, 0x3d9b0c0b, 0x1, 0x5, 0x0, 0x0, 0x2, 0x2, 0x80000000, 0x3, 0x9, 0x5, 0x0, 0x1000, 0x0, 0x2, 0x2, 0xfffffffffffffffd, 0x4, 0x4, 0x4, 0x7, 0x800, 0x2, 0x1000, 0x0, 0xfffffffffffffffa, 0x3, 0x8, 0x5, 0x7ff], {0x0, 0x989680}}) write$binfmt_elf32(r0, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7fff, 0x5, 0x8, 0xe72e, 0x8, 0x3, 0x3, 0x6, 0x199, 0x38, 0x80, 0x40, 0x101, 0x20, 0x1, 0x3d7, 0x7fff, 0x3ff}, [{0x60000000, 0x8, 0xfffffffffffffff8, 0x6, 0x80, 0x2, 0xfffffffffffffffd, 0x400}], "95992f894c192f11f3d6e27c8a253bea2f18198ceeb42a7d12459b144301ea154b3580a3934feae6aff5f94ab9b5e706676bcde8379e9dff6b09bd58f06fa59fdd6c0225cc7891067d9c74b7202c564a5dd480bf695ae1fb36055641d32d413cbb381bf3c3cc383ceb714c9e", [[]]}, 0x1c4) recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f0000001440)=""/191, 0xbf}, {&(0x7f0000001500)=""/191, 0xbf}], 0x4}}, {{&(0x7f0000004180)=@can, 0x80, &(0x7f00000042c0)}}], 0x2, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380}) 2018/06/04 21:22:15 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:15 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8912, &(0x7f0000000040)) 2018/06/04 21:22:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x9, 0x3ff, 0x10000000000009, 0x0, 0x1}, 0x2c) r1 = dup2(r0, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000100), 0x3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0)="c9f67650f0aabb4cd443d103f0c62a67b97bb5746a54a6b290ec4a29d2273c74233bbc217c76995c0b8bf3dcc36331898bf2ae12d1d47ef10f28cc3d605c313d6d88f1cc00ef675fd8e706d0ad902489112ea4bdea751ad252ca407bec89dffad2d454a4833b6d89d309c1820deb5303ff92c14090a8d47557e337a1033e563092314776f0b06c97fc4c42ba1ca16ade1e83153f4aa7f08dee7c2b7957e98db86fb6bc54f24f829b85f78c934ffc1c98a1589661d04d", &(0x7f00000002c0)="5e2800514345f2bda937c1f53a4e0dcb6e072185c4a88c7a282fe59a3ad0b8cad9efcd965f70e159f1a90eaff8313d36ce6b78a8e79f42f2e45d80946a7177e8dc66dc226c5a804fccd1f291b72045db44be", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000080)="a26cb3e38523d921b5", &(0x7f00000001c0)}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x109b00) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000000c0)=""/124) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000340)={0x6, [0x800000000000000, 0xb91, 0x7ff, 0x4, 0xfffffffffffffffe, 0x5d11]}, &(0x7f0000000380)=0x10) 2018/06/04 21:22:15 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x0]}) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, r1) 2018/06/04 21:22:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0xfe, 0x90000) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x5, 0x0, 0x0, {0x1}, [@generic="7b6c6e6602"]}, 0x1c}, 0x1}, 0x0) 2018/06/04 21:22:15 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x8000400) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x13000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x51e3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffeffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x89e1, &(0x7f0000000000)={'ip6gretap0\x00'}) 2018/06/04 21:22:15 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='setgroups\x00') mq_open(&(0x7f0000000040)=')\x00', 0xc3, 0x8, &(0x7f0000000100)={0xfffffffffffffff7, 0xe8f5, 0x400000000000, 0x800, 0x2, 0x4, 0x9, 0x400}) sendfile(r0, r0, &(0x7f0000000000), 0x8000) 2018/06/04 21:22:15 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:15 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x3fe, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045516, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x5) 2018/06/04 21:22:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0xe8) r4 = getgid() r5 = getpid() getresuid(&(0x7f00000004c0), &(0x7f0000000580), &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000006c0)=0x0) r9 = geteuid() getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)=0x0) r12 = getuid() getgroups(0x5, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0]) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) r15 = getuid() fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgid(0x0) r18 = geteuid() getgroups(0x8, &(0x7f0000000900)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r20 = getpid() getresuid(&(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c00)) getgroups(0x3, &(0x7f0000000c40)=[0xffffffffffffffff, 0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0}, &(0x7f00000010c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000001200)=0xe8) getresgid(&(0x7f0000001240), &(0x7f0000001280)=0x0, &(0x7f00000012c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001300)=0x0) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0, 0x0}, &(0x7f0000001440)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001480)=0x0) getresuid(&(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)=0x0) fstat(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000001600)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001640)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001740)=0xe8) stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r35 = accept4(0xffffffffffffffff, &(0x7f0000001dc0)=@pptp={0x0, 0x0, {0x0, @local}}, &(0x7f0000001e40)=0x80, 0x800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001e80)=0x0) fstat(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r38 = getegid() r39 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f40)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002040)=0xe8) r41 = getegid() r42 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002080)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002180)=0xe8) r44 = getegid() r45 = getpgrp(0x0) getresuid(&(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)=0x0) getresgid(&(0x7f0000002580), &(0x7f00000022c0)=0x0, &(0x7f0000002300)) sendmmsg$unix(r1, &(0x7f0000002480)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="dfed0d9a3a73cd49e85d47b4200d333af17933e97ca353e4d2d4b47ec96befdddbca2cc34aa37591dcd024ab8f464334c957ee734bcf0eeb44d99a742b242f511f3058db7f915d649957adc6962737ed974ee4f8bb4b513073d14f8390c57f1269bb06734443d028812e2148b5401528093bfab1f0291744957ba66f34aa64cac47b5fbac1b1e9484a3b0dc60faacab83edfd62030f3450d3c0a73bd3006398a70444f71f92a31238f2dce6490a265", 0xaf}, {&(0x7f0000000180)="bba02060574cb26e0530e7a33785acc7075c29258fe76ee5caecbee567ae02966432500e97a6b606066cff854369510003a48f0e06e790f47a891c8162ede9c52db153199af1676ed52870f30c9e495d7e6680e3e07aa9a8565dd0d5eb78639c8fec934ca746114170f8403da797338b4dc78b9fea0a22db968e47f9dedecaab8b3d5de03353a1933bd6d36c775ac10dbfdd292cd64611a8cac0b10a3755d30cbd10ec3aa28167a5908f", 0xaa}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00000000200000004e0100000002000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x80}, {&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)="1f84f524f2246a925facfe", 0xb}], 0x1, &(0x7f0000000c80)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r0, r1, r2, r2]}], 0x50, 0x4000004}, {&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000d80)="0bd4629ab10a3982162f1ca880e34e4f8f1d0951139810441e42a6193766dcc04f35cb706d4e8920afb62868172ababdb093a2b9e11906a6b98d8f257bd7ec878551a9318591510bd753159b326da1aeceb3b6d313933ad9f77a966b615144fa3b01d99d6053e5cb471fd2babff4d3387d640f669c4c2a47f2aca322a541eaec764d05720dbfdf720509edd51b95a7639e184fee873f969fb16a5d4b9c", 0x9d}, {&(0x7f0000000e40)="83c4", 0x2}, {&(0x7f0000000e80)="a4f1a6192cdbbd2e8358d5598f45d07b31dfff04e6b5123d1ed002353eeaea5bbdee428baf28613ffbae79d3e0c7795baa3326e653612bdfb30a5aac16e56367f1289d1f07ae004575e2fff6fdaa9f953f2b45027678360f0e57d980692d83eafe91bc75c299a3385d46d95fbda81ee4295b049dccb6bd10c5618806712a96a8644f96b27800a013d66ba13f3b7998e2cd75cc8a902ebf4646eec08052d473fb8c0c16e745ecace892770ea8c639", 0xae}, {&(0x7f0000000f40)="9c26722cdbb84a29941fbd815ffd5e15649a0d766fb90107328fe3c1a4a67b7be21944f82935802fc2ea0c6017693c1cf649b2d8e97287851681820b9c75477b4b11aa9102a0fd03d5ca025dfeef4c9cfbba7b6c25773764008d0121d20d53775bd3b6e8ccff0f3ab9058f4f1a0e9d66e0cc3277286e5655911ff74cd1f0435d2a35f2726c2c0a703659b39984afd22120972b82f3e0d7dcb053f18f6d303daec7f91308e4f4f3b1839be7f7ffed3c958a213764876c9d283379e9392c670a3edae8adaa002e27d9576f1ae2fbef267bc4fd079b08fa5f90169d", 0xda}], 0x4, &(0x7f0000001840)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x18, 0x1, 0x1, [r0, r2]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x98, 0x8004}, {&(0x7f0000001900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001980)="d41279fbd30ae4c21ff5b66ae9146578751ae08ccc0017389dfec0a8602ecb335d3d2279f95575531bdee1a06e1340e3a222770959f5763dcf696e7489261e1a9aa9bcf936af282416c3c82d1c735dd2626d2288d042faa9754bd1afeae35bfd34d9129b71498195bd", 0x69}, {&(0x7f0000001a00)="44623bb86223d3f99b0b34a94d05146ac91f222218cdf6cfb87664ef0015dc5d0c64bd4a6688dfd99c5d0bae54d27ec52590442daa001b9a54327ddf37a6256bffbfaf235235c63686e0d8a71da8bb3f62b6ba34936727a3d6076cf89e84a6980215f895453f5e94230f973442bfc8bb9f73093e6eb37e4ab8f3c5ccae8bc80abbbc06650e65a74033a91376a2d84fc80a1ca7e2b6b01b94b4060eef32099b144db505e0ebf15a29fa7ddea65a0a9b40c7157a16057578f0aa8e29ff078539fa7b24cd53436bc23eaf7a1b2782a6933ab45656", 0xd3}, {&(0x7f0000001b00)="f3dddc7c99a90f85db36493aa6014e8c71f03bdbf18280196874edfd1f8fdf8addd2a47c3b6ac7a97c976c69da6cd73bd51089658d00b7b2d36b1ccd586a1fac", 0x40}, {&(0x7f0000001b40)="5795820233978a9a9e8b0084aa8eb6f62a48a2b091570b54b645ba0ebd798d623648b63f079e7b4d43c22c2c4d2709913238bfe3d7cb19c3e987b073d2b0d5edd27432843e264745965f0e56521b55c9c4885ddbffeafcff4de08ae2dd3cc195e24014bc4bcedf89546300684c4944a628c22600d549b53bf008650e9b176e7fe6d99f4d234f14c538f8ae814fc21399628059d01f9a3eff9a259c0e9856ec9d5b1769876e9479839c1d2acbe36bbc0eae34173f55b2ada5e88a707931f3510f8790817677fb68976be96dd787cb12bdd68a556276", 0xd5}, {&(0x7f0000001c40)="df387631206b239feaeb0ee5d645a00f1edfd611840754a4bd5f707d53a264a83c3fcc97a6a03479f88a83bb0253d391b40b8ae0994dc2cfcddfb08af9400300f80f28b21f9e443872f061f8cbd5a81ad381d3b817e11fe7b0ea078bb1e97de94cfc2da6872a81001c2ca38241799420ec074bc268d5f684ce89dea8dbd2443bb20fb581306e201225813aec4ddc15c65a0cb19ed548651b9a31404cc3111e4da4aee5", 0xa3}, {&(0x7f0000001d00)="124d65dffb5b4005387c6f213bafb78960d0dda405c7b1476bcc0b5328efb3e215b7e9b77069ed516ea341d702", 0x2d}], 0x6, &(0x7f0000002340)=[@rights={0x30, 0x1, 0x1, [r2, r0, r2, r1, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r35, r0, r2, r2, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @rights={0x30, 0x1, 0x1, [r0, r2, r2, r1, r1, r2, r0]}, @rights={0x18, 0x1, 0x1, [r0, r2]}, @cred={0x20, 0x1, 0x2, r45, r46, r47}], 0x128, 0x8000}], 0x4, 0x0) 2018/06/04 21:22:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') read(r2, &(0x7f0000000040)=""/230, 0x20000126) fallocate(r1, 0x1, 0x7f, 0x8000) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) 2018/06/04 21:22:15 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r4, 0xe08, 0x70bd28, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9360}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r4, 0x0, 0x70bd29, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}]}, 0xa0}, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 150.135320] tmpfs: No value for mount option '27 veth0_to_team 1 0 01005e000001 [ 150.135320] 27 veth0_to_team 1 0 3333ffc7f011 [ 150.135320] 27 veth0_to_team 1 0 3333ff00001f [ 150.135320] 30 team_slave_1 2 0 333300000001 [ 150.135320] 30 team_slave_1 2 0 01005e000001 [ 150.135320] 30 team_slave_1 1 0 3333ff94eb45 [ 150.135320] 30 team_slave_1 1 0 3333ff00001a [ 150.135320] 30 team_slave_1 1 0 3333ffaaaa1a [ 150.135320] 11 syz_tun 1 0 333300000001 [ 150.135320] 11 syz_tun 1 0 3333ff0000aa [ 150.135320] 11 syz_tun 1 0 01005e000001 [ 150.135320] 11 syz_tun 1 0 3333ffaaaaaa [ 150.135320] 22 bridge_slave_1 1 0 333300000001 [ 150.135320] 22 bridge_slave_1 1 0 01005e000001 [ 150.135320] 22 bridge_slave_1 1 0 3333ff51f577 [ 150.135320] 28 team_slave_0 2 0 333300000001 [ 150.261150] tmpfs: No value for mount option '27 veth0_to_team 1 0 01005e000001 [ 150.261150] 27 veth0_to_teamnet/dev_mcast' 2018/06/04 21:22:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:16 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x620000) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=""/23, &(0x7f00000001c0)=0x17) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@rand_addr=0x69, 0x4e22, 0x0, 0x4e23, 0x7d, 0x0, 0x20, 0x0, 0xff, 0x0, r2}, {0x5fbf, 0x87c, 0x354, 0x9, 0xd8f, 0x3, 0x9, 0xf48a}, {0x5, 0x7fffffff, 0x10000, 0x7}, 0xb727, 0x6e6bb6, 0x2, 0x1, 0x3, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d6, 0x6f}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0x7, 0x3, 0xffffffff, 0x7, 0x0, 0x3}}, 0xe8) ioctl(r1, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = socket$inet6(0xa, 0x80003, 0xff) close(r4) 2018/06/04 21:22:16 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="06d882ab63f7ed6fd00552781894e6d3eab9c86ebbc1912f76c5f3efb7fb465677ea1aa862284e128a716f2a4787cd63d6bc79a16742d9239dc3401404f36363581d5071e2122e518c90b957c5b44559523bc5e1f2f5df83a2b3192d0ec5a822eb20bcfc4b657e697fece57051df4d086b796d8689f55f90de37eba1e353c48d614f09362028b6df8e1d9b61110c2eca3f6620e6c2ebdc7582a1b5f7aa838787314734080b345ba75a48f26677c68702b095965852a469bc635808d47f06ea898c39350152c89f63c932cf905ee14a012e7fcd98a38a034f7b9ec1403100fb634222d6e84aa94de4e09443e140db5ae8d0e057c15164aba4c3f70dc1ae2a", 0xffffffffffffffd0}], 0x1) read(r1, &(0x7f0000000140)=""/184, 0xb8) close(r0) 2018/06/04 21:22:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000090affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r1 = getuid() r2 = getgid() fchown(r0, r1, r2) fsync(r0) 2018/06/04 21:22:16 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0x6b65a878, 0x4) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xf, @dev={0xfe, 0x80}}, 0x1c) 2018/06/04 21:22:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peek(0x3, r2, &(0x7f0000000300)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x4}) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getrlimit(0xf, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000001180)=@ethtool_drvinfo={0x3, "da54d3b147128f4045b25c1a538c71e33dc2d9bd0a9591db69a8419745363371", "ac629bec8a88b729f62c3b5a0b85190f52d015a8f849a799f0cd97af6aebb020", "0862dc6b8290dc547bba2230ecffcb8b59d9d3d304fa7ce5eec7561c69d2bd30", "6a193afc22138534c345290bbaf81d8ef873d4427d9efecd628a269f6449c1ae", "4940847c03863638ed5583f8e5ba1c9451b73440933b389ffa53521f15ac1b84", "a33f371eaeb7a3e5319468ce"}}) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000380)=@in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000003c0)="16dda90409475685e999dc2dde2f80ae8b2ab404abc89cb9d787c81b68c548b0e37b298ecbaced29087edc2672d6df50562eda07fa6a914b93f1dd9dfb49adc7ddd06e3cffa70cbc3d9aa98275b6f934d566f25dcc5a1903e41b76bd9936d4c8f516a55a546d9851e74793caf100bb4bd64f01f2b09ec281483a7e57bf2e45", 0x7f}, {&(0x7f0000000540)="9922b0c1076dba2c9ec10d02a13cee8e119c58f928f2e68100b77f26910e558ca4da11353a68ea32e29f3fc6caf8441d92401dc24ee8daf53397fac1515f7e4d3d96ceb165ad132d8d2065c21b085507953e79c76280aba54a07c984ac61018043f439d6a37431ec71978e1de458ed264d765686116e3eec99d743e1d0cf59433c826384b60af0898b5c6de8ca68b69d68875bfd9c5e57563738914a50916a55200beec1f759d5ab6c0198856b6d2e308641223a5922dd3f7a5e396d11739cea36afd771b2ad4ae1e00100000083e4a3b8f3369357211a59f1f9eaf36c5405ad6dad89aa430f415056", 0xe9}, {&(0x7f0000000680)="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", 0xfe}], 0x3, &(0x7f0000000800)=[@authinfo={0x18, 0x84, 0x6, {0xd9b6}}, @init={0x18, 0x84, 0x0, {0x7f, 0x7, 0x7ff, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0xffffffff7fffffff}}], 0x48, 0x8000}], 0x1, 0x40800) accept4$inet(r3, &(0x7f0000000100), &(0x7f0000000940)=0x10, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001280)=ANY=[], &(0x7f0000000900)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0xffffffffffffff00, &(0x7f0000000200)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/89, 0x59}], 0x2, 0x0, 0x0, 0xff}, 0x4}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x8}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={r6, r7+30000000}) 2018/06/04 21:22:16 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r4, 0xe08, 0x70bd28, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9360}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r4, 0x0, 0x70bd29, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}]}, 0xa0}, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) [ 150.365912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 150.404149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 2018/06/04 21:22:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x6040003) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)) 2018/06/04 21:22:16 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r4, 0xe08, 0x70bd28, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9360}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r4, 0x0, 0x70bd29, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd9f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}]}, 0xa0}, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = getuid() ioprio_set$uid(0x3, r1, 0x10000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r0, 0x80000) bind$netrom(r3, &(0x7f0000000240)=@ax25={0x3, {"85fb1d4440d876"}}, 0xfffffffffffffd76) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xffd1, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/251, 0xfb, 0xfb, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) 2018/06/04 21:22:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x4c2080, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0xffffffff}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000580)={r2, 0x5, 0x0, 0x1, 0x83b3}, &(0x7f00000005c0)=0x18) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0xf66, 0x1, 0x101, 0x9, 0xce, 0x5, 0x10001, 0x0}, &(0x7f0000000080)=0x20) syz_mount_image$ocfs2(&(0x7f0000000200)='ocfs2\x00', &(0x7f0000000240)='./file0\x00', 0x5, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="fc00aac402766a0a52a8a040c167e3d8138b8bd88185b0a8c51704ac056f2efd7383d797bea2149a0b1c8d6864051d42a477606826fe0f3026bd40faf6850b638d76470483d9fb3193b84d2d16e62ff725619e6aa908c3088b08b6c8526749442625294d00849808832b956c52ca8efa3c6058b59d7a240d17fb8c92fbc68124356df6de82792d401df181ceb8407b8aa853799cff2aaeca9dd7069d5a9ed3b0c6", 0xa1, 0x6}, {&(0x7f0000000340)="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", 0xfa, 0x6eea}], 0x300400, &(0x7f0000000480)='/dev/snd/timer\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="a70000001145137533416d5f8d7f424f4539bfe1cbca73ff30422761e5d00cefe2e0fe3fa5cf040e11e472c86e1604919057595aeb5e9a2384a4e0bafafed56d34dbf00f1866ff6b7bc816d50729eccf4efd1b53baf3c3514108dd49ac65bc283089b0eef16576324117c5b6bb286f163d32f4331c5ef29ffae668bf28460ed9a2797b200f78d410faf825e83c5f1addf65b51925b00cde01e3e34a048042392adb40b4226a197ed493633"], &(0x7f0000000180)=0xaf) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x9, 0x101}) 2018/06/04 21:22:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xab1, 0x2, &(0x7f0000000140)=[{&(0x7f0000000280)="c6b32cedf617826ae17fc7472d15832a5009e012a2d04827cbadb8dfd380c4ddc9fc1568f7f9d9e04ef05c20aad3d86d10bf3494478c7cc9802df02f07cd872d29deccdf3a1b7e472a7c16deee91d1b4d639688becfd76369edbd02822fa72c163d695244bfa1f8233b92919f35bfbdfe3256bed467c51fcaa7914b703a354224d7d3ab23cf71d0e3ebcf70c84000cc79afa03a4e4f8ab8ded0521df7354ef03f02fd870f797089e65efc026bfbbea5158dea17c3587b2596e996ad14bd968be", 0xc0, 0x80000000}, {&(0x7f00000000c0)="9afcb8acf13e47a56b54f881be03478ec0131e34a96521573566b326108f02e82c1a210202c5af415662da608ab09ed90d993818b94d669640508b", 0x3b, 0x100}], 0x2, &(0x7f00000001c0)={[{@bh='bh', 0x2c}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="000100000008000066000000c9030000ec000000013db2d34f00000000000000002000000020000000010000000000006e5fd45a0000ffff53ef", 0x3a, 0x369e}], 0x0, &(0x7f0000000000)) 2018/06/04 21:22:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x5, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x50, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0xb2502) write$evdev(r2, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/87) 2018/06/04 21:22:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="01010000000ef40000000300409d9254", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) write$binfmt_elf64(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x800008}, [{}], "", [[]]}, 0x178) 2018/06/04 21:22:16 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r4, 0xe08, 0x70bd28, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40000000000000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9360}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c801}, 0x4004) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 150.611842] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 2018/06/04 21:22:16 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x4, 0x8001, 0x7f, r2}, 0x10) ioctl(r0, 0xc0184908, &(0x7f0000001000)) 2018/06/04 21:22:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x3c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20e00, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:22:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xfffffffffffffffb, 0x2, 0xff, 0x8, 0x1000, 0x200, 0x7fffffff}, &(0x7f00000000c0)=0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', r1}) getsockopt$sock_cred(r0, 0x1, 0x38, &(0x7f0000000100), &(0x7f0000000140)=0xc) socket(0x0, 0x2, 0xff) 2018/06/04 21:22:17 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:17 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 2018/06/04 21:22:17 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000300)=0x9, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:17 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="06d882ab63f7ed6fd00552781894e6d3eab9c86ebbc1912f76c5f3efb7fb465677ea1aa862284e128a716f2a4787cd63d6bc79a16742d9239dc3401404f36363581d5071e2122e518c90b957c5b44559523bc5e1f2f5df83a2b3192d0ec5a822eb20bcfc4b657e697fece57051df4d086b796d8689f55f90de37eba1e353c48d614f09362028b6df8e1d9b61110c2eca3f6620e6c2ebdc7582a1b5f7aa838787314734080b345ba75a48f26677c68702b095965852a469bc635808d47f06ea898c39350152c89f63c932cf905ee14a012e7fcd98a38a034f7b9ec1403100fb634222d6e84aa94de4e09443e140db5ae8d0e057c15164aba4c3f70dc1ae2a", 0xffffffffffffffd0}], 0x1) read(r1, &(0x7f0000000140)=""/184, 0xb8) close(r0) 2018/06/04 21:22:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000001208000000000000000000000000000000000000000000c0"]) 2018/06/04 21:22:17 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x28000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xf5ff, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x100000, 0x0, 0x7000, 0xf000], 0x8, 0x24, 0x80}) socket$nl_xfrm(0x10, 0x3, 0x6) fallocate(r1, 0x0, 0x0, 0x4) fallocate(r1, 0x20, 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000004000000600000006000000ff7f00000000000080000000000000000100008000000000000000000000000000000000000000006a665bb739916a895764422e771a61092a7808921840c09091bfed147ff5e0eaed5d7afc363f2fb26ac37dac49836225386a70bab93a0086c344d118b8ef5c53dedaeb7bf42f79cbe0944d2db151af64a0f77436a5646d8657db0addd284978917a16228"]) lseek(r0, 0x6, 0x8) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000740)={@multicast1, @multicast1, 0x0}, &(0x7f0000000780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000018c0)={{{@in6=@ipv4={[], [], @local}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000019c0)=0xe8) getpeername$packet(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001c40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001c80)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001d80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000004040)=ANY=[@ANYBLOB="78030000", @ANYRES16=r2, @ANYBLOB="040028bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="a801020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004009e94ac5340000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040005000102611300003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="ac01020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400eae200004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff7f000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f626f756e740000000000000000000000000000080003000300000008000400ffff00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000402040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000000000"], 0x378}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xe865, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, {0xa, 0x4e24, 0x1f05, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}, 0x6, [0x9a1a, 0x1, 0x4, 0x0, 0xfeae, 0x0, 0x59c6, 0x9]}, 0x5c) 2018/06/04 21:22:17 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000000000000004500001c000000000000907800000000e000000100009078e0000001545d924f29894af5aabdd373f69b7ea0c416994c1f74d79e86af0798597a19a4236004cd88f7f8f8dfa4743626250d36c856333a0d6fd327baaefb2d6811b1bebd2778cf9d1e54810d6ab8f3acc3cc309c975ddc070347998ff84e5839bc01f210684d63a23942fcc774a50a996158fa0b2553439bb5ca13291c8c2463426759f4bdd7bc49e7505589c16d8efb5d27e5bb5fb4f8963062def89d60f8e2162bcdec01427b4d901e56fdebaec9"], 0x26) 2018/06/04 21:22:17 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x101802, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x20004800, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/168) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="17", 0x1}], 0x1) 2018/06/04 21:22:17 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x28000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xf5ff, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x100000, 0x0, 0x7000, 0xf000], 0x8, 0x24, 0x80}) socket$nl_xfrm(0x10, 0x3, 0x6) fallocate(r1, 0x0, 0x0, 0x4) fallocate(r1, 0x20, 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000004000000600000006000000ff7f00000000000080000000000000000100008000000000000000000000000000000000000000006a665bb739916a895764422e771a61092a7808921840c09091bfed147ff5e0eaed5d7afc363f2fb26ac37dac49836225386a70bab93a0086c344d118b8ef5c53dedaeb7bf42f79cbe0944d2db151af64a0f77436a5646d8657db0addd284978917a16228"]) lseek(r0, 0x6, 0x8) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000740)={@multicast1, @multicast1, 0x0}, &(0x7f0000000780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000018c0)={{{@in6=@ipv4={[], [], @local}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000019c0)=0xe8) getpeername$packet(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000001c40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001c80)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001d80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000004040)=ANY=[@ANYBLOB="78030000", @ANYRES16=r2, @ANYBLOB="040028bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="a801020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004009e94ac5340000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400040000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040005000102611300003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="ac01020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400eae200004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff7f000008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f626f756e740000000000000000000000000000080003000300000008000400ffff00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000402040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040000000000"], 0x378}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xe865, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, {0xa, 0x4e24, 0x1f05, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}, 0x6, [0x9a1a, 0x1, 0x4, 0x0, 0xfeae, 0x0, 0x59c6, 0x9]}, 0x5c) 2018/06/04 21:22:17 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x3c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20e00, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:22:17 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r2 = gettid() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x6}, &(0x7f00000003c0)=0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xa4, r4, 0x400, 0x70bd28, 0x25dfdbfb, {0xc}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3804}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x69b61c95}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x94}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\a'], 0x1) 2018/06/04 21:22:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r2, 0x80044501, &(0x7f0000000340)=""/4096) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r4 = accept$alg(r3, 0x0, 0x0) read(r4, &(0x7f0000000bc0)=""/93, 0x5d) 2018/06/04 21:22:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCSBRK(r0, 0x5427) 2018/06/04 21:22:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000000)='#]-\x00', 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x20}, 0x1c) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000002c0)={0xa8bd, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000200)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f0000000140)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/04 21:22:18 executing program 6 (fault-call:2 fault-nth:0): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:18 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) pipe2(&(0x7f0000000080), 0x80800) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) close(r2) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/06/04 21:22:18 executing program 0: r0 = inotify_init1(0x80800) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getpid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ptrace(0x8, r1) [ 152.507662] FAULT_INJECTION: forcing a failure. [ 152.507662] name failslab, interval 1, probability 0, space 0, times 1 [ 152.518991] CPU: 0 PID: 10240 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 152.525944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.535339] Call Trace: [ 152.537976] dump_stack+0x1b9/0x294 [ 152.541628] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.546848] ? perf_trace_lock_acquire+0xe3/0x980 [ 152.551716] ? debug_check_no_locks_freed+0x310/0x310 [ 152.556971] ? debug_check_no_locks_freed+0x310/0x310 [ 152.562193] should_fail.cold.4+0xa/0x1a [ 152.566283] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.571400] ? perf_trace_lock_acquire+0xe3/0x980 [ 152.576265] ? perf_trace_lock_acquire+0xe3/0x980 [ 152.581109] ? find_held_lock+0x36/0x1c0 [ 152.585182] ? check_same_owner+0x320/0x320 [ 152.589500] ? rcu_note_context_switch+0x710/0x710 [ 152.594430] __should_failslab+0x124/0x180 [ 152.598664] should_failslab+0x9/0x14 [ 152.602472] kmem_cache_alloc_trace+0x2cb/0x780 [ 152.607142] ? kasan_check_read+0x11/0x20 [ 152.611290] alloc_pipe_info+0x16d/0x580 [ 152.615349] ? pipe_read+0x940/0x940 [ 152.619059] ? __fget+0x40c/0x650 [ 152.622513] ? expand_files.part.8+0x9a0/0x9a0 [ 152.627088] ? perf_trace_lock_acquire+0xe3/0x980 [ 152.631934] splice_direct_to_actor+0x6e7/0x8d0 [ 152.636602] ? pipe_to_sendpage+0x3f0/0x3f0 [ 152.640919] ? lock_downgrade+0x8e0/0x8e0 [ 152.645064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.650595] ? do_splice_to+0x190/0x190 [ 152.654571] ? rw_verify_area+0x118/0x360 [ 152.658719] do_splice_direct+0x2cc/0x400 [ 152.662864] ? splice_direct_to_actor+0x8d0/0x8d0 [ 152.667703] ? rw_verify_area+0x118/0x360 [ 152.671845] do_sendfile+0x60f/0xe00 [ 152.675561] ? do_compat_pwritev64+0x1b0/0x1b0 [ 152.680137] ? __might_sleep+0x95/0x190 [ 152.684110] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.689638] ? _copy_from_user+0xdf/0x150 [ 152.693781] __x64_sys_sendfile64+0x155/0x240 [ 152.698270] ? __ia32_sys_sendfile+0x290/0x290 [ 152.702844] ? do_syscall_64+0x92/0x800 [ 152.706816] do_syscall_64+0x1b1/0x800 [ 152.710699] ? finish_task_switch+0x1ca/0x840 [ 152.715187] ? syscall_return_slowpath+0x5c0/0x5c0 [ 152.720112] ? syscall_return_slowpath+0x30f/0x5c0 [ 152.725062] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 152.730428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.735272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.740454] RIP: 0033:0x455a09 [ 152.743632] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.751343] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) dup2(r2, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:18 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bind(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3}}}, 0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @multicast1}, &(0x7f0000000480)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) getpeername$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000640)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_team\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@dev, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000008c0)=0xe8) accept$packet(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002b00)={'team0\x00', 0x0}) accept$packet(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004140)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004540)={&(0x7f0000004180)={0x3b8, r2, 0x808, 0x70bd26, 0x25dfdbfb, {0x2}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x130, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r9}, {0x220, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x70e40501}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}]}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x9, 0xf36d, 0x2, 0x7, 0x7, 0x8}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/118) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) [ 152.758602] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 152.765861] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.773120] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 152.780377] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000000 2018/06/04 21:22:18 executing program 6 (fault-call:2 fault-nth:1): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000ff8000), 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x258, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0xb3eb, 'bpq0\x00', 'veth0_to_bond\x00', 'gre0\x00', 'ip6_vti0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}, [0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xc0, 0xc0, 0xf0, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xa840000000000000}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x13, 0x40, 0x88ea, 'veth1\x00', 'ip6tnl0\x00', 'veth0_to_bond\x00', 'veth0_to_bridge\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xa0, 0xa0, 0xd8, [@m802_3={'802_3\x00', 0x8, {{0xaa, 0x10000, 0x1, 0x7}}}]}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}]}]}, 0x2d0) 2018/06/04 21:22:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x80000) sendmmsg$nfc_llcp(r0, &(0x7f0000000740)=[{&(0x7f0000000140)={0x27, 0x1, 0x1, 0x0, 0x3f, 0x9, "84518363ee6e9a0bcbfd81fe39eb05a8c41f03272e4385d697020c1734a02fdaf67f4990c9c7c48cbf33bb653c7edc910fa6053f7e99f0d23053c216426839", 0x33}, 0x60, &(0x7f0000000600)=[{&(0x7f00000000c0)="429c31e1266eb4c9f060a517f2a521e1f7ca74480ee980db86d7a684f339f714ca083b8d568a251cb2e98d220ac8550419570c0cf8653426902236353480d8ea", 0x40}, {&(0x7f00000001c0)="a5c83c945203072a0568d57620c08e43244b6855342b4faf01372e7a8c1599867d011403ea2bb7095065e29ec2ea64bd9e63a29c677f168749dcafd924471b129a5442ba7e3caa646fca1bbf9cc37958d16cdc421968020dea821f3d447937b91992fc740e1ed3a32ffccda8383cb7750dbceab1abd88704c01d5ecfefb8c00ace169c81e3dee2ec27d63f986212ff9a743427b770fd2ee247c2e82e6d8053342eeaaf5aaba30ca2", 0xa8}, {&(0x7f0000000280)="bc06db17dcb6a8103e08756e413e46ba1dbd3ca4b3eb694227607f4ed32c1240a70e0c1c4dfebe5995c00a795777524f2258a221e8dc5924a213acfe4c716e7e4d54b9f45cb728c3e4288d0e13b132a6996a891fc1971760ca5b02ba7293a4218c43bf6010a833cdfa191b35461a1dbe9db4e9d9ec3d723c01fc602a5cf052180f098f516d96a67ba1ec27d5650949940c0f3f025998aaefeeb63034196348551efbee15f476505f8d3318b4c2d11d822350dc27c078512bfdb43d1508722ee201aee5a90b62", 0xc6}, {&(0x7f0000000380)="8aef33f952e54617becb361a690ba28910030806de0c490af57a9dbb6bffb2c1ee594053a02dfa7900be4284e7310e56bb9b8b32b6dda0cf17da42f1e863892830692753e4cbebc83c76a813b7a678c9cb79e48c365f4bd04adfeb2cef500556d6abb103b1c29bac4c730b8e1a87e9c40259df0da085bad726b95baf381c7d88fe9893f58f1538320b0d88755999360454f4cf934e924b2379c9be4b3503ff51", 0xa0}, {&(0x7f0000000440)="0777275a947435ee8301fd428a593bafe30b95ec321064be96e1a36085812682d8e60102754552071d595aa823fd05c609d9bff32c535d6213595966a5a25422dcc05650987cd6f7e5c7be993e8df4e0371fdec83af2f843116a6be5c4b98132e08cc50aaa5c5d8ec47e2f886355a3741bea02a34a29b681b59ad7086f452577821f8e28e8f9e319c2b9cd0653f47c6c95ebb710f816389d82bbdcb99eeb99d5038d40a05fbf0c5c547aab01f6859d3e87fbf713c8b97075b36088c562637a77516c91f77da9a03a97ac37be67a1d8", 0xcf}, {&(0x7f0000000540)="93efd998da45ae850b288ebc107b72560ef0e748a306943aaee367062ce3aa3c9f9803dcf538e625652b01a9750dca6211d2944c69e0b56e71379e4527b1311ddba33a9b3b82410ad100bc9c201945283b82e73c546906df7ebefd842894d28024576f81c39a0bfb7a11836b082593d51c8bf199c5bee681d4f070c66ffd57dd4f54fa7125c09558f670", 0x8a}], 0x6, &(0x7f0000000680)={0x98, 0x6, 0x3, "d7a7e21dfda8dd21c5b5e15d3c7c1722b966ede03214d6040442ca4980f44c375738f6840f3382f85dfb56ab9c82d67e07f4d12fb62f1e66e128942158bdd4921b6614c443342ee49ba0d6ea0c006e83606ef1055fdceca28075d038dae03d2b8785a68f1d6c2b4e7266827e3078da0172243df603abe97f56fb180d2bc1ea52999887326c3c"}, 0x98, 0x48015}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000e80)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000f80)=0xe8) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000007c0)={0x6, 0x0, 0x14}, 0xc) sendmsg$kcm(r0, &(0x7f0000002580)={&(0x7f0000002140)=@can={0x1d, r1}, 0x80, &(0x7f0000000fc0)=[{&(0x7f00000021c0)="d714128f7d32b7d8f0c2773e04ce05aae96fa61443975539fb4ba2e8891bab6a6c0deb963dc3c05e2d5f48478ec75e3ff15d74c183473ada38d30acb4ba4087421a095b94b4fdd75d8244d80d81702ec1b5354ffd999ee4f6dab5ac15fb30020f7c68b5f787f2f28f8e765ce8062af16aacbe1ef337035e8404146f590bb3b7e2a66e2083b416726db7174eae9a10c5861d3e48ce6f7c309ffddfcc39004c43bba008a361a420f25da227e4caf94", 0xae}, {&(0x7f0000002280)="4b50c3bcd2c3312408f32d751d06f634333e3d8e1f4182a26e0745ec3f5de790eec705d2e178191c29decdd65cf624a836182c963399f8b414f9fc11d00743b00ae1c6f748739a7fa2686a2efcc760131685db72f687ad56bdbd958a5e06f9b8fb40f5c8fdef69561e1773a95ce0713f4524f2e81f149712d51b65e711c49d93a6c076f275bc82bee355f31ac8b21ecec0b4f880bcfe58bd4640f99da06830fa0ee65f7b3b20404e3c4722a45e", 0xad}, {&(0x7f0000002340)="fd5d4113ea57d00ae0b6a7526ad7ddedfda7cf6d6d7c75270d4abe9d462bbddfc7396331cecf65840bec4583113e11b087b5829fd88c4a74e91e396ccb968524e2d669c7b6bc9c26e270e00690e4e8c299ced5679ffa5d773d0a76c25437bb945331abbfb5c231a01dc68968", 0x6c}], 0x3, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x188, 0x40040}, 0x2000c044) 2018/06/04 21:22:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x0, 0xfffffffffffffffc}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:18 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200a00, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x9) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000d4effc)=0x8, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg(r2, &(0x7f0000007740)=[{{&(0x7f0000006d80)=@nfc={0x27}, 0x80, &(0x7f0000007200)=[{&(0x7f0000007040)="e2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000030000f60cfdd3cbda49abccfffffff324137aef5c56fda5392456b05da7da4012ff841e6b501f684437c446638a6d049c9f3170b78b6cfdfd5ea39f1240147cdd8cfc784ba3f29531246b265b8dc85c49b8ff58df66bb411a35653aa35f59dea2aad59d03b8fe7e7786b0baf9e656c443c15ce027456c7b9b3363faab54eb72915ab660e339f8c4144169"], 0x10}}], 0x1, 0x0) [ 152.935616] FAULT_INJECTION: forcing a failure. [ 152.935616] name failslab, interval 1, probability 0, space 0, times 0 [ 152.946943] CPU: 0 PID: 10266 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 152.954357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.954363] Call Trace: [ 152.954384] dump_stack+0x1b9/0x294 [ 152.954401] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.954418] ? __save_stack_trace+0x7e/0xd0 [ 152.954439] should_fail.cold.4+0xa/0x1a [ 152.954455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.954471] ? save_stack+0x43/0xd0 2018/06/04 21:22:18 executing program 6 (fault-call:2 fault-nth:2): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x100, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x80000480003fd) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x181001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udp\x00') ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/218) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) 2018/06/04 21:22:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 152.954482] ? kasan_kmalloc+0xc4/0xe0 [ 152.954493] ? kmem_cache_alloc_trace+0x152/0x780 [ 152.954504] ? alloc_pipe_info+0x16d/0x580 [ 152.954516] ? splice_direct_to_actor+0x6e7/0x8d0 [ 152.954526] ? do_sendfile+0x60f/0xe00 [ 152.954537] ? __x64_sys_sendfile64+0x155/0x240 [ 152.954548] ? do_syscall_64+0x1b1/0x800 [ 152.954561] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.954579] ? find_held_lock+0x36/0x1c0 [ 152.954611] ? check_same_owner+0x320/0x320 [ 152.954622] ? rcu_is_watching+0x85/0x140 [ 152.954634] ? do_raw_spin_unlock+0x9e/0x2e0 [ 152.954647] ? rcu_note_context_switch+0x710/0x710 [ 152.954662] __should_failslab+0x124/0x180 [ 152.954676] should_failslab+0x9/0x14 [ 152.954686] __kmalloc+0x2c8/0x760 [ 152.954697] ? kmem_cache_alloc_trace+0x616/0x780 [ 152.954711] ? alloc_pipe_info+0x2a0/0x580 [ 152.954726] alloc_pipe_info+0x2a0/0x580 [ 152.954739] ? pipe_read+0x940/0x940 [ 152.954755] ? __fget+0x40c/0x650 [ 152.954774] ? expand_files.part.8+0x9a0/0x9a0 [ 152.954785] ? find_held_lock+0x36/0x1c0 [ 152.954802] splice_direct_to_actor+0x6e7/0x8d0 [ 152.954816] ? pipe_to_sendpage+0x3f0/0x3f0 [ 152.954826] ? lock_downgrade+0x8e0/0x8e0 [ 152.954841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.954853] ? do_splice_to+0x190/0x190 [ 152.954867] ? rw_verify_area+0x118/0x360 [ 152.954887] do_splice_direct+0x2cc/0x400 [ 152.954907] ? splice_direct_to_actor+0x8d0/0x8d0 [ 152.954925] ? rw_verify_area+0x118/0x360 [ 152.954940] do_sendfile+0x60f/0xe00 [ 152.954962] ? do_compat_pwritev64+0x1b0/0x1b0 [ 152.954976] ? __might_sleep+0x95/0x190 [ 152.954997] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.955013] ? _copy_from_user+0xdf/0x150 [ 152.955034] __x64_sys_sendfile64+0x155/0x240 [ 152.955052] ? __ia32_sys_sendfile+0x290/0x290 [ 152.955068] ? do_syscall_64+0x92/0x800 [ 152.955085] do_syscall_64+0x1b1/0x800 [ 152.955096] ? finish_task_switch+0x1ca/0x840 [ 152.955110] ? syscall_return_slowpath+0x5c0/0x5c0 [ 152.955123] ? syscall_return_slowpath+0x30f/0x5c0 [ 152.955140] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 152.955157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.955175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.955184] RIP: 0033:0x455a09 [ 152.955191] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.955204] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 152.955211] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 152.955218] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.955225] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 152.955232] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000001 [ 153.086437] FAULT_INJECTION: forcing a failure. [ 153.086437] name failslab, interval 1, probability 0, space 0, times 0 [ 153.086455] CPU: 0 PID: 10285 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 153.086464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.086469] Call Trace: [ 153.086490] dump_stack+0x1b9/0x294 [ 153.086508] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.086527] ? __lock_acquire+0x7f5/0x5140 [ 153.086546] should_fail.cold.4+0xa/0x1a [ 153.086564] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.086581] ? debug_check_no_locks_freed+0x310/0x310 [ 153.086601] ? print_usage_bug+0xc0/0xc0 [ 153.086615] ? __lock_acquire+0x7f5/0x5140 [ 153.086634] ? find_held_lock+0x36/0x1c0 [ 153.086672] ? check_same_owner+0x320/0x320 [ 153.086691] ? rcu_note_context_switch+0x710/0x710 [ 153.086711] __should_failslab+0x124/0x180 [ 153.086728] should_failslab+0x9/0x14 [ 153.086743] kmem_cache_alloc_node_trace+0x26f/0x770 [ 153.086759] ? find_held_lock+0x36/0x1c0 [ 153.086778] __kmalloc_node+0x33/0x70 [ 153.086795] kvmalloc_node+0x6b/0x100 [ 153.086813] iov_iter_get_pages_alloc+0x7be/0x1510 [ 153.086828] ? kasan_check_read+0x11/0x20 [ 153.086842] ? rcu_is_watching+0x85/0x140 [ 153.086861] ? copy_page_from_iter+0x880/0x880 [ 153.086889] ? is_bpf_text_address+0xd7/0x170 [ 153.086906] ? kernel_text_address+0x79/0xf0 [ 153.086925] ? __unwind_start+0x166/0x330 [ 153.086939] ? __kernel_text_address+0xd/0x40 [ 153.086955] ? unwind_get_return_address+0x61/0xa0 [ 153.086974] ? __save_stack_trace+0x7e/0xd0 [ 153.086998] ? save_stack+0xa9/0xd0 [ 153.087014] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 153.087027] ? iov_iter_pipe+0xc2/0x2f0 [ 153.087046] default_file_splice_read+0x1c7/0xad0 [ 153.087062] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.087085] ? do_splice_direct+0x400/0x400 [ 153.087099] ? kasan_check_read+0x11/0x20 [ 153.087111] ? debug_mutex_init+0x1c/0x60 [ 153.087127] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 153.087141] ? __lockdep_init_map+0x105/0x590 [ 153.087157] ? lockdep_init_map+0x9/0x10 [ 153.087169] ? debug_mutex_init+0x2d/0x60 [ 153.087183] ? __mutex_init+0x1ef/0x280 [ 153.087198] ? __ia32_sys_membarrier+0x150/0x150 [ 153.087211] ? __lockdep_init_map+0x105/0x590 [ 153.087233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.087245] ? fsnotify+0x415/0xfc0 [ 153.087261] ? fsnotify+0xfc0/0xfc0 [ 153.087275] ? fsnotify_first_mark+0x330/0x330 [ 153.087300] ? security_file_permission+0x1c6/0x240 [ 153.087317] ? rw_verify_area+0x118/0x360 [ 153.087332] ? do_splice_direct+0x400/0x400 [ 153.087348] do_splice_to+0x12e/0x190 [ 153.087367] splice_direct_to_actor+0x268/0x8d0 [ 153.087383] ? pipe_to_sendpage+0x3f0/0x3f0 [ 153.087403] ? do_splice_to+0x190/0x190 [ 153.087419] ? rw_verify_area+0x118/0x360 [ 153.087437] do_splice_direct+0x2cc/0x400 [ 153.087455] ? splice_direct_to_actor+0x8d0/0x8d0 [ 153.087474] ? rw_verify_area+0x118/0x360 [ 153.087490] do_sendfile+0x60f/0xe00 [ 153.087511] ? do_compat_pwritev64+0x1b0/0x1b0 [ 153.087527] ? __might_sleep+0x95/0x190 [ 153.087549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.087566] ? _copy_from_user+0xdf/0x150 [ 153.087584] __x64_sys_sendfile64+0x155/0x240 [ 153.087600] ? __ia32_sys_sendfile+0x290/0x290 [ 153.087617] ? do_syscall_64+0x92/0x800 [ 153.087638] do_syscall_64+0x1b1/0x800 [ 153.087652] ? finish_task_switch+0x1ca/0x840 [ 153.087669] ? syscall_return_slowpath+0x5c0/0x5c0 [ 153.087687] ? syscall_return_slowpath+0x30f/0x5c0 [ 153.087706] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 153.087724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.087744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.087755] RIP: 0033:0x455a09 [ 153.087762] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 153.087777] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 153.087785] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 153.087793] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.087800] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 153.087808] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000002 2018/06/04 21:22:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x200, 0x400) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x68ab, 0x9, 0x2, 0x81, "c0f0822dd59ed57fdb4329ff6da32ea9ee38f6503a8b46f2b30efc7e1795b791"}) sync_file_range(r1, 0x84eb, 0x4e, 0x2) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x1000, r3, r4, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000000c0)={0x3, 0xffffffff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) keyctl$join(0x1, 0x0) socket$unix(0x1, 0x2, 0x0) [ 153.125225] hrtimer: interrupt took 77735 ns 2018/06/04 21:22:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x301, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0x3}]}]}, 0xfc}, 0x1}, 0x0) 2018/06/04 21:22:19 executing program 6 (fault-call:2 fault-nth:3): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:19 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 153.871007] FAULT_INJECTION: forcing a failure. [ 153.871007] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.883109] CPU: 1 PID: 10311 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 153.890049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.899416] Call Trace: [ 153.902019] dump_stack+0x1b9/0x294 [ 153.905672] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.910892] should_fail.cold.4+0xa/0x1a [ 153.914978] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.920102] ? kasan_check_read+0x11/0x20 [ 153.924249] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 153.929455] ? find_held_lock+0x36/0x1c0 [ 153.933565] ? check_same_owner+0x320/0x320 [ 153.937886] ? rcu_note_context_switch+0x710/0x710 [ 153.942811] ? __might_sleep+0x95/0x190 [ 153.946780] __alloc_pages_nodemask+0x34e/0xd70 [ 153.951438] ? default_file_splice_read+0x1c7/0xad0 [ 153.956464] ? do_splice_to+0x12e/0x190 [ 153.960437] ? splice_direct_to_actor+0x268/0x8d0 [ 153.965274] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 153.970298] ? kasan_check_read+0x11/0x20 [ 153.974439] ? rcu_is_watching+0x85/0x140 [ 153.978576] ? rcu_pm_notify+0xc0/0xc0 [ 153.982460] ? rcu_read_lock_sched_held+0x108/0x120 [ 153.987467] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 153.993001] alloc_pages_current+0x10c/0x210 [ 153.997408] push_pipe+0x400/0x7a0 [ 154.000939] ? __kmalloc_node+0x47/0x70 [ 154.004909] iov_iter_get_pages_alloc+0x84a/0x1510 [ 154.009832] ? kasan_check_read+0x11/0x20 [ 154.013971] ? rcu_is_watching+0x85/0x140 [ 154.018113] ? copy_page_from_iter+0x880/0x880 [ 154.022708] ? is_bpf_text_address+0xd7/0x170 [ 154.027198] ? kernel_text_address+0x79/0xf0 [ 154.031702] ? __unwind_start+0x166/0x330 [ 154.035847] ? unwind_get_return_address+0x61/0xa0 [ 154.040772] ? __save_stack_trace+0x7e/0xd0 [ 154.045114] ? save_stack+0xa9/0xd0 [ 154.048758] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.053767] ? iov_iter_pipe+0xc2/0x2f0 [ 154.057744] default_file_splice_read+0x1c7/0xad0 [ 154.062578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.067943] ? do_splice_direct+0x400/0x400 [ 154.072258] ? kasan_check_read+0x11/0x20 [ 154.076394] ? debug_mutex_init+0x1c/0x60 [ 154.080559] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 154.085569] ? __lockdep_init_map+0x105/0x590 [ 154.090054] ? lockdep_init_map+0x9/0x10 [ 154.094102] ? debug_mutex_init+0x2d/0x60 [ 154.098241] ? __mutex_init+0x1ef/0x280 [ 154.102223] ? __ia32_sys_membarrier+0x150/0x150 [ 154.106971] ? __lockdep_init_map+0x105/0x590 [ 154.111478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.117008] ? fsnotify+0x415/0xfc0 [ 154.120634] ? fsnotify+0xfc0/0xfc0 [ 154.124254] ? fsnotify_first_mark+0x330/0x330 [ 154.128848] ? security_file_permission+0x1c6/0x240 [ 154.133885] ? rw_verify_area+0x118/0x360 [ 154.138048] ? do_splice_direct+0x400/0x400 [ 154.142373] do_splice_to+0x12e/0x190 [ 154.146171] splice_direct_to_actor+0x268/0x8d0 [ 154.150857] ? pipe_to_sendpage+0x3f0/0x3f0 [ 154.155173] ? do_splice_to+0x190/0x190 [ 154.159140] ? rw_verify_area+0x118/0x360 [ 154.163306] do_splice_direct+0x2cc/0x400 [ 154.167451] ? splice_direct_to_actor+0x8d0/0x8d0 [ 154.172293] ? rw_verify_area+0x118/0x360 [ 154.176432] do_sendfile+0x60f/0xe00 [ 154.180142] ? do_compat_pwritev64+0x1b0/0x1b0 [ 154.184713] ? __might_sleep+0x95/0x190 [ 154.188685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.194214] ? _copy_from_user+0xdf/0x150 [ 154.198355] __x64_sys_sendfile64+0x155/0x240 [ 154.202840] ? __ia32_sys_sendfile+0x290/0x290 [ 154.207426] ? do_syscall_64+0x92/0x800 [ 154.211399] do_syscall_64+0x1b1/0x800 [ 154.215296] ? finish_task_switch+0x1ca/0x840 [ 154.219784] ? syscall_return_slowpath+0x5c0/0x5c0 [ 154.224703] ? syscall_return_slowpath+0x30f/0x5c0 [ 154.229630] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 154.234987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.239828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.245007] RIP: 0033:0x455a09 [ 154.248187] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.255887] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 154.263143] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 2018/06/04 21:22:20 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000300)) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = socket(0x200000000000011, 0x7, 0x0) fcntl$notify(r2, 0x402, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000440)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0x3, 0x8, 0x100000000, 0x7fffffff}}], 0x18}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0xea}, @in6={0xa, 0x4e24, 0xbbd, @dev={0xfe, 0x80, [], 0x14}, 0x8001}, @in6={0xa, 0x4e22, 0x4, @loopback={0x0, 0x1}, 0x2ed9260f}, @in={0x2, 0x4e20, @multicast2=0xe0000002}], 0x74) recvfrom$llc(r2, &(0x7f0000000140)=""/31, 0x1f, 0x2020, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$sock_netrom_SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x9e}, &(0x7f00000002c0)=0x8) [ 154.270400] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.277655] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 154.284911] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000003 2018/06/04 21:22:20 executing program 6 (fault-call:2 fault-nth:4): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:20 executing program 1: socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0xc) unshare(0x20000400) socket$pppoe(0x18, 0x1, 0x0) 2018/06/04 21:22:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="85000000221f2862b3b80b"], &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) set_mempolicy(0x3, &(0x7f0000000000)=0xb1, 0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x0, 0x0) r2 = accept$ipx(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x10) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000002c0)={0x0, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r0, 0x0, 0x3a, 0x9d, &(0x7f0000013000)="e460019234060dc106621abc86dd6a00000000072feb305660319056115082553800800000000000e8d500000001000000140000000000006558", &(0x7f000001df63)=""/157}, 0x28) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000680)={@multicast1=0xe0000001, @rand_addr=0x8}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x299, 0x4}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r3, 0x2}, &(0x7f0000000540)=0x8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x400000) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000380)) openat$cgroup_ro(r1, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000600)={0x2, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e24, @loopback=0x7f000001}, 0x1c, 0x6, 0x101, 0x100000000, 0x5, 0x0, 0x0, 0xeb5, 0x3}) getsockname(r2, &(0x7f0000000180)=@can={0x0, 0x0}, &(0x7f0000000200)=0x79) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000800000000001e9a0600000006bb0100060000000004000000000000950000000000000000000000003c2d0095000000000000005d4ed5fb15311cde3d3884b71b874096810e558f41abae3fae570400000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6bb3, 0x7c, &(0x7f0000000100)=""/124, 0x40f00, 0x1, [], r5, 0x8}, 0x48) 2018/06/04 21:22:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0038fc2d07d82c99240970") r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x2, 0x4) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000012f46)=""/186, 0x130c}, &(0x7f000001a000)=[{&(0x7f0000001f34)=""/204, 0xcc}, {&(0x7f000000e000)=""/211, 0xd3}, {&(0x7f0000013f5d)=""/163, 0xa3}, {&(0x7f000001fff1)=""/15, 0xf}, {&(0x7f0000006fa1)=""/95, 0x5f}, {&(0x7f000001a000)=""/56, 0x7ffff}, {&(0x7f000001bff7)=""/9, 0x9}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000012fe5)=""/27, 0x1b}], 0x9}}], 0x48}, 0x0) 2018/06/04 21:22:20 executing program 0: syz_emit_ethernet(0x3b1, &(0x7f0000000140)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="1b207f5c5eeb", [], {@ipv6={0x86dd, {0x8, 0x6, "e9f678", 0x37b, 0x2b, 0x10001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @empty, {[@srh={0x3c, 0xc, 0x4, 0x6, 0x4, 0x5, 0x1, [@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}]}, @srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x9, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}]}, @dstopts={0x2b, 0x19, [], [@hao={0xc9, 0x10}, @jumbo={0xc2, 0x4, 0x307}, @generic={0x0, 0xaf, "c18b9e48dacbebd76f8cf6255e0f1e040fa013d1678b72a0311a071ef4613cb1d03d2ddb5ec759757cfb3fed610fa5785de9019d8a6a900c0e8edf34eb49181413f7c8f40b742232ad3881a012f58f8b4785843d2420c9a8206a1cf21db863346774ff30cdb2f5b1c83ff6e6e3a4123b943d8328468ce95f6f2bb5cac586ee41dbe7ace25b1dbc5818bd47b380cf2341297922ed3c44ff981ff509e0af6f4df2f6a35caa2419cdc33d6f714a40586f"}]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x20, 0x5, 0x3, [@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80, [], 0xa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @empty]}, @hopopts={0x3b, 0x1, [], [@enc_lim={0x4, 0x1, 0xf4}, @pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x9}]}, @routing={0xff, 0x4, 0x0, 0x9, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0xb}]}, @fragment={0x21, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x67}, @routing={0x33, 0x8, 0x1, 0xff, 0x0, [@local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x1d}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}]}, @dstopts={0xff, 0xd, [], [@calipso={0x7, 0x20, {0x8, 0x6, 0x3f7, 0x7, [0x100, 0x81, 0xffffffff]}}, @calipso={0x7, 0x40, {0x6, 0xe, 0x289, 0x7, [0x8, 0x8, 0x9, 0x4, 0x7, 0x3ff, 0x2]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x88, 0x2, [], [@hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xaa}}]}], @icmpv6=@param_prob={0x4, 0x2, 0x0, 0x1, {0x3, 0x6, "307b17", 0x1, 0x2e, 0xf5, @empty, @remote={0xfe, 0x80, [], 0xbb}, [@dstopts={0x2c, 0x0, [], [@jumbo={0xc2, 0x4, 0xf800000000000000}]}], "ce6baeb6036fabf6c1a852a0b40921bf664690600f2fba9e9330e67cecc9d8ed706a4a37111f69f12833d1e921896a1f95344d739a598294521e04d8422494e601326e931c977cba6d56c0be07ff47a54433f9"}}}}}}}, &(0x7f0000000100)={0x0, 0x1}) 2018/06/04 21:22:20 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="ab60adcedd2c59bd861d2fe1b26dc687fdd894b137e64294b787c6770b69b9fc943010186d4f96cf814915bf725b8ba23be035794432e2b188cdc6b1554637d12ec3b7700096ae0aa24fe06a58aa030625e21ebd0b69712c933a1b4f49996e81c38c3162dc8e599ea15e2daa6e616e5f04e6282853ad419147782500296e16d027146b110f2deebce9e5e0e96273cd5618633bfd146157b31fe601da4fad9d67e3c82e895bbb8b19c7cb672c4f5fc5135b5efff5ce8412ce", 0xb8}, {&(0x7f0000000280)="e0920f20923b435953f2fa1b277f82334a1ed42423c2311427cc31260a2c50360288010a6173936cd79aa5d1c693ce7dbd945233593b0d8494ca454de0a6bad99a5253b7ee7a7c26fe68f7eabb2e69bf71401fc27b8fa7cadbca0b0b3831f3c40e0c8f3bc659754eed52b52d647469049acab01a58837c3fa403d4d8a0976d7c61b6fbcbbcbafc8c8ced44ee78f8ee2a9ca46334eec5fafd68d3b9c804f6739967e2fd36b1d405913a9977ce2443ba0ae67cee7ed113fb4ece90c909ff7e555af5fd2aa74d6d0d5c67a1ea7c58442bafde3c416c5623f8e16c0ccf84d805e07c532c63975df4e68b72f2f6e2e5265fb237", 0xf1, 0x1}], 0x4881, &(0x7f0000000400)={[{@check_strict='check=strict', 0x2c}, {@session={'session', 0x3d, [0x35, 0x0, 0x78, 0x34, 0x36]}, 0x2c}, {@mode={'mode', 0x3d, [0x33]}, 0x2c}, {@sbsector={'sbsector', 0x3d, [0x33, 0x3d, 0x36, 0x34]}, 0x2c}, {@block={'block', 0x3d, [0x32, 0x36, 0x30, 0x33, 0x38]}, 0x2c}, {@hide='hide', 0x2c}, {@norock='norock', 0x2c}]}) 2018/06/04 21:22:20 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) [ 154.447407] FAULT_INJECTION: forcing a failure. [ 154.447407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.459336] CPU: 0 PID: 10328 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 154.466278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.475644] Call Trace: [ 154.478254] dump_stack+0x1b9/0x294 [ 154.481901] ? dump_stack_print_info.cold.2+0x52/0x52 [ 154.487102] ? find_held_lock+0x36/0x1c0 [ 154.491189] should_fail.cold.4+0xa/0x1a [ 154.495271] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.500399] ? kasan_check_read+0x11/0x20 [ 154.504573] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 154.509797] ? find_held_lock+0x36/0x1c0 [ 154.513910] ? check_same_owner+0x320/0x320 [ 154.518260] ? rcu_note_context_switch+0x710/0x710 [ 154.523226] ? __might_sleep+0x95/0x190 [ 154.527226] __alloc_pages_nodemask+0x34e/0xd70 [ 154.531920] ? default_file_splice_read+0x1c7/0xad0 [ 154.536962] ? do_splice_to+0x12e/0x190 [ 154.540962] ? splice_direct_to_actor+0x268/0x8d0 [ 154.545841] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 154.550894] ? kasan_check_read+0x11/0x20 [ 154.555068] ? rcu_is_watching+0x85/0x140 [ 154.559239] ? rcu_pm_notify+0xc0/0xc0 [ 154.563182] ? rcu_read_lock_sched_held+0x108/0x120 [ 154.568230] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 154.573805] alloc_pages_current+0x10c/0x210 [ 154.578247] push_pipe+0x400/0x7a0 [ 154.581817] ? __kmalloc_node+0x47/0x70 [ 154.585829] iov_iter_get_pages_alloc+0x84a/0x1510 [ 154.590798] ? kasan_check_read+0x11/0x20 [ 154.594974] ? rcu_is_watching+0x85/0x140 [ 154.599154] ? copy_page_from_iter+0x880/0x880 [ 154.603770] ? is_bpf_text_address+0xd7/0x170 [ 154.608288] ? kernel_text_address+0x79/0xf0 [ 154.612726] ? __unwind_start+0x166/0x330 [ 154.616909] ? unwind_get_return_address+0x61/0xa0 [ 154.621865] ? __save_stack_trace+0x7e/0xd0 [ 154.626217] ? save_stack+0xa9/0xd0 [ 154.629861] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.634894] ? iov_iter_pipe+0xc2/0x2f0 [ 154.638893] default_file_splice_read+0x1c7/0xad0 2018/06/04 21:22:20 executing program 0: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x4402) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1}) 2018/06/04 21:22:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x9, 0x1) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x80000, 0x0, [0x66d63482, 0x7, 0x10001, 0x5, 0x5, 0x7ff, 0xa56, 0x400]}) 2018/06/04 21:22:20 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 2018/06/04 21:22:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000005, 0x3ff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x80}) getpeername$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000380)=@can={0x1d, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="c676583c08608e94417fe191bc9b809fd5d88e1286efbc50deff043b82830d0d944e3e8c56e00456562e437d31d2f8207b608b182aeaf45560aad55cb753ebacc41a686e2c66c122e9c47df4843276845e9a81b2c5acdfc46286770d7582505768a11496f411b46bd12ee163ce576955103628dfae6c5a0700a546762b9bb178cead979da6e6c0421867c4e1d27cbdeda3da671eea", 0x95}], 0x1, &(0x7f0000000500)=[{0xf8, 0x11f, 0x0, "e836f736d3dded2b9cc2bff1582b541816adca3b059279cf8dccd42fe39dafdb8d8585ce7d6d5c119b5c91f61e8f513cbc5c5b2c287642c6e0a2d78c0888a78225941427ea60443f5c9a3e8d715f851e15758380819fc4f14e04f7a96ad871029db8c0aa89e3d04961508cbe3a4b6e7eb085c4eab1be610e43bb2f332770433a5bd1123bbc4a0d8c72c37ae77bab676906219512437126db2ded4575ea5bb98db5a7ba360f81d3fa1434b07fa3e7c06d63dd985f1ab3a269cc337122dde295892714448ee39b54b098a91e9f5bd7039a1c42d51db74f13c5a1207c52f577769bb2ad5ab3"}, {0x98, 0x12d, 0x9, "3a5ae77ae3f9dafb1f2bab8e36e296684a0967988f147c02924ccc9a3c0e878ecf9105abcf5cb7574c2e045f05f3775a8bb3fb76e38d5bea1797e8981bddfa0d7d41b9684581469ddbb8ed0d1fe25188bf5b04a6ca5531cc564c606e5aada96a838493fe5e480be9988e34ed2135c7b4082601267bf127e46a898fb8e1cf6e8ec001"}, {0xc8, 0x11d, 0xffffffffffff8001, "d69df46a5c7065721e7536c315042db9fb9e114fe24da71d4e255497b62d54cb3356c4db9d3a23dd2c22e32ffd688d787291eba897a0a5484953503d110e3729404ef49934e0ba897af8dfb961de2dc1948e6397c79cf130a3ef24ffffa4b22d32dd9a74a715d8ca7350ba4a66474ad720700f64ad9f2d23058be18096319bbd46b74f6cad597d3895a0de703b15a6f9efc216dc1adf6ce5a4a7e3c1abf17a59bcb1f4d40339b2c78e740db3cc60fb78ffd2"}], 0x258, 0x4c800}, 0x20004000) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="30583d8a7402ef5b0f5e33ac1d74d726e37a5e02689c45011f2f379ae5c8195155579ec75acb46ad1670cd662be2c0b2c92f7fa752b08dec32f86e1f48496f290856148580cb8321a1e2dc016e6a4a212188534fd853e3a756558308ecb1f870a645a69841b4e92503b64fffc4e75c2b02825cbc1af80a996066671f43e59786b4b3bc67f208e6d1") ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x103}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) 2018/06/04 21:22:20 executing program 2: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) [ 154.643764] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.649150] ? do_splice_direct+0x400/0x400 [ 154.653483] ? kasan_check_read+0x11/0x20 [ 154.657646] ? debug_mutex_init+0x1c/0x60 [ 154.661813] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 154.666847] ? __lockdep_init_map+0x105/0x590 [ 154.671362] ? lockdep_init_map+0x9/0x10 [ 154.675441] ? debug_mutex_init+0x2d/0x60 [ 154.679614] ? __mutex_init+0x1ef/0x280 [ 154.683607] ? __ia32_sys_membarrier+0x150/0x150 [ 154.688381] ? __lockdep_init_map+0x105/0x590 [ 154.692906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.698460] ? fsnotify+0x415/0xfc0 [ 154.702115] ? fsnotify+0xfc0/0xfc0 [ 154.705770] ? fsnotify_first_mark+0x330/0x330 [ 154.710386] ? security_file_permission+0x1c6/0x240 [ 154.715430] ? rw_verify_area+0x118/0x360 [ 154.719602] ? do_splice_direct+0x400/0x400 [ 154.723943] do_splice_to+0x12e/0x190 [ 154.727781] splice_direct_to_actor+0x268/0x8d0 [ 154.732476] ? pipe_to_sendpage+0x3f0/0x3f0 [ 154.736823] ? do_splice_to+0x190/0x190 [ 154.740818] ? rw_verify_area+0x118/0x360 2018/06/04 21:22:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 154.744985] do_splice_direct+0x2cc/0x400 [ 154.749160] ? splice_direct_to_actor+0x8d0/0x8d0 [ 154.753987] ISOFS: Invalid session number or type of track [ 154.754006] ISOFS: Invalid session number [ 154.759629] ? rw_verify_area+0x118/0x360 [ 154.759645] do_sendfile+0x60f/0xe00 [ 154.759665] ? do_compat_pwritev64+0x1b0/0x1b0 [ 154.759680] ? __might_sleep+0x95/0x190 [ 154.759709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.785794] ? _copy_from_user+0xdf/0x150 [ 154.789969] __x64_sys_sendfile64+0x155/0x240 [ 154.794484] ? __ia32_sys_sendfile+0x290/0x290 2018/06/04 21:22:20 executing program 1: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='cgroupkeyring\x00', 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x7, 0x8, 0x8, 0x40, 0x5, 0x2, 0x7, 0x0, 0x10001, 0x4}, 0xb) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) 2018/06/04 21:22:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) socketpair$ax25(0x3, 0x5, 0x6, &(0x7f0000000000)) [ 154.799093] ? do_syscall_64+0x92/0x800 [ 154.802942] ISOFS: Unable to identify CD-ROM format. [ 154.803094] do_syscall_64+0x1b1/0x800 [ 154.803112] ? finish_task_switch+0x1ca/0x840 [ 154.803127] ? syscall_return_slowpath+0x5c0/0x5c0 [ 154.803143] ? syscall_return_slowpath+0x30f/0x5c0 [ 154.803165] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 154.803181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.803201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.841876] RIP: 0033:0x455a09 2018/06/04 21:22:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 154.845067] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.852789] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 154.860068] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 154.867348] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.874629] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 154.881913] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000004 2018/06/04 21:22:20 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x802) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0x0, 0x200200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00'}) connect$netrom(r0, &(0x7f0000000040)=@full={{0x3, {"98efb5d55ed293"}, 0xffffffff}, [{"e621d7ba19f160"}, {"a1308cb21ce44e"}, {"681f571e63c24d"}, {"5b83473b6d5cdd"}, {"6ec9c9e0abeae2"}, {"03ccf254bbeef0"}, {"643a2065ba91e7"}, {"26f2213e4630ad"}]}, 0x48) 2018/06/04 21:22:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000001480)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000001500), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x8001, &(0x7f0000000080)=0x0) io_submit(r2, 0x20000000000001b0, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fc", 0x1}]) 2018/06/04 21:22:20 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x10000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@ax25, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/229, 0xe5}, {&(0x7f0000000a80)=""/179, 0xb3}], 0x7, &(0x7f0000000b40)=""/88, 0x58, 0x8}, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002b80)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="cf69d07b93778b5f59642844ace957ca5e8af43b8694cd5cadf314146df12baeedbac2708fb84a9f4e7622d31a6beca8b51fc19be7f56621cc763b27670c2e9b36e4a0ef6cb3c5de79c5089364d06459c1aeef31da6e94ea63b0d88681c54e6ed43e7a8bda4e0760d142e19dce3711a756a3697a9aa9ef54", 0x78}, {&(0x7f0000000400)="7c64a299e0c7dafb863da03cd5e8429863840d94555fcd196594160b8fb214c480fd4d612f179144fe5b887bbbbc9894ccc80b9aef379e6983a5b7212e299955f2e3705068b8338fc190e468d1250b842a71ba94176b5876cb453ff001dd7b2119d184dd5df6d3759f3abd65dd1d5a01cba871390950804d95a7777aa83dab52cd7b4df1aa114ddae72350b6312b437d4aa81307cebad0b2da004517089f9281b48423a6fdf6634fd87b86ac926f1d189176501fc2ce78e9294a13c30bc0177a8c23d94f3bd1fd467fd2e487c0d133b1bd2c2debe4", 0xd5}, {&(0x7f0000000600)="189dbbf2e978dac05f24190a214830892e20417c33e793824cb8093e0b8c41b322c1ea8f2dc55e1e1c52e7552bd0d580d5e32ddb3baaf1178233b36416aa30d79c4211b40dba468a88dadff8a52eda87", 0x50}, {&(0x7f00000006c0)="ff73bacbfb411f8e2c22ed0779f1d1e68f2bc646ef270845e1514bbb4a97f261228f4bf2aa508eaf2080db949f3a66b8e6cc8e1947563ffc21d77ff4e8037794c6841e84a9c9f7bcb3f9a21368552a2728e56ec8a4671d1c6437ec421d9a34a73963ca55ca07b4396fbd491e3771ff6b0b0082", 0x73}, {&(0x7f0000000800)}], 0x5, 0x0, 0x0, 0x24000000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="e8f9d266a71596ec9a12a3550634fdfa8c7e5d3c7e4a296445e50144545e05593c45a02d2137ec8c7af5953c0d5b4a6694a99863808bd36072c366b4b0374e173e73b8e135c0f5491db3b8e0eb", 0x4d}, {&(0x7f0000000d40)="33cc528ffe7bd464e290ad14d8e7b636c3ed757c78a8cdb2dcb3c1883a1c0267ab8434a1fa4bb544996b075e77afd64957a85642e7f6864b6cff27b7b79d0b8a8dd236519241cc7ab998f1a9db6ce13df889c051a6af01235d36b7ae1b2233f10691144a6a2dc11fed3906621d5b0149c9942d25da06efbc84", 0x79}, {&(0x7f0000000e80)="ed0d4288a375ef8a8915e8154b40032ccd1f2c4822d3853c2b9f8acdd4e6d766fac28f93b5e9a7538cf798c1c8571b2c38d36125a1d9086898e720b68becb64d478725ce0d1476ac3436733b067b5395", 0x50}], 0x3}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002d00)="6e6843b4c56bfbb26de3e9219bea599f590ce1738654abb28b3f5b37839776c5f345f0b6fe18cbb1d6cb2e9e06161fe42761cf884bbfc698c976924489444d3a1ed40d9921166d9c48d5aff48b5d31c1f9806ec2b5b4f191828e56ad1347832aca48ded5d9b9cc488c98aa1c7d4742e0f6e243bac20399db87bb65531081ad912cec4975", 0x84}, {&(0x7f0000001440)="d68391cff3e9dacb51f6f97ef2663a3f744d610fcfd1771b5f1cd53563367f94bc166dd374ace7d53462dd1392b7c8248fab15ed15918a7344091e8fff2672f2884fa19e5fd47972ebe18419f747e26c7c202e8c189c85da9620fcb8a1815d89b1dd6a31858119bda5e22a1656bef7e4e3e27f", 0x73}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002580)="c2c5406a35129b", 0x7}], 0x4, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000026c0)="f5bce67016d2f9e72ac0ce32b9e148ae2e2ee1516e142435a7039fc2649e799f3a306226ba150b5afec7b49d670e575ff97bf3a7bc8b418a6f4cb723dc1773438621ac1dc9fd819e33a0e7d735df5f89d7709dd92d32fb31b74fddf8aca86932bbae2163e437e0967978af21a7b8811abe032c93da626899307de683e6021386788cac3761d95443e0e682c9ba1332a04f8a948050f6d5c1e2fd092f33e48865169dfe20f8862c1ff9be27d2de246de5abc93f5e325a4bc8814ad131a41874855845ba368acb120c5cca3ec7291691c6e5436cb2b768d3", 0xd7}, {&(0x7f00000028c0)="a7fbb518f0972177f012c73c80603b3704ceffecc1307824dc0d1447bdfe5f335e9127930dfbd07fc8df0d5560e60432159178b280a4d3389d31bcca7ee9f0bd0ab716815a0abca6b81d676ce177d573cd9a5324f665e064153fe288", 0x5c}], 0x2, &(0x7f0000002980)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x50, 0x117, 0x2, 0x35, "0382fdd4a074ca667edd13d799bf94fcfbcd1310f62d517ba85472f256799cf3b4ee8ce70273a118e12b68c3ee1eb67d4727ea4d6e"}, @iv={0xe8, 0x117, 0x2, 0xd4, "561d5cd072b1df7b1ca5a19fe9fa6bb5ea51e5eed5b6f0b08845762111423f1ae05ae2a63f9c200a5c5f5d4b36a7e6301ec0ab960809e9d59b51b550ab09ea7c318af5a6c7ef676ff87c99c72d4056be9eccf83d6aeb39aacf766c538177f669438fe2e3e6cef4b20bc8208a0978605f2a0178d67d067fa267424648957d76965285bd5ee4bcf7655e31db6aa4bc4875d7e53e9f345b8ccc96b682a8b2e29a049b7f9d6c413c8d93eb6d9c757de27b1de67edc6d790b06230b1d23c023cbb59cb953d06251704d05871e6876f012048d2b588b12"}], 0x150, 0x840}], 0x4, 0x40001) recvmsg(r2, &(0x7f0000000680)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0x4e}], 0x1}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 2018/06/04 21:22:20 executing program 6 (fault-call:2 fault-nth:5): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:20 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0xff}) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r3, 0x80000, r4}) mq_notify(r4, &(0x7f0000000280)={0x0, 0x3b, 0x5, @thr={&(0x7f0000000100)="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", &(0x7f0000000200)="636b6bb6a2641b2f2db234ee82a8587bd0ba080c26ce5123eaf2fbc6d845c9658202efe13e00046f5f5779cc13e09812e4c555a24ef6472316805f6e02093f8f417034830a43e35997aa98a3a521e19d40b0920e9b201edce1b1615f20e324"}}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x1) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000380)=[{{}, 0x1, 0x3ff, 0x9}, {{0x0, 0x7530}, 0x3, 0xff, 0x6}, {{0x0, 0x2710}, 0x1, 0x7f, 0x4}, {{r7, r8/1000+30000}, 0xcfe, 0xce00000000000000, 0x8}, {{0x0, 0x7530}, 0x0, 0x0, 0x1000}, {{}, 0x2, 0x40, 0x8000}, {{}, 0x2, 0x2, 0x1f97}, {{0x0, 0x7530}, 0x1, 0x200, 0x98}], 0xc0) sendto$inet(r4, &(0x7f0000000440)="e4aea789248e64084296cf59a35ec971e7dc004f7a804dd2313089c6c627da14bdd52a8b658c9fcf87270cdd349203b0a418d65b352cf0868cb410c6f4bd7ea528c68eb5cc78e62c4ff46bc6f69720fcd903147d7442a4c9a792088dd41914be57700aa202304a3a801933ef9fa6ec1467968a7ffc1d23125bb2f4fd1f0527713a1c7d62b0103865d92bd5633835566b22b9b14389f5df9523d555cdf71f19d9254493f8c1d803276d97a9bd341ac36f01b10f1a51479b1fc44933f0e0a6912bdc8371616d1aaeff9e092008f4ca28ed5a4f8d09fbf0052a7a91657955840a57abcad080b1087a6660df09f80f", 0xed, 0x4000, &(0x7f0000000540)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) fcntl$addseals(r4, 0x409, 0x4) bind$vsock_stream(r4, &(0x7f0000000580)={0x28, 0x0, 0x0, @host=0x2}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000005c0)={0x8, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x5, r10}) setxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='com.apple.FinderInfo\x00', &(0x7f00000006c0)='\x00', 0x1, 0x2) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000700)=""/4096) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001700)={r5, r2}) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001740)='/dev/uinput\x00', 0x200982, 0x0) connect$netlink(r9, &(0x7f0000001780)=@unspec, 0xc) ioctl$TCSBRKP(r11, 0x5425, 0x8) getpeername$unix(r4, &(0x7f00000017c0), &(0x7f0000001840)=0x6e) openat$ion(0xffffffffffffff9c, &(0x7f0000001880)='/dev/ion\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001900)=@security={'security\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x118, 0x268, 0x118, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, &(0x7f00000018c0), {[{{@ip={@rand_addr=0x1, @loopback=0x7f000001, 0xffffff00, 0x0, 'bridge_slave_0\x00', 'veth0\x00', {}, {0xff}, 0x88, 0x1, 0x1}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8, [0x3, 0x100, 0x6f577fc4, 0x7, 0x26, 0x9], 0x6, 0x10001, 0x6cdc}, {0xfff, [0x74c, 0x80000000, 0x2, 0x1, 0x8, 0x8f36], 0x4, 0x4, 0x7}}}}, {{@uncond, 0x0, 0x110, 0x150, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x8}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x8, 0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x36, "9d2f99885878804bad81d3cfe355f17fd1290c3ac8cff90d344414989bb6"}}}, {{@ip={@multicast2=0xe0000002, @loopback=0x7f000001, 0xff, 0xffffff00, 'ip6tnl0\x00', 'eql\x00', {}, {0xff}, 0x95, 0x1, 0x10}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@inet=@tcpmss={0x28, 'tcpmss\x00', 0x0, {0x6, 0x4}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x7, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) r12 = accept$ax25(r11, &(0x7f0000001d80), &(0x7f0000001dc0)=0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/sequencer\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r12, 0x40086409, &(0x7f0000001e40)={r0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) getpid() ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000001f00)) 2018/06/04 21:22:20 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x1e) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@dev, @empty, 0x0}, &(0x7f00000001c0)=0xc) getsockname$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005400)={0x0, @local, @remote}, &(0x7f0000005440)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000005480)={@multicast2, @local, 0x0}, &(0x7f00000054c0)=0xc) getpeername$packet(r0, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000005880)=0x14) accept4$packet(r0, &(0x7f0000005c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000005c40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005d40)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000005dc0)=0x14) getsockname$packet(r0, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000005e40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005e80)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000005f80)=0xe8) accept$packet(r0, &(0x7f000000ba00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000000ba40)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f000000ba80)={@remote, 0x0}, &(0x7f000000bac0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010b40)={'bond0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000010bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000010c00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000010c40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000010d40)=0xe8) recvmsg$kcm(r0, &(0x7f0000010ec0)={&(0x7f0000010d80)=@can={0x0, 0x0}, 0x80, &(0x7f0000010e80)=[{&(0x7f0000010e00)=""/107, 0x6b}], 0x1, 0x0, 0x0, 0x80000000}, 0x40012162) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000010f00)={@empty, 0x0}, &(0x7f0000010f40)=0x14) r21 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r21, 0x8018457f, &(0x7f00000004c0)=""/140) getpeername(r0, &(0x7f0000010f80)=@hci={0x0, 0x0}, &(0x7f0000011000)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000011440)={@mcast2, 0x0}, &(0x7f0000011480)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000011500)={@multicast2, @empty, 0x0}, &(0x7f0000011540)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000011680)={@dev, 0x0}, &(0x7f00000116c0)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000011d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000011d40)={&(0x7f0000011700)={0x614, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x1e4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1ff}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r14}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffff80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xe5}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0xbc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r19}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r20}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r22}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xffffffffffff54a4}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r25}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 155.111241] FAULT_INJECTION: forcing a failure. [ 155.111241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.123271] CPU: 1 PID: 10405 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 155.130225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.139586] Call Trace: [ 155.142194] dump_stack+0x1b9/0x294 [ 155.145849] ? dump_stack_print_info.cold.2+0x52/0x52 [ 155.151060] ? find_held_lock+0x36/0x1c0 [ 155.155167] should_fail.cold.4+0xa/0x1a [ 155.159244] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.164355] ? kasan_check_read+0x11/0x20 [ 155.168507] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 155.173700] ? find_held_lock+0x36/0x1c0 [ 155.177770] ? check_same_owner+0x320/0x320 [ 155.182084] ? rcu_note_context_switch+0x710/0x710 [ 155.187005] ? __might_sleep+0x95/0x190 [ 155.190973] __alloc_pages_nodemask+0x34e/0xd70 [ 155.195633] ? default_file_splice_read+0x1c7/0xad0 [ 155.200636] ? do_splice_to+0x12e/0x190 [ 155.204600] ? splice_direct_to_actor+0x268/0x8d0 [ 155.209431] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 155.214454] ? kasan_check_read+0x11/0x20 [ 155.218601] ? rcu_is_watching+0x85/0x140 [ 155.222736] ? rcu_pm_notify+0xc0/0xc0 [ 155.226625] ? rcu_read_lock_sched_held+0x108/0x120 [ 155.231630] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 155.237158] alloc_pages_current+0x10c/0x210 [ 155.241557] push_pipe+0x400/0x7a0 [ 155.245081] ? __kmalloc_node+0x47/0x70 [ 155.249047] iov_iter_get_pages_alloc+0x84a/0x1510 [ 155.253967] ? kasan_check_read+0x11/0x20 [ 155.258099] ? rcu_is_watching+0x85/0x140 [ 155.262235] ? copy_page_from_iter+0x880/0x880 [ 155.266809] ? is_bpf_text_address+0xd7/0x170 [ 155.271290] ? kernel_text_address+0x79/0xf0 [ 155.275687] ? __unwind_start+0x166/0x330 [ 155.279826] ? unwind_get_return_address+0x61/0xa0 [ 155.284743] ? __save_stack_trace+0x7e/0xd0 [ 155.289056] ? save_stack+0xa9/0xd0 [ 155.292670] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.297670] ? iov_iter_pipe+0xc2/0x2f0 [ 155.301633] default_file_splice_read+0x1c7/0xad0 [ 155.306463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 155.311822] ? do_splice_direct+0x400/0x400 [ 155.316133] ? kasan_check_read+0x11/0x20 [ 155.320265] ? debug_mutex_init+0x1c/0x60 [ 155.324398] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 155.329400] ? __lockdep_init_map+0x105/0x590 [ 155.333881] ? lockdep_init_map+0x9/0x10 [ 155.337925] ? debug_mutex_init+0x2d/0x60 [ 155.342058] ? __mutex_init+0x1ef/0x280 [ 155.346024] ? __ia32_sys_membarrier+0x150/0x150 [ 155.350768] ? __lockdep_init_map+0x105/0x590 [ 155.355254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.360778] ? fsnotify+0x415/0xfc0 [ 155.364394] ? fsnotify+0xfc0/0xfc0 [ 155.368008] ? fsnotify_first_mark+0x330/0x330 [ 155.372588] ? security_file_permission+0x1c6/0x240 [ 155.377590] ? rw_verify_area+0x118/0x360 [ 155.381735] ? do_splice_direct+0x400/0x400 [ 155.386058] do_splice_to+0x12e/0x190 [ 155.389858] splice_direct_to_actor+0x268/0x8d0 [ 155.394517] ? pipe_to_sendpage+0x3f0/0x3f0 [ 155.398826] ? do_splice_to+0x190/0x190 [ 155.402786] ? rw_verify_area+0x118/0x360 [ 155.406923] do_splice_direct+0x2cc/0x400 [ 155.411062] ? splice_direct_to_actor+0x8d0/0x8d0 [ 155.415895] ? rw_verify_area+0x118/0x360 [ 155.420031] do_sendfile+0x60f/0xe00 [ 155.423832] ? do_compat_pwritev64+0x1b0/0x1b0 [ 155.428403] ? __might_sleep+0x95/0x190 [ 155.432368] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.437893] ? _copy_from_user+0xdf/0x150 [ 155.442035] __x64_sys_sendfile64+0x155/0x240 [ 155.446516] ? __ia32_sys_sendfile+0x290/0x290 [ 155.451084] ? do_syscall_64+0x92/0x800 [ 155.455047] do_syscall_64+0x1b1/0x800 [ 155.458920] ? finish_task_switch+0x1ca/0x840 [ 155.463404] ? syscall_return_slowpath+0x5c0/0x5c0 [ 155.468322] ? syscall_return_slowpath+0x30f/0x5c0 [ 155.473242] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 155.478597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.483431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 155.488606] RIP: 0033:0x455a09 [ 155.491781] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.499477] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:20 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x35, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 2018/06/04 21:22:20 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:21 executing program 7 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 155.506730] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 155.513985] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.521240] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 155.528495] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000005 [ 155.564121] FAULT_INJECTION: forcing a failure. [ 155.564121] name failslab, interval 1, probability 0, space 0, times 0 [ 155.575664] CPU: 1 PID: 10409 Comm: syz-executor7 Not tainted 4.17.0+ #83 [ 155.582604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.591962] Call Trace: [ 155.594553] dump_stack+0x1b9/0x294 [ 155.598171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 155.603349] ? lock_acquire+0x1dc/0x520 [ 155.607311] ? __fdget_pos+0x1a9/0x1e0 [ 155.611191] should_fail.cold.4+0xa/0x1a [ 155.615237] ? __lock_acquire+0x7f5/0x5140 [ 155.619459] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.624549] ? graph_lock+0x170/0x170 [ 155.628338] ? debug_check_no_locks_freed+0x310/0x310 [ 155.633518] ? find_held_lock+0x36/0x1c0 [ 155.637567] ? __lock_is_held+0xb5/0x140 [ 155.641625] ? check_same_owner+0x320/0x320 [ 155.645938] ? rcu_note_context_switch+0x710/0x710 [ 155.650853] ? __fget+0x40c/0x650 [ 155.654294] __should_failslab+0x124/0x180 [ 155.658519] should_failslab+0x9/0x14 [ 155.662304] __kmalloc+0x2c8/0x760 [ 155.665830] ? graph_lock+0x170/0x170 [ 155.669621] ? kernfs_fop_write+0x33d/0x480 [ 155.673932] kernfs_fop_write+0x33d/0x480 [ 155.678069] __vfs_write+0x10b/0x960 [ 155.681768] ? kernfs_fop_open+0x1000/0x1000 [ 155.686185] ? kernel_read+0x120/0x120 [ 155.690061] ? __lock_is_held+0xb5/0x140 [ 155.694113] ? rcu_read_lock_sched_held+0x108/0x120 [ 155.699116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.704640] ? __sb_start_write+0x17f/0x300 [ 155.708952] vfs_write+0x1f8/0x560 [ 155.712480] ksys_write+0xf9/0x250 [ 155.716009] ? __ia32_sys_read+0xb0/0xb0 [ 155.720062] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 155.724895] __x64_sys_write+0x73/0xb0 [ 155.728769] do_syscall_64+0x1b1/0x800 [ 155.732644] ? finish_task_switch+0x1ca/0x840 [ 155.737131] ? syscall_return_slowpath+0x5c0/0x5c0 [ 155.742046] ? syscall_return_slowpath+0x30f/0x5c0 [ 155.746967] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 155.752319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.757151] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/06/04 21:22:21 executing program 0: syz_read_part_table(0x7fffffff, 0xaaaaaaaaaaaaad0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)="4552c6", 0x3}]) [ 155.762328] RIP: 0033:0x455a09 [ 155.765501] RSP: 002b:00007f2596259c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.773195] RAX: ffffffffffffffda RBX: 00007f259625a6d4 RCX: 0000000000455a09 [ 155.780447] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 155.787701] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.794959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 155.802214] R13: 00000000000007ae R14: 00000000007008f0 R15: 0000000000000000 2018/06/04 21:22:21 executing program 7 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:21 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 155.913273] FAULT_INJECTION: forcing a failure. [ 155.913273] name failslab, interval 1, probability 0, space 0, times 0 [ 155.924918] CPU: 1 PID: 10426 Comm: syz-executor7 Not tainted 4.17.0+ #83 [ 155.931861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.941226] Call Trace: [ 155.943833] dump_stack+0x1b9/0x294 [ 155.947485] ? dump_stack_print_info.cold.2+0x52/0x52 [ 155.952693] ? mark_held_locks+0xc9/0x160 [ 155.956860] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 155.961460] ? cpuset_write_resmask+0x175/0x2e80 [ 155.966235] should_fail.cold.4+0xa/0x1a [ 155.970317] ? mutex_trylock+0x2a0/0x2a0 [ 155.974399] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.979526] ? graph_lock+0x170/0x170 [ 155.983338] ? __lock_is_held+0xb5/0x140 [ 155.987411] ? find_held_lock+0x36/0x1c0 [ 155.991483] ? __lock_is_held+0xb5/0x140 [ 155.995576] ? check_same_owner+0x320/0x320 [ 155.999913] ? insert_work+0x4e0/0x4e0 [ 156.003823] ? rcu_note_context_switch+0x710/0x710 [ 156.008768] __should_failslab+0x124/0x180 [ 156.013003] should_failslab+0x9/0x14 [ 156.016806] __kmalloc_track_caller+0x2c4/0x760 [ 156.021474] ? rcu_is_watching+0x85/0x140 [ 156.025640] ? alloc_trial_cpuset+0x23/0x110 [ 156.030047] kmemdup+0x24/0x50 [ 156.033234] alloc_trial_cpuset+0x23/0x110 [ 156.037462] cpuset_write_resmask+0x247/0x2e80 [ 156.042054] ? __save_stack_trace+0x7e/0xd0 [ 156.046363] ? mutex_trylock+0x2a0/0x2a0 [ 156.050422] ? cpuset_css_offline+0xb0/0xb0 [ 156.054741] ? save_stack+0xa9/0xd0 [ 156.058363] ? save_stack+0x43/0xd0 [ 156.061978] ? kasan_kmalloc+0xc4/0xe0 [ 156.065851] ? __kmalloc+0x14e/0x760 [ 156.069560] ? kernfs_fop_write+0x33d/0x480 [ 156.073873] ? __vfs_write+0x10b/0x960 [ 156.077758] ? do_syscall_64+0x1b1/0x800 [ 156.081806] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.087160] ? graph_lock+0x170/0x170 [ 156.090952] ? find_held_lock+0x36/0x1c0 [ 156.095001] ? find_held_lock+0x36/0x1c0 [ 156.099064] ? graph_lock+0x170/0x170 [ 156.102851] ? kernfs_fop_write+0x227/0x480 [ 156.107161] ? lock_release+0xa10/0xa10 [ 156.111131] cgroup_file_write+0x317/0x820 [ 156.115351] ? cpuset_css_offline+0xb0/0xb0 [ 156.119655] ? init_and_link_css+0x880/0x880 [ 156.124063] ? __lock_is_held+0xb5/0x140 [ 156.128149] ? init_and_link_css+0x880/0x880 [ 156.132568] kernfs_fop_write+0x2ba/0x480 [ 156.136726] __vfs_write+0x10b/0x960 [ 156.140447] ? kernfs_fop_open+0x1000/0x1000 [ 156.144868] ? kernel_read+0x120/0x120 [ 156.148772] ? __lock_is_held+0xb5/0x140 [ 156.152856] ? rcu_read_lock_sched_held+0x108/0x120 [ 156.157894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.163451] ? __sb_start_write+0x17f/0x300 [ 156.167789] vfs_write+0x1f8/0x560 [ 156.171331] ksys_write+0xf9/0x250 [ 156.174875] ? __ia32_sys_read+0xb0/0xb0 [ 156.178939] __x64_sys_write+0x73/0xb0 [ 156.182837] do_syscall_64+0x1b1/0x800 [ 156.186724] ? finish_task_switch+0x1ca/0x840 [ 156.191228] ? syscall_return_slowpath+0x5c0/0x5c0 [ 156.196163] ? syscall_return_slowpath+0x30f/0x5c0 [ 156.201095] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 156.206467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.211313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.216504] RIP: 0033:0x455a09 [ 156.219677] RSP: 002b:00007f2596259c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.227381] RAX: ffffffffffffffda RBX: 00007f259625a6d4 RCX: 0000000000455a09 [ 156.234638] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000014 [ 156.241919] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.249202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 156.256472] R13: 00000000000007ae R14: 00000000007008f0 R15: 0000000000000001 2018/06/04 21:22:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 2018/06/04 21:22:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) 2018/06/04 21:22:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x0, 0x5a6, 0x0, 0x5}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x2ac}, 0x4) 2018/06/04 21:22:22 executing program 6 (fault-call:2 fault-nth:6): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:22 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/214) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000000101000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)) 2018/06/04 21:22:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x301150}, 0xc, &(0x7f0000001400)={&(0x7f00000014c0)=ANY=[@ANYBLOB="e01200001000010027bd7000fddbdf251700000008003500", @ANYRES32=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x44000}, 0x42) r3 = memfd_create(&(0x7f0000000040)='bdev\x00', 0x2) fdatasync(r1) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080)=0x90b0, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001480)=0x4) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) setsockopt$inet_int(r0, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 2018/06/04 21:22:22 executing program 7 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)) [ 156.383170] FAULT_INJECTION: forcing a failure. [ 156.383170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.395101] CPU: 0 PID: 10445 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 156.402042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.411407] Call Trace: [ 156.414013] dump_stack+0x1b9/0x294 [ 156.417665] ? dump_stack_print_info.cold.2+0x52/0x52 [ 156.422872] ? find_held_lock+0x36/0x1c0 [ 156.426956] should_fail.cold.4+0xa/0x1a 2018/06/04 21:22:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='nodeveth1\\^\x00', 0xfffffffffffffff9) 2018/06/04 21:22:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 2018/06/04 21:22:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) [ 156.431035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.436155] ? kasan_check_read+0x11/0x20 [ 156.440323] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 156.445538] ? find_held_lock+0x36/0x1c0 [ 156.449657] ? check_same_owner+0x320/0x320 [ 156.454002] ? rcu_note_context_switch+0x710/0x710 [ 156.458959] ? __might_sleep+0x95/0x190 [ 156.462956] __alloc_pages_nodemask+0x34e/0xd70 [ 156.467646] ? default_file_splice_read+0x1c7/0xad0 [ 156.472685] ? do_splice_to+0x12e/0x190 [ 156.476679] ? splice_direct_to_actor+0x268/0x8d0 [ 156.481544] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 156.486586] ? kasan_check_read+0x11/0x20 [ 156.490759] ? rcu_is_watching+0x85/0x140 [ 156.494926] ? rcu_pm_notify+0xc0/0xc0 [ 156.498838] ? rcu_read_lock_sched_held+0x108/0x120 [ 156.503874] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 156.509441] alloc_pages_current+0x10c/0x210 [ 156.513866] push_pipe+0x400/0x7a0 [ 156.517403] ? __kmalloc_node+0x47/0x70 [ 156.521382] iov_iter_get_pages_alloc+0x84a/0x1510 [ 156.526311] ? kasan_check_read+0x11/0x20 [ 156.530453] ? rcu_is_watching+0x85/0x140 [ 156.534596] ? copy_page_from_iter+0x880/0x880 [ 156.539173] ? is_bpf_text_address+0xd7/0x170 [ 156.543655] ? kernel_text_address+0x79/0xf0 [ 156.548050] ? __unwind_start+0x166/0x330 [ 156.552185] ? unwind_get_return_address+0x61/0xa0 [ 156.557105] ? __save_stack_trace+0x7e/0xd0 [ 156.561422] ? save_stack+0xa9/0xd0 [ 156.565040] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 156.570048] ? iov_iter_pipe+0xc2/0x2f0 [ 156.574121] default_file_splice_read+0x1c7/0xad0 [ 156.578957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.584343] ? do_splice_direct+0x400/0x400 [ 156.588663] ? kasan_check_read+0x11/0x20 [ 156.592893] ? debug_mutex_init+0x1c/0x60 [ 156.597045] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 156.602058] ? __lockdep_init_map+0x105/0x590 [ 156.606548] ? lockdep_init_map+0x9/0x10 [ 156.610605] ? debug_mutex_init+0x2d/0x60 [ 156.614752] ? __mutex_init+0x1ef/0x280 [ 156.618716] ? __ia32_sys_membarrier+0x150/0x150 [ 156.623465] ? __lockdep_init_map+0x105/0x590 [ 156.628048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.633577] ? fsnotify+0x415/0xfc0 [ 156.637200] ? fsnotify+0xfc0/0xfc0 [ 156.640828] ? fsnotify_first_mark+0x330/0x330 [ 156.645442] ? security_file_permission+0x1c6/0x240 [ 156.650448] ? rw_verify_area+0x118/0x360 [ 156.654591] ? do_splice_direct+0x400/0x400 [ 156.658933] do_splice_to+0x12e/0x190 [ 156.662728] splice_direct_to_actor+0x268/0x8d0 [ 156.667388] ? pipe_to_sendpage+0x3f0/0x3f0 [ 156.671700] ? do_splice_to+0x190/0x190 [ 156.675664] ? rw_verify_area+0x118/0x360 [ 156.679826] do_splice_direct+0x2cc/0x400 [ 156.683972] ? splice_direct_to_actor+0x8d0/0x8d0 [ 156.688807] ? rw_verify_area+0x118/0x360 [ 156.692943] do_sendfile+0x60f/0xe00 [ 156.696649] ? do_compat_pwritev64+0x1b0/0x1b0 [ 156.701223] ? __might_sleep+0x95/0x190 [ 156.705193] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.710722] ? _copy_from_user+0xdf/0x150 [ 156.714867] __x64_sys_sendfile64+0x155/0x240 [ 156.719355] ? __ia32_sys_sendfile+0x290/0x290 [ 156.723930] ? do_syscall_64+0x92/0x800 [ 156.727897] do_syscall_64+0x1b1/0x800 [ 156.731774] ? finish_task_switch+0x1ca/0x840 [ 156.736262] ? syscall_return_slowpath+0x5c0/0x5c0 [ 156.741199] ? syscall_return_slowpath+0x30f/0x5c0 [ 156.746121] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 156.751477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.756317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 156.761495] RIP: 0033:0x455a09 [ 156.764670] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.772367] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 156.779625] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 156.786882] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.794139] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 156.801398] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000006 2018/06/04 21:22:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000001340)='/dev/md0\x00', 0x0) add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000440), 0x0, 0x0) [ 156.833037] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 2018/06/04 21:22:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) read(r0, &(0x7f0000000200)=""/228, 0xfffffffffffffec1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0xdf) 2018/06/04 21:22:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) ppoll(&(0x7f0000000640)=[{r0}, {r1, 0x4100}], 0x2, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0), 0x8) 2018/06/04 21:22:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x4000002000000000) [ 156.877224] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 2018/06/04 21:22:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xcc) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f00000007c0)=@in6={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000a80)}, 0x0) 2018/06/04 21:22:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 2018/06/04 21:22:22 executing program 3: write$sndseq(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000040)) 2018/06/04 21:22:22 executing program 6 (fault-call:2 fault-nth:7): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:22 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0xe401000000000000) 2018/06/04 21:22:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000540)="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") 2018/06/04 21:22:22 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 2018/06/04 21:22:22 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="000004000000000000ed552304ab0000000022010000000000fe800000000000000000000000070000008000000000000000000000000000000000000000000000000000000000000007ff00000000000000000000000001000000000000000000000000000400000078e16f75df69fe80000000000082dec4b260a338c500ff210000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="09292f52a62b17dda9193a5943d9937466e98d22d2", 0x15, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 157.269158] FAULT_INJECTION: forcing a failure. [ 157.269158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.281156] CPU: 0 PID: 10527 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 157.288095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.297468] Call Trace: [ 157.300080] dump_stack+0x1b9/0x294 [ 157.303712] ? dump_stack_print_info.cold.2+0x52/0x52 [ 157.308920] should_fail.cold.4+0xa/0x1a [ 157.312999] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 157.318116] ? kasan_check_read+0x11/0x20 [ 157.322277] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 157.327485] ? find_held_lock+0x36/0x1c0 [ 157.331591] ? check_same_owner+0x320/0x320 [ 157.335940] ? rcu_note_context_switch+0x710/0x710 [ 157.340883] ? __might_sleep+0x95/0x190 [ 157.344866] __alloc_pages_nodemask+0x34e/0xd70 [ 157.349542] ? default_file_splice_read+0x1c7/0xad0 [ 157.354572] ? do_splice_to+0x12e/0x190 [ 157.358553] ? splice_direct_to_actor+0x268/0x8d0 [ 157.363402] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 157.368424] ? kasan_check_read+0x11/0x20 [ 157.372576] ? rcu_is_watching+0x85/0x140 [ 157.376736] ? rcu_pm_notify+0xc0/0xc0 [ 157.380633] ? rcu_read_lock_sched_held+0x108/0x120 [ 157.385648] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 157.391185] alloc_pages_current+0x10c/0x210 [ 157.395599] push_pipe+0x400/0x7a0 [ 157.399142] ? __kmalloc_node+0x47/0x70 [ 157.403129] iov_iter_get_pages_alloc+0x84a/0x1510 [ 157.408070] ? kasan_check_read+0x11/0x20 [ 157.412228] ? rcu_is_watching+0x85/0x140 [ 157.416392] ? copy_page_from_iter+0x880/0x880 [ 157.420990] ? is_bpf_text_address+0xd7/0x170 [ 157.425491] ? kernel_text_address+0x79/0xf0 [ 157.429891] ? __unwind_start+0x166/0x330 [ 157.434042] ? unwind_get_return_address+0x61/0xa0 [ 157.438973] ? __save_stack_trace+0x7e/0xd0 [ 157.443301] ? save_stack+0xa9/0xd0 [ 157.446921] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 157.451929] ? iov_iter_pipe+0xc2/0x2f0 [ 157.455905] default_file_splice_read+0x1c7/0xad0 [ 157.460756] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.466118] ? do_splice_direct+0x400/0x400 [ 157.470437] ? kasan_check_read+0x11/0x20 [ 157.474588] ? debug_mutex_init+0x1c/0x60 [ 157.478727] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 157.483747] ? __lockdep_init_map+0x105/0x590 [ 157.488247] ? lockdep_init_map+0x9/0x10 [ 157.492303] ? debug_mutex_init+0x2d/0x60 [ 157.496449] ? __mutex_init+0x1ef/0x280 [ 157.500422] ? __ia32_sys_membarrier+0x150/0x150 [ 157.505167] ? __lockdep_init_map+0x105/0x590 [ 157.509660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.515199] ? fsnotify+0x415/0xfc0 [ 157.518830] ? fsnotify+0xfc0/0xfc0 [ 157.522453] ? fsnotify_first_mark+0x330/0x330 [ 157.527046] ? security_file_permission+0x1c6/0x240 [ 157.532079] ? rw_verify_area+0x118/0x360 [ 157.536242] ? do_splice_direct+0x400/0x400 [ 157.540557] do_splice_to+0x12e/0x190 [ 157.544361] splice_direct_to_actor+0x268/0x8d0 [ 157.549059] ? pipe_to_sendpage+0x3f0/0x3f0 [ 157.553375] ? do_splice_to+0x190/0x190 [ 157.558362] ? rw_verify_area+0x118/0x360 [ 157.562516] do_splice_direct+0x2cc/0x400 [ 157.566748] ? splice_direct_to_actor+0x8d0/0x8d0 [ 157.571601] ? rw_verify_area+0x118/0x360 [ 157.575754] do_sendfile+0x60f/0xe00 [ 157.579734] ? do_compat_pwritev64+0x1b0/0x1b0 [ 157.584307] ? __might_sleep+0x95/0x190 [ 157.588278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.593809] ? _copy_from_user+0xdf/0x150 [ 157.597952] __x64_sys_sendfile64+0x155/0x240 [ 157.602468] ? __ia32_sys_sendfile+0x290/0x290 [ 157.607102] ? do_syscall_64+0x92/0x800 [ 157.611096] do_syscall_64+0x1b1/0x800 [ 157.614977] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 157.619816] ? syscall_return_slowpath+0x5c0/0x5c0 [ 157.624765] ? syscall_return_slowpath+0x30f/0x5c0 [ 157.629715] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 157.635084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 157.639927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 157.645106] RIP: 0033:0x455a09 [ 157.648293] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.656004] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 157.663297] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 157.670562] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 157.677828] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 157.685183] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000007 2018/06/04 21:22:23 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001fc0)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00000026c0)=[{&(0x7f00000027c0)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d", 0xd1}], 0x1}, 0x0) 2018/06/04 21:22:23 executing program 6 (fault-call:2 fault-nth:8): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65742f69676d703600c3") preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 2018/06/04 21:22:23 executing program 3: write$sndseq(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000040)) 2018/06/04 21:22:23 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) 2018/06/04 21:22:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x40000020) 2018/06/04 21:22:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/06/04 21:22:23 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 2018/06/04 21:22:23 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0xe401) 2018/06/04 21:22:23 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 158.191442] FAULT_INJECTION: forcing a failure. [ 158.191442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.203377] CPU: 0 PID: 10543 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 158.210324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.219691] Call Trace: [ 158.222299] dump_stack+0x1b9/0x294 [ 158.225946] ? dump_stack_print_info.cold.2+0x52/0x52 [ 158.231162] ? find_held_lock+0x36/0x1c0 [ 158.235245] should_fail.cold.4+0xa/0x1a [ 158.239329] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 158.244468] ? kasan_check_read+0x11/0x20 [ 158.248652] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 158.253872] ? find_held_lock+0x36/0x1c0 [ 158.257982] ? check_same_owner+0x320/0x320 [ 158.262328] ? rcu_note_context_switch+0x710/0x710 [ 158.267267] ? __might_sleep+0x95/0x190 [ 158.271244] __alloc_pages_nodemask+0x34e/0xd70 [ 158.275934] ? default_file_splice_read+0x1c7/0xad0 [ 158.280962] ? do_splice_to+0x12e/0x190 [ 158.284942] ? splice_direct_to_actor+0x268/0x8d0 [ 158.289775] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 158.294786] ? kasan_check_read+0x11/0x20 [ 158.298924] ? rcu_is_watching+0x85/0x140 [ 158.303059] ? rcu_pm_notify+0xc0/0xc0 [ 158.306938] ? rcu_read_lock_sched_held+0x108/0x120 [ 158.311945] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 158.317482] alloc_pages_current+0x10c/0x210 [ 158.321886] push_pipe+0x400/0x7a0 [ 158.325413] ? __kmalloc_node+0x47/0x70 [ 158.329381] iov_iter_get_pages_alloc+0x84a/0x1510 [ 158.334301] ? kasan_check_read+0x11/0x20 [ 158.338436] ? rcu_is_watching+0x85/0x140 [ 158.342577] ? copy_page_from_iter+0x880/0x880 [ 158.347149] ? is_bpf_text_address+0xd7/0x170 [ 158.351632] ? kernel_text_address+0x79/0xf0 [ 158.356035] ? __unwind_start+0x166/0x330 [ 158.360175] ? unwind_get_return_address+0x61/0xa0 [ 158.365097] ? __save_stack_trace+0x7e/0xd0 [ 158.369414] ? save_stack+0xa9/0xd0 [ 158.373032] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 158.378038] ? iov_iter_pipe+0xc2/0x2f0 [ 158.382005] default_file_splice_read+0x1c7/0xad0 [ 158.387019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.392398] ? do_splice_direct+0x400/0x400 [ 158.396713] ? kasan_check_read+0x11/0x20 [ 158.400848] ? debug_mutex_init+0x1c/0x60 [ 158.404986] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 158.410006] ? __lockdep_init_map+0x105/0x590 [ 158.414494] ? lockdep_init_map+0x9/0x10 [ 158.418537] ? debug_mutex_init+0x2d/0x60 [ 158.422681] ? __mutex_init+0x1ef/0x280 [ 158.426640] ? __ia32_sys_membarrier+0x150/0x150 [ 158.431381] ? __lockdep_init_map+0x105/0x590 [ 158.435869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 158.441393] ? fsnotify+0x415/0xfc0 [ 158.445010] ? fsnotify+0xfc0/0xfc0 [ 158.448638] ? fsnotify_first_mark+0x330/0x330 [ 158.453212] ? security_file_permission+0x1c6/0x240 [ 158.458214] ? rw_verify_area+0x118/0x360 [ 158.462616] ? do_splice_direct+0x400/0x400 [ 158.466927] do_splice_to+0x12e/0x190 [ 158.470718] splice_direct_to_actor+0x268/0x8d0 [ 158.475375] ? pipe_to_sendpage+0x3f0/0x3f0 [ 158.479698] ? do_splice_to+0x190/0x190 [ 158.483659] ? rw_verify_area+0x118/0x360 [ 158.487793] do_splice_direct+0x2cc/0x400 [ 158.491930] ? splice_direct_to_actor+0x8d0/0x8d0 [ 158.496760] ? rw_verify_area+0x118/0x360 [ 158.500896] do_sendfile+0x60f/0xe00 [ 158.504602] ? do_compat_pwritev64+0x1b0/0x1b0 [ 158.509184] ? __might_sleep+0x95/0x190 [ 158.513151] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.518676] ? _copy_from_user+0xdf/0x150 [ 158.522813] __x64_sys_sendfile64+0x155/0x240 [ 158.527309] ? __ia32_sys_sendfile+0x290/0x290 [ 158.531892] ? do_syscall_64+0x92/0x800 [ 158.535858] do_syscall_64+0x1b1/0x800 [ 158.539731] ? finish_task_switch+0x1ca/0x840 [ 158.544216] ? syscall_return_slowpath+0x5c0/0x5c0 [ 158.549131] ? syscall_return_slowpath+0x30f/0x5c0 [ 158.554052] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 158.559420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.564264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 158.569462] RIP: 0033:0x455a09 [ 158.572638] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.580332] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 158.587586] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 158.594842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 158.602097] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 158.609365] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000008 2018/06/04 21:22:24 executing program 5: link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 2018/06/04 21:22:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 2018/06/04 21:22:24 executing program 4: poll(&(0x7f0000000140), 0x0, 0x4) 2018/06/04 21:22:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656f}) 2018/06/04 21:22:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x20000040) 2018/06/04 21:22:24 executing program 6 (fault-call:2 fault-nth:9): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:22:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') sendfile(r0, r0, &(0x7f0000000080)=0x4, 0x40001) [ 158.839548] FAULT_INJECTION: forcing a failure. [ 158.839548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.851517] CPU: 1 PID: 10593 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 158.858460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.867825] Call Trace: [ 158.870441] dump_stack+0x1b9/0x294 [ 158.874102] ? dump_stack_print_info.cold.2+0x52/0x52 [ 158.879332] should_fail.cold.4+0xa/0x1a [ 158.883423] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 158.888557] ? kasan_check_read+0x11/0x20 [ 158.892725] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 158.897915] ? find_held_lock+0x36/0x1c0 [ 158.901984] ? check_same_owner+0x320/0x320 [ 158.906335] ? rcu_note_context_switch+0x710/0x710 [ 158.911262] ? __might_sleep+0x95/0x190 [ 158.915232] __alloc_pages_nodemask+0x34e/0xd70 [ 158.919893] ? default_file_splice_read+0x1c7/0xad0 [ 158.924924] ? do_splice_to+0x12e/0x190 [ 158.928889] ? splice_direct_to_actor+0x268/0x8d0 [ 158.933730] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 158.938747] ? kasan_check_read+0x11/0x20 [ 158.942890] ? rcu_is_watching+0x85/0x140 [ 158.947039] ? rcu_pm_notify+0xc0/0xc0 [ 158.950928] ? rcu_read_lock_sched_held+0x108/0x120 [ 158.955938] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 158.961472] alloc_pages_current+0x10c/0x210 [ 158.965878] push_pipe+0x400/0x7a0 [ 158.969411] ? __kmalloc_node+0x47/0x70 [ 158.973384] iov_iter_get_pages_alloc+0x84a/0x1510 [ 158.978313] ? kasan_check_read+0x11/0x20 [ 158.982451] ? rcu_is_watching+0x85/0x140 [ 158.986598] ? copy_page_from_iter+0x880/0x880 [ 158.991179] ? is_bpf_text_address+0xd7/0x170 [ 158.995670] ? kernel_text_address+0x79/0xf0 [ 159.000070] ? __unwind_start+0x166/0x330 [ 159.004215] ? unwind_get_return_address+0x61/0xa0 [ 159.009135] ? __save_stack_trace+0x7e/0xd0 [ 159.013458] ? save_stack+0xa9/0xd0 [ 159.017094] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 159.022101] ? iov_iter_pipe+0xc2/0x2f0 [ 159.026074] default_file_splice_read+0x1c7/0xad0 [ 159.030910] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.036275] ? do_splice_direct+0x400/0x400 [ 159.040589] ? kasan_check_read+0x11/0x20 [ 159.044728] ? debug_mutex_init+0x1c/0x60 [ 159.048873] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 159.053884] ? __lockdep_init_map+0x105/0x590 [ 159.058374] ? lockdep_init_map+0x9/0x10 [ 159.062437] ? debug_mutex_init+0x2d/0x60 [ 159.066574] ? __mutex_init+0x1ef/0x280 [ 159.070547] ? __ia32_sys_membarrier+0x150/0x150 [ 159.075289] ? __lockdep_init_map+0x105/0x590 [ 159.079782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.085305] ? fsnotify+0x415/0xfc0 [ 159.088938] ? fsnotify+0xfc0/0xfc0 [ 159.092558] ? fsnotify_first_mark+0x330/0x330 [ 159.097150] ? security_file_permission+0x1c6/0x240 [ 159.102161] ? rw_verify_area+0x118/0x360 [ 159.106299] ? do_splice_direct+0x400/0x400 [ 159.110613] do_splice_to+0x12e/0x190 [ 159.114410] splice_direct_to_actor+0x268/0x8d0 [ 159.119072] ? pipe_to_sendpage+0x3f0/0x3f0 [ 159.123390] ? do_splice_to+0x190/0x190 [ 159.127374] ? rw_verify_area+0x118/0x360 [ 159.131514] do_splice_direct+0x2cc/0x400 [ 159.135669] ? splice_direct_to_actor+0x8d0/0x8d0 [ 159.140505] ? rw_verify_area+0x118/0x360 [ 159.144645] do_sendfile+0x60f/0xe00 [ 159.148357] ? do_compat_pwritev64+0x1b0/0x1b0 [ 159.152932] ? __might_sleep+0x95/0x190 [ 159.156907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.162434] ? _copy_from_user+0xdf/0x150 [ 159.166577] __x64_sys_sendfile64+0x155/0x240 [ 159.171063] ? __ia32_sys_sendfile+0x290/0x290 [ 159.175638] ? do_syscall_64+0x92/0x800 [ 159.179607] do_syscall_64+0x1b1/0x800 [ 159.183482] ? finish_task_switch+0x1ca/0x840 [ 159.187989] ? syscall_return_slowpath+0x5c0/0x5c0 [ 159.192914] ? syscall_return_slowpath+0x30f/0x5c0 [ 159.197840] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 159.203197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.208040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.213217] RIP: 0033:0x455a09 [ 159.216394] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.224094] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 159.231351] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 2018/06/04 21:22:24 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x1e4) 2018/06/04 21:22:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x80045500, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, "d24867de5bdd032be86e073db2eccb959e8fee0ea444fbb03a176fb6e53b456df5b13162a55cbdd8dd95b480"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "506d4b95d0d6c48bf01a1a8402a61439529e3b64e553152146896ba6d0c596e413e633507a3ec693358f4371628a44a2cc2c91257fcdc9ebd59d9ef08653a01d", &(0x7f0000000080), 0x13}) 2018/06/04 21:22:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") 2018/06/04 21:22:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='tmpfs.', 0x0, &(0x7f0000000280)) [ 159.238609] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.245866] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 159.253126] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000009 2018/06/04 21:22:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x3, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0xe4010000) 2018/06/04 21:22:25 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/bus\x00', 0x4) 2018/06/04 21:22:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x209) sendmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000000c0)="608ba7145e969caf9491013ddcab1192d58af666d6ab7cd1239e9824ad", 0x1d}, {&(0x7f0000001200)="f0968c5990caa82642bca7c4083369ffbd", 0x11}], 0x2, 0x0, 0x0, 0x20000000}, 0x7}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001e80)="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", 0x1000}], 0x1, &(0x7f0000002ec0)=[{0x50, 0x116, 0xffffffffffff0001, "2b1bded58411223caa2b2f3eb0ed29c723ae6360a11c75d0c8899837dec164bcc1d58255ce8df487178e406ad3c600933299614025c55219f23d"}], 0x50, 0x5}, 0x3f}, {{&(0x7f0000005780)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005800)="bf32715881733de2f6028187eb26a9b2ef8025959831d39e937b3d95f3ea42fd61d51fe380be78e25a45ee8b6325619ed00542882753968148772f03bd17287dec89d53823e3ba9f1942", 0x4a}], 0x1, &(0x7f00000068c0)=[{0x40, 0x11, 0x8, "bd7fbc1f6fdf14052f1bde472fe7c0d3ea90a3959754fd2aceccfd236c8c4d5893919520944c8e978499"}], 0x40, 0x20000800}, 0xa25}, {{&(0x7f0000009c80)=@nfc={0x27, 0x4, 0x0, 0x6}, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000009d00)="c077ac00df9e0b1eda4dade81059ff802dd878d740e4e7fa7b11a7bb720530cd737fad0d5799a2787df7f2a1d001bc0682e1ac72ba431d215fee0e14856727fb7b5728f36b1ebff60badf36dcefaa150ff1c36fbd9ae275dec2d75f1747a6e209c9da1141fd7c48c857eff6541dd4575bc70d6ccd28d555a648829b0935f165326f0660bc9df95a05d9a10298f5e67b54ee8ab100982b2d0decdd743598ee0e869a5c4a7aa149d38313b78465b2d492de780fe3cc523ce471c6cbbb7e98ad5355d936207618f", 0xc6}], 0x1, &(0x7f0000009f00)=[{0x20, 0x119, 0x5, "b14df19fafa710d5d877fb946235"}, {0x90, 0x88, 0x3, "da92fb5807fe013183d433112d1146349797293be96c48f07a6ef8dc8da0d1c0e281eda90b04c6800abca98dc957a898274b9310835502a982f1ef16c04071d0daeb7cf8023c8ac6c9e0948f0a51ea1eb60667665d04daaed7c2dbd323ab8ce95e0405444ffa0e0ca299935ce47fb27122509eec82e2758b1c3a2b9b1be1"}], 0xb0}}], 0x4, 0x40000) 2018/06/04 21:22:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) 2018/06/04 21:22:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000080), 0x2bc, 0x20000800) 2018/06/04 21:22:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0xa1b5}) 2018/06/04 21:22:25 executing program 6 (fault-call:2 fault-nth:10): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x100000000000000) 2018/06/04 21:22:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 159.541994] FAULT_INJECTION: forcing a failure. [ 159.541994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.553956] CPU: 0 PID: 10640 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 159.561900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.571269] Call Trace: [ 159.573872] dump_stack+0x1b9/0x294 [ 159.577516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 159.582725] ? find_held_lock+0x36/0x1c0 [ 159.586811] should_fail.cold.4+0xa/0x1a [ 159.590890] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 159.596016] ? kasan_check_read+0x11/0x20 [ 159.600189] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 159.605400] ? find_held_lock+0x36/0x1c0 [ 159.609501] ? check_same_owner+0x320/0x320 [ 159.613846] ? rcu_note_context_switch+0x710/0x710 [ 159.618803] ? __might_sleep+0x95/0x190 [ 159.622802] __alloc_pages_nodemask+0x34e/0xd70 [ 159.627662] ? default_file_splice_read+0x1c7/0xad0 [ 159.632695] ? do_splice_to+0x12e/0x190 [ 159.636691] ? splice_direct_to_actor+0x268/0x8d0 [ 159.641562] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 159.646612] ? kasan_check_read+0x11/0x20 [ 159.650779] ? rcu_is_watching+0x85/0x140 [ 159.654942] ? rcu_pm_notify+0xc0/0xc0 [ 159.658852] ? rcu_read_lock_sched_held+0x108/0x120 [ 159.663887] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 159.669434] alloc_pages_current+0x10c/0x210 [ 159.673849] push_pipe+0x400/0x7a0 [ 159.677386] ? __kmalloc_node+0x47/0x70 [ 159.681384] iov_iter_get_pages_alloc+0x84a/0x1510 [ 159.686311] ? kasan_check_read+0x11/0x20 [ 159.690451] ? rcu_is_watching+0x85/0x140 [ 159.694596] ? copy_page_from_iter+0x880/0x880 [ 159.699175] ? is_bpf_text_address+0xd7/0x170 [ 159.703663] ? kernel_text_address+0x79/0xf0 [ 159.708072] ? __unwind_start+0x166/0x330 [ 159.712217] ? unwind_get_return_address+0x61/0xa0 [ 159.717153] ? __save_stack_trace+0x7e/0xd0 [ 159.721476] ? save_stack+0xa9/0xd0 [ 159.725093] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 159.730098] ? iov_iter_pipe+0xc2/0x2f0 [ 159.734078] default_file_splice_read+0x1c7/0xad0 [ 159.738913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.744277] ? do_splice_direct+0x400/0x400 [ 159.748587] ? kasan_check_read+0x11/0x20 [ 159.752723] ? debug_mutex_init+0x1c/0x60 [ 159.756861] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 159.761868] ? __lockdep_init_map+0x105/0x590 [ 159.766358] ? lockdep_init_map+0x9/0x10 [ 159.770404] ? debug_mutex_init+0x2d/0x60 [ 159.774541] ? __mutex_init+0x1ef/0x280 [ 159.778505] ? __ia32_sys_membarrier+0x150/0x150 [ 159.783249] ? __lockdep_init_map+0x105/0x590 [ 159.787742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.793265] ? fsnotify+0x415/0xfc0 [ 159.796886] ? fsnotify+0xfc0/0xfc0 [ 159.800522] ? fsnotify_first_mark+0x330/0x330 [ 159.805103] ? security_file_permission+0x1c6/0x240 [ 159.810111] ? rw_verify_area+0x118/0x360 [ 159.814249] ? do_splice_direct+0x400/0x400 [ 159.818574] do_splice_to+0x12e/0x190 [ 159.822370] splice_direct_to_actor+0x268/0x8d0 [ 159.827037] ? pipe_to_sendpage+0x3f0/0x3f0 [ 159.831355] ? do_splice_to+0x190/0x190 [ 159.835324] ? rw_verify_area+0x118/0x360 [ 159.839467] do_splice_direct+0x2cc/0x400 [ 159.843607] ? splice_direct_to_actor+0x8d0/0x8d0 [ 159.848441] ? rw_verify_area+0x118/0x360 [ 159.852578] do_sendfile+0x60f/0xe00 [ 159.856288] ? do_compat_pwritev64+0x1b0/0x1b0 [ 159.860862] ? __might_sleep+0x95/0x190 [ 159.864836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.870362] ? _copy_from_user+0xdf/0x150 [ 159.874516] __x64_sys_sendfile64+0x155/0x240 [ 159.879017] ? __ia32_sys_sendfile+0x290/0x290 [ 159.883608] ? do_syscall_64+0x92/0x800 [ 159.887580] do_syscall_64+0x1b1/0x800 [ 159.891456] ? finish_task_switch+0x1ca/0x840 [ 159.895942] ? syscall_return_slowpath+0x5c0/0x5c0 [ 159.900872] ? syscall_return_slowpath+0x30f/0x5c0 [ 159.905799] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 159.911159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.915997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 159.921178] RIP: 0033:0x455a09 [ 159.924356] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.932056] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 159.939316] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 159.946574] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.953833] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 159.961091] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000a 2018/06/04 21:22:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x105000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002ec0)={'ifb0\x00'}) 2018/06/04 21:22:25 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0900ea21700400000000000000000007", 0x103}) 2018/06/04 21:22:25 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/04 21:22:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x1000000) 2018/06/04 21:22:25 executing program 5: clone(0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000200)) 2018/06/04 21:22:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x209) sendmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000000c0)="608ba7145e969caf9491013ddcab1192d58af666d6ab7cd1239e9824ad", 0x1d}, {&(0x7f0000001200)="f0968c5990caa82642bca7c4083369ffbd", 0x11}], 0x2, 0x0, 0x0, 0x20000000}, 0x7}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001e80)="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", 0x1000}], 0x1, &(0x7f0000002ec0)=[{0x50, 0x116, 0xffffffffffff0001, "2b1bded58411223caa2b2f3eb0ed29c723ae6360a11c75d0c8899837dec164bcc1d58255ce8df487178e406ad3c600933299614025c55219f23d"}], 0x50, 0x5}, 0x3f}, {{&(0x7f0000005780)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005800)="bf32715881733de2f6028187eb26a9b2ef8025959831d39e937b3d95f3ea42fd61d51fe380be78e25a45ee8b6325619ed00542882753968148772f03bd17287dec89d53823e3ba9f1942", 0x4a}], 0x1, &(0x7f00000068c0)=[{0x40, 0x11, 0x8, "bd7fbc1f6fdf14052f1bde472fe7c0d3ea90a3959754fd2aceccfd236c8c4d5893919520944c8e978499"}], 0x40, 0x20000800}, 0xa25}, {{&(0x7f0000009c80)=@nfc={0x27, 0x4, 0x0, 0x6}, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000009d00)="c077ac00df9e0b1eda4dade81059ff802dd878d740e4e7fa7b11a7bb720530cd737fad0d5799a2787df7f2a1d001bc0682e1ac72ba431d215fee0e14856727fb7b5728f36b1ebff60badf36dcefaa150ff1c36fbd9ae275dec2d75f1747a6e209c9da1141fd7c48c857eff6541dd4575bc70d6ccd28d555a648829b0935f165326f0660bc9df95a05d9a10298f5e67b54ee8ab100982b2d0decdd743598ee0e869a5c4a7aa149d38313b78465b2d492de780fe3cc523ce471c6cbbb7e98ad5355d936207618f", 0xc6}], 0x1, &(0x7f0000009f00)=[{0x20, 0x119, 0x5, "b14df19fafa710d5d877fb946235"}, {0x90, 0x88, 0x3, "da92fb5807fe013183d433112d1146349797293be96c48f07a6ef8dc8da0d1c0e281eda90b04c6800abca98dc957a898274b9310835502a982f1ef16c04071d0daeb7cf8023c8ac6c9e0948f0a51ea1eb60667665d04daaed7c2dbd323ab8ce95e0405444ffa0e0ca299935ce47fb27122509eec82e2758b1c3a2b9b1be1"}], 0xb0}}], 0x4, 0x40000) 2018/06/04 21:22:25 executing program 6 (fault-call:2 fault-nth:11): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 160.072492] FAULT_INJECTION: forcing a failure. [ 160.072492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.084443] CPU: 0 PID: 10664 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 160.091390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.100786] Call Trace: [ 160.103399] dump_stack+0x1b9/0x294 [ 160.107049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 160.112265] ? find_held_lock+0x36/0x1c0 [ 160.116345] should_fail.cold.4+0xa/0x1a [ 160.120422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 160.125547] ? kasan_check_read+0x11/0x20 [ 160.129700] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 160.134888] ? find_held_lock+0x36/0x1c0 [ 160.138958] ? check_same_owner+0x320/0x320 [ 160.143274] ? rcu_note_context_switch+0x710/0x710 [ 160.148205] ? __might_sleep+0x95/0x190 [ 160.152176] __alloc_pages_nodemask+0x34e/0xd70 [ 160.156836] ? default_file_splice_read+0x1c7/0xad0 [ 160.161851] ? do_splice_to+0x12e/0x190 [ 160.165820] ? splice_direct_to_actor+0x268/0x8d0 [ 160.170670] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 160.175689] ? kasan_check_read+0x11/0x20 [ 160.179829] ? rcu_is_watching+0x85/0x140 [ 160.183967] ? rcu_pm_notify+0xc0/0xc0 [ 160.187856] ? rcu_read_lock_sched_held+0x108/0x120 [ 160.192865] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 160.198398] alloc_pages_current+0x10c/0x210 [ 160.202803] push_pipe+0x400/0x7a0 [ 160.206332] ? __kmalloc_node+0x47/0x70 [ 160.210313] iov_iter_get_pages_alloc+0x84a/0x1510 [ 160.215234] ? kasan_check_read+0x11/0x20 [ 160.219369] ? rcu_is_watching+0x85/0x140 [ 160.223518] ? copy_page_from_iter+0x880/0x880 [ 160.228105] ? is_bpf_text_address+0xd7/0x170 [ 160.232591] ? kernel_text_address+0x79/0xf0 [ 160.236990] ? __unwind_start+0x166/0x330 [ 160.241135] ? unwind_get_return_address+0x61/0xa0 [ 160.246055] ? __save_stack_trace+0x7e/0xd0 [ 160.250378] ? save_stack+0xa9/0xd0 [ 160.253995] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 160.259005] ? iov_iter_pipe+0xc2/0x2f0 [ 160.262982] default_file_splice_read+0x1c7/0xad0 [ 160.267818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.273180] ? do_splice_direct+0x400/0x400 [ 160.277494] ? kasan_check_read+0x11/0x20 [ 160.281642] ? debug_mutex_init+0x1c/0x60 [ 160.285778] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 160.290786] ? __lockdep_init_map+0x105/0x590 [ 160.295272] ? lockdep_init_map+0x9/0x10 [ 160.299321] ? debug_mutex_init+0x2d/0x60 [ 160.303461] ? __mutex_init+0x1ef/0x280 [ 160.307424] ? __ia32_sys_membarrier+0x150/0x150 [ 160.312182] ? __lockdep_init_map+0x105/0x590 [ 160.316685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.322208] ? fsnotify+0x415/0xfc0 [ 160.325828] ? fsnotify+0xfc0/0xfc0 [ 160.329445] ? fsnotify_first_mark+0x330/0x330 [ 160.334033] ? security_file_permission+0x1c6/0x240 [ 160.339044] ? rw_verify_area+0x118/0x360 [ 160.343183] ? do_splice_direct+0x400/0x400 [ 160.347509] do_splice_to+0x12e/0x190 [ 160.351307] splice_direct_to_actor+0x268/0x8d0 [ 160.355970] ? pipe_to_sendpage+0x3f0/0x3f0 [ 160.360290] ? do_splice_to+0x190/0x190 [ 160.364258] ? rw_verify_area+0x118/0x360 [ 160.368421] do_splice_direct+0x2cc/0x400 [ 160.372565] ? splice_direct_to_actor+0x8d0/0x8d0 [ 160.377409] ? rw_verify_area+0x118/0x360 [ 160.381556] do_sendfile+0x60f/0xe00 [ 160.385266] ? do_compat_pwritev64+0x1b0/0x1b0 [ 160.389861] ? __might_sleep+0x95/0x190 [ 160.393838] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.399385] ? _copy_from_user+0xdf/0x150 [ 160.403527] __x64_sys_sendfile64+0x155/0x240 [ 160.408017] ? __ia32_sys_sendfile+0x290/0x290 [ 160.412595] ? do_syscall_64+0x92/0x800 [ 160.416579] do_syscall_64+0x1b1/0x800 [ 160.420457] ? finish_task_switch+0x1ca/0x840 [ 160.424942] ? syscall_return_slowpath+0x5c0/0x5c0 [ 160.429862] ? syscall_return_slowpath+0x30f/0x5c0 [ 160.434785] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 160.440147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.444987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.450165] RIP: 0033:0x455a09 [ 160.453339] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.461042] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{0xea, 0x0, 0x0, 0x0, "a5daa99b976fae4cc5063350776714090824743b0420f15675f40fce79c3e912eea3b62d39c9b393e10906b0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fb8923d51428ce8bb27053f41621ecaa8cd35550694e6482fa206d44b1e0f1fe49989748e50b871fa6175af7dbdf7a2536d31b6e8ee224d4d6a5f22fcdaf2f63", &(0x7f00000002c0), 0x8}) 2018/06/04 21:22:26 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)="637075736553a06d656d7300", 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe000, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)) [ 160.468397] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 160.475653] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 160.482922] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 160.490178] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000b 2018/06/04 21:22:26 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc)=@assoc_id=0x0, &(0x7f0000001240)=0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000011c0)={{&(0x7f000000a000/0x3000)=nil, 0x3000}}) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed, r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r5, &(0x7f00000015c0)={0x40000042}, 0xfffffffffffffebd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000007ffc)=0x10000000006) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r2, 0x400, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r1, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0x4c}, {&(0x7f0000011fff)=""/1, 0x1}], 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000013c0)={'broute\x00', 0x0, 0x3, 0xf8, [], 0x1, &(0x7f0000001280)=[{}], &(0x7f00000012c0)=""/248}, &(0x7f0000001440)=0x78) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001480)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000014c0)={r7, 0x80000, r6}) connect$unix(r6, &(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e) read(r1, &(0x7f0000000000)=""/4096, 0x1000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000001600)={0x3002, 0x7ffd}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) [ 160.673137] QAT: Invalid ioctl [ 161.458416] QAT: Invalid ioctl [ 161.506744] QAT: Invalid ioctl [ 161.521990] QAT: Invalid ioctl [ 161.558479] QAT: Invalid ioctl 2018/06/04 21:22:27 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/04 21:22:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x81785501, &(0x7f0000001000)) 2018/06/04 21:22:27 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000140)) 2018/06/04 21:22:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000547fa8)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) 2018/06/04 21:22:27 executing program 6 (fault-call:2 fault-nth:12): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x209) sendmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000000c0)="608ba7145e969caf9491013ddcab1192d58af666d6ab7cd1239e9824ad", 0x1d}, {&(0x7f0000001200)="f0968c5990caa82642bca7c4083369ffbd", 0x11}], 0x2, 0x0, 0x0, 0x20000000}, 0x7}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001e80)="bc5c88369ee8beb1dc0aaff5fdc2cb0b88aefccacd2ab5e0042a4169a78a9a4ccd766841557a2e342574e65155f53c4442d77932d22146b2cb5256d60b1542955581268d8e8edc29fcfb1e3aa18d498341a350e851aa958de97728e4acfec0e6c11497e240472274608422dd94fadcae0d4bb1a4c438eaa606c261e51b15dd17705537f797d8c8f91d600d90c9f96d832afc7fe55d30adcd9468e2255645b0454e76d725a754206d00010db159d1435a3bbf030828ba3785b33410e0839785d19ba2e85fd1feae3a24ce4bcad4f3460a5559506c02cf15cb6536c7ea60f05483e73d8b3902b04338ebd53fbe4a7a10251009bc642ee7fbdbc62af3a996d2f40617b12bfbaa3a18290ecbbb96bbc3f81c1360fc1a2a3d7e309eb66cbd286b2efc220c6e258df3879199997de61ba05f56e85c4761ccf78552f3188f55855ad8de784f4942642b696b3814d010aa8db9eb1aad633d9d3a225261ae44b0621fd7ff0febefc6cccd98c51bbc587324805134421025023ed7c55dc830d14bdc82eeac16c8951a09aed90a241b05cabb36dd0c069c6b4ce13dcd2183a80043fc078697d79a2d7225cb6cd4a4f2b3ab5863c19d68924a5a135b255f93d14309ed8dec03421469b6e4414244d753ff06b4ed976cb7b1c835cefe4034c7d4ea57dc010f4963c8b49b442f85e0e136591cfb8a9f1788f94a4f4c06ac17b476de0739e6cf31cd48c0c0825e11d803c7fbb01d1548e027841233f478886f6f6c1b087339dd9abc2ad81fa39bfa13caa8d90044c13769bca0184c9c746e3e84842502a0b75499d8bffec4c6b8daa958df1401123d60a1b5a387aae19c88085a548dc518c9a67648a3e402265bebff5c10a341732d2a5fad0cb6bcf181ad9df05d26fffebecc1faaaa527a7c6c0cebd2af82274019c6308390fa673b4f61a45d7bf211e0fdcb328e2d2afadabd67ca1ca2e2a2d1458ac83a28827f1dbb59554cccd660a9184a82b1ff758aa136cf85e3b6afd804c93bf94ff4b92defcee7490639381b1c910407c1efa9600d96f75d94d564b45049853945e3ad12cbf2fc1948c45cb061abd0ed8e5f1ff2a36c74ad19c22838d97d410bf1d051e97abae3c50c14a77e48a3e6e38310e3e331a2b2ac3ebb37effcba4332f40d97dbefb966604a919339f198451ea647d91afde0ac5913c443707cb0dd64a294242dacc293a1d44c88abd406447852e09e31e5f9c597d316ea498811e5bad645bd0e40a58c89b5c9cdccada22a4d6c1c3144b0791247366d43419f5d15b57cf20c1e7102beff036105078218f83f80cdd25f92a5bb99b82e8c9c9e9ae9e6e0f16bc734fc10c978605344c1a84499b42aee4f4cb6807412a43ffbe0fb4d8c93d602b462679498b6b5018c5af27552c1e40fc3dcc8d90c640c03f352f99e0ba32c3b8a9edbb77b06951961bbd7e05cd37356d3de38c6a00bfc6fb41323493880d8b9334dc9cb077f5dcc15c5c580841f5a87352abdfebb180c1b5c6bdf0f9e954c46b2e271d77981281213f10b04a7faa9a9db0a74994896a3ae8ec490b0cd18f1962521a9f861d0f2cb7c574be1abac6355a68bbd9b9769cffca5c01ce76cfc641393a96d693403ef1f5e8265aba2e5af6461a93ab956328fca128de50be7ee8468ceb81eb797cc5c70e4f9f4f6ee747bb6d2d74cac17df18631745e2baade20777b4fb1bad15ee46f3a46545103189c4f392231ffc6dd91ca2c672ec08f2a56ae6e0d0fa5371d138a43ebaac1bf837e6507e206e52664738dc42a62123f9e2bc4c4b123d6d3788561de3f11e2c2c39cd26154805a5d31de837eaa6459f1b8556f3748e378d136de25c19cd5ea6fa38f5635b691d4eafbe2e35d0df01bfd078d9887604120605f4512837ee70e7d18d3eac5348d9cf6b4fe5dc635d76454a8aa8bb74cd078ee20cf2540f3a947d3e2d38e43a9295561123f82aa4f99856d37bfd4cd0616f82a7ac114d4548a6006a7de04845365b1aa7f03bde1b19c698a0af7c8a541b0f9a03e8c5c8bbabd303b22ec79f65ae6578cb5b0fccec94d758998398a862956bed806467c3381e895b0c8e81395cadc1b2812cd9907bb64bffe67647d23337afa9b136a7e850689c39740ed7af9659e3418adf157a449bcf6298ea4305c281df6e56c74d3f5e5b9e60a3c7b51cdff0cdd7266514f3bc7eda040c1ea5955a1258cf1e34702df993eadf544574a53f2a0faba0b8acdd3c151aea39d13aaac5c2feb60464c0bb90c3555480b5889c643edd1f6b12f8457a318d7b8bfdc8c94a2f0054d5016847983a3dd318bee17b9aad94a799de7ba7683284cdfe17e76c32035d9cd56fef0def697a1d762d0233778d602a9bb4c76eb924584596b7c3922ab70dd59bd0024ed0271e6d9349585895c9b45731a796548d4b5ba11ca3c5edc00ea6c648bd278c2338768204fcd83f342030025750600c835405f55871a215e2ca17f6b6714b3812e162ede495dba97c6ef106dc4100ba7635738328f977a568b4117a0ee64ff9733891bdd713a116dc0e2df74d6e2b648541154c42ab3e6918fa9ee3c56c58b958018e0b8ed01237b87a0ec5a93bd737a0e59cdc85be2c54763a7e807dd85ceb97e93013212021b9ca341564fd3c410262b1e64f373d01d3afa2ab14a7c22fdb37985dbab55924de1150d4d472be3952edddda59586fb15509d13ba7147b3b9574c6d87e06f47a42d550520d5b04a4c0edf1294b9550b678378994661eeddcfe5c290c29d2d56316db0486792481ac65ab466c69f83c05cd259c57966424fba68f22c99acf5488007f5565b8ea40e7cc86bc8f49fd0249a8a1a3a2d8ae689ea5552a55707338b9e84b3ee4bee6f14f6751d97a029c61202fc48c09f4eea209bb65493925b2ef98dc54cd2ddcd61db33b8e4a902a406fbb03ab47fcae5bb53263820f9d21dbc4e49b17d9ac20109efcd46fa3017482d5a3466f6824c0fc5023289f3d1f10eb5c6dc3ae597b085f9252a186674cc8fe6525e43aaaa36b2c4b7ca05d00118a16ec59e0c47d79d17abcb5eb59119d6ad85aef7ef16a1ff309e3ec32e5d8bd2e9fcd14f17f187ddb5fc15978aa8fb1124f409e4004d40656721bbf34834245a9001eec1ab715a9007817335730e9a598269b9eae45db585c7b8cc845a0e91a8427d9b79f7aba44f175dfcb63d813efc7b1b6c0ba03ddf13a27da4ed73600d90577ff35c03601cd3e8c75d658caae70ec2736cbe49f5913808ee93f208e70460e4bf5b9b5f878e43a9b84f69707c1eb56c977dd58ebfb947599fea9d77304cc952719afef24dc4953febcc2b6b88805f5927dd9c6652ed062915cd60fb6d190e50a5d7f1fb4606e0001fc0b995e13c1470a6202d678bfd489efaf8bc6d9172423dc9f7b01f267a2f1da57af02e1724d5435545671da62603e3ed2750dede81d2c3aeb92a8f9002fc82ee11a8c1881b542edcb218a2bfd99fab4bcacf062dba2d23271f969751a380493b41e21e669917ce701f19cbd622951c3a8f26af08ea45af24b79b0ff1ab0cb1ab4dfb6237a4373f3d82fc170b561586db175402ab192f5bb2cf8960a55eb4d3ecc9a3bc85f4c6f562d786d4aca68ec2c69743382d7d742c18a4da6e826d337013b4eeb66fad93f4a50c2df52500f485f972a86b9d05bbaab51775dad50b47eb581ca3093024eca9871c15093c6b4f8bc9d6218e10df8782e4c66250449edb653e0c328e830d42d472b8d43abbd555ca20bb870e398397337a33f57a3a59baba7a2ea19116a42659397a32649ee15fda60cba32117e94281819ef6e4b868271dd3ba7e5b1ee5d9f01de3101101ec12b195109bac93892a09f5b8fcfe4a706f98c065d3358aea3a137585534131885644f10547b22f7f4a86940e1b5193634a40d78944c7c8df87cb5e1ca6a1a1f0ebaaf06e7c48ee0a9e24008c9aedaee91c11ac6291fcfdbc4e236596dfd6a11ac5d68fd011d7e0e094c8d43482f82f4cbe1035fc0a51d2770fedd5f39938241824ec4ca80efd5807f001901f03d99964185282afb039aa8970d716c0c7b3b9f8adb58045801316d08c5cacd31f7526005416e93f52dc651f920aef931057e18c97c9f930152992f3f1f2201e185bb8ff8f1e199a2bf32cfee02eb15fb2a52371a35a9517a5e1ede006a7e4387c703934214ba68c372ba167427a6f2e0559d1be913cdb44b5db741d468fd80fde5627f1ec32825eb68cd8a7f9d02a131078fb831f5a818cd374a7cd27f40b359489cb50960bcff1235ee704b29fdc0b2bc177a7573768386813599b933674789c36b4ae83c9bc993ff46432396ae6193f5ac73e8457dc7b78cfb72aef75330c2e217a3154011861fe787108bf04d7fdf0592ab458e89f6c9b033c1826249571038ad330d9d02a380a46918f473d948c261f3fbeeaf369d6a25b52c9e523a690317d126ecc8a8f34021607ddc5ff3433a7cc2bb4d31aae3c677059d93bbabfba01a2c5150cbb8ee7f674c726e8970e5e033d6cbd757880c1f5b8f8e8a99546372a97b07b6d0b674810e616da898db40941b8eb78bfeb21c80a480b38ea2730c17e59e8ad13cf490dd348e8b6f1b938ac4a9a3b8dcc1cee096cf0006feb74042f9d5ac2a63d8989332dea18de26617e3daa236b1b3af6d763123b483996443ec2ffd429aeb53af1e6837709239bb11994999e12c76018ea5845c37d9e3c2f23d31779cb26c754cdbfa0f3b9e13e54fa964d6fa9d086450660242df7bb8f4312f34f93cc75052061d43453e2b3e384313c22a57bbedbca4ea680e8413fb347ca3f69d4f84bc097660bd3a007a0ed4aca7676e287e8455c6a910bf2f69c96aa23c72bd708d9c51906b88e39f759c711ae48e225bafa0149539dd54e8cc73888b60227ac9185000828410ba04279bfb0661dfad4905e30fd50e75b27b6a3372660d38e67c94f9fa91a84a47f57ad33c9ba51296fe680771d0f5e27663cdab921c741080399caabd5b71a0c89fef09eacc3c6c4b0dc6600d2912f150bca1f860a99fabdd3679c66e1830e9ec3928aa40562442cc192cadb807fa7b207944fa373c0e7fac1800ef9e277a0d51e7b776e6642344c030cda7148d1912458c0d1e5499a9f1008c04fec463639bf1b22aa5b5b5e3eb4c73b13bc6d58d9f78dff85ea57fccd72d753ff8888637eaaf51a7aaa9950f98a21037c93ad02decb8adaf7162056e8a7f113dbf96dce69197cfba5a17e982420568b51c25475a1cbba522d7e5c82a1d3c55694ca2b815dd476cdc404cd04ec11575b8c7879deda9c6e6a379d6640978b1d435ce8b02152fd62f58c926b5a089faa2c9c5a4dd581f4fe488357e383cbf3fe84e33bf5f4f5d2fe9d2561c77fda7e74b11f332ca7bcd2f5629895d4d3fe5e753c3971682ab2053bd6539d3a13dbb3a94c177788b99d469a0c8cb1e4d6e0ae057ea68a249e52e09abe9608ec101b82264f5c2be7fbd490d58e56fb7285df8f1eb94a63fa8bff8b3d26e733638734b28b240b46b3b958650744b8fe9a2e4e12ee65f04eae43ec5100b18b46f3fc966b959eb41862e0a932188356a9ce7c78735557dac1515ca3d2757c095c00c6945851c19a20ffcdf28701388af8b461e7b7eccb80823438ba05be7e35a1af98a5574f84325f08d2023615a6810bcf0c6eb119a32c13de75a28aa40f577267ecc77a02f588b953513d45f3ff9c36c62285df9883e1a560f653cbfc481fa5063c75e1bee8863c9f83da446fc5d5ae17c9a7771ff9c1176b6db35d257f2248fbe2ded2eed36d26c25f85e9bbdf0d89fe0", 0x1000}], 0x1, &(0x7f0000002ec0)=[{0x50, 0x116, 0xffffffffffff0001, "2b1bded58411223caa2b2f3eb0ed29c723ae6360a11c75d0c8899837dec164bcc1d58255ce8df487178e406ad3c600933299614025c55219f23d"}], 0x50, 0x5}, 0x3f}, {{&(0x7f0000005780)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000006880)=[{&(0x7f0000005800)="bf32715881733de2f6028187eb26a9b2ef8025959831d39e937b3d95f3ea42fd61d51fe380be78e25a45ee8b6325619ed00542882753968148772f03bd17287dec89d53823e3ba9f1942", 0x4a}], 0x1, &(0x7f00000068c0)=[{0x40, 0x11, 0x8, "bd7fbc1f6fdf14052f1bde472fe7c0d3ea90a3959754fd2aceccfd236c8c4d5893919520944c8e978499"}], 0x40, 0x20000800}, 0xa25}, {{&(0x7f0000009c80)=@nfc={0x27, 0x4, 0x0, 0x6}, 0x80, &(0x7f0000009ec0)=[{&(0x7f0000009d00)="c077ac00df9e0b1eda4dade81059ff802dd878d740e4e7fa7b11a7bb720530cd737fad0d5799a2787df7f2a1d001bc0682e1ac72ba431d215fee0e14856727fb7b5728f36b1ebff60badf36dcefaa150ff1c36fbd9ae275dec2d75f1747a6e209c9da1141fd7c48c857eff6541dd4575bc70d6ccd28d555a648829b0935f165326f0660bc9df95a05d9a10298f5e67b54ee8ab100982b2d0decdd743598ee0e869a5c4a7aa149d38313b78465b2d492de780fe3cc523ce471c6cbbb7e98ad5355d936207618f", 0xc6}], 0x1, &(0x7f0000009f00)=[{0x20, 0x119, 0x5, "b14df19fafa710d5d877fb946235"}, {0x90, 0x88, 0x3, "da92fb5807fe013183d433112d1146349797293be96c48f07a6ef8dc8da0d1c0e281eda90b04c6800abca98dc957a898274b9310835502a982f1ef16c04071d0daeb7cf8023c8ac6c9e0948f0a51ea1eb60667665d04daaed7c2dbd323ab8ce95e0405444ffa0e0ca299935ce47fb27122509eec82e2758b1c3a2b9b1be1"}], 0xb0}}], 0x4, 0x40000) 2018/06/04 21:22:27 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x8003, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) seccomp(0x1, 0x1, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x10001, 0x7, 0x1, 0x800}]}) 2018/06/04 21:22:27 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 161.593626] QAT: Invalid ioctl [ 161.632817] FAULT_INJECTION: forcing a failure. [ 161.632817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.644848] CPU: 1 PID: 10705 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 161.651786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.661169] Call Trace: [ 161.663764] dump_stack+0x1b9/0x294 [ 161.667387] ? dump_stack_print_info.cold.2+0x52/0x52 [ 161.672579] should_fail.cold.4+0xa/0x1a [ 161.676639] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 161.681745] ? kasan_check_read+0x11/0x20 [ 161.685947] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 161.691131] ? find_held_lock+0x36/0x1c0 [ 161.695201] ? check_same_owner+0x320/0x320 [ 161.699524] ? rcu_note_context_switch+0x710/0x710 [ 161.704457] ? __might_sleep+0x95/0x190 [ 161.708435] __alloc_pages_nodemask+0x34e/0xd70 [ 161.713098] ? default_file_splice_read+0x1c7/0xad0 [ 161.718141] ? do_splice_to+0x12e/0x190 [ 161.722109] ? splice_direct_to_actor+0x268/0x8d0 [ 161.726948] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 161.731970] ? kasan_check_read+0x11/0x20 [ 161.736110] ? rcu_is_watching+0x85/0x140 [ 161.740248] ? rcu_pm_notify+0xc0/0xc0 [ 161.744130] ? rcu_read_lock_sched_held+0x108/0x120 [ 161.749169] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 161.754700] alloc_pages_current+0x10c/0x210 [ 161.759102] push_pipe+0x400/0x7a0 [ 161.762635] ? __kmalloc_node+0x47/0x70 [ 161.766603] iov_iter_get_pages_alloc+0x84a/0x1510 [ 161.771523] ? kasan_check_read+0x11/0x20 [ 161.775658] ? rcu_is_watching+0x85/0x140 [ 161.779799] ? copy_page_from_iter+0x880/0x880 [ 161.784374] ? is_bpf_text_address+0xd7/0x170 [ 161.788860] ? kernel_text_address+0x79/0xf0 [ 161.793260] ? __unwind_start+0x166/0x330 [ 161.797400] ? unwind_get_return_address+0x61/0xa0 [ 161.802318] ? __save_stack_trace+0x7e/0xd0 [ 161.806636] ? save_stack+0xa9/0xd0 [ 161.810254] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 161.815256] ? iov_iter_pipe+0xc2/0x2f0 [ 161.819220] default_file_splice_read+0x1c7/0xad0 [ 161.824052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.829412] ? do_splice_direct+0x400/0x400 [ 161.833720] ? kasan_check_read+0x11/0x20 [ 161.837855] ? debug_mutex_init+0x1c/0x60 [ 161.841993] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 161.847000] ? __lockdep_init_map+0x105/0x590 [ 161.851490] ? lockdep_init_map+0x9/0x10 [ 161.855538] ? debug_mutex_init+0x2d/0x60 [ 161.859675] ? __mutex_init+0x1ef/0x280 [ 161.863639] ? __ia32_sys_membarrier+0x150/0x150 [ 161.868385] ? __lockdep_init_map+0x105/0x590 [ 161.872874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.878397] ? fsnotify+0x415/0xfc0 [ 161.882021] ? fsnotify+0xfc0/0xfc0 [ 161.885666] ? fsnotify_first_mark+0x330/0x330 [ 161.890242] ? security_file_permission+0x1c6/0x240 [ 161.895245] ? rw_verify_area+0x118/0x360 [ 161.899381] ? do_splice_direct+0x400/0x400 [ 161.903689] do_splice_to+0x12e/0x190 [ 161.907482] splice_direct_to_actor+0x268/0x8d0 [ 161.912140] ? pipe_to_sendpage+0x3f0/0x3f0 [ 161.916463] ? do_splice_to+0x190/0x190 [ 161.920427] ? rw_verify_area+0x118/0x360 [ 161.924567] do_splice_direct+0x2cc/0x400 [ 161.928707] ? splice_direct_to_actor+0x8d0/0x8d0 [ 161.933541] ? rw_verify_area+0x118/0x360 [ 161.937679] do_sendfile+0x60f/0xe00 [ 161.941397] ? do_compat_pwritev64+0x1b0/0x1b0 [ 161.945967] ? __might_sleep+0x95/0x190 [ 161.949943] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.955483] ? _copy_from_user+0xdf/0x150 [ 161.959631] __x64_sys_sendfile64+0x155/0x240 [ 161.964135] ? __ia32_sys_sendfile+0x290/0x290 [ 161.968711] ? do_syscall_64+0x92/0x800 [ 161.972705] do_syscall_64+0x1b1/0x800 [ 161.976596] ? finish_task_switch+0x1ca/0x840 [ 161.981090] ? syscall_return_slowpath+0x5c0/0x5c0 [ 161.986020] ? syscall_return_slowpath+0x30f/0x5c0 [ 161.991302] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 161.996667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.001511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.006692] RIP: 0033:0x455a09 [ 162.009870] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.017594] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 162.024857] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 162.032118] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 162.039375] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 162.046632] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000c 2018/06/04 21:22:27 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) 2018/06/04 21:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x22c, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002340)=""/114, 0x72}}], 0x2, 0x40010122, &(0x7f0000002840)={0x0, r1+10000000}) 2018/06/04 21:22:27 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:28 executing program 6 (fault-call:2 fault-nth:13): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x2) r1 = dup(r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)=ANY=[]) 2018/06/04 21:22:28 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/184, 0xb8}], 0x1) 2018/06/04 21:22:28 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000005900)=0x14, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{0xa}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 2018/06/04 21:22:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000e3e000)=""/8, 0x8, 0x0) 2018/06/04 21:22:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 2018/06/04 21:22:28 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 163.171546] FAULT_INJECTION: forcing a failure. [ 163.171546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.183627] CPU: 1 PID: 10746 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 163.190575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.199944] Call Trace: [ 163.202566] dump_stack+0x1b9/0x294 [ 163.206223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 163.211440] should_fail.cold.4+0xa/0x1a [ 163.215528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.220738] ? kasan_check_read+0x11/0x20 [ 163.224890] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 163.230085] ? find_held_lock+0x36/0x1c0 [ 163.234328] ? check_same_owner+0x320/0x320 [ 163.238907] ? rcu_note_context_switch+0x710/0x710 [ 163.243848] ? __might_sleep+0x95/0x190 [ 163.247826] __alloc_pages_nodemask+0x34e/0xd70 [ 163.252488] ? default_file_splice_read+0x1c7/0xad0 [ 163.257492] ? do_splice_to+0x12e/0x190 [ 163.261455] ? splice_direct_to_actor+0x268/0x8d0 [ 163.266287] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 163.271298] ? kasan_check_read+0x11/0x20 [ 163.275433] ? rcu_is_watching+0x85/0x140 [ 163.279571] ? rcu_pm_notify+0xc0/0xc0 [ 163.283454] ? rcu_read_lock_sched_held+0x108/0x120 [ 163.288460] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 163.293991] alloc_pages_current+0x10c/0x210 [ 163.298394] push_pipe+0x400/0x7a0 [ 163.301922] ? __kmalloc_node+0x47/0x70 [ 163.305914] iov_iter_get_pages_alloc+0x84a/0x1510 [ 163.310836] ? kasan_check_read+0x11/0x20 [ 163.314983] ? rcu_is_watching+0x85/0x140 [ 163.319125] ? copy_page_from_iter+0x880/0x880 [ 163.323698] ? is_bpf_text_address+0xd7/0x170 [ 163.328183] ? kernel_text_address+0x79/0xf0 [ 163.332584] ? __unwind_start+0x166/0x330 [ 163.336724] ? unwind_get_return_address+0x61/0xa0 [ 163.341656] ? __save_stack_trace+0x7e/0xd0 [ 163.346151] ? save_stack+0xa9/0xd0 [ 163.349773] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 163.354779] ? iov_iter_pipe+0xc2/0x2f0 [ 163.358746] default_file_splice_read+0x1c7/0xad0 [ 163.363589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.368964] ? do_splice_direct+0x400/0x400 [ 163.373281] ? kasan_check_read+0x11/0x20 [ 163.377442] ? debug_mutex_init+0x1c/0x60 [ 163.381588] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 163.386594] ? __lockdep_init_map+0x105/0x590 [ 163.391094] ? lockdep_init_map+0x9/0x10 [ 163.395161] ? debug_mutex_init+0x2d/0x60 [ 163.399303] ? __mutex_init+0x1ef/0x280 [ 163.403268] ? __ia32_sys_membarrier+0x150/0x150 [ 163.408021] ? __lockdep_init_map+0x105/0x590 [ 163.412517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.418050] ? fsnotify+0x415/0xfc0 [ 163.421666] ? fsnotify+0xfc0/0xfc0 [ 163.425281] ? fsnotify_first_mark+0x330/0x330 [ 163.429864] ? security_file_permission+0x1c6/0x240 [ 163.434961] ? rw_verify_area+0x118/0x360 [ 163.439100] ? do_splice_direct+0x400/0x400 [ 163.443413] do_splice_to+0x12e/0x190 [ 163.447223] splice_direct_to_actor+0x268/0x8d0 [ 163.451900] ? pipe_to_sendpage+0x3f0/0x3f0 [ 163.456214] ? do_splice_to+0x190/0x190 [ 163.460178] ? rw_verify_area+0x118/0x360 [ 163.464347] do_splice_direct+0x2cc/0x400 [ 163.468492] ? splice_direct_to_actor+0x8d0/0x8d0 [ 163.473330] ? rw_verify_area+0x118/0x360 [ 163.477468] do_sendfile+0x60f/0xe00 [ 163.481176] ? do_compat_pwritev64+0x1b0/0x1b0 [ 163.485762] ? __might_sleep+0x95/0x190 [ 163.489731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.495269] ? _copy_from_user+0xdf/0x150 [ 163.499411] __x64_sys_sendfile64+0x155/0x240 [ 163.503899] ? __ia32_sys_sendfile+0x290/0x290 [ 163.508473] ? do_syscall_64+0x92/0x800 [ 163.512441] do_syscall_64+0x1b1/0x800 [ 163.516319] ? finish_task_switch+0x1ca/0x840 [ 163.520802] ? syscall_return_slowpath+0x5c0/0x5c0 [ 163.525738] ? syscall_return_slowpath+0x30f/0x5c0 [ 163.530663] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 163.536032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.540883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.546057] RIP: 0033:0x455a09 [ 163.549233] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 163.556943] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 163.564205] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 2018/06/04 21:22:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x20000102000007) 2018/06/04 21:22:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 163.571461] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 163.578720] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 163.585977] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000d 2018/06/04 21:22:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYPTR64], 0x42) 2018/06/04 21:22:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, &(0x7f0000000040)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2018/06/04 21:22:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000601fdff001000000000000000000000"], 0x14}, 0x1}, 0x0) 2018/06/04 21:22:29 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xbc93) fallocate(r0, 0x3, 0x0, 0x7ab5) 2018/06/04 21:22:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:29 executing program 6 (fault-call:2 fault-nth:14): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:29 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") flistxattr(r1, &(0x7f0000000000)=""/37, 0x100000000000000) [ 163.833528] FAULT_INJECTION: forcing a failure. [ 163.833528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.845540] CPU: 1 PID: 10785 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 163.852478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.861855] Call Trace: [ 163.864461] dump_stack+0x1b9/0x294 [ 163.868119] ? dump_stack_print_info.cold.2+0x52/0x52 [ 163.873328] ? find_held_lock+0x36/0x1c0 [ 163.877421] should_fail.cold.4+0xa/0x1a [ 163.881515] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.886648] ? kasan_check_read+0x11/0x20 [ 163.890822] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 163.896036] ? find_held_lock+0x36/0x1c0 [ 163.900101] ? check_same_owner+0x320/0x320 [ 163.904415] ? rcu_note_context_switch+0x710/0x710 [ 163.909333] ? __might_sleep+0x95/0x190 [ 163.913298] __alloc_pages_nodemask+0x34e/0xd70 [ 163.917958] ? default_file_splice_read+0x1c7/0xad0 [ 163.922977] ? do_splice_to+0x12e/0x190 [ 163.926952] ? splice_direct_to_actor+0x268/0x8d0 [ 163.931785] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 163.936800] ? kasan_check_read+0x11/0x20 [ 163.940935] ? rcu_is_watching+0x85/0x140 [ 163.945074] ? rcu_pm_notify+0xc0/0xc0 [ 163.948956] ? rcu_read_lock_sched_held+0x108/0x120 [ 163.953969] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 163.959505] alloc_pages_current+0x10c/0x210 [ 163.963909] push_pipe+0x400/0x7a0 [ 163.967438] ? __kmalloc_node+0x47/0x70 [ 163.971404] iov_iter_get_pages_alloc+0x84a/0x1510 [ 163.976323] ? kasan_check_read+0x11/0x20 [ 163.980474] ? rcu_is_watching+0x85/0x140 [ 163.984630] ? copy_page_from_iter+0x880/0x880 [ 163.989219] ? is_bpf_text_address+0xd7/0x170 [ 163.993701] ? kernel_text_address+0x79/0xf0 [ 163.998096] ? __unwind_start+0x166/0x330 [ 164.002243] ? unwind_get_return_address+0x61/0xa0 [ 164.007159] ? __save_stack_trace+0x7e/0xd0 [ 164.011473] ? save_stack+0xa9/0xd0 [ 164.015092] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 164.020095] ? iov_iter_pipe+0xc2/0x2f0 [ 164.024062] default_file_splice_read+0x1c7/0xad0 [ 164.028904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.034309] ? do_splice_direct+0x400/0x400 [ 164.038618] ? kasan_check_read+0x11/0x20 [ 164.042755] ? debug_mutex_init+0x1c/0x60 [ 164.046888] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 164.051903] ? __lockdep_init_map+0x105/0x590 [ 164.056395] ? lockdep_init_map+0x9/0x10 [ 164.060441] ? debug_mutex_init+0x2d/0x60 [ 164.064575] ? __mutex_init+0x1ef/0x280 [ 164.068535] ? __ia32_sys_membarrier+0x150/0x150 [ 164.073377] ? __lockdep_init_map+0x105/0x590 [ 164.077874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.083396] ? fsnotify+0x415/0xfc0 [ 164.087012] ? fsnotify+0xfc0/0xfc0 [ 164.090639] ? fsnotify_first_mark+0x330/0x330 [ 164.095214] ? security_file_permission+0x1c6/0x240 [ 164.100222] ? rw_verify_area+0x118/0x360 [ 164.104372] ? do_splice_direct+0x400/0x400 [ 164.108697] do_splice_to+0x12e/0x190 [ 164.112507] splice_direct_to_actor+0x268/0x8d0 [ 164.117171] ? pipe_to_sendpage+0x3f0/0x3f0 [ 164.121492] ? do_splice_to+0x190/0x190 [ 164.125463] ? rw_verify_area+0x118/0x360 [ 164.129608] do_splice_direct+0x2cc/0x400 [ 164.133756] ? splice_direct_to_actor+0x8d0/0x8d0 [ 164.138589] ? rw_verify_area+0x118/0x360 [ 164.142735] do_sendfile+0x60f/0xe00 [ 164.146442] ? do_compat_pwritev64+0x1b0/0x1b0 [ 164.151018] ? __might_sleep+0x95/0x190 [ 164.154989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.160521] ? _copy_from_user+0xdf/0x150 [ 164.164661] __x64_sys_sendfile64+0x155/0x240 [ 164.169144] ? __ia32_sys_sendfile+0x290/0x290 [ 164.173714] ? do_syscall_64+0x92/0x800 [ 164.177691] do_syscall_64+0x1b1/0x800 [ 164.181568] ? finish_task_switch+0x1ca/0x840 [ 164.186072] ? syscall_return_slowpath+0x5c0/0x5c0 [ 164.191020] ? syscall_return_slowpath+0x30f/0x5c0 [ 164.195946] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 164.201301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.206136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.211312] RIP: 0033:0x455a09 [ 164.214486] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 164.222188] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 164.229444] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 164.236701] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.243956] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 164.251222] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000e 2018/06/04 21:22:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x80000000, 0x80000001, 0xff, 0x5, 0x800, 0x7d8, 0x1, {0x0, @in={{0x2, 0x4e21}}, 0x1, 0x1, 0xe5, 0x0, 0x7fff}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x9}, &(0x7f0000000280)=0x8) 2018/06/04 21:22:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='bond_slave_1\x00', 0xfffffffffffffffa) keyctl$clear(0x7, 0x0) 2018/06/04 21:22:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:30 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2001, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2018/06/04 21:22:30 executing program 6 (fault-call:2 fault-nth:15): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') pselect6(0x40, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000280)={0x90000}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 2018/06/04 21:22:30 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x301000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x101000, 0x0) linkat(r0, &(0x7f0000000240)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) recvfrom$llc(r1, &(0x7f00000003c0)=""/145, 0x91, 0x20, &(0x7f0000000480)={0x1a, 0x1, 0x8, 0x3f, 0xfffffffffffffff7, 0xffffffffffff2e37}, 0x10) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000340)={0x6, 0x0, 0x1, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000380)={0x40, r5, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000004c0)={r5, 0x6}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f0000000100)={{}, {r6, r7+10000000}}, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[{0x2, 0x9}, {0x4}, {0xa, 0x1000}, {0xa, 0xffffffff}], 0x4) unlinkat(r4, &(0x7f0000000180)='./file0\x00', 0x200) fchmodat(r4, &(0x7f0000000080)='./file0\x00', 0x1) 2018/06/04 21:22:30 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xbc93) fallocate(r0, 0x3, 0x0, 0x7ab5) [ 164.372616] FAULT_INJECTION: forcing a failure. [ 164.372616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.384563] CPU: 0 PID: 10814 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 164.391504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.400868] Call Trace: [ 164.403473] dump_stack+0x1b9/0x294 [ 164.407133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 164.412348] ? find_held_lock+0x36/0x1c0 [ 164.416438] should_fail.cold.4+0xa/0x1a 2018/06/04 21:22:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x0) 2018/06/04 21:22:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={{0x8}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) ustat(0x5, &(0x7f0000000100)) [ 164.420526] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 164.425656] ? kasan_check_read+0x11/0x20 [ 164.429831] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 164.435046] ? find_held_lock+0x36/0x1c0 [ 164.439325] ? check_same_owner+0x320/0x320 [ 164.443676] ? rcu_note_context_switch+0x710/0x710 [ 164.448634] ? __might_sleep+0x95/0x190 [ 164.452734] __alloc_pages_nodemask+0x34e/0xd70 [ 164.457426] ? default_file_splice_read+0x1c7/0xad0 [ 164.462464] ? do_splice_to+0x12e/0x190 [ 164.466489] ? splice_direct_to_actor+0x268/0x8d0 2018/06/04 21:22:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0xfffffffd}}) 2018/06/04 21:22:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 164.471357] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 164.476409] ? kasan_check_read+0x11/0x20 [ 164.480574] ? rcu_is_watching+0x85/0x140 [ 164.484743] ? rcu_pm_notify+0xc0/0xc0 [ 164.488658] ? rcu_read_lock_sched_held+0x108/0x120 [ 164.493703] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 164.499269] alloc_pages_current+0x10c/0x210 [ 164.503698] push_pipe+0x400/0x7a0 [ 164.507240] ? __kmalloc_node+0x47/0x70 [ 164.511246] iov_iter_get_pages_alloc+0x84a/0x1510 [ 164.516181] ? kasan_check_read+0x11/0x20 [ 164.520325] ? rcu_is_watching+0x85/0x140 [ 164.524476] ? copy_page_from_iter+0x880/0x880 [ 164.529057] ? is_bpf_text_address+0xd7/0x170 [ 164.533543] ? kernel_text_address+0x79/0xf0 [ 164.537947] ? __unwind_start+0x166/0x330 [ 164.542090] ? unwind_get_return_address+0x61/0xa0 [ 164.547016] ? __save_stack_trace+0x7e/0xd0 [ 164.551346] ? save_stack+0xa9/0xd0 [ 164.554969] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 164.559973] ? iov_iter_pipe+0xc2/0x2f0 [ 164.563945] default_file_splice_read+0x1c7/0xad0 [ 164.568779] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.574142] ? do_splice_direct+0x400/0x400 [ 164.578454] ? kasan_check_read+0x11/0x20 [ 164.582590] ? debug_mutex_init+0x1c/0x60 [ 164.586739] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 164.591747] ? __lockdep_init_map+0x105/0x590 [ 164.596254] ? lockdep_init_map+0x9/0x10 [ 164.600305] ? debug_mutex_init+0x2d/0x60 [ 164.604443] ? __mutex_init+0x1ef/0x280 [ 164.608419] ? __ia32_sys_membarrier+0x150/0x150 [ 164.613167] ? __lockdep_init_map+0x105/0x590 [ 164.617662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.623190] ? fsnotify+0x415/0xfc0 [ 164.626810] ? fsnotify+0xfc0/0xfc0 [ 164.630423] ? fsnotify_first_mark+0x330/0x330 [ 164.635020] ? security_file_permission+0x1c6/0x240 [ 164.640039] ? rw_verify_area+0x118/0x360 [ 164.644180] ? do_splice_direct+0x400/0x400 [ 164.648492] do_splice_to+0x12e/0x190 [ 164.652288] splice_direct_to_actor+0x268/0x8d0 [ 164.656950] ? pipe_to_sendpage+0x3f0/0x3f0 [ 164.661267] ? do_splice_to+0x190/0x190 [ 164.665235] ? rw_verify_area+0x118/0x360 [ 164.669376] do_splice_direct+0x2cc/0x400 [ 164.673519] ? splice_direct_to_actor+0x8d0/0x8d0 [ 164.678356] ? rw_verify_area+0x118/0x360 [ 164.682508] do_sendfile+0x60f/0xe00 [ 164.686220] ? do_compat_pwritev64+0x1b0/0x1b0 [ 164.690793] ? __might_sleep+0x95/0x190 [ 164.694763] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.700290] ? _copy_from_user+0xdf/0x150 [ 164.704433] __x64_sys_sendfile64+0x155/0x240 [ 164.708917] ? __ia32_sys_sendfile+0x290/0x290 [ 164.713508] ? do_syscall_64+0x92/0x800 [ 164.717479] do_syscall_64+0x1b1/0x800 [ 164.721357] ? finish_task_switch+0x1ca/0x840 [ 164.725844] ? syscall_return_slowpath+0x5c0/0x5c0 [ 164.730765] ? syscall_return_slowpath+0x30f/0x5c0 [ 164.735689] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 164.741048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.745890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.751088] RIP: 0033:0x455a09 [ 164.754265] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 164.761976] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 164.769236] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 164.776493] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.783750] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 164.791012] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000000f 2018/06/04 21:22:30 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmsg$inet_sctp(r0, &(0x7f0000000a40)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x8, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000780), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1800005f8000000084000000"], 0xc}, 0x0) 2018/06/04 21:22:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000200), &(0x7f00000003c0)=""/185, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 2018/06/04 21:22:30 executing program 6 (fault-call:2 fault-nth:16): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:30 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="0aa11cea22ae5a008fd004dffcc693b74dbbe16d4292cee9c87be08f10a9db4c2e", 0x21, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r2, 0x9) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:30 executing program 5: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040), 0x1ff, 0x7) [ 164.993949] FAULT_INJECTION: forcing a failure. [ 164.993949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.005933] CPU: 1 PID: 10843 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 165.012876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.022240] Call Trace: [ 165.024849] dump_stack+0x1b9/0x294 [ 165.028502] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.033713] ? find_held_lock+0x36/0x1c0 [ 165.037801] should_fail.cold.4+0xa/0x1a [ 165.041888] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.047011] ? kasan_check_read+0x11/0x20 [ 165.051184] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 165.056391] ? find_held_lock+0x36/0x1c0 [ 165.060490] ? check_same_owner+0x320/0x320 [ 165.064837] ? rcu_note_context_switch+0x710/0x710 [ 165.069796] ? __might_sleep+0x95/0x190 [ 165.073795] __alloc_pages_nodemask+0x34e/0xd70 [ 165.078476] ? default_file_splice_read+0x1c7/0xad0 [ 165.083482] ? do_splice_to+0x12e/0x190 [ 165.087445] ? splice_direct_to_actor+0x268/0x8d0 [ 165.092277] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 165.097290] ? kasan_check_read+0x11/0x20 [ 165.101429] ? rcu_is_watching+0x85/0x140 [ 165.105569] ? rcu_pm_notify+0xc0/0xc0 [ 165.109465] ? rcu_read_lock_sched_held+0x108/0x120 [ 165.114476] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 165.120039] alloc_pages_current+0x10c/0x210 [ 165.124441] push_pipe+0x400/0x7a0 [ 165.127970] ? __kmalloc_node+0x47/0x70 [ 165.131936] iov_iter_get_pages_alloc+0x84a/0x1510 [ 165.136855] ? kasan_check_read+0x11/0x20 [ 165.140996] ? rcu_is_watching+0x85/0x140 [ 165.145161] ? copy_page_from_iter+0x880/0x880 [ 165.149763] ? is_bpf_text_address+0xd7/0x170 [ 165.154276] ? kernel_text_address+0x79/0xf0 [ 165.158702] ? __unwind_start+0x166/0x330 [ 165.162873] ? unwind_get_return_address+0x61/0xa0 [ 165.167818] ? __save_stack_trace+0x7e/0xd0 [ 165.172168] ? save_stack+0xa9/0xd0 [ 165.175806] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 165.180813] ? iov_iter_pipe+0xc2/0x2f0 [ 165.184777] default_file_splice_read+0x1c7/0xad0 [ 165.189607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.194965] ? do_splice_direct+0x400/0x400 [ 165.199272] ? kasan_check_read+0x11/0x20 [ 165.203406] ? debug_mutex_init+0x1c/0x60 [ 165.207537] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 165.212538] ? __lockdep_init_map+0x105/0x590 [ 165.217030] ? lockdep_init_map+0x9/0x10 [ 165.221078] ? debug_mutex_init+0x2d/0x60 [ 165.225210] ? __mutex_init+0x1ef/0x280 [ 165.229180] ? __ia32_sys_membarrier+0x150/0x150 [ 165.233920] ? __lockdep_init_map+0x105/0x590 [ 165.238413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.243936] ? fsnotify+0x415/0xfc0 [ 165.247549] ? fsnotify+0xfc0/0xfc0 [ 165.251159] ? fsnotify_first_mark+0x330/0x330 [ 165.255744] ? security_file_permission+0x1c6/0x240 [ 165.260766] ? rw_verify_area+0x118/0x360 [ 165.264910] ? do_splice_direct+0x400/0x400 [ 165.269218] do_splice_to+0x12e/0x190 [ 165.273008] splice_direct_to_actor+0x268/0x8d0 [ 165.277678] ? pipe_to_sendpage+0x3f0/0x3f0 [ 165.281994] ? do_splice_to+0x190/0x190 [ 165.285958] ? rw_verify_area+0x118/0x360 [ 165.290101] do_splice_direct+0x2cc/0x400 [ 165.294261] ? splice_direct_to_actor+0x8d0/0x8d0 [ 165.299103] ? rw_verify_area+0x118/0x360 [ 165.303235] do_sendfile+0x60f/0xe00 [ 165.306935] ? do_compat_pwritev64+0x1b0/0x1b0 [ 165.311592] ? __might_sleep+0x95/0x190 [ 165.315575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.321100] ? _copy_from_user+0xdf/0x150 [ 165.325234] __x64_sys_sendfile64+0x155/0x240 [ 165.329714] ? __ia32_sys_sendfile+0x290/0x290 [ 165.334289] ? do_syscall_64+0x92/0x800 [ 165.338269] do_syscall_64+0x1b1/0x800 [ 165.342148] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 165.346980] ? syscall_return_slowpath+0x5c0/0x5c0 [ 165.351918] ? syscall_return_slowpath+0x30f/0x5c0 [ 165.356839] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 165.362207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.367063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.372240] RIP: 0033:0x455a09 [ 165.375412] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.383117] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:31 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0xffffffffffffff28) sendto$inet6(r1, &(0x7f0000000140), 0xe803, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:22:31 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, "1214b30d4c2b9ee556aa0bfa3da396b5d73218ecfaba71b2e4451d28f23c4a43d0854045cecd7e80570aacf6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1d8be9548f676518066d6fa198289a187f3fb95a817ec047709f4a359b6ba94d9dc211795b80b9328360e4d1f627fa7b936d492e9b049fedc6321794183fb124", &(0x7f0000000080), 0x9}) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r1, r2, 0x0) 2018/06/04 21:22:31 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000004c0)=""/230, 0xffffff9b) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/04 21:22:31 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f6367726f06000000707500", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)="6370757300000000000010f9c016845ac39c5d16edd9955f7d03cbb0185881a6ec8efdd523baabffbe0d2c312f24fb3583e79c532fb54808d4c3177569cfd9ce8c24aeeb65ae50118be6d1e65190e75ddfd60193c4178bea4b591c2f8906e521a19a1ea8796e0288ff495d6e1095bcbb354d090758dffdf4a6c2e87550b029f5c1", 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xa42f, 0x8}, 'port1\x00', 0x40, 0x100000, 0x6, 0x5b16cb56, 0xe9a, 0x0, 0x10000, 0x0, 0x5, 0x8}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x10001) 2018/06/04 21:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="1402010000000000ee", 0x9) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r0, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c12ae701b74daf6c7e9ec726930f1893953fc43d7c63050e359e8ada93a455fa265b578a5f92b7fc5698f55d554653f0ced1f85c3735bd21bca77d7d9ba3458472926ed49515628bd9c3b940a33cc1bc77ea3a584afc89539a7417791023ff8ca33799b374e760179e5b39b74997e096128c12a6dda762f27df4b0f2b39eb1736b5ae773592489f2f5fd86c1910d414735c23f2aa2053c06fd076b126a9e3318158fb971e3a179206e0cfa842510d062585f2ed0433bd6f6c826706e26b1a1c7ab8aba4278978279bef2a074af9240ad01beb0b7d6d24c06ca3b93a11ec2dde0cd556f7f661fda8d4b52095312c1ad6e538d10ae71ce64181ca2ac7ebff633c940fceb8191e431014cc1ad60cbaedb15832025573e0d44dd1132df1a4e4094be90f9d743074178b4e239470e82745feaa4577ff19c9295d4366509a8118d9c2d7f407974af1818796aecfb780aae793f4f16dad688abad30ca0965ddc9764321505d6ef60bc519dc03a465534b66af52e4e70669ae4506107dc830ef124521097e9fcdadcc39a8eb7b41fb60b74583c5abdf384467d20a97dba87da9ece6628fdc4a2f781ab0780df2e2cffb318bff3013fe4a5b7ba50c0ce804e8102d41a6856364ef62ca72b815672074595b734d76fab41e26af3ccf2d39f4d49d2d3d1b117881792f068a7cac9782f2c8cbcf11023685ac781ff70f96b16d7eb956fe31aea3af7974f8385cf2fe9152baa7c2556e8bb7030b0dd1f0d21503af85de38a85532a75dfa0ce136703def956ade894ff2d7f415a355a33fe65c5e7c6e6fd58f39169e60d50fba3ce3bc9058322a3575dc6412aa5ecb8d62939e5c94b0ba12613a6a3618912437182bce9130f8ece10ad861159bea5911d44f7a8d7ef8f7a160d6ae3b7165fb66425ca9732686356636efdb77fc05e28a5a6493f9bf9703fcc9f5571ab3ce59ca5ee35a94e821e6ada2da7916a37a74a30313820a5cdf1f3017a268acb2bf42dcbcaa6722bb31a70dd8b812760bcd092c65360a171227f80de6b8d1e127774b392fc52bc0b565ab6f8450d3b7ab1c3543917ab303955d66fee82791eff78f1a98177ea3acf2a4c926618a0dd180bcafce2f24196fff796c498900f945f97ba2904aafc4b5775e171ee5aa13e35f34cd58e700abd191b42dbb6a1d4847747bc330318b3865b18e301d44e3c6274dd2a374d25885680f18295efeb6d94f943b43fc8fae544cbc5f5e9528e45b8f8e579f6815295eaeab7f3980a09bd13858a22cd2c5b788c29c016d578b052e2d2c0ef7913a78c2b21b3713d293b62f54ecab1efb03c4518e71c9457c3c190c31f13b7a06fa28ecc071b29829cef338e80dae408d7f06b8e75da745cf83fb8a6e16600549ed3a729811cd77c8165758e023d706b218e0780678ca6d7bd291980a268f4a55d00a6ea969a14c0efe619b032fc6ccae50845c82fec6e8662ffb25dc4a733426a500828bbc1fe570acc5eefd334a2f68e497448dc85becb9c084b5186ca9b872be84a39853a59c32305d2c8d1365bf4a047e829e995c843fbda0a3f4bf9373d2c6e2f9b71f088d61cbe793409b450aff67d0ead723b7da7ecd896ddc5ba10d34cfa4b203d19b9707eb5a8cb98a9a38d5d95219f41989088973778fe7dcad466cb8221504300bd6fd90a2a48e033cc93474f6091be4466c89aff8c8dab3b838808ea220e63e2cdba7b7a65025c315739232c9b91db85e93a2022f08d3d367c014dcfa9437df5548a6a53237fbd312c747a696ad991e4734adb8f1ce54e505616117abda379d7cc636712aab4cd88059a8382a9f57ca4f4eefe878773f7ea46ad0c2d28eb8621ef7000997a8d89c8d4ff1d00c223dbd642cbe29bf3bfaca3c77949eeeaf57b5c068d3729266dc8fb7e2e737e94458fefe1420830415d7a948a850c4b88218fc005b6c664f909a84d92c8a50698feb5be92feeebd8b813fd4a143a248040e9518f00637fc7cf6757fd3157", 0x5b5, 0x804, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/06/04 21:22:31 executing program 6 (fault-call:2 fault-nth:17): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)}}], 0x1, 0x0) [ 165.390382] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 165.397657] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 165.404926] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 165.412189] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000010 2018/06/04 21:22:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)=ANY=[]) 2018/06/04 21:22:31 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 165.491879] FAULT_INJECTION: forcing a failure. [ 165.491879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.503847] CPU: 1 PID: 10873 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 165.510783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.520143] Call Trace: [ 165.522750] dump_stack+0x1b9/0x294 [ 165.526407] ? dump_stack_print_info.cold.2+0x52/0x52 [ 165.531617] ? find_held_lock+0x36/0x1c0 [ 165.535706] should_fail.cold.4+0xa/0x1a [ 165.539791] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.544920] ? kasan_check_read+0x11/0x20 [ 165.549088] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 165.554321] ? find_held_lock+0x36/0x1c0 [ 165.558438] ? check_same_owner+0x320/0x320 [ 165.562784] ? rcu_note_context_switch+0x710/0x710 [ 165.567734] ? __might_sleep+0x95/0x190 [ 165.571724] __alloc_pages_nodemask+0x34e/0xd70 [ 165.576409] ? default_file_splice_read+0x1c7/0xad0 [ 165.581458] ? do_splice_to+0x12e/0x190 [ 165.585447] ? splice_direct_to_actor+0x268/0x8d0 [ 165.590310] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 165.595360] ? kasan_check_read+0x11/0x20 [ 165.599526] ? rcu_is_watching+0x85/0x140 [ 165.603690] ? rcu_pm_notify+0xc0/0xc0 [ 165.607605] ? rcu_read_lock_sched_held+0x108/0x120 [ 165.612645] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 165.618211] alloc_pages_current+0x10c/0x210 [ 165.622642] push_pipe+0x400/0x7a0 [ 165.626195] ? __kmalloc_node+0x47/0x70 [ 165.630195] iov_iter_get_pages_alloc+0x84a/0x1510 [ 165.635142] ? kasan_check_read+0x11/0x20 [ 165.639306] ? rcu_is_watching+0x85/0x140 [ 165.643472] ? copy_page_from_iter+0x880/0x880 [ 165.648077] ? is_bpf_text_address+0xd7/0x170 [ 165.652594] ? kernel_text_address+0x79/0xf0 [ 165.657014] ? __unwind_start+0x166/0x330 [ 165.661180] ? unwind_get_return_address+0x61/0xa0 [ 165.666129] ? __save_stack_trace+0x7e/0xd0 [ 165.670475] ? save_stack+0xa9/0xd0 [ 165.674119] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 165.679148] ? iov_iter_pipe+0xc2/0x2f0 [ 165.683139] default_file_splice_read+0x1c7/0xad0 [ 165.687998] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.693411] ? do_splice_direct+0x400/0x400 [ 165.697747] ? kasan_check_read+0x11/0x20 [ 165.701909] ? debug_mutex_init+0x1c/0x60 [ 165.706071] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 165.711101] ? __lockdep_init_map+0x105/0x590 [ 165.715617] ? lockdep_init_map+0x9/0x10 [ 165.719693] ? debug_mutex_init+0x2d/0x60 [ 165.723857] ? __mutex_init+0x1ef/0x280 [ 165.727848] ? __ia32_sys_membarrier+0x150/0x150 [ 165.732617] ? __lockdep_init_map+0x105/0x590 [ 165.737132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.742675] ? fsnotify+0x415/0xfc0 [ 165.746313] ? fsnotify+0xfc0/0xfc0 [ 165.749957] ? fsnotify_first_mark+0x330/0x330 [ 165.754565] ? security_file_permission+0x1c6/0x240 [ 165.759690] ? rw_verify_area+0x118/0x360 [ 165.763846] ? do_splice_direct+0x400/0x400 [ 165.768177] do_splice_to+0x12e/0x190 [ 165.771969] splice_direct_to_actor+0x268/0x8d0 [ 165.776626] ? pipe_to_sendpage+0x3f0/0x3f0 [ 165.780934] ? do_splice_to+0x190/0x190 [ 165.784895] ? rw_verify_area+0x118/0x360 [ 165.789039] do_splice_direct+0x2cc/0x400 [ 165.793175] ? splice_direct_to_actor+0x8d0/0x8d0 [ 165.798011] ? rw_verify_area+0x118/0x360 [ 165.802152] do_sendfile+0x60f/0xe00 [ 165.805853] ? do_compat_pwritev64+0x1b0/0x1b0 [ 165.810431] ? __might_sleep+0x95/0x190 [ 165.814395] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.819916] ? _copy_from_user+0xdf/0x150 [ 165.824056] __x64_sys_sendfile64+0x155/0x240 [ 165.828554] ? __ia32_sys_sendfile+0x290/0x290 [ 165.833124] ? do_syscall_64+0x92/0x800 [ 165.837087] do_syscall_64+0x1b1/0x800 [ 165.840958] ? finish_task_switch+0x1ca/0x840 [ 165.845436] ? syscall_return_slowpath+0x5c0/0x5c0 [ 165.850351] ? syscall_return_slowpath+0x30f/0x5c0 [ 165.855267] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 165.860616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.865447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.870620] RIP: 0033:0x455a09 [ 165.873800] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.881491] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 165.888752] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 165.896028] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 165.903293] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 165.910547] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000011 [ 166.256697] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/04 21:22:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/04 21:22:32 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="899d0e761d0ddddbff3d8d887c5fbda8e7614e2e70a02745c0bf95fd688d56aa3090124e882e94309beff41442e6e6e13861f871713f42e1b3db6ca9b27270f79f484c050d93c969fd97a0c3508de5ca5f01fdf3f1c676170c31b838ed6032884b51ec68af34ae5558a14bdaa92f4da48672c139ad6d399f13f92ea1e2e51718c8e587e928293989b951de9074431450ca33cb9cc206dc34d2069fba27fe69dfb877f48ada3ffbbcd5437903c3c1c33f4aaf133c5785b2c64f6ccda96a4a59d9d9256718", @ANYRES32, @ANYRES64=r0], 0xd0) 2018/06/04 21:22:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x6, 0x0, 0x0, 0x0, "0afe71c91976d236c6a244bc3c14b9c5969e0830fdbdcbc52b89de75c29244b61a4acccf725207e94d698dab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f5a0f98f5c86ec3880eab33f6894b6d32d460fd44d59913cd6ac782e2c63b5f6d1026e2e7d5a36c08e3be596907035f953a7734436ab0702c86ca2a0b8a510ca", &(0x7f0000000040), 0x32}) 2018/06/04 21:22:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYBLOB="002303000c0001000180c20000000000"], 0x2}, 0x1}, 0x0) 2018/06/04 21:22:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/06/04 21:22:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/06/04 21:22:32 executing program 6 (fault-call:2 fault-nth:18): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) [ 166.408407] FAULT_INJECTION: forcing a failure. [ 166.408407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.420355] CPU: 0 PID: 10896 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 166.427294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.436714] Call Trace: [ 166.439318] dump_stack+0x1b9/0x294 [ 166.442962] ? dump_stack_print_info.cold.2+0x52/0x52 [ 166.448169] ? find_held_lock+0x36/0x1c0 [ 166.452251] should_fail.cold.4+0xa/0x1a [ 166.456308] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.461405] ? kasan_check_read+0x11/0x20 [ 166.465551] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 166.470734] ? find_held_lock+0x36/0x1c0 [ 166.474813] ? check_same_owner+0x320/0x320 [ 166.479149] ? rcu_note_context_switch+0x710/0x710 [ 166.484072] ? __might_sleep+0x95/0x190 [ 166.488045] __alloc_pages_nodemask+0x34e/0xd70 [ 166.492706] ? default_file_splice_read+0x1c7/0xad0 [ 166.497709] ? do_splice_to+0x12e/0x190 [ 166.501672] ? splice_direct_to_actor+0x268/0x8d0 [ 166.506510] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 166.511526] ? kasan_check_read+0x11/0x20 [ 166.515663] ? rcu_is_watching+0x85/0x140 [ 166.519803] ? rcu_pm_notify+0xc0/0xc0 [ 166.523692] ? rcu_read_lock_sched_held+0x108/0x120 [ 166.528699] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 166.534243] alloc_pages_current+0x10c/0x210 [ 166.538648] push_pipe+0x400/0x7a0 [ 166.542176] ? __kmalloc_node+0x47/0x70 [ 166.546145] iov_iter_get_pages_alloc+0x84a/0x1510 [ 166.551067] ? kasan_check_read+0x11/0x20 [ 166.555202] ? rcu_is_watching+0x85/0x140 [ 166.559344] ? copy_page_from_iter+0x880/0x880 [ 166.563934] ? is_bpf_text_address+0xd7/0x170 [ 166.568419] ? kernel_text_address+0x79/0xf0 [ 166.572817] ? __unwind_start+0x166/0x330 [ 166.576960] ? unwind_get_return_address+0x61/0xa0 [ 166.581879] ? __save_stack_trace+0x7e/0xd0 [ 166.586199] ? save_stack+0xa9/0xd0 [ 166.589815] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 166.594819] ? iov_iter_pipe+0xc2/0x2f0 [ 166.598799] default_file_splice_read+0x1c7/0xad0 [ 166.603632] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.608998] ? do_splice_direct+0x400/0x400 [ 166.613317] ? kasan_check_read+0x11/0x20 [ 166.617454] ? debug_mutex_init+0x1c/0x60 [ 166.621592] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 166.626600] ? __lockdep_init_map+0x105/0x590 [ 166.631085] ? lockdep_init_map+0x9/0x10 [ 166.635136] ? debug_mutex_init+0x2d/0x60 [ 166.639274] ? __mutex_init+0x1ef/0x280 [ 166.643237] ? __ia32_sys_membarrier+0x150/0x150 [ 166.647983] ? __lockdep_init_map+0x105/0x590 [ 166.652478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.658000] ? fsnotify+0x415/0xfc0 [ 166.661624] ? fsnotify+0xfc0/0xfc0 [ 166.665238] ? fsnotify_first_mark+0x330/0x330 [ 166.669819] ? security_file_permission+0x1c6/0x240 [ 166.674827] ? rw_verify_area+0x118/0x360 [ 166.678963] ? do_splice_direct+0x400/0x400 [ 166.683276] do_splice_to+0x12e/0x190 [ 166.687068] splice_direct_to_actor+0x268/0x8d0 [ 166.691802] ? pipe_to_sendpage+0x3f0/0x3f0 [ 166.696116] ? do_splice_to+0x190/0x190 [ 166.700082] ? rw_verify_area+0x118/0x360 [ 166.704221] do_splice_direct+0x2cc/0x400 [ 166.708362] ? splice_direct_to_actor+0x8d0/0x8d0 [ 166.713200] ? rw_verify_area+0x118/0x360 [ 166.717340] do_sendfile+0x60f/0xe00 [ 166.721049] ? do_compat_pwritev64+0x1b0/0x1b0 [ 166.725624] ? __might_sleep+0x95/0x190 [ 166.729595] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.735122] ? _copy_from_user+0xdf/0x150 [ 166.739265] __x64_sys_sendfile64+0x155/0x240 [ 166.743751] ? __ia32_sys_sendfile+0x290/0x290 [ 166.748341] ? do_syscall_64+0x92/0x800 [ 166.752312] do_syscall_64+0x1b1/0x800 [ 166.756190] ? finish_task_switch+0x1ca/0x840 [ 166.760677] ? syscall_return_slowpath+0x5c0/0x5c0 [ 166.765596] ? syscall_return_slowpath+0x30f/0x5c0 [ 166.770520] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 166.775890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.780732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.785918] RIP: 0033:0x455a09 [ 166.789095] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.796794] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 166.804051] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 166.811306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.818572] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 166.825828] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000012 2018/06/04 21:22:32 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) write$cgroup_int(r0, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') sendfile(r0, r0, &(0x7f0000000080)=0x804, 0x33d6b35d) 2018/06/04 21:22:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:32 executing program 4: r0 = getpid() ioprio_get$pid(0x3, r0) 2018/06/04 21:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000380)=@req) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) syz_open_dev$urandom(&(0x7f0000000cc0)='/dev/urandom\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}) write(r0, &(0x7f0000c34fff), 0xffffff0b) set_tid_address(&(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300), &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf5e, 0xffff}, &(0x7f00000005c0)=0x302) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/06/04 21:22:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 2018/06/04 21:22:32 executing program 6 (fault-call:2 fault-nth:19): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:32 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x40003e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r3 = accept4(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) close(r3) 2018/06/04 21:22:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000000380)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved=0x1}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 2018/06/04 21:22:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 167.058618] FAULT_INJECTION: forcing a failure. [ 167.058618] name failslab, interval 1, probability 0, space 0, times 0 [ 167.069962] CPU: 0 PID: 10941 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 167.076900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.086262] Call Trace: [ 167.088875] dump_stack+0x1b9/0x294 [ 167.092534] ? dump_stack_print_info.cold.2+0x52/0x52 [ 167.097753] ? find_held_lock+0x36/0x1c0 [ 167.101830] should_fail.cold.4+0xa/0x1a [ 167.105898] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 167.111012] ? rcu_is_watching+0x85/0x140 [ 167.115253] ? rcu_pm_notify+0xc0/0xc0 [ 167.119146] ? find_held_lock+0x36/0x1c0 [ 167.123231] ? check_same_owner+0x320/0x320 [ 167.127560] ? rcu_note_context_switch+0x710/0x710 [ 167.132493] ? kasan_check_read+0x11/0x20 [ 167.136643] ? rcu_is_watching+0x85/0x140 [ 167.140797] __should_failslab+0x124/0x180 [ 167.145036] should_failslab+0x9/0x14 [ 167.148843] __kmalloc+0x2c8/0x760 [ 167.152387] ? rcu_read_lock_sched_held+0x108/0x120 [ 167.157410] ? rw_copy_check_uvector+0x31e/0x3a0 [ 167.162172] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 167.167714] rw_copy_check_uvector+0x31e/0x3a0 [ 167.172312] import_iovec+0xc3/0x420 [ 167.176028] ? dup_iter+0x270/0x270 [ 167.179663] vfs_readv+0xe2/0x1a0 [ 167.183125] ? compat_rw_copy_check_uvector+0x420/0x420 [ 167.188493] ? is_bpf_text_address+0xd7/0x170 [ 167.192998] ? kernel_text_address+0x79/0xf0 [ 167.197412] ? __unwind_start+0x166/0x330 [ 167.201571] ? unwind_get_return_address+0x61/0xa0 [ 167.206512] ? __save_stack_trace+0x7e/0xd0 [ 167.210850] ? save_stack+0xa9/0xd0 [ 167.214488] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 167.219512] ? iov_iter_pipe+0xc2/0x2f0 [ 167.223500] default_file_splice_read+0x514/0xad0 [ 167.228352] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.233737] ? do_splice_direct+0x400/0x400 [ 167.238067] ? kasan_check_read+0x11/0x20 [ 167.242215] ? debug_mutex_init+0x1c/0x60 [ 167.246372] ? __lockdep_init_map+0x105/0x590 [ 167.250870] ? lockdep_init_map+0x9/0x10 [ 167.254938] ? debug_mutex_init+0x2d/0x60 [ 167.259088] ? __mutex_init+0x1ef/0x280 [ 167.263062] ? __ia32_sys_membarrier+0x150/0x150 [ 167.267819] ? __lockdep_init_map+0x105/0x590 [ 167.272322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.277861] ? fsnotify+0x415/0xfc0 [ 167.281514] ? rw_verify_area+0x118/0x360 [ 167.285667] ? do_splice_direct+0x400/0x400 [ 167.289998] do_splice_to+0x12e/0x190 [ 167.293810] splice_direct_to_actor+0x268/0x8d0 [ 167.298487] ? pipe_to_sendpage+0x3f0/0x3f0 [ 167.302817] ? do_splice_to+0x190/0x190 [ 167.306796] ? rw_verify_area+0x118/0x360 [ 167.310950] do_splice_direct+0x2cc/0x400 [ 167.315106] ? splice_direct_to_actor+0x8d0/0x8d0 [ 167.319955] ? rw_verify_area+0x118/0x360 [ 167.324113] do_sendfile+0x60f/0xe00 [ 167.327839] ? do_compat_pwritev64+0x1b0/0x1b0 [ 167.332423] ? __might_sleep+0x95/0x190 [ 167.336413] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.341957] ? _copy_from_user+0xdf/0x150 [ 167.346111] __x64_sys_sendfile64+0x155/0x240 [ 167.350615] ? __ia32_sys_sendfile+0x290/0x290 [ 167.355205] ? do_syscall_64+0x92/0x800 [ 167.359192] do_syscall_64+0x1b1/0x800 [ 167.363086] ? finish_task_switch+0x1ca/0x840 [ 167.367590] ? syscall_return_slowpath+0x5c0/0x5c0 [ 167.372525] ? syscall_return_slowpath+0x30f/0x5c0 [ 167.377465] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 167.382840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.387693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.392887] RIP: 0033:0x455a09 [ 167.396075] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:32 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0xfffffe56) write$cgroup_int(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="46d5991c793876c78dc3f8d9b541864b18cb95f3076e1f18814eb562d32efa0a4e986a64fd3863aa6d0f9cc2182b7c5cf6d9673d7ad5b696bc6e3154d6f343ae77a9b6a82e8e32b561b7b44ee8751f002ea20029e5361bc4b2faa1dddec7971e2ba57358850f427edaab7c01000000000000000a20ad5a44d0f78dd3bccd"], 0x4) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000000c0)=0x3) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000100)=0x3) [ 167.403789] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 167.411058] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 167.418326] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 167.425593] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 167.432858] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000013 2018/06/04 21:22:33 executing program 0: faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x12, 0x1b00) 2018/06/04 21:22:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syslog(0x3, &(0x7f0000000600)=""/153, 0x99) 2018/06/04 21:22:33 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:33 executing program 1: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f00000006c0)=""/176) 2018/06/04 21:22:33 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x40003e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r3 = accept4(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) close(r3) 2018/06/04 21:22:33 executing program 6 (fault-call:2 fault-nth:20): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:33 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x40003e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r3 = accept4(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) close(r3) 2018/06/04 21:22:33 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fdatasync(r0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 168.076899] FAULT_INJECTION: forcing a failure. [ 168.076899] name failslab, interval 1, probability 0, space 0, times 0 [ 168.088608] CPU: 0 PID: 10974 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 168.095604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.104968] Call Trace: [ 168.107571] dump_stack+0x1b9/0x294 [ 168.111222] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.116432] ? perf_trace_lock_acquire+0xe3/0x980 [ 168.121296] ? __mutex_lock+0x7d9/0x17f0 [ 168.131455] ? lock_downgrade+0x8e0/0x8e0 [ 168.135637] should_fail.cold.4+0xa/0x1a [ 168.139728] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.144856] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 168.150069] ? graph_lock+0x170/0x170 [ 168.153897] ? is_bpf_text_address+0xd7/0x170 [ 168.158419] ? find_held_lock+0x36/0x1c0 [ 168.162505] ? __lock_is_held+0xb5/0x140 [ 168.166592] ? check_same_owner+0x320/0x320 [ 168.170915] ? rw_copy_check_uvector+0x31e/0x3a0 [ 168.175673] ? import_iovec+0xc3/0x420 [ 168.179556] ? vfs_readv+0xe2/0x1a0 [ 168.183181] ? rcu_note_context_switch+0x710/0x710 [ 168.188101] ? do_splice_direct+0x2cc/0x400 [ 168.192408] ? do_sendfile+0x60f/0xe00 [ 168.196284] ? __x64_sys_sendfile64+0x155/0x240 [ 168.200947] __should_failslab+0x124/0x180 [ 168.205175] should_failslab+0x9/0x14 [ 168.208965] kmem_cache_alloc_node_trace+0x26f/0x770 [ 168.214065] __kmalloc_node+0x33/0x70 [ 168.217856] kvmalloc_node+0x6b/0x100 [ 168.221669] seq_read+0xa33/0x1520 [ 168.225206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.230736] ? seq_file_path+0x30/0x30 [ 168.234612] ? fsnotify_first_mark+0x330/0x330 [ 168.239188] ? _copy_from_user+0xdf/0x150 [ 168.243350] ? seq_file_path+0x30/0x30 [ 168.247243] proc_reg_read+0x10a/0x190 [ 168.251138] do_iter_read+0x4a3/0x660 [ 168.254942] vfs_readv+0x14f/0x1a0 [ 168.258475] ? compat_rw_copy_check_uvector+0x420/0x420 [ 168.263826] ? is_bpf_text_address+0xd7/0x170 [ 168.268308] ? kernel_text_address+0x79/0xf0 [ 168.272793] ? __unwind_start+0x166/0x330 [ 168.276934] ? __save_stack_trace+0x7e/0xd0 [ 168.281252] ? save_stack+0xa9/0xd0 [ 168.284888] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 168.289890] ? iov_iter_pipe+0xc2/0x2f0 [ 168.293855] default_file_splice_read+0x514/0xad0 [ 168.298688] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.304048] ? do_splice_direct+0x400/0x400 [ 168.308357] ? kasan_check_read+0x11/0x20 [ 168.312492] ? debug_mutex_init+0x1c/0x60 [ 168.316635] ? __lockdep_init_map+0x105/0x590 [ 168.321118] ? lockdep_init_map+0x9/0x10 [ 168.325166] ? debug_mutex_init+0x2d/0x60 [ 168.329313] ? __mutex_init+0x1ef/0x280 [ 168.333274] ? __ia32_sys_membarrier+0x150/0x150 [ 168.338018] ? __lockdep_init_map+0x105/0x590 [ 168.342513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.348036] ? fsnotify+0x415/0xfc0 [ 168.351672] ? rw_verify_area+0x118/0x360 [ 168.355812] ? do_splice_direct+0x400/0x400 [ 168.360124] do_splice_to+0x12e/0x190 [ 168.363921] splice_direct_to_actor+0x268/0x8d0 [ 168.368586] ? pipe_to_sendpage+0x3f0/0x3f0 [ 168.372917] ? do_splice_to+0x190/0x190 [ 168.376888] ? rw_verify_area+0x118/0x360 [ 168.381038] do_splice_direct+0x2cc/0x400 [ 168.385187] ? splice_direct_to_actor+0x8d0/0x8d0 [ 168.390044] ? rw_verify_area+0x118/0x360 [ 168.394186] do_sendfile+0x60f/0xe00 [ 168.397899] ? do_compat_pwritev64+0x1b0/0x1b0 [ 168.402497] ? __might_sleep+0x95/0x190 [ 168.406473] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.412009] ? _copy_from_user+0xdf/0x150 [ 168.416162] __x64_sys_sendfile64+0x155/0x240 [ 168.420656] ? __ia32_sys_sendfile+0x290/0x290 [ 168.425235] ? do_syscall_64+0x92/0x800 [ 168.429206] do_syscall_64+0x1b1/0x800 [ 168.433088] ? finish_task_switch+0x1ca/0x840 [ 168.437603] ? syscall_return_slowpath+0x5c0/0x5c0 [ 168.442548] ? syscall_return_slowpath+0x30f/0x5c0 [ 168.447499] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 168.452877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.457727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.462927] RIP: 0033:0x455a09 [ 168.466122] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.473828] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000007ac0)=[{{&(0x7f00000000c0)=@nfc={0x27}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)="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", 0x505}, {&(0x7f0000001500)="113c53f24de63841ea060869a7e791a4c0c2ec813796ecec11e8f9779a3b486f206305af0275ccae12928d263e2f26fed955009799c5a34a37b795986b8f640c079b6cb9b36ce0b990c0026537093b4a1acaa3a75ebcbbc749013c696b1a178b0a2d5848c6845612d6c260d1f1c53b93603e26d395fb454b0623", 0x7a}], 0x2, 0x0, 0x0, 0x24048000}, 0x3ff}, {{&(0x7f00000078c0)=@ipx={0x4, 0x0, 0x0, "dead21c15685"}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007980)="ce430e1eb84279ba51d042987a0adf816c1959e297e17c9e5d96ae9424fed2ac", 0x20}], 0x1, 0x0, 0x0, 0x8000}, 0x7}], 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x1, 0x4) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/203, 0xcb}], 0x1, &(0x7f00000002c0)=""/182, 0xb6}, 0x10100) 2018/06/04 21:22:33 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:34 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x210202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x1000}) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 168.481091] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 168.488370] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 168.495636] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 168.502897] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000014 2018/06/04 21:22:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'lo\x00'}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/06/04 21:22:34 executing program 1: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7ad620e1ec16c006) 2018/06/04 21:22:34 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 168.608271] device lo entered promiscuous mode 2018/06/04 21:22:34 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x40003e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r3 = accept4(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) close(r3) [ 168.632336] device lo left promiscuous mode [ 168.671543] device lo entered promiscuous mode [ 168.719668] device lo left promiscuous mode 2018/06/04 21:22:34 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:34 executing program 5: semget(0x1, 0x4, 0x0) 2018/06/04 21:22:34 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0xf, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xac7014aa}, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 2018/06/04 21:22:34 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:34 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') 2018/06/04 21:22:34 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) 2018/06/04 21:22:34 executing program 6 (fault-call:2 fault-nth:21): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:34 executing program 0: unshare(0x8020000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x100000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) [ 168.868595] FAULT_INJECTION: forcing a failure. [ 168.868595] name failslab, interval 1, probability 0, space 0, times 0 [ 168.879965] CPU: 0 PID: 11031 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 168.886915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.896282] Call Trace: [ 168.898897] dump_stack+0x1b9/0x294 [ 168.902551] ? dump_stack_print_info.cold.2+0x52/0x52 [ 168.907765] ? perf_trace_lock_acquire+0xe3/0x980 [ 168.912619] should_fail.cold.4+0xa/0x1a [ 168.916677] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.921774] ? __local_bh_enable_ip+0x161/0x230 [ 168.926438] ? _raw_spin_unlock_bh+0x30/0x40 [ 168.930839] ? release_sock+0x1e2/0x2b0 [ 168.934804] ? rcu_is_watching+0x85/0x140 [ 168.938940] ? __local_bh_enable_ip+0x161/0x230 [ 168.943606] ? __release_sock+0x3a0/0x3a0 [ 168.947750] ? find_held_lock+0x36/0x1c0 [ 168.951822] ? check_same_owner+0x320/0x320 [ 168.956139] ? rcu_note_context_switch+0x710/0x710 [ 168.961060] ? __netlink_lookup+0x5cf/0xaa0 [ 168.965376] __should_failslab+0x124/0x180 [ 168.969608] should_failslab+0x9/0x14 [ 168.973397] kmem_cache_alloc_node+0x272/0x780 [ 168.977973] ? find_held_lock+0x36/0x1c0 [ 168.982038] __alloc_skb+0x111/0x780 [ 168.985746] ? skb_scrub_packet+0x580/0x580 [ 168.990066] ? rcu_is_watching+0x85/0x140 [ 168.994228] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 168.999412] ? splice_direct_to_actor+0x268/0x8d0 [ 169.004258] ? do_splice_direct+0x2cc/0x400 [ 169.008576] ? do_sendfile+0x60f/0xe00 [ 169.012455] ? __x64_sys_sendfile64+0x155/0x240 [ 169.017122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.022660] ? netlink_autobind.isra.34+0x240/0x330 [ 169.027680] netlink_sendmsg+0xb01/0xfa0 [ 169.031748] ? netlink_unicast+0x740/0x740 [ 169.035985] ? check_same_owner+0x320/0x320 [ 169.040313] ? security_socket_sendmsg+0x94/0xc0 [ 169.045063] ? netlink_unicast+0x740/0x740 [ 169.049312] sock_sendmsg+0xd5/0x120 [ 169.053032] kernel_sendmsg+0x43/0x50 [ 169.056832] sock_no_sendpage+0x1ca/0x270 [ 169.060977] ? sock_kfree_s+0x60/0x60 [ 169.064776] ? default_file_splice_read+0x888/0xad0 [ 169.069805] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.075181] kernel_sendpage+0x93/0xf0 [ 169.079060] ? sock_kfree_s+0x60/0x60 [ 169.082859] sock_sendpage+0x8c/0xc0 [ 169.086589] ? kernel_sendpage+0xf0/0xf0 [ 169.090647] pipe_to_sendpage+0x2c8/0x3f0 [ 169.094799] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.099642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.105181] ? splice_from_pipe_next.part.8+0x296/0x340 [ 169.110551] __splice_from_pipe+0x38e/0x7c0 [ 169.114889] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.119741] splice_from_pipe+0x1e2/0x320 [ 169.123886] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.128727] ? splice_shrink_spd+0xd0/0xd0 [ 169.132970] generic_splice_sendpage+0x3c/0x50 [ 169.137551] ? splice_from_pipe+0x320/0x320 [ 169.141879] direct_splice_actor+0x128/0x190 [ 169.146289] splice_direct_to_actor+0x310/0x8d0 [ 169.151047] ? pipe_to_sendpage+0x3f0/0x3f0 [ 169.155460] ? do_splice_to+0x190/0x190 [ 169.159433] ? rw_verify_area+0x118/0x360 [ 169.163597] do_splice_direct+0x2cc/0x400 [ 169.167747] ? splice_direct_to_actor+0x8d0/0x8d0 [ 169.172593] ? rw_verify_area+0x118/0x360 [ 169.176734] do_sendfile+0x60f/0xe00 [ 169.180469] ? do_compat_pwritev64+0x1b0/0x1b0 [ 169.185052] ? __might_sleep+0x95/0x190 [ 169.189036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.194584] ? _copy_from_user+0xdf/0x150 [ 169.198730] __x64_sys_sendfile64+0x155/0x240 [ 169.203237] ? __ia32_sys_sendfile+0x290/0x290 [ 169.207814] ? do_syscall_64+0x92/0x800 [ 169.211790] do_syscall_64+0x1b1/0x800 [ 169.215678] ? finish_task_switch+0x1ca/0x840 [ 169.220174] ? syscall_return_slowpath+0x5c0/0x5c0 [ 169.225101] ? syscall_return_slowpath+0x30f/0x5c0 [ 169.230040] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 169.235416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.240265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.245483] RIP: 0033:0x455a09 [ 169.248686] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.256384] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:34 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x200000000001, 0x0) getsockopt(r0, 0x0, 0x1, &(0x7f0000000040)=""/194, &(0x7f0000000000)=0xc2) 2018/06/04 21:22:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0x4, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000380)) tkill(r1, 0x1004000000016) [ 169.263653] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 169.270910] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.278168] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 169.285426] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000015 2018/06/04 21:22:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) flock(r0, 0xa) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:35 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0xe803, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:22:35 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 2018/06/04 21:22:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x9457}, 0xfffffffffffffd85) r2 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r3 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x7}) r4 = perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc), &(0x7f0000005ffc)=0x4) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000600)={'veth1_to_team\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r6, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000007ffc)=0x10000000006) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r4, 0x400, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000010000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r3, &(0x7f00000000c0), 0xb3) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000001100)={&(0x7f000000b000/0x1000)=nil, 0x1000}) ioctl(r3, 0x5, &(0x7f0000000340)="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") read(r1, &(0x7f0000006000)=""/4096, 0xd6) sync_file_range(r6, 0x0, 0xa4, 0x1) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f0000000040)={0x1, 0x1000, 0x0, 0xcff, 0x0, 0x45ad, 0x67, 0xfffffffffffff932, 0x0, 0xadd9}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105517, &(0x7f0000001000)) 2018/06/04 21:22:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="5c331bd24ae6364dc8837a9a6033a74a", 0x10}], 0x1, &(0x7f0000000540)}}, {{&(0x7f0000003880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000003ac0)}}], 0x2, 0x0) 2018/06/04 21:22:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0xedd, 0x3, 0x4, 0x3f, 0x9, 0x9, 0x3, 0x1, 0xffffffff, 0x4, 0x1, 0x7}) 2018/06/04 21:22:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:35 executing program 6 (fault-call:2 fault-nth:22): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:35 executing program 0: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0xfffffffffffffffd, 0x0, &(0x7f0000000080)) [ 169.509661] FAULT_INJECTION: forcing a failure. [ 169.509661] name failslab, interval 1, probability 0, space 0, times 0 [ 169.521099] CPU: 1 PID: 11066 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 169.528047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.537418] Call Trace: [ 169.540026] dump_stack+0x1b9/0x294 [ 169.543682] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.548895] ? perf_trace_lock_acquire+0xe3/0x980 [ 169.553771] should_fail.cold.4+0xa/0x1a [ 169.557860] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 169.562987] ? __local_bh_enable_ip+0x161/0x230 [ 169.567677] ? _raw_spin_unlock_bh+0x30/0x40 [ 169.572100] ? release_sock+0x1e2/0x2b0 [ 169.576069] ? rcu_is_watching+0x85/0x140 [ 169.580209] ? __release_sock+0x3a0/0x3a0 [ 169.584353] ? find_held_lock+0x36/0x1c0 [ 169.588431] ? check_same_owner+0x320/0x320 [ 169.592749] ? rcu_note_context_switch+0x710/0x710 [ 169.597670] ? __netlink_lookup+0x5cf/0xaa0 [ 169.601987] __should_failslab+0x124/0x180 [ 169.606220] should_failslab+0x9/0x14 [ 169.610016] kmem_cache_alloc_node+0x272/0x780 [ 169.614633] ? find_held_lock+0x36/0x1c0 [ 169.619688] __alloc_skb+0x111/0x780 [ 169.623397] ? skb_scrub_packet+0x580/0x580 [ 169.627717] ? rcu_is_watching+0x85/0x140 [ 169.631863] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 169.637050] ? splice_direct_to_actor+0x268/0x8d0 [ 169.641885] ? do_splice_direct+0x2cc/0x400 [ 169.646196] ? do_sendfile+0x60f/0xe00 [ 169.650071] ? __x64_sys_sendfile64+0x155/0x240 [ 169.654741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.660292] ? netlink_autobind.isra.34+0x240/0x330 [ 169.665319] netlink_sendmsg+0xb01/0xfa0 [ 169.669398] ? netlink_unicast+0x740/0x740 [ 169.673632] ? check_same_owner+0x320/0x320 [ 169.677949] ? security_socket_sendmsg+0x94/0xc0 [ 169.682692] ? netlink_unicast+0x740/0x740 [ 169.686950] sock_sendmsg+0xd5/0x120 [ 169.690661] kernel_sendmsg+0x43/0x50 [ 169.694462] sock_no_sendpage+0x1ca/0x270 [ 169.698604] ? sock_kfree_s+0x60/0x60 [ 169.702403] ? default_file_splice_read+0x888/0xad0 [ 169.707410] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.712783] kernel_sendpage+0x93/0xf0 [ 169.716659] ? sock_kfree_s+0x60/0x60 [ 169.720457] sock_sendpage+0x8c/0xc0 [ 169.724177] ? kernel_sendpage+0xf0/0xf0 [ 169.728242] pipe_to_sendpage+0x2c8/0x3f0 [ 169.732385] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.737220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.742752] ? splice_from_pipe_next.part.8+0x296/0x340 [ 169.748116] __splice_from_pipe+0x38e/0x7c0 [ 169.752431] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.757274] splice_from_pipe+0x1e2/0x320 [ 169.761415] ? generic_pipe_buf_nosteal+0x10/0x10 [ 169.766249] ? splice_shrink_spd+0xd0/0xd0 [ 169.770487] generic_splice_sendpage+0x3c/0x50 [ 169.775060] ? splice_from_pipe+0x320/0x320 [ 169.779374] direct_splice_actor+0x128/0x190 [ 169.783778] splice_direct_to_actor+0x310/0x8d0 [ 169.788439] ? pipe_to_sendpage+0x3f0/0x3f0 [ 169.792757] ? do_splice_to+0x190/0x190 [ 169.796724] ? rw_verify_area+0x118/0x360 [ 169.800868] do_splice_direct+0x2cc/0x400 [ 169.805018] ? splice_direct_to_actor+0x8d0/0x8d0 [ 169.809860] ? rw_verify_area+0x118/0x360 [ 169.814001] do_sendfile+0x60f/0xe00 [ 169.817724] ? do_compat_pwritev64+0x1b0/0x1b0 [ 169.822298] ? __might_sleep+0x95/0x190 [ 169.826288] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.831829] ? _copy_from_user+0xdf/0x150 [ 169.835974] __x64_sys_sendfile64+0x155/0x240 [ 169.840462] ? __ia32_sys_sendfile+0x290/0x290 [ 169.845043] ? do_syscall_64+0x92/0x800 [ 169.849028] do_syscall_64+0x1b1/0x800 [ 169.852907] ? finish_task_switch+0x1ca/0x840 [ 169.857397] ? syscall_return_slowpath+0x5c0/0x5c0 [ 169.862323] ? syscall_return_slowpath+0x30f/0x5c0 [ 169.867249] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 169.872610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.877450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.882628] RIP: 0033:0x455a09 [ 169.885820] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.893543] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 169.900802] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 2018/06/04 21:22:35 executing program 1: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x0, 0x0, 0x0, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0xfc}, 0x1}, 0x0) poll(&(0x7f0000000080)=[{}], 0x1d0, 0x0) 2018/06/04 21:22:35 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x7, 0xffffffff, 0x0, 0xeff, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff8, 0x5, 0x3}, 0x10) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 169.908059] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.915321] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 169.922582] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000016 2018/06/04 21:22:35 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=ANY=[], 0x0) 2018/06/04 21:22:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x9457}, 0xfffffffffffffd85) r2 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x280) r3 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x7}) r4 = perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10001, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc), &(0x7f0000005ffc)=0x4) syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0xee0, 0x400000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000600)={'veth1_to_team\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r6, &(0x7f0000011ff8)={0x40}, 0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000007ffc)=0x10000000006) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000004ffc)=0x8001) fcntl$setlease(r4, 0x400, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000010000)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r3, &(0x7f00000000c0), 0xb3) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000001100)={&(0x7f000000b000/0x1000)=nil, 0x1000}) ioctl(r3, 0x5, &(0x7f0000000340)="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") read(r1, &(0x7f0000006000)=""/4096, 0xd6) sync_file_range(r6, 0x0, 0xa4, 0x1) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f0000000040)={0x1, 0x1000, 0x0, 0xcff, 0x0, 0x45ad, 0x67, 0xfffffffffffff932, 0x0, 0xadd9}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105517, &(0x7f0000001000)) 2018/06/04 21:22:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="19ca84279fa73333240970") getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001440)=""/8, &(0x7f0000001500)=0x8) 2018/06/04 21:22:35 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') sendfile(r0, r1, &(0x7f0000000040), 0x8001) 2018/06/04 21:22:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x3, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x84) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 2018/06/04 21:22:36 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/04 21:22:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) write$cgroup_int(r0, &(0x7f00000000c0)={[0x3b, 0x3f, 0x32]}, 0x3) 2018/06/04 21:22:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") io_setup(0x8001, &(0x7f0000000000)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") io_submit(r1, 0x0, &(0x7f00000010c0)) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)}]) 2018/06/04 21:22:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) close(r0) 2018/06/04 21:22:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/06/04 21:22:36 executing program 6 (fault-call:2 fault-nth:23): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x6b) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000040), &(0x7f00000002c0)=0x30) 2018/06/04 21:22:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x7d, 0x9d, &(0x7f0000000380)="e4600800000000000f000a9b86dd6a00001a42a6603680ef6e624932c54cd5c1e00000072feb305660319056115082ea38006381a282a67466ffffff00e8d5000000010000081400000055cafdbf88e44a1a63718fa0489cac2b9d80174862f5388f494f9cc9142f72f44a293795b3658a9e5986075dde000000000000", &(0x7f0000000200)=""/157}, 0x28) [ 170.348340] FAULT_INJECTION: forcing a failure. [ 170.348340] name failslab, interval 1, probability 0, space 0, times 0 [ 170.359676] CPU: 1 PID: 11113 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 170.366618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.375984] Call Trace: [ 170.378598] dump_stack+0x1b9/0x294 [ 170.382257] ? dump_stack_print_info.cold.2+0x52/0x52 [ 170.387463] ? perf_trace_lock_acquire+0xe3/0x980 [ 170.393622] ? kernel_text_address+0x79/0xf0 [ 170.398038] ? __unwind_start+0x166/0x330 [ 170.402251] should_fail.cold.4+0xa/0x1a [ 170.406317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 170.411421] ? save_stack+0xa9/0xd0 [ 170.415041] ? save_stack+0x43/0xd0 [ 170.418659] ? kasan_slab_alloc+0x12/0x20 [ 170.422838] ? find_held_lock+0x36/0x1c0 [ 170.426906] ? check_same_owner+0x320/0x320 [ 170.431219] ? rcu_note_context_switch+0x710/0x710 [ 170.436143] __should_failslab+0x124/0x180 [ 170.440423] should_failslab+0x9/0x14 [ 170.444223] kmem_cache_alloc_node_trace+0x26f/0x770 [ 170.449328] __kmalloc_node_track_caller+0x33/0x70 [ 170.454252] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 170.459020] __alloc_skb+0x14d/0x780 [ 170.462734] ? skb_scrub_packet+0x580/0x580 [ 170.467055] ? rcu_is_watching+0x85/0x140 [ 170.471193] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 170.476376] ? splice_direct_to_actor+0x268/0x8d0 [ 170.481209] ? do_splice_direct+0x2cc/0x400 [ 170.485538] ? do_sendfile+0x60f/0xe00 [ 170.489414] ? __x64_sys_sendfile64+0x155/0x240 [ 170.494074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.499603] ? netlink_autobind.isra.34+0x240/0x330 [ 170.504613] netlink_sendmsg+0xb01/0xfa0 [ 170.508671] ? netlink_unicast+0x740/0x740 [ 170.512899] ? check_same_owner+0x320/0x320 [ 170.517211] ? security_socket_sendmsg+0x94/0xc0 [ 170.521960] ? netlink_unicast+0x740/0x740 [ 170.526201] sock_sendmsg+0xd5/0x120 [ 170.529906] kernel_sendmsg+0x43/0x50 [ 170.533710] sock_no_sendpage+0x1ca/0x270 [ 170.537847] ? sock_kfree_s+0x60/0x60 [ 170.541655] ? default_file_splice_read+0x888/0xad0 [ 170.546662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.552032] kernel_sendpage+0x93/0xf0 [ 170.555908] ? sock_kfree_s+0x60/0x60 [ 170.559708] sock_sendpage+0x8c/0xc0 [ 170.563413] ? kernel_sendpage+0xf0/0xf0 [ 170.567466] pipe_to_sendpage+0x2c8/0x3f0 [ 170.571605] ? generic_pipe_buf_nosteal+0x10/0x10 [ 170.576439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.581972] ? splice_from_pipe_next.part.8+0x296/0x340 [ 170.587344] __splice_from_pipe+0x38e/0x7c0 [ 170.591662] ? generic_pipe_buf_nosteal+0x10/0x10 [ 170.596501] splice_from_pipe+0x1e2/0x320 [ 170.600641] ? generic_pipe_buf_nosteal+0x10/0x10 [ 170.605480] ? splice_shrink_spd+0xd0/0xd0 [ 170.609715] generic_splice_sendpage+0x3c/0x50 [ 170.614287] ? splice_from_pipe+0x320/0x320 [ 170.618601] direct_splice_actor+0x128/0x190 [ 170.623001] splice_direct_to_actor+0x310/0x8d0 [ 170.627669] ? pipe_to_sendpage+0x3f0/0x3f0 [ 170.631983] ? do_splice_to+0x190/0x190 [ 170.635957] ? rw_verify_area+0x118/0x360 [ 170.640109] do_splice_direct+0x2cc/0x400 [ 170.644250] ? splice_direct_to_actor+0x8d0/0x8d0 [ 170.649100] ? rw_verify_area+0x118/0x360 [ 170.653251] do_sendfile+0x60f/0xe00 [ 170.656964] ? do_compat_pwritev64+0x1b0/0x1b0 [ 170.661550] ? __might_sleep+0x95/0x190 [ 170.665518] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.671047] ? _copy_from_user+0xdf/0x150 [ 170.675199] __x64_sys_sendfile64+0x155/0x240 [ 170.679684] ? __ia32_sys_sendfile+0x290/0x290 [ 170.684257] ? do_syscall_64+0x92/0x800 [ 170.688224] do_syscall_64+0x1b1/0x800 [ 170.692110] ? finish_task_switch+0x1ca/0x840 [ 170.696595] ? syscall_return_slowpath+0x5c0/0x5c0 [ 170.701516] ? syscall_return_slowpath+0x30f/0x5c0 [ 170.706467] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 170.711838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.716674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.721851] RIP: 0033:0x455a09 [ 170.725029] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.732727] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 170.739981] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 2018/06/04 21:22:36 executing program 0: creat(&(0x7f0000000500)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500)) 2018/06/04 21:22:36 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x31e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) [ 170.747239] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.754508] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 170.761765] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000017 2018/06/04 21:22:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x40000000004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x120000801, &(0x7f0000000140)={0x2, 0x4e23}, 0x10) 2018/06/04 21:22:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8004000000001) accept(r0, &(0x7f0000000200)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/06/04 21:22:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 170.832655] tmpfs: No value for mount option './file0/file0' 2018/06/04 21:22:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000380)=@req) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 170.904471] tmpfs: No value for mount option './file0/file0' 2018/06/04 21:22:37 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x701, 0x0, 0x0, {0x0, r1}}, 0x24}, 0x1}, 0x0) 2018/06/04 21:22:37 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='>/cgrouu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x7, r1, r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_proto_private(r4, 0x89ef, &(0x7f00000000c0)="5f4c49e45f007370e60993c03524efa11e00de4beae97bac339205a6c1fa0692e6be3e68fbbbce3760d3cb2fafe6ae8f38a8ffb55d6bdb44e7e41ace6877f0") write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:37 executing program 6 (fault-call:2 fault-nth:24): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) 2018/06/04 21:22:37 executing program 2: clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) 2018/06/04 21:22:37 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="5c331bd24ae6364dc8837a9a6033a74a", 0x10}], 0x1, &(0x7f0000000540)}}], 0x1, 0x80) 2018/06/04 21:22:37 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x105000, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x35) 2018/06/04 21:22:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) 2018/06/04 21:22:37 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={"77797a5f74756eb921f9848000", r2}) socketpair(0x0, 0x8000a, 0x3560, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)={0x303, 0x33}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'veth1_to_team\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000c3bff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000ff0)=[{0x20, 0x0, 0x1000, 0x4f42}, {0x80000006}]}, 0x10) sendto(r4, &(0x7f000002af28), 0xfd09, 0x0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) r6 = accept(r4, 0x0, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="5f00000067a33576e9f48242ddbe4ecc89b1e1c1a83f22969327d5448753d67157ab6195d5e47349a74b6d24c8d46c2e9b59fe6a49510f680a9f8c3cb4e3a4bb72af2acb301f6dea397c2b8fb408a8139d582345e41f89d10093845af5e3eee2715f3e00000000ca60d2d1f9e44f0fb3d50aef498c2263fe5a533e532c8977cd232051afa7b54f5ad560c37ab85bb8b03b854a0bdd2859aae6c2a99b4a6f8a37a1d5ab62a79ed1168e7fb0dfdea905801a810da979e57576985aa95f7ab44207fa55812a85b80fd80b29f30357363fb285"], &(0x7f00000004c0)=0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000005c0)={r7, 0x6}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @loopback={0x0, 0x1}, 0x5}, 0x1c) r9 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r9, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r9, &(0x7f000037ffc8)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x81) sendto$inet6(r8, &(0x7f0000000000)="1f1bc61dd4cc70fc5622ce596c714aa0a6c120ca3e99307155a2df13bc06647953877022fd506aa4f7532974c02da3b151ae72505e918a33ed60e3dff0f993e6ed7403df67cd85677e72e36e680ecd699493bdea20af4a1adec9ba09cf650d3e071a11157b472e6e7a554bdebc30e5b32ea723698337903769ce391f81f683a11a168d3b4b0df984aa8a3dd124c3d14759b1bbaef26559274feb52d9b1afe9ed9bc11cec3624d2bb71031cee09f4426069fc18c73cdf6ca87a78f5bd37344d9231860b9db4ec65b70ca19eb5c2938a7ecd3179ab3d2a09eb7843a9ffb55f00adfb9b5cd082a62c4521e241da630dfe59445b8c64643588", 0xf7, 0x4000010, 0x0, 0x0) [ 171.819666] binder: BINDER_SET_CONTEXT_MGR already set [ 171.838233] binder: 11165:11166 ioctl 40046207 0 returned -16 2018/06/04 21:22:37 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) 2018/06/04 21:22:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') sendfile(r0, r1, &(0x7f0000000140), 0x10000) 2018/06/04 21:22:37 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xfffffffffffffe1f, 0x0, 0x0, 0x171c073b150b2817) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) r2 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r2, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="aa3a16", 0x3}, {&(0x7f0000000240)=' ', 0x1}], 0x2, &(0x7f0000000380)=[{0x90, 0x10d, 0x0, "fb85e3abe53e562aa4bfa1d24e2ee62459248c085e8b9cd426f184a5ebed204d3f35164fc9be2cd451acc41fabddc9bb1e1384c8a6dd1b2f6665ec59459b78154612fc9fb1eb7c195cdef0cbbff673edd8caaf758e25f07d137f0977e9be8465e79888b241bbcf56fb72365774a11e62a61e632130d16ee3c20f46"}], 0x90, 0x4040}, 0x24000005) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet6(r1, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) 2018/06/04 21:22:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000300)="4c0000001300ff09fffefd956fa283b70000001f00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/06/04 21:22:37 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) waitid(0x3, r2, &(0x7f0000000040), 0x80000000, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:37 executing program 0: [ 172.095340] FAULT_INJECTION: forcing a failure. [ 172.095340] name failslab, interval 1, probability 0, space 0, times 0 [ 172.106711] CPU: 1 PID: 11209 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 172.113657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.123028] Call Trace: [ 172.125625] dump_stack+0x1b9/0x294 [ 172.129257] ? dump_stack_print_info.cold.2+0x52/0x52 [ 172.134446] ? perf_trace_lock_acquire+0xe3/0x980 [ 172.139289] ? kernel_text_address+0x79/0xf0 [ 172.143696] ? __unwind_start+0x166/0x330 [ 172.147854] should_fail.cold.4+0xa/0x1a [ 172.151925] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.157034] ? save_stack+0xa9/0xd0 [ 172.160662] ? save_stack+0x43/0xd0 [ 172.164294] ? kasan_slab_alloc+0x12/0x20 [ 172.168449] ? find_held_lock+0x36/0x1c0 [ 172.172560] ? check_same_owner+0x320/0x320 [ 172.176889] ? rcu_note_context_switch+0x710/0x710 [ 172.181828] __should_failslab+0x124/0x180 [ 172.186073] should_failslab+0x9/0x14 [ 172.189895] kmem_cache_alloc_node_trace+0x26f/0x770 2018/06/04 21:22:37 executing program 3: 2018/06/04 21:22:37 executing program 0: [ 172.195015] __kmalloc_node_track_caller+0x33/0x70 [ 172.199954] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 172.204721] __alloc_skb+0x14d/0x780 [ 172.208451] ? skb_scrub_packet+0x580/0x580 [ 172.212791] ? rcu_is_watching+0x85/0x140 [ 172.216985] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 172.222201] ? splice_direct_to_actor+0x268/0x8d0 [ 172.227064] ? do_splice_direct+0x2cc/0x400 [ 172.231401] ? do_sendfile+0x60f/0xe00 [ 172.235308] ? __x64_sys_sendfile64+0x155/0x240 [ 172.240003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.245567] ? netlink_autobind.isra.34+0x240/0x330 [ 172.250611] netlink_sendmsg+0xb01/0xfa0 [ 172.254706] ? netlink_unicast+0x740/0x740 [ 172.258967] ? check_same_owner+0x320/0x320 [ 172.263315] ? security_socket_sendmsg+0x94/0xc0 [ 172.268093] ? netlink_unicast+0x740/0x740 [ 172.272356] sock_sendmsg+0xd5/0x120 [ 172.276092] kernel_sendmsg+0x43/0x50 [ 172.279911] sock_no_sendpage+0x1ca/0x270 [ 172.284071] ? sock_kfree_s+0x60/0x60 [ 172.287887] ? default_file_splice_read+0x888/0xad0 [ 172.292917] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.298311] kernel_sendpage+0x93/0xf0 [ 172.302214] ? sock_kfree_s+0x60/0x60 [ 172.306031] sock_sendpage+0x8c/0xc0 [ 172.309764] ? kernel_sendpage+0xf0/0xf0 [ 172.314450] pipe_to_sendpage+0x2c8/0x3f0 [ 172.318653] ? generic_pipe_buf_nosteal+0x10/0x10 [ 172.323518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.329079] ? splice_from_pipe_next.part.8+0x296/0x340 [ 172.334470] __splice_from_pipe+0x38e/0x7c0 [ 172.338819] ? generic_pipe_buf_nosteal+0x10/0x10 [ 172.343690] splice_from_pipe+0x1e2/0x320 [ 172.347857] ? generic_pipe_buf_nosteal+0x10/0x10 [ 172.352723] ? splice_shrink_spd+0xd0/0xd0 [ 172.356998] generic_splice_sendpage+0x3c/0x50 [ 172.361623] ? splice_from_pipe+0x320/0x320 [ 172.365968] direct_splice_actor+0x128/0x190 [ 172.370404] splice_direct_to_actor+0x310/0x8d0 [ 172.375107] ? pipe_to_sendpage+0x3f0/0x3f0 [ 172.379454] ? do_splice_to+0x190/0x190 [ 172.383451] ? rw_verify_area+0x118/0x360 [ 172.387621] do_splice_direct+0x2cc/0x400 [ 172.392921] ? splice_direct_to_actor+0x8d0/0x8d0 [ 172.397786] ? rw_verify_area+0x118/0x360 [ 172.401957] do_sendfile+0x60f/0xe00 [ 172.405694] ? do_compat_pwritev64+0x1b0/0x1b0 [ 172.410293] ? __might_sleep+0x95/0x190 [ 172.414292] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 172.419849] ? _copy_from_user+0xdf/0x150 [ 172.424051] __x64_sys_sendfile64+0x155/0x240 [ 172.428580] ? __ia32_sys_sendfile+0x290/0x290 [ 172.433186] ? do_syscall_64+0x92/0x800 [ 172.437188] do_syscall_64+0x1b1/0x800 [ 172.441116] ? syscall_return_slowpath+0x5c0/0x5c0 [ 172.446062] ? syscall_return_slowpath+0x30f/0x5c0 [ 172.451049] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 172.456443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.461319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.466520] RIP: 0033:0x455a09 [ 172.469723] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.477443] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 172.484708] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 172.491983] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.499253] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 172.506517] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000018 2018/06/04 21:22:38 executing program 6 (fault-call:2 fault-nth:25): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:38 executing program 4: 2018/06/04 21:22:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:38 executing program 3: 2018/06/04 21:22:38 executing program 0: 2018/06/04 21:22:38 executing program 2: 2018/06/04 21:22:38 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffff8000, 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x2, {0x3, 0x0, 0x10000, 0x2, 0x4}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$void(0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e23}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={r1, 0x6, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0], 0x2}, 0x20) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:38 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 172.974535] FAULT_INJECTION: forcing a failure. [ 172.974535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.986541] CPU: 1 PID: 11242 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 172.993483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.002852] Call Trace: [ 173.005465] dump_stack+0x1b9/0x294 [ 173.009120] ? dump_stack_print_info.cold.2+0x52/0x52 [ 173.014343] should_fail.cold.4+0xa/0x1a [ 173.018431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.023564] ? kasan_check_read+0x11/0x20 [ 173.027737] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 173.032958] ? find_held_lock+0x36/0x1c0 [ 173.037066] ? check_same_owner+0x320/0x320 [ 173.041416] ? rcu_note_context_switch+0x710/0x710 [ 173.046373] ? __might_sleep+0x95/0x190 [ 173.050375] __alloc_pages_nodemask+0x34e/0xd70 [ 173.055099] ? default_file_splice_read+0x1c7/0xad0 [ 173.060131] ? do_splice_to+0x12e/0x190 [ 173.064120] ? splice_direct_to_actor+0x268/0x8d0 [ 173.068985] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 173.074031] ? kasan_check_read+0x11/0x20 [ 173.078194] ? rcu_is_watching+0x85/0x140 [ 173.082366] ? rcu_pm_notify+0xc0/0xc0 [ 173.086272] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.091294] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 173.096835] alloc_pages_current+0x10c/0x210 [ 173.101251] push_pipe+0x400/0x7a0 [ 173.104787] ? __kmalloc_node+0x47/0x70 [ 173.108760] iov_iter_get_pages_alloc+0x84a/0x1510 [ 173.113687] ? copy_page_from_iter+0x880/0x880 [ 173.118261] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 173.123283] ? trace_hardirqs_on+0xd/0x10 [ 173.127420] ? mark_free_pages+0x3b0/0x3b0 [ 173.131644] ? check_same_owner+0x320/0x320 [ 173.135972] ? security_socket_sendmsg+0x94/0xc0 [ 173.140717] ? netlink_unicast+0x740/0x740 [ 173.144943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.150481] ? sock_sendmsg+0x5a/0x120 [ 173.154358] ? kernel_sendmsg+0x43/0x50 [ 173.158336] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 173.163340] ? iov_iter_pipe+0xc2/0x2f0 [ 173.167306] default_file_splice_read+0x1c7/0xad0 [ 173.172137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.177672] ? do_splice_direct+0x400/0x400 [ 173.181978] ? __put_compound_page+0xe0/0xe0 [ 173.186377] ? kernel_sendpage+0x9a/0xf0 [ 173.190425] ? sock_kfree_s+0x60/0x60 [ 173.194218] ? generic_pipe_buf_release+0x1dc/0x290 [ 173.199223] ? anon_pipe_buf_release+0x510/0x510 [ 173.203965] ? pipe_to_sendpage+0x2d0/0x3f0 [ 173.208274] ? generic_pipe_buf_nosteal+0x10/0x10 [ 173.213105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.218630] ? splice_from_pipe_next.part.8+0x296/0x340 [ 173.223987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.229511] ? fsnotify+0x415/0xfc0 [ 173.233125] ? fsnotify+0xfc0/0xfc0 [ 173.236743] ? fsnotify_first_mark+0x330/0x330 [ 173.241316] ? splice_shrink_spd+0xd0/0xd0 [ 173.245546] ? security_file_permission+0x1c6/0x240 [ 173.250552] ? rw_verify_area+0x118/0x360 [ 173.254686] ? do_splice_direct+0x400/0x400 [ 173.259012] do_splice_to+0x12e/0x190 [ 173.262809] splice_direct_to_actor+0x268/0x8d0 [ 173.267468] ? pipe_to_sendpage+0x3f0/0x3f0 [ 173.271782] ? do_splice_to+0x190/0x190 [ 173.275750] ? rw_verify_area+0x118/0x360 [ 173.279885] do_splice_direct+0x2cc/0x400 [ 173.284038] ? splice_direct_to_actor+0x8d0/0x8d0 [ 173.288873] ? rw_verify_area+0x118/0x360 [ 173.293013] do_sendfile+0x60f/0xe00 [ 173.296734] ? do_compat_pwritev64+0x1b0/0x1b0 [ 173.301303] ? __might_sleep+0x95/0x190 [ 173.305274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 173.310815] ? _copy_from_user+0xdf/0x150 [ 173.314953] __x64_sys_sendfile64+0x155/0x240 [ 173.319441] ? __ia32_sys_sendfile+0x290/0x290 [ 173.324028] ? do_syscall_64+0x92/0x800 [ 173.327992] do_syscall_64+0x1b1/0x800 [ 173.331884] ? syscall_return_slowpath+0x5c0/0x5c0 [ 173.336802] ? syscall_return_slowpath+0x30f/0x5c0 [ 173.341738] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 173.347092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.351928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.357105] RIP: 0033:0x455a09 [ 173.360278] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 173.367976] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:38 executing program 3: 2018/06/04 21:22:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={{0x0, 0x5, 0x90ca, 0x0, "d029666130dc4f71eec83074892ed33fcd6f85b0dae35a5ce6e5ef54a33e2b78c8234356773889eb76c3141d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d400e496b5f9b2664b6fb100bf95afd02bfb5a3f9d591022197b5a412bdb17944abbf9ec59d5d3476b67b849b750f3edd360ed397fd61b943176707950b59c88", &(0x7f0000000100), 0x9}) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/06/04 21:22:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000400)={[], 0x0, 0x58b, 0xfff}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 2018/06/04 21:22:38 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f00000001c0)=0x84) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000400)={[], 0x0, 0x58b, 0xfff}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x0, 0x4, [0x1f, 0x0, 0x0, 0x8]}, 0x10) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) [ 173.375233] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 173.382489] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.389748] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 173.397008] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000019 2018/06/04 21:22:39 executing program 3: 2018/06/04 21:22:39 executing program 2: 2018/06/04 21:22:39 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x40804, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x4, 0xb7000000000000, 0x2, 0x4, 0x100000000}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/26) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000180)=""/140) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') name_to_handle_at(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x95, 0x7ff, "b50ded598634af7e862e2e84deeba673b48f56902921a84faadfb2a6a0a1e29fee2dcc7f1d1029431e1e21082bf2f137c3cdcc2a60627d87dbc1c4d71695649e52889b1bafb6fc58d8d26d5c9e20e2a54fbc39fdb5b2f89e94e3396e153078c578115d7d3a99a46d63001d679286cfa95264990e4be0d06105ef08bc4692a3ae9df6cb1cd584a0eb4d31fd2170"}, &(0x7f0000000380), 0x1400) 2018/06/04 21:22:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:39 executing program 6 (fault-call:2 fault-nth:26): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:39 executing program 3: 2018/06/04 21:22:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:39 executing program 4: 2018/06/04 21:22:39 executing program 2: 2018/06/04 21:22:39 executing program 0: 2018/06/04 21:22:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:39 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x7, 0x7, 0xfffffffffffffffa, 0x4, 0x3ff, 0x0, 0x400000000000000, 0x8, 0x5}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)=0x8001, 0x4) ioprio_set$uid(0x3, 0x0, 0x1) 2018/06/04 21:22:39 executing program 0: 2018/06/04 21:22:39 executing program 4: [ 173.710242] FAULT_INJECTION: forcing a failure. [ 173.710242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.722265] CPU: 0 PID: 11286 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 173.729213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.738666] Call Trace: [ 173.741273] dump_stack+0x1b9/0x294 [ 173.744914] ? dump_stack_print_info.cold.2+0x52/0x52 [ 173.750131] should_fail.cold.4+0xa/0x1a [ 173.754224] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/04 21:22:39 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 173.759429] ? kasan_check_read+0x11/0x20 [ 173.763606] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 173.768821] ? find_held_lock+0x36/0x1c0 [ 173.772922] ? check_same_owner+0x320/0x320 [ 173.777272] ? rcu_note_context_switch+0x710/0x710 [ 173.782236] ? __might_sleep+0x95/0x190 [ 173.786260] __alloc_pages_nodemask+0x34e/0xd70 [ 173.790949] ? default_file_splice_read+0x1c7/0xad0 [ 173.795986] ? do_splice_to+0x12e/0x190 [ 173.799981] ? splice_direct_to_actor+0x268/0x8d0 [ 173.804848] ? __alloc_pages_slowpath+0x2db0/0x2db0 2018/06/04 21:22:39 executing program 0: [ 173.809893] ? kasan_check_read+0x11/0x20 [ 173.814144] ? rcu_is_watching+0x85/0x140 [ 173.818313] ? rcu_pm_notify+0xc0/0xc0 [ 173.822243] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.827282] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 173.832849] alloc_pages_current+0x10c/0x210 [ 173.837286] push_pipe+0x400/0x7a0 [ 173.841017] ? __kmalloc_node+0x47/0x70 [ 173.845018] iov_iter_get_pages_alloc+0x84a/0x1510 [ 173.849971] ? copy_page_from_iter+0x880/0x880 [ 173.854577] ? trace_hardirqs_on_caller+0x421/0x5c0 2018/06/04 21:22:39 executing program 4: 2018/06/04 21:22:39 executing program 2: 2018/06/04 21:22:39 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000001c0)={{0x8, @multicast2=0xe0000002, 0x4e23, 0x4, 'wlc\x00', 0x8, 0x287fed94, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x1, 0x3257, 0x7, 0x9bfe}}, 0x44) rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}, 0x8) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x80000000, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001e00)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000001f00)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001f40)={@empty, 0x2, r4}) [ 173.859607] ? trace_hardirqs_on+0xd/0x10 [ 173.863772] ? mark_free_pages+0x3b0/0x3b0 [ 173.868024] ? check_same_owner+0x320/0x320 [ 173.872363] ? security_socket_sendmsg+0x94/0xc0 [ 173.877140] ? netlink_unicast+0x740/0x740 [ 173.881406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.886962] ? sock_sendmsg+0x5a/0x120 [ 173.890868] ? kernel_sendmsg+0x43/0x50 [ 173.894868] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 173.899898] ? iov_iter_pipe+0xc2/0x2f0 [ 173.903895] default_file_splice_read+0x1c7/0xad0 [ 173.908754] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.914147] ? do_splice_direct+0x400/0x400 [ 173.918526] ? __put_compound_page+0xe0/0xe0 [ 173.922953] ? kernel_sendpage+0x9a/0xf0 [ 173.927052] ? sock_kfree_s+0x60/0x60 [ 173.930875] ? generic_pipe_buf_release+0x1dc/0x290 [ 173.935935] ? anon_pipe_buf_release+0x510/0x510 [ 173.940705] ? pipe_to_sendpage+0x2d0/0x3f0 [ 173.945045] ? generic_pipe_buf_nosteal+0x10/0x10 [ 173.949903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.955458] ? splice_from_pipe_next.part.8+0x296/0x340 [ 173.960852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.966400] ? fsnotify+0x415/0xfc0 [ 173.970049] ? fsnotify+0xfc0/0xfc0 [ 173.973688] ? fsnotify_first_mark+0x330/0x330 [ 173.978289] ? splice_shrink_spd+0xd0/0xd0 [ 173.982551] ? security_file_permission+0x1c6/0x240 [ 173.987584] ? rw_verify_area+0x118/0x360 [ 173.991746] ? do_splice_direct+0x400/0x400 [ 173.996083] do_splice_to+0x12e/0x190 [ 173.999898] splice_direct_to_actor+0x268/0x8d0 [ 174.004587] ? pipe_to_sendpage+0x3f0/0x3f0 [ 174.008932] ? do_splice_to+0x190/0x190 [ 174.012922] ? rw_verify_area+0x118/0x360 [ 174.017092] do_splice_direct+0x2cc/0x400 [ 174.021259] ? splice_direct_to_actor+0x8d0/0x8d0 [ 174.026125] ? rw_verify_area+0x118/0x360 [ 174.030388] do_sendfile+0x60f/0xe00 [ 174.034127] ? do_compat_pwritev64+0x1b0/0x1b0 [ 174.038731] ? __might_sleep+0x95/0x190 [ 174.042725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.048264] ? _copy_from_user+0xdf/0x150 [ 174.052407] __x64_sys_sendfile64+0x155/0x240 [ 174.056901] ? __ia32_sys_sendfile+0x290/0x290 [ 174.061476] ? do_syscall_64+0x92/0x800 [ 174.065445] do_syscall_64+0x1b1/0x800 [ 174.069322] ? finish_task_switch+0x1ca/0x840 [ 174.073810] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.078739] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.083665] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 174.089030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.093874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.099052] RIP: 0033:0x455a09 [ 174.102239] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:39 executing program 4: [ 174.109940] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 174.117210] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 174.124467] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.131724] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 174.138978] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001a 2018/06/04 21:22:40 executing program 6 (fault-call:2 fault-nth:27): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) 2018/06/04 21:22:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x10) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:40 executing program 2: 2018/06/04 21:22:40 executing program 3: 2018/06/04 21:22:40 executing program 4: 2018/06/04 21:22:40 executing program 0: 2018/06/04 21:22:40 executing program 5: [ 174.298209] FAULT_INJECTION: forcing a failure. [ 174.298209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.310127] CPU: 0 PID: 11324 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 174.317068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.326434] Call Trace: [ 174.329035] dump_stack+0x1b9/0x294 [ 174.332678] ? dump_stack_print_info.cold.2+0x52/0x52 [ 174.337875] ? find_held_lock+0x36/0x1c0 [ 174.341938] should_fail.cold.4+0xa/0x1a [ 174.346003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.351118] ? kasan_check_read+0x11/0x20 [ 174.355265] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 174.360451] ? find_held_lock+0x36/0x1c0 [ 174.364520] ? check_same_owner+0x320/0x320 [ 174.368834] ? rcu_note_context_switch+0x710/0x710 [ 174.373760] ? __might_sleep+0x95/0x190 [ 174.377726] __alloc_pages_nodemask+0x34e/0xd70 [ 174.382387] ? default_file_splice_read+0x1c7/0xad0 [ 174.387389] ? do_splice_to+0x12e/0x190 [ 174.391368] ? splice_direct_to_actor+0x268/0x8d0 [ 174.396211] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 174.401232] ? kasan_check_read+0x11/0x20 [ 174.405371] ? rcu_is_watching+0x85/0x140 [ 174.409508] ? rcu_pm_notify+0xc0/0xc0 [ 174.413396] ? rcu_read_lock_sched_held+0x108/0x120 [ 174.418403] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 174.423934] alloc_pages_current+0x10c/0x210 [ 174.428345] push_pipe+0x400/0x7a0 [ 174.431874] ? __kmalloc_node+0x47/0x70 [ 174.435844] iov_iter_get_pages_alloc+0x84a/0x1510 [ 174.440784] ? copy_page_from_iter+0x880/0x880 [ 174.445361] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 174.450368] ? trace_hardirqs_on+0xd/0x10 [ 174.454508] ? mark_free_pages+0x3b0/0x3b0 [ 174.458734] ? check_same_owner+0x320/0x320 [ 174.463050] ? security_socket_sendmsg+0x94/0xc0 [ 174.467799] ? netlink_unicast+0x740/0x740 [ 174.472033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.477562] ? sock_sendmsg+0x5a/0x120 [ 174.481445] ? kernel_sendmsg+0x43/0x50 [ 174.485421] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 174.490427] ? iov_iter_pipe+0xc2/0x2f0 [ 174.494399] default_file_splice_read+0x1c7/0xad0 [ 174.499235] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.504776] ? do_splice_direct+0x400/0x400 [ 174.509088] ? __put_compound_page+0xe0/0xe0 [ 174.513487] ? kernel_sendpage+0x9a/0xf0 [ 174.517535] ? sock_kfree_s+0x60/0x60 [ 174.521332] ? generic_pipe_buf_release+0x1dc/0x290 [ 174.526337] ? anon_pipe_buf_release+0x510/0x510 [ 174.531080] ? pipe_to_sendpage+0x2d0/0x3f0 [ 174.535396] ? generic_pipe_buf_nosteal+0x10/0x10 [ 174.540229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.545757] ? splice_from_pipe_next.part.8+0x296/0x340 [ 174.551125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.556650] ? fsnotify+0x415/0xfc0 [ 174.560271] ? fsnotify+0xfc0/0xfc0 [ 174.563888] ? fsnotify_first_mark+0x330/0x330 [ 174.568466] ? splice_shrink_spd+0xd0/0xd0 [ 174.572697] ? security_file_permission+0x1c6/0x240 [ 174.577706] ? rw_verify_area+0x118/0x360 [ 174.581846] ? do_splice_direct+0x400/0x400 [ 174.586170] do_splice_to+0x12e/0x190 [ 174.589976] splice_direct_to_actor+0x268/0x8d0 [ 174.594639] ? pipe_to_sendpage+0x3f0/0x3f0 [ 174.598956] ? do_splice_to+0x190/0x190 [ 174.602924] ? rw_verify_area+0x118/0x360 [ 174.607063] do_splice_direct+0x2cc/0x400 [ 174.611204] ? splice_direct_to_actor+0x8d0/0x8d0 [ 174.616047] ? rw_verify_area+0x118/0x360 [ 174.620187] do_sendfile+0x60f/0xe00 [ 174.623918] ? do_compat_pwritev64+0x1b0/0x1b0 [ 174.628494] ? __might_sleep+0x95/0x190 [ 174.632467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.637996] ? _copy_from_user+0xdf/0x150 [ 174.642144] __x64_sys_sendfile64+0x155/0x240 [ 174.646632] ? __ia32_sys_sendfile+0x290/0x290 [ 174.651210] ? do_syscall_64+0x92/0x800 [ 174.655190] do_syscall_64+0x1b1/0x800 [ 174.659066] ? finish_task_switch+0x1ca/0x840 [ 174.663551] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.668472] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.673408] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 174.678767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.683606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.688784] RIP: 0033:0x455a09 [ 174.691960] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:40 executing program 2: 2018/06/04 21:22:40 executing program 3: 2018/06/04 21:22:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:40 executing program 0: [ 174.699662] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 174.706920] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 174.714191] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.721465] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 174.728726] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001b 2018/06/04 21:22:40 executing program 5: 2018/06/04 21:22:40 executing program 4: 2018/06/04 21:22:40 executing program 2: 2018/06/04 21:22:40 executing program 4: 2018/06/04 21:22:40 executing program 6 (fault-call:2 fault-nth:28): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:40 executing program 2: 2018/06/04 21:22:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) 2018/06/04 21:22:40 executing program 4: 2018/06/04 21:22:40 executing program 3: 2018/06/04 21:22:40 executing program 5: 2018/06/04 21:22:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 2018/06/04 21:22:40 executing program 0: 2018/06/04 21:22:40 executing program 3: 2018/06/04 21:22:40 executing program 5: 2018/06/04 21:22:40 executing program 2: [ 175.038534] FAULT_INJECTION: forcing a failure. [ 175.038534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.050477] CPU: 1 PID: 11356 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 175.057411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.066774] Call Trace: [ 175.069380] dump_stack+0x1b9/0x294 [ 175.073027] ? dump_stack_print_info.cold.2+0x52/0x52 [ 175.078236] ? find_held_lock+0x36/0x1c0 [ 175.082325] should_fail.cold.4+0xa/0x1a 2018/06/04 21:22:40 executing program 3: 2018/06/04 21:22:40 executing program 5: [ 175.086419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.091553] ? kasan_check_read+0x11/0x20 [ 175.095735] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 175.100946] ? find_held_lock+0x36/0x1c0 [ 175.105048] ? check_same_owner+0x320/0x320 [ 175.109398] ? rcu_note_context_switch+0x710/0x710 [ 175.114353] ? __might_sleep+0x95/0x190 [ 175.118346] __alloc_pages_nodemask+0x34e/0xd70 [ 175.123035] ? default_file_splice_read+0x1c7/0xad0 [ 175.128067] ? do_splice_to+0x12e/0x190 [ 175.132066] ? splice_direct_to_actor+0x268/0x8d0 2018/06/04 21:22:40 executing program 2: [ 175.136931] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 175.141980] ? kasan_check_read+0x11/0x20 [ 175.146152] ? rcu_is_watching+0x85/0x140 [ 175.150323] ? rcu_pm_notify+0xc0/0xc0 [ 175.154240] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.159286] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 175.164855] alloc_pages_current+0x10c/0x210 [ 175.169299] push_pipe+0x400/0x7a0 [ 175.172859] ? __kmalloc_node+0x47/0x70 [ 175.176860] iov_iter_get_pages_alloc+0x84a/0x1510 [ 175.181818] ? copy_page_from_iter+0x880/0x880 2018/06/04 21:22:40 executing program 5: 2018/06/04 21:22:40 executing program 3: [ 175.186422] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 175.191456] ? trace_hardirqs_on+0xd/0x10 [ 175.195632] ? mark_free_pages+0x3b0/0x3b0 [ 175.199889] ? check_same_owner+0x320/0x320 [ 175.204232] ? security_socket_sendmsg+0x94/0xc0 [ 175.209004] ? netlink_unicast+0x740/0x740 [ 175.213269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.218827] ? sock_sendmsg+0x5a/0x120 [ 175.222731] ? kernel_sendmsg+0x43/0x50 [ 175.226728] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 175.231757] ? iov_iter_pipe+0xc2/0x2f0 [ 175.235753] default_file_splice_read+0x1c7/0xad0 [ 175.240615] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.246007] ? do_splice_direct+0x400/0x400 [ 175.250342] ? __put_compound_page+0xe0/0xe0 [ 175.254768] ? kernel_sendpage+0x9a/0xf0 [ 175.258834] ? sock_kfree_s+0x60/0x60 [ 175.262652] ? generic_pipe_buf_release+0x1dc/0x290 [ 175.267681] ? anon_pipe_buf_release+0x510/0x510 [ 175.272456] ? pipe_to_sendpage+0x2d0/0x3f0 [ 175.276802] ? generic_pipe_buf_nosteal+0x10/0x10 [ 175.281666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.287223] ? splice_from_pipe_next.part.8+0x296/0x340 [ 175.292616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.298173] ? fsnotify+0x415/0xfc0 [ 175.301821] ? fsnotify+0xfc0/0xfc0 [ 175.305459] ? fsnotify_first_mark+0x330/0x330 [ 175.310062] ? splice_shrink_spd+0xd0/0xd0 [ 175.314316] ? security_file_permission+0x1c6/0x240 [ 175.319352] ? rw_verify_area+0x118/0x360 [ 175.323519] ? do_splice_direct+0x400/0x400 [ 175.327856] do_splice_to+0x12e/0x190 [ 175.331677] splice_direct_to_actor+0x268/0x8d0 [ 175.336349] ? pipe_to_sendpage+0x3f0/0x3f0 [ 175.340676] ? do_splice_to+0x190/0x190 [ 175.344650] ? rw_verify_area+0x118/0x360 [ 175.348795] do_splice_direct+0x2cc/0x400 [ 175.352941] ? splice_direct_to_actor+0x8d0/0x8d0 [ 175.357823] ? rw_verify_area+0x118/0x360 [ 175.361966] do_sendfile+0x60f/0xe00 [ 175.365684] ? do_compat_pwritev64+0x1b0/0x1b0 [ 175.370264] ? __might_sleep+0x95/0x190 [ 175.374236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.379768] ? _copy_from_user+0xdf/0x150 [ 175.383909] __x64_sys_sendfile64+0x155/0x240 [ 175.388395] ? __ia32_sys_sendfile+0x290/0x290 [ 175.392971] ? do_syscall_64+0x92/0x800 [ 175.396964] do_syscall_64+0x1b1/0x800 [ 175.400839] ? finish_task_switch+0x1ca/0x840 [ 175.405326] ? syscall_return_slowpath+0x5c0/0x5c0 [ 175.410248] ? syscall_return_slowpath+0x30f/0x5c0 [ 175.415176] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 175.420559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.425399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.430579] RIP: 0033:0x455a09 [ 175.433756] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 175.441456] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 175.448712] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 175.455970] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.463228] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 175.470495] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001c 2018/06/04 21:22:41 executing program 6 (fault-call:2 fault-nth:29): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:41 executing program 0: 2018/06/04 21:22:41 executing program 2: 2018/06/04 21:22:41 executing program 5: 2018/06/04 21:22:41 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x40104593, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)) socket$inet6(0xa, 0x0, 0x0) close(r0) 2018/06/04 21:22:41 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 2018/06/04 21:22:41 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xf95c, 0x105000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[], 0xfffffffffffffc78) 2018/06/04 21:22:41 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, "0dd25c3c536380f56ab54f0565f891a9d8aff91097b6f361cbe82d2538e7e7eccd3392d1e4729c3305a4a7cf"}) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) [ 175.593474] FAULT_INJECTION: forcing a failure. [ 175.593474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.605410] CPU: 1 PID: 11384 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 175.612348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.621713] Call Trace: [ 175.624317] dump_stack+0x1b9/0x294 [ 175.627956] ? dump_stack_print_info.cold.2+0x52/0x52 [ 175.633164] ? find_held_lock+0x36/0x1c0 [ 175.637247] should_fail.cold.4+0xa/0x1a 2018/06/04 21:22:41 executing program 5: 2018/06/04 21:22:41 executing program 2: 2018/06/04 21:22:41 executing program 0: [ 175.641327] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.646448] ? kasan_check_read+0x11/0x20 [ 175.650614] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 175.655824] ? find_held_lock+0x36/0x1c0 [ 175.659920] ? check_same_owner+0x320/0x320 [ 175.664269] ? rcu_note_context_switch+0x710/0x710 [ 175.669226] ? __might_sleep+0x95/0x190 [ 175.673226] __alloc_pages_nodemask+0x34e/0xd70 [ 175.677917] ? default_file_splice_read+0x1c7/0xad0 [ 175.682954] ? do_splice_to+0x12e/0x190 [ 175.686947] ? splice_direct_to_actor+0x268/0x8d0 [ 175.691813] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 175.696862] ? kasan_check_read+0x11/0x20 [ 175.701033] ? rcu_is_watching+0x85/0x140 [ 175.705207] ? rcu_pm_notify+0xc0/0xc0 [ 175.709120] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.714164] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 175.719730] alloc_pages_current+0x10c/0x210 [ 175.724164] push_pipe+0x400/0x7a0 [ 175.727724] ? __kmalloc_node+0x47/0x70 [ 175.731723] iov_iter_get_pages_alloc+0x84a/0x1510 [ 175.736679] ? copy_page_from_iter+0x880/0x880 2018/06/04 21:22:41 executing program 2: 2018/06/04 21:22:41 executing program 5: 2018/06/04 21:22:41 executing program 0: [ 175.741282] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 175.746320] ? trace_hardirqs_on+0xd/0x10 [ 175.750485] ? mark_free_pages+0x3b0/0x3b0 [ 175.754738] ? check_same_owner+0x320/0x320 [ 175.759075] ? security_socket_sendmsg+0x94/0xc0 [ 175.763850] ? netlink_unicast+0x740/0x740 [ 175.768100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.773653] ? sock_sendmsg+0x5a/0x120 [ 175.777566] ? kernel_sendmsg+0x43/0x50 [ 175.781570] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 175.786606] ? iov_iter_pipe+0xc2/0x2f0 [ 175.790604] default_file_splice_read+0x1c7/0xad0 [ 175.795482] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.800879] ? do_splice_direct+0x400/0x400 [ 175.805220] ? __put_compound_page+0xe0/0xe0 [ 175.809650] ? kernel_sendpage+0x9a/0xf0 [ 175.813727] ? sock_kfree_s+0x60/0x60 [ 175.817554] ? generic_pipe_buf_release+0x1dc/0x290 [ 175.822589] ? anon_pipe_buf_release+0x510/0x510 [ 175.827362] ? pipe_to_sendpage+0x2d0/0x3f0 [ 175.831709] ? generic_pipe_buf_nosteal+0x10/0x10 [ 175.836569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.842125] ? splice_from_pipe_next.part.8+0x296/0x340 [ 175.847518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.853059] ? fsnotify+0x415/0xfc0 [ 175.856689] ? fsnotify+0xfc0/0xfc0 [ 175.860312] ? fsnotify_first_mark+0x330/0x330 [ 175.864892] ? splice_shrink_spd+0xd0/0xd0 [ 175.869126] ? security_file_permission+0x1c6/0x240 [ 175.874138] ? rw_verify_area+0x118/0x360 [ 175.878292] ? do_splice_direct+0x400/0x400 [ 175.882608] do_splice_to+0x12e/0x190 [ 175.886416] splice_direct_to_actor+0x268/0x8d0 [ 175.891080] ? pipe_to_sendpage+0x3f0/0x3f0 [ 175.895396] ? do_splice_to+0x190/0x190 [ 175.899364] ? rw_verify_area+0x118/0x360 [ 175.903511] do_splice_direct+0x2cc/0x400 [ 175.907654] ? splice_direct_to_actor+0x8d0/0x8d0 [ 175.912495] ? rw_verify_area+0x118/0x360 [ 175.916639] do_sendfile+0x60f/0xe00 [ 175.920352] ? do_compat_pwritev64+0x1b0/0x1b0 [ 175.924928] ? __might_sleep+0x95/0x190 [ 175.928904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.934443] ? _copy_from_user+0xdf/0x150 [ 175.938598] __x64_sys_sendfile64+0x155/0x240 [ 175.943086] ? __ia32_sys_sendfile+0x290/0x290 [ 175.947664] ? do_syscall_64+0x92/0x800 [ 175.951635] do_syscall_64+0x1b1/0x800 [ 175.955517] ? finish_task_switch+0x1ca/0x840 [ 175.960006] ? syscall_return_slowpath+0x5c0/0x5c0 [ 175.964933] ? syscall_return_slowpath+0x30f/0x5c0 [ 175.969859] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 175.975219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.980064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.985251] RIP: 0033:0x455a09 [ 175.988430] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 175.996132] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 176.003408] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 176.010672] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.017931] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 176.025191] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001d 2018/06/04 21:22:41 executing program 5: [ 176.041553] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/06/04 21:22:41 executing program 2: [ 176.081802] kernel msg: ebtables bug: please report to author: Wrong len argument [ 176.513983] FAULT_FLAG_ALLOW_RETRY missing 30 [ 176.518834] CPU: 1 PID: 11399 Comm: syz-executor3 Not tainted 4.17.0+ #83 [ 176.525760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.535125] Call Trace: [ 176.537723] dump_stack+0x1b9/0x294 [ 176.541349] ? dump_stack_print_info.cold.2+0x52/0x52 [ 176.546540] ? kasan_check_write+0x14/0x20 [ 176.550772] ? do_raw_spin_lock+0xc1/0x200 [ 176.555006] handle_userfault.cold.32+0x44/0x5a [ 176.559687] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 176.564266] ? debug_check_no_locks_freed+0x310/0x310 [ 176.569450] ? perf_event_update_userpage+0xd10/0xd10 [ 176.574643] ? graph_lock+0x170/0x170 [ 176.578443] ? print_usage_bug+0xc0/0xc0 [ 176.582496] ? __sanitizer_cov_trace_cmp4+0x11/0x20 [ 176.587501] ? __perf_event_task_sched_in+0x247/0xb80 [ 176.592678] ? print_usage_bug+0xc0/0xc0 [ 176.596728] ? get_user_pages_fast+0x2a1/0x440 [ 176.601300] ? find_held_lock+0x36/0x1c0 [ 176.605351] ? __lock_acquire+0x7f5/0x5140 [ 176.609581] ? graph_lock+0x170/0x170 [ 176.613393] ? find_held_lock+0x36/0x1c0 [ 176.617457] ? lock_downgrade+0x8e0/0x8e0 [ 176.621604] ? kasan_check_read+0x11/0x20 [ 176.625742] ? do_raw_spin_unlock+0x9e/0x2e0 [ 176.630137] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 176.634710] ? kasan_check_write+0x14/0x20 [ 176.638932] ? do_raw_spin_lock+0xc1/0x200 [ 176.643163] __handle_mm_fault+0x38d8/0x4310 [ 176.647580] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 176.652334] ? graph_lock+0x170/0x170 [ 176.656127] ? find_held_lock+0x36/0x1c0 [ 176.660183] ? lock_downgrade+0x8e0/0x8e0 [ 176.664337] ? handle_mm_fault+0x8c0/0xc70 [ 176.668576] handle_mm_fault+0x53a/0xc70 [ 176.672637] ? __handle_mm_fault+0x4310/0x4310 [ 176.677222] ? find_vma+0x34/0x190 [ 176.680748] __do_page_fault+0x60b/0xe40 [ 176.684790] ? do_raw_spin_lock+0xc1/0x200 [ 176.689026] ? mm_fault_error+0x380/0x380 [ 176.693164] ? graph_lock+0x170/0x170 [ 176.696957] do_page_fault+0xee/0x8a7 [ 176.700744] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 176.705923] ? vmalloc_sync_all+0x30/0x30 [ 176.710073] ? find_held_lock+0x36/0x1c0 [ 176.714129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.718961] page_fault+0x1e/0x30 [ 176.722415] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 176.728024] RSP: 0018:ffff88017c1af810 EFLAGS: 00010202 [ 176.733378] RAX: ffffed002f835f28 RBX: 0000000000000010 RCX: 0000000000000002 [ 176.740629] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88017c1af930 [ 176.747883] RBP: ffff88017c1af848 R08: ffffed002f835f28 R09: ffffed002f835f26 [ 176.755138] R10: ffffed002f835f27 R11: ffff88017c1af93f R12: 0000000020013010 [ 176.762394] R13: 0000000020013000 R14: ffff88017c1af930 R15: 00007ffffffff000 [ 176.769666] ? _copy_from_user+0x10d/0x150 [ 176.773901] evdev_do_ioctl+0x1065/0x21c0 [ 176.778043] ? lock_downgrade+0x8e0/0x8e0 [ 176.782176] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 176.787348] ? str_to_user+0x90/0x90 [ 176.791052] ? do_futex+0x249/0x27d0 [ 176.794753] ? rcu_is_watching+0x85/0x140 [ 176.798884] ? graph_lock+0x170/0x170 [ 176.802667] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 176.807858] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 176.813046] ? exit_robust_list+0x290/0x290 [ 176.817359] ? find_held_lock+0x36/0x1c0 [ 176.821410] ? lock_downgrade+0x8e0/0x8e0 [ 176.825544] ? kasan_check_read+0x11/0x20 [ 176.829686] ? rcu_is_watching+0x85/0x140 [ 176.833816] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 176.838994] ? __fget+0x40c/0x650 [ 176.842445] evdev_ioctl_handler+0x144/0x1a0 [ 176.846841] evdev_ioctl+0x27/0x2e [ 176.850364] ? evdev_ioctl_compat+0x30/0x30 [ 176.854671] do_vfs_ioctl+0x1cf/0x16a0 [ 176.858549] ? rcu_pm_notify+0xc0/0xc0 [ 176.862446] ? ioctl_preallocate+0x2e0/0x2e0 [ 176.866838] ? fget_raw+0x20/0x20 [ 176.870275] ? putname+0xf2/0x130 [ 176.873708] ? rcu_read_lock_sched_held+0x108/0x120 [ 176.878708] ? kmem_cache_free+0x25c/0x2d0 [ 176.882941] ? __x64_sys_futex+0x477/0x680 [ 176.887163] ? do_futex+0x27d0/0x27d0 [ 176.890948] ? security_file_ioctl+0x94/0xc0 [ 176.895341] ksys_ioctl+0xa9/0xd0 [ 176.898778] __x64_sys_ioctl+0x73/0xb0 [ 176.902652] do_syscall_64+0x1b1/0x800 [ 176.906527] ? finish_task_switch+0x1ca/0x840 [ 176.911021] ? syscall_return_slowpath+0x5c0/0x5c0 [ 176.915957] ? syscall_return_slowpath+0x30f/0x5c0 [ 176.920887] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 176.926254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.931086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.936259] RIP: 0033:0x455a09 [ 176.939448] RSP: 002b:00007f0aaaefac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.947140] RAX: ffffffffffffffda RBX: 00007f0aaaefb6d4 RCX: 0000000000455a09 [ 176.954395] RDX: 0000000020013000 RSI: 0000000040104593 RDI: 0000000000000014 2018/06/04 21:22:42 executing program 6 (fault-call:2 fault-nth:30): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:42 executing program 5: 2018/06/04 21:22:42 executing program 0: 2018/06/04 21:22:42 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x7, 0x0, 'client0\x00', 0x0, "d9edb14c57a50c19", "410c67fd34b758096a3fc25c99dc3d82bbb70f30415ddc99e51794d3faed7e3a", 0x9, 0x3}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffc6b1c49d611408aaf265e8fdf0897fb0749bec27588095591fb325d41580ff1a6ac851b00ff03a8e869f21251fd31f676ef972a3ffa337f45a92012a24547694e2927a42dbb123d206fa4214d32dc52a2b7846b3862025ee21e044e6e6b4aac1fe"], 0x62) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x6c, &(0x7f0000000200)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e24, @rand_addr=0x5}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x17}, 0x4}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r3, 0x10000}, &(0x7f0000000340)=0x8) 2018/06/04 21:22:42 executing program 3: 2018/06/04 21:22:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:42 executing program 2: 2018/06/04 21:22:42 executing program 4: [ 176.961648] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.968901] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 176.976153] R13: 0000000000000228 R14: 00000000006f8460 R15: 0000000000000000 2018/06/04 21:22:42 executing program 0: [ 177.063494] FAULT_INJECTION: forcing a failure. [ 177.063494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.075464] CPU: 1 PID: 11432 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 177.082407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.091777] Call Trace: [ 177.094383] dump_stack+0x1b9/0x294 [ 177.098041] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.103266] should_fail.cold.4+0xa/0x1a [ 177.107354] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/04 21:22:42 executing program 3: 2018/06/04 21:22:42 executing program 0: [ 177.112490] ? kasan_check_read+0x11/0x20 [ 177.116666] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 177.121887] ? find_held_lock+0x36/0x1c0 [ 177.126003] ? check_same_owner+0x320/0x320 [ 177.130360] ? rcu_note_context_switch+0x710/0x710 [ 177.135324] ? __might_sleep+0x95/0x190 [ 177.139325] __alloc_pages_nodemask+0x34e/0xd70 [ 177.144016] ? default_file_splice_read+0x1c7/0xad0 [ 177.149054] ? do_splice_to+0x12e/0x190 [ 177.153048] ? splice_direct_to_actor+0x268/0x8d0 [ 177.157913] ? __alloc_pages_slowpath+0x2db0/0x2db0 2018/06/04 21:22:42 executing program 3: [ 177.162965] ? kasan_check_read+0x11/0x20 [ 177.167138] ? rcu_is_watching+0x85/0x140 [ 177.171319] ? rcu_pm_notify+0xc0/0xc0 [ 177.175243] ? rcu_read_lock_sched_held+0x108/0x120 [ 177.180286] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 177.185856] alloc_pages_current+0x10c/0x210 [ 177.190292] push_pipe+0x400/0x7a0 [ 177.193866] ? __kmalloc_node+0x47/0x70 [ 177.197876] iov_iter_get_pages_alloc+0x84a/0x1510 [ 177.202839] ? copy_page_from_iter+0x880/0x880 [ 177.207444] ? trace_hardirqs_on_caller+0x421/0x5c0 2018/06/04 21:22:42 executing program 0: 2018/06/04 21:22:42 executing program 3: [ 177.212478] ? trace_hardirqs_on+0xd/0x10 [ 177.216653] ? mark_free_pages+0x3b0/0x3b0 [ 177.220918] ? check_same_owner+0x320/0x320 [ 177.225265] ? security_socket_sendmsg+0x94/0xc0 [ 177.230051] ? netlink_unicast+0x740/0x740 [ 177.234317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.239877] ? sock_sendmsg+0x5a/0x120 [ 177.243791] ? kernel_sendmsg+0x43/0x50 [ 177.247797] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 177.252836] ? iov_iter_pipe+0xc2/0x2f0 [ 177.256836] default_file_splice_read+0x1c7/0xad0 2018/06/04 21:22:43 executing program 0: 2018/06/04 21:22:43 executing program 3: [ 177.261698] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.267091] ? do_splice_direct+0x400/0x400 [ 177.271431] ? __put_compound_page+0xe0/0xe0 [ 177.275850] ? kernel_sendpage+0x9a/0xf0 [ 177.279919] ? sock_kfree_s+0x60/0x60 [ 177.283744] ? generic_pipe_buf_release+0x1dc/0x290 [ 177.288777] ? anon_pipe_buf_release+0x510/0x510 [ 177.293552] ? pipe_to_sendpage+0x2d0/0x3f0 [ 177.297896] ? generic_pipe_buf_nosteal+0x10/0x10 [ 177.302759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.308322] ? splice_from_pipe_next.part.8+0x296/0x340 [ 177.313728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.319287] ? fsnotify+0x415/0xfc0 [ 177.322937] ? fsnotify+0xfc0/0xfc0 [ 177.326587] ? fsnotify_first_mark+0x330/0x330 [ 177.331192] ? splice_shrink_spd+0xd0/0xd0 [ 177.335446] ? security_file_permission+0x1c6/0x240 [ 177.340482] ? rw_verify_area+0x118/0x360 [ 177.344653] ? do_splice_direct+0x400/0x400 [ 177.348999] do_splice_to+0x12e/0x190 [ 177.352822] splice_direct_to_actor+0x268/0x8d0 [ 177.357517] ? pipe_to_sendpage+0x3f0/0x3f0 [ 177.361861] ? do_splice_to+0x190/0x190 [ 177.365855] ? rw_verify_area+0x118/0x360 [ 177.370030] do_splice_direct+0x2cc/0x400 [ 177.374200] ? splice_direct_to_actor+0x8d0/0x8d0 [ 177.379073] ? rw_verify_area+0x118/0x360 [ 177.383248] do_sendfile+0x60f/0xe00 [ 177.386991] ? do_compat_pwritev64+0x1b0/0x1b0 [ 177.391601] ? __might_sleep+0x95/0x190 [ 177.395606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.401170] ? _copy_from_user+0xdf/0x150 [ 177.405343] __x64_sys_sendfile64+0x155/0x240 [ 177.409860] ? __ia32_sys_sendfile+0x290/0x290 [ 177.414466] ? do_syscall_64+0x92/0x800 [ 177.418469] do_syscall_64+0x1b1/0x800 [ 177.422380] ? finish_task_switch+0x1ca/0x840 [ 177.426899] ? syscall_return_slowpath+0x5c0/0x5c0 [ 177.431843] ? syscall_return_slowpath+0x30f/0x5c0 [ 177.436798] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 177.442192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.447063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.452263] RIP: 0033:0x455a09 [ 177.455460] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:43 executing program 6 (fault-call:2 fault-nth:31): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:43 executing program 5: 2018/06/04 21:22:43 executing program 4: 2018/06/04 21:22:43 executing program 0: 2018/06/04 21:22:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@l2, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x100000000, 0x100000001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x0, 0x3ff, 0x5, r2}, &(0x7f0000000200)=0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x90000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xb, 0x9, 0x7, 0x5, 0x4, r3, 0x2}, 0x2c) 2018/06/04 21:22:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000400)={[], 0x0, 0x58b, 0xfff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2018/06/04 21:22:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 177.463192] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 177.470468] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 177.477766] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.485029] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 177.492286] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001e [ 177.541661] FAULT_INJECTION: forcing a failure. [ 177.541661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.553694] CPU: 1 PID: 11458 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 177.560631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.569993] Call Trace: [ 177.572599] dump_stack+0x1b9/0x294 [ 177.576248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.581453] ? find_held_lock+0x36/0x1c0 [ 177.585533] should_fail.cold.4+0xa/0x1a [ 177.589614] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.594744] ? kasan_check_read+0x11/0x20 [ 177.598914] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 177.604125] ? find_held_lock+0x36/0x1c0 [ 177.608220] ? check_same_owner+0x320/0x320 [ 177.612561] ? rcu_note_context_switch+0x710/0x710 [ 177.617496] ? __might_sleep+0x95/0x190 [ 177.621467] __alloc_pages_nodemask+0x34e/0xd70 [ 177.626129] ? default_file_splice_read+0x1c7/0xad0 [ 177.631184] ? do_splice_to+0x12e/0x190 [ 177.635191] ? splice_direct_to_actor+0x268/0x8d0 [ 177.640038] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 177.645057] ? kasan_check_read+0x11/0x20 [ 177.649196] ? rcu_is_watching+0x85/0x140 [ 177.653331] ? rcu_pm_notify+0xc0/0xc0 [ 177.657220] ? rcu_read_lock_sched_held+0x108/0x120 [ 177.662228] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 177.667761] alloc_pages_current+0x10c/0x210 [ 177.672164] push_pipe+0x400/0x7a0 [ 177.675694] ? __kmalloc_node+0x47/0x70 [ 177.679666] iov_iter_get_pages_alloc+0x84a/0x1510 [ 177.684594] ? copy_page_from_iter+0x880/0x880 [ 177.689191] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 177.694199] ? trace_hardirqs_on+0xd/0x10 [ 177.698341] ? mark_free_pages+0x3b0/0x3b0 [ 177.702569] ? check_same_owner+0x320/0x320 [ 177.706884] ? security_socket_sendmsg+0x94/0xc0 [ 177.711643] ? netlink_unicast+0x740/0x740 [ 177.715873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.721403] ? sock_sendmsg+0x5a/0x120 [ 177.725284] ? kernel_sendmsg+0x43/0x50 [ 177.729271] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 177.734288] ? iov_iter_pipe+0xc2/0x2f0 [ 177.738257] default_file_splice_read+0x1c7/0xad0 [ 177.743091] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.748454] ? do_splice_direct+0x400/0x400 [ 177.752764] ? __put_compound_page+0xe0/0xe0 [ 177.757164] ? kernel_sendpage+0x9a/0xf0 [ 177.761210] ? sock_kfree_s+0x60/0x60 [ 177.765011] ? generic_pipe_buf_release+0x1dc/0x290 [ 177.770027] ? anon_pipe_buf_release+0x510/0x510 [ 177.774772] ? pipe_to_sendpage+0x2d0/0x3f0 [ 177.779094] ? generic_pipe_buf_nosteal+0x10/0x10 [ 177.783926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.789466] ? splice_from_pipe_next.part.8+0x296/0x340 [ 177.794832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.800366] ? fsnotify+0x415/0xfc0 [ 177.803987] ? fsnotify+0xfc0/0xfc0 [ 177.807605] ? fsnotify_first_mark+0x330/0x330 [ 177.812190] ? splice_shrink_spd+0xd0/0xd0 [ 177.816419] ? security_file_permission+0x1c6/0x240 [ 177.821428] ? rw_verify_area+0x118/0x360 [ 177.825569] ? do_splice_direct+0x400/0x400 [ 177.829882] do_splice_to+0x12e/0x190 [ 177.833679] splice_direct_to_actor+0x268/0x8d0 [ 177.838338] ? pipe_to_sendpage+0x3f0/0x3f0 [ 177.842664] ? do_splice_to+0x190/0x190 [ 177.846629] ? rw_verify_area+0x118/0x360 [ 177.850771] do_splice_direct+0x2cc/0x400 [ 177.854914] ? splice_direct_to_actor+0x8d0/0x8d0 [ 177.859750] ? rw_verify_area+0x118/0x360 [ 177.863891] do_sendfile+0x60f/0xe00 [ 177.867600] ? do_compat_pwritev64+0x1b0/0x1b0 [ 177.872184] ? __might_sleep+0x95/0x190 [ 177.876157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.881694] ? _copy_from_user+0xdf/0x150 [ 177.885835] __x64_sys_sendfile64+0x155/0x240 [ 177.890323] ? __ia32_sys_sendfile+0x290/0x290 [ 177.894900] ? do_syscall_64+0x92/0x800 [ 177.898870] do_syscall_64+0x1b1/0x800 [ 177.902748] ? finish_task_switch+0x1ca/0x840 [ 177.907232] ? syscall_return_slowpath+0x5c0/0x5c0 [ 177.912150] ? syscall_return_slowpath+0x30f/0x5c0 [ 177.917073] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 177.922431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.927277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.932465] RIP: 0033:0x455a09 [ 177.935640] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) socket$netlink(0x10, 0x3, 0x1f) close(r0) 2018/06/04 21:22:43 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) dup2(0xffffffffffffffff, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) [ 177.943337] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 177.950597] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 177.957855] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.965111] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 177.972368] R13: 00000000000005a5 R14: 00000000006fd818 R15: 000000000000001f 2018/06/04 21:22:43 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() 2018/06/04 21:22:43 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)=0x80be, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000540)={0x3ff, 0x200, 0x8000, 0x4, 0x1, 0x9, 0xd74, 0x7, 0x0}, &(0x7f0000000580)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000005c0)={r2, 0x9}, &(0x7f0000000640)=0x8) socketpair(0x19, 0x807, 0x6, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) fchownat(r3, &(0x7f00000003c0)='./file0\x00', r4, r5, 0x1400) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) getsockname$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) rt_sigsuspend(&(0x7f0000000040)={0x7fff}, 0x8) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000002c0)={0xc8c, 0xa5e, 0x4, 0xfffffffffffffffd, 0x2, [{0x8, 0x8, 0x1, 0x0, 0x0, 0x100}, {0xffffffff, 0x8, 0x20, 0x0, 0x0, 0x80d}]}) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000500)=0xfff) r6 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:43 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2000000802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3}]}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x10) dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000002c0)) 2018/06/04 21:22:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="2f65786500000000000409004bddd9e191be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ae94d1a17c9c0f68f3a928a8a898a370f6681fdc5fcebfd8ff826c86fecb0d00933f7ef7433") fsetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000000)='\x00', 0x2b3, 0x0) 2018/06/04 21:22:43 executing program 4: setitimer(0x2, &(0x7f0000000040), 0x0) 2018/06/04 21:22:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) socket$netlink(0x10, 0x3, 0x1f) close(r0) 2018/06/04 21:22:44 executing program 6 (fault-call:2 fault-nth:32): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000180)="c7", 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/06/04 21:22:44 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000ac0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0x2}, 0x80}) accept4$packet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x14, 0x7fffc) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file1\x00', 0x0) linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) 2018/06/04 21:22:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000008000000000000002"]) 2018/06/04 21:22:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) socket$netlink(0x10, 0x3, 0x1f) close(r0) 2018/06/04 21:22:44 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60093a0600083a00fe80e00000000000010000bbff020000000000f3ffffffffffffff01000000000008907800000000"], &(0x7f0000000100)) 2018/06/04 21:22:44 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x3d, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x1, 0x13000, 0x0, 0x9136, 0xfffffffffffffeff}) getrusage(0x1, &(0x7f0000000180)) 2018/06/04 21:22:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 179.110814] FAULT_INJECTION: forcing a failure. [ 179.110814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.122746] CPU: 1 PID: 11523 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 179.129685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.139047] Call Trace: [ 179.141656] dump_stack+0x1b9/0x294 [ 179.145306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.150525] should_fail.cold.4+0xa/0x1a [ 179.154602] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/04 21:22:44 executing program 3: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) poll(&(0x7f0000000140)=[{r1, 0x600}], 0x1, 0x532) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/159, 0xffffffe8}], 0x16d) 2018/06/04 21:22:44 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup2(r0, r0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x21815eb2, 0xfffffffffffffff9, 0x0, 0x2}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) [ 179.159901] ? kasan_check_read+0x11/0x20 [ 179.164072] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.169284] ? find_held_lock+0x36/0x1c0 [ 179.173383] ? check_same_owner+0x320/0x320 [ 179.177731] ? rcu_note_context_switch+0x710/0x710 [ 179.182682] ? __might_sleep+0x95/0x190 [ 179.186681] __alloc_pages_nodemask+0x34e/0xd70 [ 179.191369] ? default_file_splice_read+0x1c7/0xad0 [ 179.196402] ? do_splice_to+0x12e/0x190 [ 179.200391] ? splice_direct_to_actor+0x268/0x8d0 [ 179.205258] ? __alloc_pages_slowpath+0x2db0/0x2db0 2018/06/04 21:22:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000180b1960052c54abc0002000000000000070000000008000b000000075f"], 0x1}, 0x1}, 0x0) [ 179.210299] ? kasan_check_read+0x11/0x20 [ 179.214464] ? rcu_is_watching+0x85/0x140 [ 179.218617] ? rcu_pm_notify+0xc0/0xc0 [ 179.222503] ? rcu_read_lock_sched_held+0x108/0x120 [ 179.227533] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 179.233066] alloc_pages_current+0x10c/0x210 [ 179.237466] push_pipe+0x400/0x7a0 [ 179.240993] ? __kmalloc_node+0x47/0x70 [ 179.244966] iov_iter_get_pages_alloc+0x84a/0x1510 [ 179.249891] ? copy_page_from_iter+0x880/0x880 [ 179.254463] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 179.259465] ? trace_hardirqs_on+0xd/0x10 [ 179.263602] ? mark_free_pages+0x3b0/0x3b0 [ 179.267840] ? check_same_owner+0x320/0x320 [ 179.272153] ? security_socket_sendmsg+0x94/0xc0 [ 179.276898] ? netlink_unicast+0x740/0x740 [ 179.281127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.286652] ? sock_sendmsg+0x5a/0x120 [ 179.290542] ? kernel_sendmsg+0x43/0x50 [ 179.294510] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 179.299530] ? iov_iter_pipe+0xc2/0x2f0 [ 179.303498] default_file_splice_read+0x1c7/0xad0 [ 179.308329] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.313688] ? do_splice_direct+0x400/0x400 [ 179.317997] ? __put_compound_page+0xe0/0xe0 [ 179.322401] ? kernel_sendpage+0x9a/0xf0 [ 179.326461] ? sock_kfree_s+0x60/0x60 [ 179.330260] ? generic_pipe_buf_release+0x1dc/0x290 [ 179.335265] ? anon_pipe_buf_release+0x510/0x510 [ 179.340013] ? pipe_to_sendpage+0x2d0/0x3f0 [ 179.344330] ? generic_pipe_buf_nosteal+0x10/0x10 [ 179.349160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.354688] ? splice_from_pipe_next.part.8+0x296/0x340 [ 179.360051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.365573] ? fsnotify+0x415/0xfc0 [ 179.369190] ? fsnotify+0xfc0/0xfc0 [ 179.372801] ? fsnotify_first_mark+0x330/0x330 [ 179.377372] ? splice_shrink_spd+0xd0/0xd0 [ 179.381617] ? security_file_permission+0x1c6/0x240 [ 179.386622] ? rw_verify_area+0x118/0x360 [ 179.390761] ? do_splice_direct+0x400/0x400 [ 179.395071] do_splice_to+0x12e/0x190 [ 179.398864] splice_direct_to_actor+0x268/0x8d0 [ 179.403525] ? pipe_to_sendpage+0x3f0/0x3f0 [ 179.407842] ? do_splice_to+0x190/0x190 [ 179.411807] ? rw_verify_area+0x118/0x360 [ 179.415946] do_splice_direct+0x2cc/0x400 [ 179.420087] ? splice_direct_to_actor+0x8d0/0x8d0 [ 179.424923] ? rw_verify_area+0x118/0x360 [ 179.429064] do_sendfile+0x60f/0xe00 [ 179.432773] ? do_compat_pwritev64+0x1b0/0x1b0 [ 179.437346] ? __might_sleep+0x95/0x190 [ 179.441315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 179.446855] ? _copy_from_user+0xdf/0x150 [ 179.451031] __x64_sys_sendfile64+0x155/0x240 [ 179.455519] ? __ia32_sys_sendfile+0x290/0x290 [ 179.460091] ? do_syscall_64+0x92/0x800 [ 179.464056] do_syscall_64+0x1b1/0x800 [ 179.467931] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 179.472765] ? syscall_return_slowpath+0x5c0/0x5c0 [ 179.477685] ? syscall_return_slowpath+0x30f/0x5c0 [ 179.482610] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 179.487966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.492801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.497976] RIP: 0033:0x455a09 [ 179.501149] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.508845] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 179.516100] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 179.523354] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.530611] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 179.537877] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000020 2018/06/04 21:22:45 executing program 4: r0 = socket$inet6(0xa, 0x4000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x80004e20}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000002, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000824fe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 2018/06/04 21:22:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) socket$netlink(0x10, 0x3, 0x1f) close(r0) 2018/06/04 21:22:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) accept(r0, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/06/04 21:22:45 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)="6370757365742e6d656d7302", 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000880)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept(r1, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000140)="a3", 0x1, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000002180)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000002140)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) shutdown(r2, 0x1) close(r3) [ 180.547570] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/06/04 21:22:46 executing program 6 (fault-call:2 fault-nth:33): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:46 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/04 21:22:46 executing program 0: r0 = syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) 2018/06/04 21:22:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x1000001) 2018/06/04 21:22:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:46 executing program 4: socketpair$unix(0x1, 0x8000000003, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/159, 0xffffffe8}], 0x16d) 2018/06/04 21:22:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) close(r0) 2018/06/04 21:22:46 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) [ 180.721631] FAULT_INJECTION: forcing a failure. [ 180.721631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.733597] CPU: 0 PID: 11581 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 180.740548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.749948] Call Trace: [ 180.752558] dump_stack+0x1b9/0x294 [ 180.756206] ? dump_stack_print_info.cold.2+0x52/0x52 [ 180.761424] should_fail.cold.4+0xa/0x1a [ 180.765509] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/06/04 21:22:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001270000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c897a2b10bc8394762bab422771360aa38dc8f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adb0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb4bf260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a39d824fa2001cb9377fbc132be60c8b0bf6ac0a875b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d2209fbaf50441f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856acff2dabc8b207f09d78e1f83461ccac0b25587fbe2f8bc64403679d2c6d94081f23308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550ba9adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed64b6adf1ad6d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc35551fdfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de1"], 0x439) shutdown(r0, 0x1) 2018/06/04 21:22:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') unshare(0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)) [ 180.770635] ? kasan_check_read+0x11/0x20 [ 180.774807] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 180.780027] ? find_held_lock+0x36/0x1c0 [ 180.784131] ? check_same_owner+0x320/0x320 [ 180.788482] ? rcu_note_context_switch+0x710/0x710 [ 180.793440] ? __might_sleep+0x95/0x190 [ 180.797444] __alloc_pages_nodemask+0x34e/0xd70 [ 180.802134] ? default_file_splice_read+0x1c7/0xad0 [ 180.807170] ? do_splice_to+0x12e/0x190 [ 180.811171] ? splice_direct_to_actor+0x268/0x8d0 [ 180.816040] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 180.821104] ? kasan_check_read+0x11/0x20 [ 180.825275] ? rcu_is_watching+0x85/0x140 [ 180.829449] ? rcu_pm_notify+0xc0/0xc0 [ 180.833376] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.838423] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 180.843996] alloc_pages_current+0x10c/0x210 [ 180.848431] push_pipe+0x400/0x7a0 [ 180.851996] ? __kmalloc_node+0x47/0x70 [ 180.855990] iov_iter_get_pages_alloc+0x84a/0x1510 [ 180.861055] ? copy_page_from_iter+0x880/0x880 [ 180.865650] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 180.870670] ? trace_hardirqs_on+0xd/0x10 [ 180.874822] ? mark_free_pages+0x3b0/0x3b0 [ 180.879049] ? check_same_owner+0x320/0x320 [ 180.883365] ? security_socket_sendmsg+0x94/0xc0 [ 180.888115] ? netlink_unicast+0x740/0x740 [ 180.892345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.897878] ? sock_sendmsg+0x5a/0x120 [ 180.901758] ? kernel_sendmsg+0x43/0x50 [ 180.905724] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 180.910728] ? iov_iter_pipe+0xc2/0x2f0 [ 180.914695] default_file_splice_read+0x1c7/0xad0 [ 180.919530] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 180.924896] ? do_splice_direct+0x400/0x400 [ 180.929207] ? __put_compound_page+0xe0/0xe0 [ 180.933615] ? kernel_sendpage+0x9a/0xf0 [ 180.937665] ? sock_kfree_s+0x60/0x60 [ 180.941462] ? generic_pipe_buf_release+0x1dc/0x290 [ 180.946470] ? anon_pipe_buf_release+0x510/0x510 [ 180.951211] ? pipe_to_sendpage+0x2d0/0x3f0 [ 180.955520] ? generic_pipe_buf_nosteal+0x10/0x10 [ 180.960350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.965887] ? splice_from_pipe_next.part.8+0x296/0x340 [ 180.971250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.976774] ? fsnotify+0x415/0xfc0 [ 180.980390] ? fsnotify+0xfc0/0xfc0 [ 180.984004] ? fsnotify_first_mark+0x330/0x330 [ 180.988582] ? splice_shrink_spd+0xd0/0xd0 [ 180.992819] ? security_file_permission+0x1c6/0x240 [ 180.997829] ? rw_verify_area+0x118/0x360 [ 181.001969] ? do_splice_direct+0x400/0x400 [ 181.006283] do_splice_to+0x12e/0x190 [ 181.010079] splice_direct_to_actor+0x268/0x8d0 [ 181.014738] ? pipe_to_sendpage+0x3f0/0x3f0 [ 181.019050] ? do_splice_to+0x190/0x190 [ 181.023024] ? rw_verify_area+0x118/0x360 [ 181.027166] do_splice_direct+0x2cc/0x400 [ 181.031306] ? splice_direct_to_actor+0x8d0/0x8d0 [ 181.036142] ? rw_verify_area+0x118/0x360 [ 181.040289] do_sendfile+0x60f/0xe00 [ 181.043999] ? do_compat_pwritev64+0x1b0/0x1b0 [ 181.048581] ? __might_sleep+0x95/0x190 [ 181.052553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 181.058083] ? _copy_from_user+0xdf/0x150 [ 181.062251] __x64_sys_sendfile64+0x155/0x240 [ 181.066743] ? __ia32_sys_sendfile+0x290/0x290 [ 181.071329] ? do_syscall_64+0x92/0x800 [ 181.075298] do_syscall_64+0x1b1/0x800 [ 181.079176] ? finish_task_switch+0x1ca/0x840 [ 181.083663] ? syscall_return_slowpath+0x5c0/0x5c0 [ 181.088590] ? syscall_return_slowpath+0x30f/0x5c0 [ 181.093515] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 181.098870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.103708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.108901] RIP: 0033:0x455a09 [ 181.112080] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:46 executing program 7: syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="8ac581639549934f7e47b2cbab1d279ed308f949b3f17e70ffbad52a105e197e410a99b8a82b0fb97081d6550acc917b0a7c4997f3d11c1e480d985096cde45ea740927c7bdfb6cce6b1b43551a6bd80250b2aa79c762a774c961401dd50ffda6b1727f93e81dc73064d00", 0x6b, 0x400}], 0x2020, &(0x7f00000001c0)='cpuset.mems\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) 2018/06/04 21:22:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/stat\x00') mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 2018/06/04 21:22:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x0) [ 181.119780] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 181.127039] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 181.134306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 181.141574] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 181.148949] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000021 2018/06/04 21:22:46 executing program 5: close(0xffffffffffffffff) 2018/06/04 21:22:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000003c0)) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES64=r0], @ANYRES16=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="9820f4c34ab891e38e995f8e40e352cb082a22cb0ddd426d57a06366d38c04b39e533e83172df5c8cc6d3edeaa2501028ebd8ea4efd875952ecda36cea2fcbdbc94d223d7f112f631364d5703953a8ca6c494f982299566e0bf1b06a966d38287361d29bc1f9c06ceb04ef34121db03e9ba98b65a4e96ae74885f8b84a124c562c25dfda7c0077379b0edd50c6583201cdf86c2ba14b772c2ca9c4b099d10683e7db0546fa33b025d3cb59971df481a5a091e319d6eead28b7149268d38dd98a76d427dfbbebb094229651cefd417f5e", @ANYPTR, @ANYPTR64, @ANYPTR, @ANYRES32, @ANYBLOB="4b9bc4cbedade3f513e0fa5f0ca84fb78edac4cae5bec2031b025a221130bced6fc577b7aff11c7b0a4a7ef365b446ce50558f31340b9b65c91e78e65e8bf26a1f5f894f05219722188cbb32069d23048250170aeb7f9334f1d21e517267e02b4bf42e17ba1691608f01e73eff376b48985e3b59c430a0b97f95fe745b7099394f3f37775f53b426b2c5bbfe5f86f0e96c428f14b218318f569e2d3ba61c464e26a96e29ee373fd4dc3e657e25700a110a4bb1eef4b00d045915", @ANYBLOB="7c654d26c035e430ce", @ANYPTR, @ANYBLOB="9599bf879e5382a5edaf2854ac0485c9ef2ed4ee750be970681bc509484481d75a38ee387728b167dd57d1299fd2fde3"]], @ANYRES16, @ANYRES32, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r0, @ANYRES64=r0], 0x2a) 2018/06/04 21:22:47 executing program 6 (fault-call:2 fault-nth:34): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x0) 2018/06/04 21:22:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0x7) 2018/06/04 21:22:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0xf001, r2, r3, 0x7, 0x22006) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/06/04 21:22:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x439) shutdown(r0, 0x1) 2018/06/04 21:22:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, "00000080000001000000007000"}) [ 181.685123] FAULT_INJECTION: forcing a failure. [ 181.685123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.697201] CPU: 1 PID: 11637 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 181.704140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.713506] Call Trace: [ 181.716120] dump_stack+0x1b9/0x294 [ 181.719775] ? dump_stack_print_info.cold.2+0x52/0x52 [ 181.724999] should_fail.cold.4+0xa/0x1a [ 181.729105] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.734238] ? __schedule+0x809/0x1e30 [ 181.738156] ? find_held_lock+0x36/0x1c0 [ 181.742259] ? check_same_owner+0x320/0x320 [ 181.746608] ? rcu_note_context_switch+0x710/0x710 [ 181.751568] ? __might_sleep+0x95/0x190 [ 181.755572] __alloc_pages_nodemask+0x34e/0xd70 [ 181.760267] ? default_file_splice_read+0x1c7/0xad0 [ 181.765307] ? do_splice_to+0x12e/0x190 [ 181.769307] ? splice_direct_to_actor+0x268/0x8d0 [ 181.774184] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 181.779242] ? kasan_check_read+0x11/0x20 [ 181.783419] ? rcu_is_watching+0x85/0x140 [ 181.787595] ? rcu_pm_notify+0xc0/0xc0 [ 181.791521] ? rcu_read_lock_sched_held+0x108/0x120 [ 181.796569] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 181.802137] alloc_pages_current+0x10c/0x210 [ 181.806579] push_pipe+0x400/0x7a0 [ 181.810145] ? __kmalloc_node+0x47/0x70 [ 181.814152] iov_iter_get_pages_alloc+0x84a/0x1510 [ 181.819119] ? copy_page_from_iter+0x880/0x880 [ 181.823730] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 181.828769] ? trace_hardirqs_on+0xd/0x10 [ 181.832947] ? mark_free_pages+0x3b0/0x3b0 [ 181.837213] ? check_same_owner+0x320/0x320 [ 181.841548] ? security_socket_sendmsg+0x94/0xc0 [ 181.846309] ? netlink_unicast+0x740/0x740 [ 181.850552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.856093] ? sock_sendmsg+0x5a/0x120 [ 181.859981] ? kernel_sendmsg+0x43/0x50 [ 181.863955] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 181.868957] ? iov_iter_pipe+0xc2/0x2f0 [ 181.872923] default_file_splice_read+0x1c7/0xad0 [ 181.877758] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.883123] ? do_splice_direct+0x400/0x400 [ 181.887435] ? __put_compound_page+0xe0/0xe0 [ 181.891835] ? kernel_sendpage+0x9a/0xf0 [ 181.895883] ? sock_kfree_s+0x60/0x60 [ 181.899675] ? generic_pipe_buf_release+0x1dc/0x290 [ 181.904682] ? anon_pipe_buf_release+0x510/0x510 [ 181.909425] ? pipe_to_sendpage+0x2d0/0x3f0 [ 181.913739] ? generic_pipe_buf_nosteal+0x10/0x10 [ 181.918572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.924098] ? splice_from_pipe_next.part.8+0x296/0x340 [ 181.929456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.934983] ? fsnotify+0x415/0xfc0 [ 181.938602] ? fsnotify+0xfc0/0xfc0 [ 181.942215] ? fsnotify_first_mark+0x330/0x330 [ 181.946787] ? splice_shrink_spd+0xd0/0xd0 [ 181.951024] ? security_file_permission+0x1c6/0x240 [ 181.956044] ? rw_verify_area+0x118/0x360 [ 181.960190] ? do_splice_direct+0x400/0x400 [ 181.964501] do_splice_to+0x12e/0x190 [ 181.968296] splice_direct_to_actor+0x268/0x8d0 [ 181.972957] ? pipe_to_sendpage+0x3f0/0x3f0 [ 181.977273] ? do_splice_to+0x190/0x190 [ 181.981237] ? rw_verify_area+0x118/0x360 [ 181.985375] do_splice_direct+0x2cc/0x400 [ 181.989516] ? splice_direct_to_actor+0x8d0/0x8d0 [ 181.994354] ? rw_verify_area+0x118/0x360 [ 181.998493] do_sendfile+0x60f/0xe00 [ 182.002199] ? do_compat_pwritev64+0x1b0/0x1b0 [ 182.006771] ? __might_sleep+0x95/0x190 [ 182.010740] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 182.016267] ? _copy_from_user+0xdf/0x150 [ 182.020405] __x64_sys_sendfile64+0x155/0x240 [ 182.024891] ? __ia32_sys_sendfile+0x290/0x290 [ 182.029465] ? do_syscall_64+0x92/0x800 [ 182.033433] do_syscall_64+0x1b1/0x800 [ 182.037309] ? finish_task_switch+0x1ca/0x840 [ 182.041796] ? syscall_return_slowpath+0x5c0/0x5c0 [ 182.046716] ? syscall_return_slowpath+0x30f/0x5c0 [ 182.051640] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 182.056995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.061843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.067025] RIP: 0033:0x455a09 [ 182.070201] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 182.077898] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 2018/06/04 21:22:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/06/04 21:22:47 executing program 3: epoll_create(0x4a) 2018/06/04 21:22:47 executing program 0: syz_emit_ethernet(0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYBLOB="5000000090ddda75fd126dfd51d6f838d45555f16a5335f64be52f95b8"], &(0x7f00000002c0)) 2018/06/04 21:22:47 executing program 3: r0 = socket$inet(0x2, 0x803, 0x11) sendto$inet(r0, &(0x7f000009ff3c), 0x0, 0x0, &(0x7f000032b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 2018/06/04 21:22:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x0) close(r0) 2018/06/04 21:22:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgrouplx.depth\x00\x00\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 182.085156] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 182.092413] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 182.099670] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 182.106926] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000022 2018/06/04 21:22:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}, {}, {}, {}], 0x8) 2018/06/04 21:22:47 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:48 executing program 6 (fault-call:2 fault-nth:35): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:48 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r1 = socket(0x40000000002, 0x2000000000000003, 0x5) sendto$unix(r1, &(0x7f0000000080), 0x640, 0x0, &(0x7f0000000d00)=@abs, 0x63) 2018/06/04 21:22:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) close(0xffffffffffffffff) 2018/06/04 21:22:48 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x1}, 0x8) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0xfffffffffffffff8, 0xffffffff, 0x1, 0x1, 0x0, 0x9, 0x40000, 0x3, 0xd7c8, 0x3, 0x4b12, 0x2, 0x18000000000, 0x3ff, 0x86, 0x9, 0x7fffffff, 0x1ff, 0x80000001, 0x45, 0xa2, 0xb57, 0x80000001, 0x9, 0x3ff, 0xcfc8, 0x10000, 0x7, 0xc5b2, 0x8001, 0x404000, 0x8, 0x142f, 0xffff, 0x7fff, 0x6, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x100, 0xf8, 0x2, 0x1, 0x3, 0x1, 0x9}, r0, 0xa, r4, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0xde1}, 0x10) 2018/06/04 21:22:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:48 executing program 3: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000480)) 2018/06/04 21:22:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000002c0)=""/136, 0x88}], 0x2, 0x0) 2018/06/04 21:22:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\b', 0x1, 0x3fffffa, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) [ 182.666280] FAULT_INJECTION: forcing a failure. [ 182.666280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.678209] CPU: 1 PID: 11692 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 182.685225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.694590] Call Trace: [ 182.697194] dump_stack+0x1b9/0x294 [ 182.700841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 182.706058] should_fail.cold.4+0xa/0x1a [ 182.710115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.715278] ? kasan_check_read+0x11/0x20 [ 182.719421] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 182.724779] ? find_held_lock+0x36/0x1c0 [ 182.728848] ? check_same_owner+0x320/0x320 [ 182.733168] ? rcu_note_context_switch+0x710/0x710 [ 182.738093] ? __might_sleep+0x95/0x190 [ 182.742065] __alloc_pages_nodemask+0x34e/0xd70 [ 182.746727] ? default_file_splice_read+0x1c7/0xad0 [ 182.751730] ? do_splice_to+0x12e/0x190 [ 182.755692] ? splice_direct_to_actor+0x268/0x8d0 [ 182.760532] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 182.765588] ? kasan_check_read+0x11/0x20 [ 182.769728] ? rcu_is_watching+0x85/0x140 [ 182.773866] ? rcu_pm_notify+0xc0/0xc0 [ 182.777757] ? rcu_read_lock_sched_held+0x108/0x120 [ 182.782768] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 182.788304] alloc_pages_current+0x10c/0x210 [ 182.792709] push_pipe+0x400/0x7a0 [ 182.796239] ? __kmalloc_node+0x47/0x70 [ 182.800208] iov_iter_get_pages_alloc+0x84a/0x1510 [ 182.805138] ? copy_page_from_iter+0x880/0x880 [ 182.809715] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 182.814721] ? trace_hardirqs_on+0xd/0x10 [ 182.818864] ? mark_free_pages+0x3b0/0x3b0 [ 182.823091] ? check_same_owner+0x320/0x320 [ 182.827403] ? security_socket_sendmsg+0x94/0xc0 [ 182.832149] ? netlink_unicast+0x740/0x740 [ 182.836377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 182.841905] ? sock_sendmsg+0x5a/0x120 [ 182.845797] ? kernel_sendmsg+0x43/0x50 [ 182.849767] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 182.854774] ? iov_iter_pipe+0xc2/0x2f0 [ 182.858744] default_file_splice_read+0x1c7/0xad0 [ 182.863578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.868945] ? do_splice_direct+0x400/0x400 [ 182.873256] ? __put_compound_page+0xe0/0xe0 [ 182.877657] ? kernel_sendpage+0x9a/0xf0 [ 182.881704] ? sock_kfree_s+0x60/0x60 [ 182.885498] ? generic_pipe_buf_release+0x1dc/0x290 [ 182.890505] ? anon_pipe_buf_release+0x510/0x510 [ 182.895249] ? pipe_to_sendpage+0x2d0/0x3f0 [ 182.899563] ? generic_pipe_buf_nosteal+0x10/0x10 [ 182.904397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 182.909923] ? splice_from_pipe_next.part.8+0x296/0x340 [ 182.915288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 182.920813] ? fsnotify+0x415/0xfc0 [ 182.924436] ? fsnotify+0xfc0/0xfc0 [ 182.928052] ? fsnotify_first_mark+0x330/0x330 [ 182.932637] ? splice_shrink_spd+0xd0/0xd0 [ 182.936871] ? security_file_permission+0x1c6/0x240 [ 182.941880] ? rw_verify_area+0x118/0x360 [ 182.946025] ? do_splice_direct+0x400/0x400 [ 182.950341] do_splice_to+0x12e/0x190 [ 182.954138] splice_direct_to_actor+0x268/0x8d0 [ 182.958810] ? pipe_to_sendpage+0x3f0/0x3f0 [ 182.963127] ? do_splice_to+0x190/0x190 [ 182.967096] ? rw_verify_area+0x118/0x360 [ 182.971237] do_splice_direct+0x2cc/0x400 [ 182.975377] ? splice_direct_to_actor+0x8d0/0x8d0 [ 182.980213] ? rw_verify_area+0x118/0x360 [ 182.984352] do_sendfile+0x60f/0xe00 [ 182.988062] ? do_compat_pwritev64+0x1b0/0x1b0 [ 182.992636] ? __might_sleep+0x95/0x190 [ 182.996608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.002147] ? _copy_from_user+0xdf/0x150 [ 183.006288] __x64_sys_sendfile64+0x155/0x240 [ 183.010774] ? __ia32_sys_sendfile+0x290/0x290 [ 183.015349] ? do_syscall_64+0x92/0x800 [ 183.019320] do_syscall_64+0x1b1/0x800 [ 183.023194] ? finish_task_switch+0x1ca/0x840 [ 183.027679] ? syscall_return_slowpath+0x5c0/0x5c0 [ 183.032602] ? syscall_return_slowpath+0x30f/0x5c0 [ 183.037528] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 183.042888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.047728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.052906] RIP: 0033:0x455a09 [ 183.056096] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 183.063796] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 183.071051] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 183.078308] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.085566] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 183.092822] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000023 2018/06/04 21:22:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r0, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0xfffffffffffffffd, &(0x7f0000000300)="67e65128d1c5ae0154c0c4") ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0x19}, 0x16}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000088c000)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x3, 0x80000000000041, 0x0, 0x0, 0x100}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='veno\x00', 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendfile(r2, r2, &(0x7f00000000c0)=0x202, 0x1) 2018/06/04 21:22:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') unshare(0x400) r1 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/79, 0x4f}], 0x1, 0x0) [ 183.115383] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 2018/06/04 21:22:48 executing program 7: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @multicast2}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c0000001400120028bd7000bedbdf2502e9808a20ff1e81f4d4adfbaa05c20a5031e3dc72d96e7a602c05d763111797a910db13792d030cc15b8373a0bed30fdaaac9d83fc171f707cf2369bff73b63c41f0807cf564ca662456d14790c6050b05d9d1d31f8aa8f15a56c75671376cd2a359295480df6e061b2c88681a702ea85fcede01a8c6af7f5a879a790d54716a26dace3e695f6714c3a98103459251c8dc1e47cfd738e6120c11f524c5974014fea7e6496eafc9af322d0b07de1c8ec7d14ad72718dbb3fd8f023555fb216ef746fe0", @ANYRES32=r1, @ANYBLOB="140006000100000001000080000000000000008008000100e0000002140003007465716c300000000000000000000000080008000002000008000100000000001400030069705f7674693000000000000000000008000400e00000020800010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x4008005) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000740)=0xffff, 0x4) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000fc0)=[{&(0x7f00000008c0)="027098f8e90bb16b094647e4b65f0fec6ed5cc3779429ab48741a4b931c56e2509e3ffc9799a10f5a032f7f20eacb3e3ec3112aacb7e8603a6b465c75097aa717b5c12613ca012dc89e4c4b4d5744d8b7c730f9fafeb763a2a8aac02f373fc23bf87736a7af4d07937444c47b2e92a3fb5041a3da99417fb5d4082f5052f1a79d66d", 0x82, 0x40}, {&(0x7f0000000980)="5b9b41f70dc344180bba0d8142e7389ab314c1eaf8eefed42ee2a873b8a3125ee145d36d90c6e83a9fc699ed732bbf89ee433d87a3aee66c33193787ba6a8ef261214284802ad617574b5aaf105dc3bdaa7d330d8c363d95eb2f6259473144c3adf691a6ec4d710d91c1d80b994ecc2ac0ab0ee64a2b0bf96ff59d167a0fcce9373fd7769767e04dfacc6f861913c9fb8242017b4283b88b672c0cd9b5b4a851746905d1af8bfa97673b7a691bbd55f9edc3e2ff99e2011c42155c73faa81ca47ea66fa50dca0692ec980749f492bfdf4a665954f62a36183f", 0xd9}, {&(0x7f0000000a80)="d4b4afa0729271c67a49597e92c16618548834350faf9da88ed1489982ed357c511430f1b035dc84269e885fd3afeb5518056173a509245bed28e7ce87ae46f3f9f6368861a9cbfed97ef8bbe835299b1a2d04ae9265cb29ac59a8ce6844bfd222cf5c57b69404ff96cad037698064faa397ce97aa98f7f8", 0x78, 0x9}, {&(0x7f0000000b00)="063e256f7304b5b58f21c292d90f7de6b2283a6b279e217b3364137b3ea5bfa18fc0186458bc4340704898ba54729b8a0970ecab579124cf0c6930377830057115aebd1e52f27e5c0a6f35a0159e7d6771f3804297bf6584c67a6f07489fa5b3fa5e3a830e7d228e1686ea01ced0d123ed1b2897a21118270f3a9e8ad5a3b8b4fed907c401c669416500024fb86f12d346cf1c8de6750f989b55c643c3f48e8762990f4697e1e8f39ccfba389dc7208593eae21964c79c21b1399687db", 0xbd, 0xa316}, {&(0x7f0000000bc0)="3086986b8cd7d345c1d9d0a0fceaaa858568537143f9ed8b616d6ee862e0eed9d21acf43ea033de563a1ff5418d58c722f6a71a4192aa6b343383e553fd9c6a56edd0f03bc5a6a2489f5a1f13a315efda3b36450a53a4cc821f910097f3e942fe8636d03da142b18ea6019ae5ba1e05ff126dc7bb2f2db2c0618fbd20eeddc124ea624c07c9128416335d2593a52607fb599a05b65036ee6aeab34a177d43eabb2f5d40b30e05438f480241fe592f5c84e990ff6df9fe54be1f0d653676f18a980", 0xc1, 0x6}, {&(0x7f0000000cc0)="bdcc7efa5c49c57c08ecf9f0672e5c9225c67b98438692b7249a9233bc01be2d104bdc5c87d229967acbf4b811d09410c1c8a23869888909d4662743252e8e241d046f171a80262fcceb669fd79804f592d339ae854f9c5c3cf64be3", 0x5c, 0x3}, {&(0x7f0000000d40)="7ac1f71d98ef9d777ba9a18b83862a1be0f314850985c14eb391102d78fd559e995143b7b27ecfc9c9ca37ea8ae2196a7def9728c29208c9a18ce348602382f1bc143e0e2ed1fafa1110c7aba97c6fd8bc83e90ab3587463f1bda64ce95b5b9100bc93a0a698740946a771a95e33e647a15a42cc3f08150fd65c323474805598d7e59fc816f5badf16084f49d59ff5c8b4988978a1d535389631ca4b513a705451dd81aaf893e8b5e93994ae9b00cdd27a3b18ae3b43d8135b2f917ccddaf997bafcdadb46f83beb14023a04a163e10aaa16df95504b249152debae0a16633aee4cad00b99a131e3a1c6cefbd247d91bde", 0xf1, 0x2}, {&(0x7f0000000e40)="31eb69ef900816c9d8a3563b6bc5abf5d84b112760be4f12118a89088efe81e23a4635e23e52a30cbe06c20c784ca6a773874a19eb56eaad8e6eb31e1e8d74ae566235570fbdd0a4f23b1eeb82d24718711c13d0dc35eb84ef60a5761efc08a315ca54facbe98fe011d7119bbf972587", 0x70, 0x3}, {&(0x7f0000000ec0)="9c9f94cf56fc6c674b0651184a64cc1382bddbe99394742b3cacc87327016d813ca14fa9e165de5d45de1e4d19e36375ed8a56e263f42b5901c75c1511e3bc277e40885023eb6f860be18edaa9b525d6dc6302a5d3756b0ebbf972b3b79494ebb389a5cc5c73af1af2aa31bf20321b59d957612fc9fc718b1899bda048be59c6ec47238537323f2442213a40d730c8578f1457153abfa1984e7c6a2252984b232edd4470e7ddce23ea45880b0813e58dcf9bee6d115c3125794cd7f25806764e146caef6704b9582200dceb7ad78a71073ef1ca68833454e595f15f53ace5b0550a4dda0c06e88df0f3e6355b9dd9268e4dc", 0xf2, 0x1}], 0x0, &(0x7f00000010c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x25c102, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000340)={"089fce70fa1fe1078fc300d9ea47672e7551d213b4e1c34f74c1ab5037ad3cebf69bb3a3a2004d085c32f3963256c42d44d9c6f2f04ce7de780c4384c0e1bbff8a0865e295f12021d5a7c1f900000000000000ce360fe931d67a078872454748d521914201ad467a3677660b35ab295de2604c5a3a4324cc2a5400e035426305765e1c7cecea5f661895db939d693f7edf76f076e960646274c0bc823e52aa31779532fdf22f5932170d240dc1b4fbd949dc81868de49b1847db31defd8ae72d2cf90d6677b2a935245fe4dc3c7c3171df1fbd2f34a9e03fc9f26352bf0bf7a57ba63a39e7bf068ba8ebb9768ac75c0b2b87f0367a5b0dd0e88aad3f7dafebb0cdec69c0aa8a5a1f2276815a4de345b212c74d59b92b1c6975fbecaa13337d98a9bda45eb2118ae85f47c0405e40b435f7c6c0d12e2b147648cafab1e57b3189ce27319438fdb50a0f75775b120bd03d06a88cd2d7f5e0a725573fe78600568fc3248abf483a7a9206d9acc9ceac87ce0eaa28ee2b415360a19adeed5541010f08d5137f7340f0fa03be30bd383094448956ff3e74948c7424095e2f983e3ab14e57ad16085e3d98264a2da315dfa338ccb182841e73b2a48de7960a5259e1a82af6eeb0345dd5d88c70cea0f57e9500984a78a5f05751d7116683306ea6e2cfc3b47dada2615ce62eeb1fbb0d838447a19e65a67092ad7901b1e81c0377e24ecc0f56613ed168ea44bc0a86238ff16fa20fd2a1fe3951c786803b796e9e83a13e576c97b7b0bf919c61a383d8857b933b996e81db39199403522cb12d80e3a416bd6137b2f11d761ccdd622168791bc566d22fa416c74e6ae47f0ad923c99d8dc4a1987f1b8fc706a2631292eed2ecce195373ea00b89ef52b129e3770b977d69c14dcaee784aaf9395311144196f46e8cec804cb5a1e68064743f19ff4301e4cee38953095b6611ce678b1f71c129b2c4825e426f19013122dd3a0e15c2779595df3843165ee509e8e75cbb67bb7c3087751f2f45929002d8c5103e259840b5fb4c6658f50bd6a6dedf9129aae1bc245b32a660e07c3d1a7ea6e5d0db7b4fcddd49c57d5cac4c48725bea9d0fe502b2b4d95e3d27ce9afc6759a07100bbc366aaf754a53a86f76276b5c77f59f1063c0fc87a04098f0898300b4638fd02bf73976d35540e2c5c180bdc9b7798a8b0f2b06f3dc93bfc10600c90d54d202375ea8bf2ecc859c8b975c30a13d90d8efac9f2aa4d2b30e21716c56d1445cac86d78986f3ea4f2bf3e83612f288242b408f442a927cf602ef927a8d46168475a23d6d1a63000181652edd7da255fc6f31acc7d9c0108a113cdcb95bcdffb24eabd5bfb7076d1ea08296edbef6a14c682b3523824b1fc684c690eb7c7ccb0cb78abf991cf6c433e4532dbe5e4a8934779d0d615ef23bfa1cc4e273cb1c915fd56073"}) getpeername$inet(r0, &(0x7f0000001100), &(0x7f0000001180)=0x10) write$cgroup_int(r3, &(0x7f0000001140)=ANY=[@ANYPTR, @ANYRES32=r0, @ANYPTR=&(0x7f0000001100)=ANY=[]], 0x14) accept4$packet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x14, 0x800) [ 183.302717] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 183.310096] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 183.324914] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 183.332173] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 183.340653] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) 2018/06/04 21:22:49 executing program 6 (fault-call:2 fault-nth:36): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a306dff14bcb5903f5f0900000000b03ad08b713d73a6cb6487c3433f1776f8ed4e72b69ac89878cac39317"], 0x2e) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/06/04 21:22:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') lseek(r0, 0x0, 0x800000001) 2018/06/04 21:22:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') lseek(r0, 0xfffffffffffffffd, 0x800000001) 2018/06/04 21:22:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 2018/06/04 21:22:49 executing program 5: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040), &(0x7f0000000100)=0x8) r0 = syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2018/06/04 21:22:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="1e5b17f8478d0bc721cfa6e60359bb83a9fe31e28d2a987c321f4980f482ae82b2d3ce63436331bfe8c83fe29edd82fadb3fb89b892914a4e6c5e815871b712c7624a731c1c782fa89ef1ad05e4247c2570dc15b98a5f0fcf1a5f03a62f4dd697ca689c8938353638f54496300f76e42956631e4707413f4dd3283f9da0f7221339faa52c4bc8c7d50de96676905c73721a09f3e3e9d160374817f7e634adcd11f073d5418cd319aef03be0e1b82adb2fb7b365bfc650f4cfd193e253c929fb2e731caa4e4c51c", @ANYRES64, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r0], 0x45e) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200, 0x0) getpeername$ipx(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 2018/06/04 21:22:49 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 183.347746] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 183.355518] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 183.362669] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 183.384472] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 183.391624] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 183.441740] FAULT_INJECTION: forcing a failure. [ 183.441740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.453693] CPU: 1 PID: 11733 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 183.460632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.469996] Call Trace: [ 183.472609] dump_stack+0x1b9/0x294 [ 183.476263] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.481479] ? preempt_notifier_register+0x1e0/0x1e0 [ 183.486609] should_fail.cold.4+0xa/0x1a [ 183.490716] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.495837] ? __schedule+0x809/0x1e30 [ 183.499746] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 183.504530] ? find_held_lock+0x36/0x1c0 [ 183.508633] ? check_same_owner+0x320/0x320 [ 183.512983] ? rcu_note_context_switch+0x710/0x710 [ 183.517943] ? __might_sleep+0x95/0x190 [ 183.521939] __alloc_pages_nodemask+0x34e/0xd70 [ 183.526621] ? default_file_splice_read+0x1c7/0xad0 [ 183.531641] ? do_splice_to+0x12e/0x190 [ 183.535617] ? splice_direct_to_actor+0x268/0x8d0 [ 183.540459] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 183.545480] ? kasan_check_read+0x11/0x20 [ 183.549632] ? rcu_is_watching+0x85/0x140 [ 183.553773] ? rcu_pm_notify+0xc0/0xc0 [ 183.557671] ? rcu_read_lock_sched_held+0x108/0x120 [ 183.562681] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 183.568209] alloc_pages_current+0x10c/0x210 [ 183.572610] push_pipe+0x400/0x7a0 [ 183.576137] ? __kmalloc_node+0x47/0x70 [ 183.580102] iov_iter_get_pages_alloc+0x84a/0x1510 [ 183.585033] ? copy_page_from_iter+0x880/0x880 [ 183.589613] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 183.594620] ? trace_hardirqs_on+0xd/0x10 [ 183.598758] ? mark_free_pages+0x3b0/0x3b0 [ 183.602985] ? check_same_owner+0x320/0x320 [ 183.607303] ? security_socket_sendmsg+0x94/0xc0 [ 183.612055] ? netlink_unicast+0x740/0x740 [ 183.616341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.621867] ? sock_sendmsg+0x5a/0x120 [ 183.625752] ? kernel_sendmsg+0x43/0x50 [ 183.629720] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 183.634771] ? iov_iter_pipe+0xc2/0x2f0 [ 183.638739] default_file_splice_read+0x1c7/0xad0 [ 183.643570] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.648929] ? do_splice_direct+0x400/0x400 [ 183.653237] ? __put_compound_page+0xe0/0xe0 [ 183.657635] ? kernel_sendpage+0x9a/0xf0 [ 183.661682] ? sock_kfree_s+0x60/0x60 [ 183.665474] ? generic_pipe_buf_release+0x1dc/0x290 [ 183.670476] ? anon_pipe_buf_release+0x510/0x510 [ 183.675217] ? pipe_to_sendpage+0x2d0/0x3f0 [ 183.679529] ? generic_pipe_buf_nosteal+0x10/0x10 [ 183.684358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.689892] ? splice_from_pipe_next.part.8+0x296/0x340 [ 183.695250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.700774] ? fsnotify+0x415/0xfc0 [ 183.704387] ? fsnotify+0xfc0/0xfc0 [ 183.708016] ? fsnotify_first_mark+0x330/0x330 [ 183.712593] ? splice_shrink_spd+0xd0/0xd0 [ 183.716819] ? security_file_permission+0x1c6/0x240 [ 183.721838] ? rw_verify_area+0x118/0x360 [ 183.725973] ? do_splice_direct+0x400/0x400 [ 183.730283] do_splice_to+0x12e/0x190 [ 183.734072] splice_direct_to_actor+0x268/0x8d0 [ 183.738730] ? pipe_to_sendpage+0x3f0/0x3f0 [ 183.743044] ? do_splice_to+0x190/0x190 [ 183.747025] ? rw_verify_area+0x118/0x360 [ 183.751165] do_splice_direct+0x2cc/0x400 [ 183.755305] ? splice_direct_to_actor+0x8d0/0x8d0 [ 183.760137] ? rw_verify_area+0x118/0x360 [ 183.764274] do_sendfile+0x60f/0xe00 [ 183.767991] ? do_compat_pwritev64+0x1b0/0x1b0 [ 183.772566] ? __might_sleep+0x95/0x190 [ 183.776550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.782077] ? _copy_from_user+0xdf/0x150 [ 183.786216] __x64_sys_sendfile64+0x155/0x240 [ 183.790697] ? __ia32_sys_sendfile+0x290/0x290 [ 183.795276] ? do_syscall_64+0x92/0x800 [ 183.799241] do_syscall_64+0x1b1/0x800 [ 183.803117] ? finish_task_switch+0x1ca/0x840 [ 183.807600] ? syscall_return_slowpath+0x5c0/0x5c0 [ 183.812530] ? syscall_return_slowpath+0x30f/0x5c0 [ 183.817464] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 183.822817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.827652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.832828] RIP: 0033:0x455a09 [ 183.836019] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:49 executing program 4: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x4}, &(0x7f0000000180)=0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) memfd_create(&(0x7f0000000400)='%wlan0\x00', 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000440)={0x2, 0x56}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001270000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c897a2b10bc8394762bab422771360aa38dc8f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adb0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb4bf260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a39d824fa2001cb9377fbc132be60c8b0bf6ac0a875b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d2209fbaf50441f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856acff2dabc8b207f09d78e1f83461ccac0b25587fbe2f8bc64403679d2c6d94081f23308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550ba9adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed64b6adf1ad6d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc35551fdfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a00000000000000"], 0x4d7) shutdown(r0, 0x1) 2018/06/04 21:22:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000001680)=[{&(0x7f0000000040)="7a0add848e9db5de9a07075008524921cd1df82bfed7991e3f80ce2d667ca940316baa659c15fb73b68667f776f5db9a167f919d5ecc8678065de1c6cd2058c88e9378060beed266bc2a3ecca8f32d7cd66e4fdc00234013d3ef6be2dcdb99481bb3abad1a92e2e981a519d068c90b7efa630317cde41f1f4c481ab64b134dc613ba59e5f3dbe4647316401628aef109f6567bae44c4ad5e8cb0774f6c386ed36bb0dbca764bd0af2e08c0a48250e87c118c5a513c489b0e22a5050be816c4bb6259b41db8a7ed3e14107a8aca3b371270f3647b93c5d20b8e48f4198c14673c434d43f5dd6eea06e5913fb9f0a8289605cd5ddc08", 0xf5}, {&(0x7f0000000180)="4be340884ea49c06cb4ce44fd3706f5356805eee61f17b55961a2153652f953ddd37894d8d16575323240fc3007e21146170682d6c44976baf904405d978476519ed137afa80d99b46177fe30a8349d8c054ce240021e518a0559a5b99d6b2d4d5bf77aee8cbdad6bba66feb82fb4aa3359581711eb5ab3fdcac4c7394755a7581c704a0f50f206595a80e07e9ddb6f9a73abe7490dbf2440f8d95b5e3d40dab42a6ba35612a6a098aaee6536d5434fe0f52691af3f5f5010257bf146b1ec0aed0a79d4a560bb43458f125803783bf", 0xcf}, {&(0x7f0000000280)="1d95c639aa92688877eed605fb4f0f5743db479c2b6a7a76af87f7d8fd134335566b191421c9697f0a75d233f89c7c058893433b34270424fb151a5af5477f8133140b2c3369b9bbfcfaae11260f75466bc85503dd75178a6ad9c8a1cf056eeaff9ceb6799a96e7960b7e497f2cd29c28b9a2b8edac1", 0x76}, {&(0x7f0000000300)="7a7898eacbaeb9140cc1f9b59abd85b18cdbee942a15b32e04ce4b995724da93ab331fe9378b916fddc7c8b63b14fba3d99e9ae95a9469e2b564aed89a5fec714856b20fa971cd2c082ffb17eaeaba7b1539ac65b6632eff041c8441b034bad3a3059bc1d1a674676de587de5558e6e0f9fec2539094", 0x76}, {&(0x7f0000000380)="febe4cf7ce8f3e1cb5026c2efe01a93076c16db22016332fbbf43d4e1ca2de8ebe374c114cf8587b43d1d3c9e0e0b4826e84f2704a1c7370cc2b363c9daa71cfe6cdba854d909dd530e53f497ec84cab0e4938c68b1ca416b1556657a29155a2263920f342f7251b14b11767b9144e8957e6531f3f1488877ecf555b67a111fd33f4b5787c00e5b2c6a3acc106dcd30e53cb531c360257f244d755a1ca9afa9c55940f9d52a089d296dbaf5e047e6c338df3303d15adbbf5b4fe994f7f7569c9f82a55de0e8e3820b29c9f180a6ef6da4be3", 0xd2}, {&(0x7f0000000480)="6f060f7cb54e302a570e8abb3f82297cf08631d2fbf84330af8f2482cd291da626c9d4106efe9f7274a57c34df1bcd52b82b148d4fe480be9e34cadd5470dc02a20d6cea692897e1897382713416b67cd285acdb3ec3de1a051549194c32c827049108e611f8b4a7d78c225b3ca3e61cda54a7225620998a719bbac33900c0b07b4f92f49444515e0a2d99f348589f437ac075953c318dea16e4077337ed72ca85ab809d0aebb613b6c86b91649f837e89b98b370f75a8526faad767684d09d641e57fef2899d7a55e83e25ba1960688443b2752075f324ae8491b2db160c142070b5b85cc44edd56e79c5d8fce2f70db32c38", 0xf3}, {&(0x7f0000000580)="7ca06855ed606865e492ee877c0799d7963492e6343082747771aab45c7d89f54e38fcd91023967c3938c3397537bdade98d6e4562be285119c275cb015d7f448ee8d7fd051559fca8d20867b4ceee2ceacdda5307167f42034877628f7eb4411c38405257a08ba0302da1678d01c115ea28957e33154e36d174785cbf64acecadba864e4cf49040c3823b75c035a02019742a1fb96eb88185f78f40b96b48f700734f5fb35e10b4b60bbf5aadef318a7980a98df573c5ab83febec3de27c36fdeb597f36a4ad916570fcd9afd2958", 0xcf}, {&(0x7f0000000680)="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", 0x1000}], 0x8, 0x9) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 183.843721] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 183.850979] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 183.858234] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.865492] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 183.872762] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000024 [ 184.295408] device bridge_slave_1 left promiscuous mode [ 184.301055] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.314413] device bridge_slave_0 left promiscuous mode [ 184.319993] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.351399] team0 (unregistering): Port device team_slave_1 removed [ 184.361460] team0 (unregistering): Port device team_slave_0 removed [ 184.373467] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 184.387868] bond0 (unregistering): Releasing backup interface bond_slave_0 2018/06/04 21:22:50 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="a5", 0x1}, {&(0x7f0000000180)="efc1684d20f9161ae04be6663e", 0xd}], 0x2, 0x6) 2018/06/04 21:22:50 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000000)='..', 0x0, 0x0) 2018/06/04 21:22:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x181000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x3c, @multicast2=0xe0000002, 0x4e20, 0x4, 'ovf\x00', 0x1, 0x3f, 0x2c}, 0x2c) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:50 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bcsh0\x00', 0x3}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f00000000c0)={'bcsh0\x00', 0x1901}) 2018/06/04 21:22:50 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0xf, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 2018/06/04 21:22:50 executing program 6 (fault-call:2 fault-nth:37): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a306dff14bcb5903f5f0900000000b03ad08b713d73a6cb6487c3433f1776f8ed4e72b69ac89878cac39317"], 0x2e) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) [ 184.413442] bond0 (unregistering): Released all slaves [ 184.482271] FAULT_INJECTION: forcing a failure. [ 184.482271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.494213] CPU: 1 PID: 11775 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 184.501145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.510510] Call Trace: [ 184.513120] dump_stack+0x1b9/0x294 [ 184.516775] ? dump_stack_print_info.cold.2+0x52/0x52 [ 184.521995] ? find_held_lock+0x36/0x1c0 [ 184.526079] should_fail.cold.4+0xa/0x1a [ 184.530160] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.535285] ? kasan_check_read+0x11/0x20 [ 184.539450] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 184.544658] ? find_held_lock+0x36/0x1c0 [ 184.548760] ? check_same_owner+0x320/0x320 [ 184.553104] ? rcu_note_context_switch+0x710/0x710 [ 184.558061] ? __might_sleep+0x95/0x190 [ 184.562053] __alloc_pages_nodemask+0x34e/0xd70 [ 184.566735] ? default_file_splice_read+0x1c7/0xad0 [ 184.571768] ? do_splice_to+0x12e/0x190 [ 184.575758] ? splice_direct_to_actor+0x268/0x8d0 [ 184.580618] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 184.585669] ? kasan_check_read+0x11/0x20 [ 184.589834] ? rcu_is_watching+0x85/0x140 [ 184.594003] ? rcu_pm_notify+0xc0/0xc0 [ 184.597920] ? rcu_read_lock_sched_held+0x108/0x120 [ 184.602960] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 184.608520] alloc_pages_current+0x10c/0x210 [ 184.612951] push_pipe+0x400/0x7a0 [ 184.616504] ? __kmalloc_node+0x47/0x70 [ 184.620502] iov_iter_get_pages_alloc+0x84a/0x1510 [ 184.625463] ? copy_page_from_iter+0x880/0x880 [ 184.630064] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 184.635097] ? trace_hardirqs_on+0xd/0x10 [ 184.639261] ? mark_free_pages+0x3b0/0x3b0 [ 184.643515] ? check_same_owner+0x320/0x320 [ 184.647854] ? security_socket_sendmsg+0x94/0xc0 [ 184.652630] ? netlink_unicast+0x740/0x740 [ 184.656886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.662434] ? sock_sendmsg+0x5a/0x120 [ 184.666334] ? kernel_sendmsg+0x43/0x50 [ 184.670332] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 184.675366] ? iov_iter_pipe+0xc2/0x2f0 [ 184.679361] default_file_splice_read+0x1c7/0xad0 [ 184.684233] ? do_splice_direct+0x400/0x400 [ 184.688571] ? __put_compound_page+0xe0/0xe0 [ 184.692995] ? kernel_sendpage+0x9a/0xf0 [ 184.697064] ? sock_kfree_s+0x60/0x60 [ 184.700876] ? generic_pipe_buf_release+0x1dc/0x290 [ 184.705903] ? anon_pipe_buf_release+0x510/0x510 [ 184.710670] ? pipe_to_sendpage+0x2d0/0x3f0 [ 184.715010] ? generic_pipe_buf_nosteal+0x10/0x10 [ 184.719872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.725424] ? splice_from_pipe_next.part.8+0x296/0x340 2018/06/04 21:22:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) futex(&(0x7f0000000040)=0x2, 0x1, 0x3, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x2, 0x1) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:50 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 2018/06/04 21:22:50 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 184.730813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.736361] ? fsnotify+0x415/0xfc0 [ 184.740002] ? fsnotify+0xfc0/0xfc0 [ 184.743637] ? fsnotify_first_mark+0x330/0x330 [ 184.748232] ? splice_shrink_spd+0xd0/0xd0 [ 184.752480] ? security_file_permission+0x1c6/0x240 [ 184.757508] ? rw_verify_area+0x118/0x360 [ 184.761673] ? do_splice_direct+0x400/0x400 [ 184.766009] do_splice_to+0x12e/0x190 [ 184.769831] splice_direct_to_actor+0x268/0x8d0 [ 184.774509] ? __schedule+0x809/0x1e30 [ 184.778412] ? pipe_to_sendpage+0x3f0/0x3f0 [ 184.782747] ? do_splice_to+0x190/0x190 [ 184.786732] ? rw_verify_area+0x118/0x360 [ 184.790895] do_splice_direct+0x2cc/0x400 [ 184.795062] ? splice_direct_to_actor+0x8d0/0x8d0 [ 184.799914] ? rw_verify_area+0x118/0x360 [ 184.804075] do_sendfile+0x60f/0xe00 [ 184.807811] ? do_compat_pwritev64+0x1b0/0x1b0 [ 184.812409] ? __might_sleep+0x95/0x190 [ 184.816404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.821957] ? _copy_from_user+0xdf/0x150 [ 184.826124] __x64_sys_sendfile64+0x155/0x240 [ 184.830637] ? __ia32_sys_sendfile+0x290/0x290 [ 184.835233] ? do_syscall_64+0x92/0x800 [ 184.839236] do_syscall_64+0x1b1/0x800 [ 184.843136] ? finish_task_switch+0x1ca/0x840 [ 184.847644] ? syscall_return_slowpath+0x5c0/0x5c0 [ 184.852587] ? syscall_return_slowpath+0x30f/0x5c0 [ 184.857534] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 184.862916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.867783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.872984] RIP: 0033:0x455a09 [ 184.876176] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/06/04 21:22:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) sendto$inet6(r0, &(0x7f0000000000)="0081000006000000d1a7", 0xa, 0x4008000, &(0x7f0000000040)={0xa, 0x8848, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/06/04 21:22:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f75702e63707500972bbc57da33193b165e9d9175fec1e18033c38a7d263a8612fe1b7b31173d2d347bc2fadc3a769d5a565da711aed63da6853337dfafd58ba2abf1d1d9439015153bc79128da1d9ee0723347012d9d", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 184.883894] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 184.891169] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 184.898450] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.905730] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 184.913019] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000025 2018/06/04 21:22:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x5}, 0x1c) [ 186.796123] IPVS: ftp: loaded support on port[0] = 21 [ 187.172792] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.179234] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.186691] device bridge_slave_0 entered promiscuous mode [ 187.212720] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.219158] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.226514] device bridge_slave_1 entered promiscuous mode [ 187.252565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.277679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.352252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.380119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.490993] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.498999] team0: Port device team_slave_0 added [ 187.522688] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.529870] team0: Port device team_slave_1 added [ 187.554330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.580717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.609383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.638252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.872402] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.878797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.885449] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.891826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.737871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.823270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.905288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.911513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.919202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.996066] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/04 21:22:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") read(r0, &(0x7f0000000100)=""/103, 0x67) 2018/06/04 21:22:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{}, 'port0\x00'}) 2018/06/04 21:22:55 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x109080) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xe057}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x2a83}, 0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fallocate(r0, 0x0, 0x800000, 0x8) write$tun(r0, &(0x7f0000000280)={@void, @void, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, @udp={0x0, 0x0, 0x8}}}, 0x1c) 2018/06/04 21:22:55 executing program 6 (fault-call:2 fault-nth:38): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) [ 189.482066] : renamed from bcsh0 2018/06/04 21:22:55 executing program 5: syz_fuseblk_mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/06/04 21:22:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a306dff14bcb5903f5f0900000000b03ad08b713d73a6cb6487c3433f1776f8ed4e72b69ac89878cac39317"], 0x2e) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8001, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) [ 189.529694] FAULT_INJECTION: forcing a failure. [ 189.529694] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.541663] CPU: 1 PID: 12068 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 189.548622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.558008] Call Trace: [ 189.560629] dump_stack+0x1b9/0x294 [ 189.564282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 189.569499] ? find_held_lock+0x36/0x1c0 [ 189.573588] should_fail.cold.4+0xa/0x1a [ 189.577671] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 189.582798] ? kasan_check_read+0x11/0x20 [ 189.586969] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 189.592183] ? find_held_lock+0x36/0x1c0 [ 189.596279] ? check_same_owner+0x320/0x320 [ 189.600624] ? rcu_note_context_switch+0x710/0x710 [ 189.605584] ? __might_sleep+0x95/0x190 [ 189.609592] __alloc_pages_nodemask+0x34e/0xd70 [ 189.614287] ? default_file_splice_read+0x1c7/0xad0 [ 189.619327] ? do_splice_to+0x12e/0x190 [ 189.623326] ? splice_direct_to_actor+0x268/0x8d0 [ 189.628194] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 189.633247] ? kasan_check_read+0x11/0x20 [ 189.637426] ? rcu_is_watching+0x85/0x140 [ 189.641597] ? rcu_pm_notify+0xc0/0xc0 [ 189.645521] ? rcu_read_lock_sched_held+0x108/0x120 [ 189.650563] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 189.656131] alloc_pages_current+0x10c/0x210 [ 189.660569] push_pipe+0x400/0x7a0 [ 189.664128] ? __kmalloc_node+0x47/0x70 [ 189.668126] iov_iter_get_pages_alloc+0x84a/0x1510 [ 189.673087] ? copy_page_from_iter+0x880/0x880 [ 189.677695] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 189.682738] ? trace_hardirqs_on+0xd/0x10 [ 189.686919] ? mark_free_pages+0x3b0/0x3b0 [ 189.691177] ? check_same_owner+0x320/0x320 [ 189.695532] ? security_socket_sendmsg+0x94/0xc0 [ 189.700314] ? netlink_unicast+0x740/0x740 [ 189.704589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.710145] ? sock_sendmsg+0x5a/0x120 [ 189.714044] ? kernel_sendmsg+0x43/0x50 [ 189.718041] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 189.723061] ? iov_iter_pipe+0xc2/0x2f0 [ 189.727130] default_file_splice_read+0x1c7/0xad0 [ 189.731966] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 189.737323] ? do_splice_direct+0x400/0x400 [ 189.741652] ? __put_compound_page+0xe0/0xe0 [ 189.746048] ? kernel_sendpage+0x9a/0xf0 [ 189.750112] ? sock_kfree_s+0x60/0x60 [ 189.753909] ? generic_pipe_buf_release+0x1dc/0x290 [ 189.758930] ? anon_pipe_buf_release+0x510/0x510 [ 189.763678] ? pipe_to_sendpage+0x2d0/0x3f0 [ 189.767994] ? generic_pipe_buf_nosteal+0x10/0x10 [ 189.772830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.778360] ? splice_from_pipe_next.part.8+0x296/0x340 [ 189.783727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.789266] ? fsnotify+0x415/0xfc0 [ 189.792887] ? fsnotify+0xfc0/0xfc0 [ 189.796502] ? fsnotify_first_mark+0x330/0x330 [ 189.801078] ? splice_shrink_spd+0xd0/0xd0 [ 189.805304] ? security_file_permission+0x1c6/0x240 [ 189.810311] ? rw_verify_area+0x118/0x360 [ 189.814448] ? do_splice_direct+0x400/0x400 [ 189.818762] do_splice_to+0x12e/0x190 [ 189.822554] splice_direct_to_actor+0x268/0x8d0 [ 189.827214] ? pipe_to_sendpage+0x3f0/0x3f0 [ 189.831583] ? do_splice_to+0x190/0x190 [ 189.835553] ? rw_verify_area+0x118/0x360 [ 189.839699] do_splice_direct+0x2cc/0x400 [ 189.843848] ? splice_direct_to_actor+0x8d0/0x8d0 [ 189.848697] ? rw_verify_area+0x118/0x360 [ 189.852854] do_sendfile+0x60f/0xe00 [ 189.856566] ? do_compat_pwritev64+0x1b0/0x1b0 [ 189.861143] ? __might_sleep+0x95/0x190 [ 189.865125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 189.870656] ? _copy_from_user+0xdf/0x150 [ 189.874814] __x64_sys_sendfile64+0x155/0x240 [ 189.879300] ? __ia32_sys_sendfile+0x290/0x290 [ 189.883879] ? do_syscall_64+0x92/0x800 [ 189.887847] do_syscall_64+0x1b1/0x800 [ 189.891738] ? finish_task_switch+0x1ca/0x840 [ 189.896226] ? syscall_return_slowpath+0x5c0/0x5c0 [ 189.901159] ? syscall_return_slowpath+0x30f/0x5c0 [ 189.906081] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 189.911451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.916291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 189.921470] RIP: 0033:0x455a09 2018/06/04 21:22:55 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x0, 0x0, 'client1\x00', 0x0, "f5ac9a5044c2f868", "a0f0e3eafedb280d95fa8cf1d72112534590a95e51f69b5585392c0a03c44726"}) 2018/06/04 21:22:55 executing program 7: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) io_setup(0x3, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) io_getevents(r0, 0x2, 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f0000000380)={r1}) seccomp(0x1, 0x1, &(0x7f0000000480)={0x1, &(0x7f0000000180)=[{0x6}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) [ 189.924644] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 189.932427] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 189.939704] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 189.946973] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 189.954233] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 189.961494] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000026 2018/06/04 21:22:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x3, 0x8001000000002b) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0) 2018/06/04 21:22:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") read(r0, &(0x7f0000000100)=""/103, 0x67) [ 190.230263] device bridge_slave_1 left promiscuous mode [ 190.235932] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.272182] device bridge_slave_0 left promiscuous mode [ 190.277828] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.373807] team0 (unregistering): Port device team_slave_1 removed [ 190.403489] team0 (unregistering): Port device team_slave_0 removed [ 190.420436] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 190.531456] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 190.570904] attempt to access beyond end of device [ 190.576248] loop0: rw=1, want=130, limit=112 [ 190.581050] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 190.593798] bond0 (unregistering): Released all slaves [ 190.605116] attempt to access beyond end of device [ 190.610160] loop0: rw=1, want=131, limit=112 [ 190.614616] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 190.624868] attempt to access beyond end of device [ 190.629910] loop0: rw=1, want=132, limit=112 [ 190.634385] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 190.642433] attempt to access beyond end of device [ 190.647556] loop0: rw=1, want=133, limit=112 [ 190.652011] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 190.664238] attempt to access beyond end of device [ 190.669300] loop0: rw=1, want=142, limit=112 [ 190.674390] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 190.684388] attempt to access beyond end of device [ 190.689416] loop0: rw=1, want=143, limit=112 [ 190.693866] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 190.703613] attempt to access beyond end of device [ 190.708617] loop0: rw=1, want=144, limit=112 [ 190.713104] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 190.721528] attempt to access beyond end of device [ 190.726514] loop0: rw=1, want=145, limit=112 [ 190.730963] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 190.744277] attempt to access beyond end of device [ 190.749293] loop0: rw=1, want=4241, limit=112 [ 190.761241] attempt to access beyond end of device [ 190.766445] loop0: rw=1, want=8337, limit=112 [ 190.777541] attempt to access beyond end of device [ 190.782615] loop0: rw=1, want=12433, limit=112 2018/06/04 21:22:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) 2018/06/04 21:22:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r0, &(0x7f0000000180)=""/134, 0x86, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") read(r0, &(0x7f0000000100)=""/103, 0x67) 2018/06/04 21:22:56 executing program 6 (fault-call:2 fault-nth:39): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:22:56 executing program 0: syz_mount_image$f2fs(&(0x7f0000000400)='f2fs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f00000016c0)=ANY=[]) 2018/06/04 21:22:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') read(r0, &(0x7f00000004c0)=""/152, 0x98) 2018/06/04 21:22:56 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2603, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x8}) 2018/06/04 21:22:56 executing program 2: getgroups(0x2, &(0x7f0000000540)=[0x0, 0xffffffffffffffff]) syz_fuseblk_mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0) [ 190.806402] attempt to access beyond end of device [ 190.811461] loop0: rw=1, want=16514, limit=112 2018/06/04 21:22:56 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) pipe(&(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) 2018/06/04 21:22:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:56 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) 2018/06/04 21:22:56 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x80400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bpq0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x3c, r2}) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:22:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) prctl$setfpexc(0xc, 0x80003) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200000, 0x0) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ioctl$KDENABIO(r1, 0x4b36) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/06/04 21:22:56 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001c00)=ANY=[@ANYBLOB]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) 2018/06/04 21:22:56 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x8, 0x87a, 0x24, 0x3, 0x3f, 0x1, 0x255, 0x38, 0x47, 0x7, 0x7, 0x20, 0x1, 0x8ab, 0x1, 0x3}, [{0x6, 0x7, 0x400, 0x7, 0x7, 0x200000000000000, 0x5, 0x10001}], "8e65518b6bc0d57f720162827e35e4a2636125faa383d3182f108843f506f4a0148068dee52ea9304d9991c89b12cbdf5f1de3e1096d320642aacdd987657d075a7dba248e9a3157d8c79dd8808319e91e3258c313418b2dfa6b53a8ac25c10713", [[], [], [], [], [], [], [], [], [], []]}, 0xab9) 2018/06/04 21:22:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:22:56 executing program 2: syz_emit_ethernet(0x41, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "dcd50f", 0xb, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x800e], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, ':Jw'}}}}}}, &(0x7f0000000000)) [ 191.073111] IPVS: ftp: loaded support on port[0] = 21 [ 191.174824] FAULT_INJECTION: forcing a failure. [ 191.174824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.186817] CPU: 1 PID: 12165 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 191.193753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.203115] Call Trace: [ 191.205720] dump_stack+0x1b9/0x294 [ 191.209368] ? dump_stack_print_info.cold.2+0x52/0x52 [ 191.214575] ? find_held_lock+0x36/0x1c0 [ 191.218656] should_fail.cold.4+0xa/0x1a [ 191.222737] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.227860] ? kasan_check_read+0x11/0x20 [ 191.232031] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 191.237242] ? find_held_lock+0x36/0x1c0 [ 191.241347] ? check_same_owner+0x320/0x320 [ 191.245692] ? rcu_note_context_switch+0x710/0x710 [ 191.250646] ? __might_sleep+0x95/0x190 [ 191.254642] __alloc_pages_nodemask+0x34e/0xd70 [ 191.259329] ? default_file_splice_read+0x1c7/0xad0 [ 191.264363] ? do_splice_to+0x12e/0x190 [ 191.268354] ? splice_direct_to_actor+0x268/0x8d0 [ 191.273222] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 191.278284] ? kasan_check_read+0x11/0x20 [ 191.282452] ? rcu_is_watching+0x85/0x140 [ 191.286619] ? rcu_pm_notify+0xc0/0xc0 [ 191.290530] ? rcu_read_lock_sched_held+0x108/0x120 [ 191.295560] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 191.301118] alloc_pages_current+0x10c/0x210 [ 191.305541] push_pipe+0x400/0x7a0 [ 191.309108] ? __kmalloc_node+0x47/0x70 [ 191.313101] iov_iter_get_pages_alloc+0x84a/0x1510 [ 191.318034] ? copy_page_from_iter+0x880/0x880 [ 191.322608] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.327616] ? trace_hardirqs_on+0xd/0x10 [ 191.331754] ? mark_free_pages+0x3b0/0x3b0 [ 191.335982] ? check_same_owner+0x320/0x320 [ 191.340297] ? security_socket_sendmsg+0x94/0xc0 [ 191.345059] ? netlink_unicast+0x740/0x740 [ 191.349283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.354807] ? sock_sendmsg+0x5a/0x120 [ 191.358695] ? kernel_sendmsg+0x43/0x50 [ 191.362662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 191.367663] ? iov_iter_pipe+0xc2/0x2f0 [ 191.371629] default_file_splice_read+0x1c7/0xad0 [ 191.376461] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 191.381818] ? do_splice_direct+0x400/0x400 [ 191.386140] ? __put_compound_page+0xe0/0xe0 [ 191.390537] ? kernel_sendpage+0x9a/0xf0 [ 191.394594] ? sock_kfree_s+0x60/0x60 [ 191.398388] ? generic_pipe_buf_release+0x1dc/0x290 [ 191.403389] ? anon_pipe_buf_release+0x510/0x510 [ 191.408131] ? pipe_to_sendpage+0x2d0/0x3f0 [ 191.412439] ? generic_pipe_buf_nosteal+0x10/0x10 [ 191.417268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.422806] ? splice_from_pipe_next.part.8+0x296/0x340 [ 191.428163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.433686] ? fsnotify+0x415/0xfc0 [ 191.437315] ? fsnotify+0xfc0/0xfc0 [ 191.440926] ? fsnotify_first_mark+0x330/0x330 [ 191.445499] ? splice_shrink_spd+0xd0/0xd0 [ 191.449723] ? security_file_permission+0x1c6/0x240 [ 191.454728] ? rw_verify_area+0x118/0x360 [ 191.458866] ? do_splice_direct+0x400/0x400 [ 191.463176] do_splice_to+0x12e/0x190 [ 191.466969] splice_direct_to_actor+0x268/0x8d0 [ 191.471627] ? pipe_to_sendpage+0x3f0/0x3f0 [ 191.475950] ? do_splice_to+0x190/0x190 [ 191.479913] ? rw_verify_area+0x118/0x360 [ 191.484048] do_splice_direct+0x2cc/0x400 [ 191.488184] ? splice_direct_to_actor+0x8d0/0x8d0 [ 191.493021] ? rw_verify_area+0x118/0x360 [ 191.497170] do_sendfile+0x60f/0xe00 [ 191.500878] ? do_compat_pwritev64+0x1b0/0x1b0 [ 191.505448] ? __might_sleep+0x95/0x190 [ 191.509427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 191.514954] ? _copy_from_user+0xdf/0x150 [ 191.519089] __x64_sys_sendfile64+0x155/0x240 [ 191.523571] ? __ia32_sys_sendfile+0x290/0x290 [ 191.528144] ? do_syscall_64+0x92/0x800 [ 191.532111] do_syscall_64+0x1b1/0x800 [ 191.535986] ? finish_task_switch+0x1ca/0x840 [ 191.540469] ? syscall_return_slowpath+0x5c0/0x5c0 [ 191.545398] ? syscall_return_slowpath+0x30f/0x5c0 [ 191.550321] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 191.555692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.560550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 191.565724] RIP: 0033:0x455a09 [ 191.568900] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 191.576592] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 191.583846] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 191.591099] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.598354] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 191.605610] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000027 [ 191.677187] f2fs_msg: 6 callbacks suppressed [ 191.677200] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.688861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 191.745527] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.752767] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 191.771093] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.778265] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 191.812178] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.819357] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 191.854178] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.861424] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 192.352588] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.359101] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.366430] device bridge_slave_0 entered promiscuous mode [ 192.403424] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.409853] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.417717] device bridge_slave_1 entered promiscuous mode [ 192.454333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 192.491555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.602678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.643765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.809332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.816798] team0: Port device team_slave_0 added [ 192.844456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.851856] team0: Port device team_slave_1 added [ 192.888637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.923767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.950832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.977126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.205613] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.212062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.218754] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.225136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.233296] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.063939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.147128] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.207206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.237440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.243667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.251332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.330209] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/04 21:23:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000013002f0f000000000000000000000000", @ANYBLOB="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"], 0x2}, 0x1}, 0x0) 2018/06/04 21:23:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") rt_sigaction(0x400000000000007, &(0x7f00000001c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000300), 0x8, &(0x7f0000000180)) exit(0x0) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) 2018/06/04 21:23:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:00 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffff9c) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x1d, &(0x7f0000000040)=""/29}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:00 executing program 6 (fault-call:2 fault-nth:40): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:23:00 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000000)=""/195}, 0x48) readahead(0xffffffffffffffff, 0x0, 0x0) 2018/06/04 21:23:00 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x10000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2ae}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d7}], 0x1, &(0x7f0000001780)}, 0x0) 2018/06/04 21:23:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00eddffa7e18989624d243d25221b308003703dbcf85f2d2d0b0265f9b16e6450000"], 0x1}, 0x1}, 0x0) [ 194.859899] FAULT_INJECTION: forcing a failure. [ 194.859899] name failslab, interval 1, probability 0, space 0, times 0 [ 194.871403] CPU: 1 PID: 12446 Comm: syz-executor6 Not tainted 4.17.0+ #83 [ 194.878349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.887720] Call Trace: [ 194.890336] dump_stack+0x1b9/0x294 [ 194.893993] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.899228] ? perf_trace_lock_acquire+0xe3/0x980 [ 194.904096] ? find_held_lock+0x36/0x1c0 2018/06/04 21:23:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x2000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x0, 0x0, 0xb4) [ 194.908286] should_fail.cold.4+0xa/0x1a [ 194.912369] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.917497] ? rcu_is_watching+0x85/0x140 [ 194.921667] ? rcu_pm_notify+0xc0/0xc0 [ 194.925577] ? find_held_lock+0x36/0x1c0 [ 194.929775] ? check_same_owner+0x320/0x320 [ 194.934161] ? rcu_note_context_switch+0x710/0x710 [ 194.939114] ? kasan_check_read+0x11/0x20 [ 194.943281] ? rcu_is_watching+0x85/0x140 [ 194.947452] __should_failslab+0x124/0x180 [ 194.951711] should_failslab+0x9/0x14 [ 194.955531] __kmalloc+0x2c8/0x760 2018/06/04 21:23:00 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0xfffffffffffffef2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/154, 0xfffffffffffffe95}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x69) close(r1) close(r0) 2018/06/04 21:23:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[{0xc, 0x0, 0x7}], 0xc}}], 0x1, 0x0) [ 194.959097] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.964133] ? rw_copy_check_uvector+0x31e/0x3a0 [ 194.968911] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 194.974474] rw_copy_check_uvector+0x31e/0x3a0 [ 194.979081] import_iovec+0xc3/0x420 [ 194.982819] ? dup_iter+0x270/0x270 [ 194.986469] vfs_readv+0xe2/0x1a0 [ 194.989943] ? compat_rw_copy_check_uvector+0x420/0x420 [ 194.995335] ? mark_free_pages+0x3b0/0x3b0 [ 194.999592] ? check_same_owner+0x320/0x320 [ 195.003936] ? security_socket_sendmsg+0x94/0xc0 2018/06/04 21:23:00 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) [ 195.008718] ? netlink_unicast+0x740/0x740 [ 195.012984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.018550] ? sock_sendmsg+0x5a/0x120 [ 195.022482] ? kernel_sendmsg+0x43/0x50 [ 195.026486] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 195.031520] ? iov_iter_pipe+0xc2/0x2f0 [ 195.035524] default_file_splice_read+0x514/0xad0 [ 195.040389] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.045785] ? do_splice_direct+0x400/0x400 [ 195.050122] ? __put_compound_page+0xe0/0xe0 [ 195.054547] ? kernel_sendpage+0x9a/0xf0 2018/06/04 21:23:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/06/04 21:23:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff0ffc), 0xff65) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr}, 0x10) [ 195.058623] ? sock_kfree_s+0x60/0x60 [ 195.062447] ? generic_pipe_buf_release+0x1dc/0x290 [ 195.067478] ? anon_pipe_buf_release+0x510/0x510 [ 195.072248] ? pipe_to_sendpage+0x2d0/0x3f0 [ 195.076588] ? generic_pipe_buf_nosteal+0x10/0x10 [ 195.081483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.087041] ? splice_from_pipe_next.part.8+0x296/0x340 [ 195.092440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.097997] ? fsnotify+0x415/0xfc0 [ 195.101672] ? rw_verify_area+0x118/0x360 [ 195.105842] ? do_splice_direct+0x400/0x400 [ 195.110189] do_splice_to+0x12e/0x190 [ 195.114018] splice_direct_to_actor+0x268/0x8d0 [ 195.118708] ? pipe_to_sendpage+0x3f0/0x3f0 [ 195.123057] ? do_splice_to+0x190/0x190 [ 195.127051] ? rw_verify_area+0x118/0x360 [ 195.131227] do_splice_direct+0x2cc/0x400 [ 195.135400] ? splice_direct_to_actor+0x8d0/0x8d0 [ 195.140267] ? rw_verify_area+0x118/0x360 [ 195.144458] do_sendfile+0x60f/0xe00 [ 195.148198] ? do_compat_pwritev64+0x1b0/0x1b0 [ 195.152803] ? __might_sleep+0x95/0x190 [ 195.156802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 195.162359] ? _copy_from_user+0xdf/0x150 [ 195.166525] __x64_sys_sendfile64+0x155/0x240 [ 195.171038] ? __ia32_sys_sendfile+0x290/0x290 [ 195.175641] ? do_syscall_64+0x92/0x800 [ 195.179633] do_syscall_64+0x1b1/0x800 [ 195.183530] ? finish_task_switch+0x1ca/0x840 [ 195.188037] ? syscall_return_slowpath+0x5c0/0x5c0 [ 195.193087] ? syscall_return_slowpath+0x30f/0x5c0 [ 195.198037] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 195.203429] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.208298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.213497] RIP: 0033:0x455a09 [ 195.216706] RSP: 002b:00007f516ab63c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.224435] RAX: ffffffffffffffda RBX: 00007f516ab646d4 RCX: 0000000000455a09 [ 195.231719] RDX: 0000000020000000 RSI: 0000000000000014 RDI: 0000000000000013 [ 195.238999] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.246282] R10: 0000000080000003 R11: 0000000000000246 R12: 0000000000000015 [ 195.253570] R13: 00000000000005a5 R14: 00000000006fd818 R15: 0000000000000028 2018/06/04 21:23:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpid() readv(r1, &(0x7f00000002c0), 0x34d) 2018/06/04 21:23:01 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff0000000000000000009df7241e995844e46b10"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 2018/06/04 21:23:01 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgjoup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x6, 0x3ff}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x7, 0x8, 0x6f90, 0x81, 0x944100000000, 0x7fff, 0x0, r3}, 0x20) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) 2018/06/04 21:23:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:01 executing program 6 (fault-call:2 fault-nth:41): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:23:01 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x6501) 2018/06/04 21:23:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="73797a306dff14bcb5903f5f0900000000b03ad08b713d73a6cb6487c3433f1776f8ed4e72b69ac89878cac3931799d0aa85f0a86ad395bb12d3a8c5bcb18e375a61372184f29afac1d167d7fd0645923ef83f200cbcf6a60bd8f05ad16cec564c1dc1afd1b2aaccb98f6794e1f8aadf94c4b6f1548d18e700800000a3785cd573820000000000000000000000000000"], 0x90) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) prctl$setfpexc(0xc, 0x80003) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/06/04 21:23:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0xfffffffffffffef2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/154, 0xfffffffffffffe95}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x69) close(r1) close(r0) 2018/06/04 21:23:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:01 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:01 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 2018/06/04 21:23:01 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)}}}], 0x0, 0x0, &(0x7f0000000180)}) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000200)='\x00'}) 2018/06/04 21:23:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpid() readv(r1, &(0x7f00000002c0), 0x34d) 2018/06/04 21:23:01 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') 2018/06/04 21:23:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:01 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000480)=0x100002) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000440)={0x5, 0x1, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) setresuid(r0, r2, r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_read_part_table(0x100000000, 0x2, &(0x7f0000000580)=[{&(0x7f00000004c0)="4b13ea0d403dd093488ef44047976cd2c799b022e4a8bde203df281e99b2a28a45a0618862bacb7a7dd6dd585e50ffd0d8b9974b06c2bc8bd2694b2bc508ee9d084cc8300de27343e4dff8f77c99590e598f6166be5b8494277f7ccc3036d08fcd63fe9ee2e9304c345714", 0x6b, 0x9}, {&(0x7f0000000540)="bd5f3e7e897a4e", 0x7, 0x2}]) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:01 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x5d0f000000000000, 0x80000003) 2018/06/04 21:23:01 executing program 3: syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000) 2018/06/04 21:23:01 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)) 2018/06/04 21:23:02 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x6c000000, 0x80000003) 2018/06/04 21:23:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) 2018/06/04 21:23:02 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:23:02 executing program 3: semget$private(0x0, 0x7, 0x0) 2018/06/04 21:23:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpid() readv(r1, &(0x7f00000002c0), 0x34d) 2018/06/04 21:23:02 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80) 2018/06/04 21:23:02 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x6, 0x80000003) 2018/06/04 21:23:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/210) 2018/06/04 21:23:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=ANY=[], 0x0) 2018/06/04 21:23:02 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7001, &(0x7f00000001c0)) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={0x81}, 0x8) 2018/06/04 21:23:02 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) 2018/06/04 21:23:02 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0xffffff9e, 0x80000003) 2018/06/04 21:23:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:02 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={r0, 0x6, 0x1, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000280)=""/246) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'vboxnet0trustedeth1[^'}, {0x20, './cgroup.cpu\x00'}, {0x20, './cgroup.cpu\x00'}, {0x20, 'vboxnet0security]#mime_typeproc!&'}, {0x20, 'bdev'}, {0x20, 'proc'}, {0x20, 'user@{^(*%'}, {0x20, '#lo%K]'}], 0xa, "9525c31505b6b6b48de3b43b7bcddb19609b630ca577de10c6260b3326ee"}, 0x99) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) 2018/06/04 21:23:02 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) fsync(r0) 2018/06/04 21:23:02 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/06/04 21:23:02 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x600000000000000, 0x80000003) 2018/06/04 21:23:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpid() readv(r1, &(0x7f00000002c0), 0x34d) 2018/06/04 21:23:02 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1, &(0x7f0000000500)=""/200, 0xc8}, 0x0) [ 197.168123] print_req_error: I/O error, dev loop0, sector 0 [ 197.189178] print_req_error: I/O error, dev loop0, sector 0 2018/06/04 21:23:03 executing program 7: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=ANY=[], 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x1) 2018/06/04 21:23:03 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000687000)=0xc4b8, 0xc60ae96973f25474) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/06/04 21:23:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x7a000000, 0x80000003) 2018/06/04 21:23:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/150, 0x96}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/06/04 21:23:03 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x28000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c8523bf01") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_bridge\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) 2018/06/04 21:23:03 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) munlockall() r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x802) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x1, 0x7ff, 0x9, 0x7fffffff, 0x0, 0xd7f, 0x4, 0x4, 0x5, 0x117, 0xf59, 0x5, 0xbb7, 0x7ff, 0x0, 0x7ff, 0x100, 0xfffffffffffffff7, 0x6a8f8fbb, 0x7f, 0x900, 0x100000001, 0x5f28, 0x7, 0x40, 0x5, 0x3, 0x8, 0x93, 0x7, 0x7, 0x80, 0x10001, 0x90, 0x3f7ab7a, 0x3, 0x0, 0x3, 0x7, @perf_bp={&(0x7f0000000040), 0xc}, 0x4000, 0x101, 0x500000, 0x6, 0x10000, 0x323, 0x1}, r0, 0xe, r2, 0x1) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7fffffff}, 0x1c) 2018/06/04 21:23:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpid() 2018/06/04 21:23:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x68000000, 0x80000003) 2018/06/04 21:23:03 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x1a3) 2018/06/04 21:23:03 executing program 2: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4000000004002) 2018/06/04 21:23:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/114, 0x72}}], 0x1, 0x0, &(0x7f0000002540)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000200000002000000e000000100000000000000000800120002000200000000007d220000180000000303000000000000000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}, 0x1}, 0x0) [ 198.274223] IPVS: stopping master sync thread 12664 ... [ 198.281531] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 2018/06/04 21:23:04 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0xd, 0x80000003) 2018/06/04 21:23:04 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x20000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x20000000000, 0x4, 0x8001}, &(0x7f00000001c0)=0x14) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x2, 0x3}, &(0x7f0000000240)=0x8) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:04 executing program 2: request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='dns_resolver\x00', 0x0) [ 198.334513] IPVS: stopping master sync thread 12682 ... [ 198.340168] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 2018/06/04 21:23:04 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x408, 0x0) dup2(r0, r2) 2018/06/04 21:23:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000140), &(0x7f0000000180)}}], 0x58}, 0x0) 2018/06/04 21:23:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x9b9398c5ab76b5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000240)=""/218) 2018/06/04 21:23:04 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f0000000000)=0x68, 0x80000003) 2018/06/04 21:23:04 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80, 0x5bf8f1e1881e621a) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) 2018/06/04 21:23:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 2018/06/04 21:23:04 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x2b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="68000000000000000b01000006000000a672204a673c0d492b6c55264865f081762a42a6026f6642310f660ae808c32bdb4f965c96e368499e3cf5a606901c1dd2ccba958d9d9528ab21f25af0d49fee2c84bb44344d820492e0564772a11de4122cb90000000000c0000000000000000f01000001000000"], 0x78}}], 0x2, 0x0) 2018/06/04 21:23:04 executing program 2: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000000240)="5500000018007fcdb72d1cb2a4a280a80a06050000a8430291052369250009000800001c010000001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/06/04 21:23:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) [ 199.218337] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.252582] atomic_op 00000000cae0ed2b conn xmit_atomic (null) 2018/06/04 21:23:05 executing program 2: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@kern={0x10}, 0x80, &(0x7f0000014000)=[{&(0x7f0000000240)="5500000018007fcdb72d1cb2a4a280a80a06050000a8430291052369250009000800001c010000001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 2018/06/04 21:23:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) 2018/06/04 21:23:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) 2018/06/04 21:23:05 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0xfffffffffffff6e5, 0x6, 0x40, 0x7fffffff, 0x10001}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e21, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, [0x800, 0x0, 0x1c, 0xfffffffffffffe01, 0x9, 0x0, 0x40, 0x800, 0x7ff, 0x0, 0x2, 0xdf, 0x7f, 0x2, 0x2]}, &(0x7f00000002c0)=0x100) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[], 0x0) 2018/06/04 21:23:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0)) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffed7) ioctl$sock_netrom_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendfile(r1, r2, &(0x7f00000ddff8), 0x102000001) [ 199.293485] atomic_op 000000001903545a conn xmit_atomic (null) [ 199.352174] netlink: 17 bytes leftover after parsing attributes in process `syz-executor2'. [ 199.408864] IPv6: IPV6: multipath route replace failed (check consistency of installed routes): :: nexthop :: ifi 1 [ 199.419629] IPv6: IPV6: multipath route replace failed (check consistency of installed routes): :: nexthop :: ifi 13 [ 199.430923] ================================================================== [ 199.438640] BUG: KASAN: use-after-free in ip6_route_mpath_notify+0xe9/0x100 [ 199.445758] Read of size 4 at addr ffff8801d6f38530 by task syz-executor2/12735 [ 199.453205] [ 199.454850] CPU: 1 PID: 12735 Comm: syz-executor2 Not tainted 4.17.0+ #83 [ 199.461779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.471140] Call Trace: [ 199.473747] dump_stack+0x1b9/0x294 [ 199.477385] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.482594] ? printk+0x9e/0xba [ 199.485895] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 199.490674] ? kasan_check_write+0x14/0x20 [ 199.494983] print_address_description+0x6c/0x20b [ 199.499846] ? ip6_route_mpath_notify+0xe9/0x100 [ 199.504629] kasan_report.cold.7+0x242/0x2fe [ 199.509059] __asan_report_load4_noabort+0x14/0x20 [ 199.514002] ip6_route_mpath_notify+0xe9/0x100 [ 199.518621] ip6_route_multipath_add+0x615/0x1910 [ 199.523492] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 199.529053] ? ip6_route_mpath_notify+0x100/0x100 [ 199.533924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.539483] ? rtm_to_fib6_config+0xeac/0x1260 [ 199.544090] ? ip6_dst_gc+0x530/0x530 [ 199.547943] inet6_rtm_newroute+0xe3/0x160 [ 199.552196] ? ip6_route_multipath_add+0x1910/0x1910 [ 199.557419] ? __netlink_ns_capable+0x100/0x130 [ 199.562106] ? ip6_route_multipath_add+0x1910/0x1910 [ 199.567233] rtnetlink_rcv_msg+0x466/0xc10 [ 199.571492] ? rtnetlink_put_metrics+0x690/0x690 [ 199.576278] netlink_rcv_skb+0x172/0x440 [ 199.580358] ? rtnetlink_put_metrics+0x690/0x690 [ 199.585126] ? netlink_ack+0xbc0/0xbc0 [ 199.589027] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 199.594230] ? netlink_skb_destructor+0x210/0x210 [ 199.599090] rtnetlink_rcv+0x1c/0x20 [ 199.602811] netlink_unicast+0x58b/0x740 [ 199.606882] ? netlink_attachskb+0x970/0x970 [ 199.611299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.616840] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 199.621859] ? security_netlink_send+0x88/0xb0 [ 199.626446] netlink_sendmsg+0x9f0/0xfa0 [ 199.630516] ? netlink_unicast+0x740/0x740 [ 199.634757] ? security_socket_sendmsg+0x94/0xc0 [ 199.639515] ? netlink_unicast+0x740/0x740 [ 199.643757] sock_sendmsg+0xd5/0x120 [ 199.647477] ___sys_sendmsg+0x805/0x940 [ 199.651459] ? copy_msghdr_from_user+0x560/0x560 [ 199.656215] ? __schedule+0x809/0x1e30 [ 199.660106] ? __sched_text_start+0x8/0x8 [ 199.664259] ? __fget_light+0x2ef/0x430 [ 199.668234] ? fget_raw+0x20/0x20 [ 199.671708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.677243] ? sockfd_lookup_light+0xc5/0x160 [ 199.681743] __sys_sendmsg+0x115/0x270 [ 199.685630] ? __ia32_sys_shutdown+0x80/0x80 [ 199.690051] ? exit_to_usermode_loop+0x87/0x310 [ 199.694734] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 199.699579] ? ksys_ioctl+0x81/0xd0 [ 199.703205] __x64_sys_sendmsg+0x78/0xb0 [ 199.707261] do_syscall_64+0x1b1/0x800 [ 199.711139] ? finish_task_switch+0x1ca/0x840 [ 199.715622] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.720538] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.725464] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 199.730842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.735679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.740854] RIP: 0033:0x455a09 [ 199.744032] RSP: 002b:00007f6716629c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.751727] RAX: ffffffffffffffda RBX: 00007f671662a6d4 RCX: 0000000000455a09 [ 199.758983] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 199.766240] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.773495] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 199.780771] R13: 00000000000005ab R14: 00000000006fd8a8 R15: 0000000000000000 [ 199.788039] [ 199.789651] Allocated by task 12735: [ 199.793351] save_stack+0x43/0xd0 [ 199.796791] kasan_kmalloc+0xc4/0xe0 [ 199.800491] kasan_slab_alloc+0x12/0x20 [ 199.804449] kmem_cache_alloc+0x12e/0x760 [ 199.808580] dst_alloc+0xbb/0x1d0 [ 199.812025] __ip6_dst_alloc+0x35/0xa0 [ 199.815901] ip6_dst_alloc+0x29/0xb0 [ 199.819598] ip6_route_info_create+0x4d4/0x3a30 [ 199.824252] ip6_route_multipath_add+0xc7e/0x1910 [ 199.829076] inet6_rtm_newroute+0xe3/0x160 [ 199.833294] rtnetlink_rcv_msg+0x466/0xc10 [ 199.837514] netlink_rcv_skb+0x172/0x440 [ 199.841565] rtnetlink_rcv+0x1c/0x20 [ 199.845262] netlink_unicast+0x58b/0x740 [ 199.849319] netlink_sendmsg+0x9f0/0xfa0 [ 199.853363] sock_sendmsg+0xd5/0x120 [ 199.857060] ___sys_sendmsg+0x805/0x940 [ 199.861027] __sys_sendmsg+0x115/0x270 [ 199.864900] __x64_sys_sendmsg+0x78/0xb0 [ 199.868946] do_syscall_64+0x1b1/0x800 [ 199.872818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.877986] [ 199.879597] Freed by task 12735: [ 199.882950] save_stack+0x43/0xd0 [ 199.886389] __kasan_slab_free+0x11a/0x170 [ 199.890606] kasan_slab_free+0xe/0x10 [ 199.894390] kmem_cache_free+0x86/0x2d0 [ 199.898362] dst_destroy+0x267/0x3c0 [ 199.902061] dst_release_immediate+0x71/0x9e [ 199.906454] fib6_add+0xa40/0x1650 [ 199.909979] __ip6_ins_rt+0x6c/0x90 [ 199.913588] ip6_route_multipath_add+0x513/0x1910 [ 199.918413] inet6_rtm_newroute+0xe3/0x160 [ 199.922631] rtnetlink_rcv_msg+0x466/0xc10 [ 199.926850] netlink_rcv_skb+0x172/0x440 [ 199.930895] rtnetlink_rcv+0x1c/0x20 [ 199.934594] netlink_unicast+0x58b/0x740 [ 199.938638] netlink_sendmsg+0x9f0/0xfa0 [ 199.942695] sock_sendmsg+0xd5/0x120 [ 199.946391] ___sys_sendmsg+0x805/0x940 [ 199.950352] __sys_sendmsg+0x115/0x270 [ 199.954239] __x64_sys_sendmsg+0x78/0xb0 [ 199.958289] do_syscall_64+0x1b1/0x800 [ 199.962163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.967329] [ 199.968943] The buggy address belongs to the object at ffff8801d6f38480 [ 199.968943] which belongs to the cache ip6_dst_cache of size 320 [ 199.981769] The buggy address is located 176 bytes inside of [ 199.981769] 320-byte region [ffff8801d6f38480, ffff8801d6f385c0) [ 199.993624] The buggy address belongs to the page: [ 199.998545] page:ffffea00075bce00 count:1 mapcount:0 mapping:ffff8801d6f38000 index:0x0 [ 200.006687] flags: 0x2fffc0000000100(slab) [ 200.010913] raw: 02fffc0000000100 ffff8801d6f38000 0000000000000000 000000010000000a [ 200.018780] raw: ffffea000720e6a0 ffffea00060e7de0 ffff8801cd81e340 0000000000000000 [ 200.026640] page dumped because: kasan: bad access detected [ 200.032328] [ 200.033936] Memory state around the buggy address: [ 200.038850] ffff8801d6f38400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 200.046194] ffff8801d6f38480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.053566] >ffff8801d6f38500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.060919] ^ [ 200.065834] ffff8801d6f38580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 200.073180] ffff8801d6f38600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.080521] ================================================================== [ 200.087862] Disabling lock debugging due to kernel taint [ 200.093825] Kernel panic - not syncing: panic_on_warn set ... [ 200.093825] [ 200.101208] CPU: 1 PID: 12735 Comm: syz-executor2 Tainted: G B 4.17.0+ #83 [ 200.109506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.118843] Call Trace: [ 200.121420] dump_stack+0x1b9/0x294 [ 200.125037] ? dump_stack_print_info.cold.2+0x52/0x52 [ 200.130215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 200.134969] ? ip6_route_mpath_notify+0x30/0x100 [ 200.139722] panic+0x22f/0x4de [ 200.142898] ? add_taint.cold.5+0x16/0x16 [ 200.147037] ? do_raw_spin_unlock+0x9e/0x2e0 [ 200.151432] ? do_raw_spin_unlock+0x9e/0x2e0 [ 200.155825] ? ip6_route_mpath_notify+0xe9/0x100 [ 200.160567] kasan_end_report+0x47/0x4f [ 200.164532] kasan_report.cold.7+0x76/0x2fe [ 200.168842] __asan_report_load4_noabort+0x14/0x20 [ 200.173756] ip6_route_mpath_notify+0xe9/0x100 [ 200.178323] ip6_route_multipath_add+0x615/0x1910 [ 200.183165] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 200.188688] ? ip6_route_mpath_notify+0x100/0x100 [ 200.193515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.199038] ? rtm_to_fib6_config+0xeac/0x1260 [ 200.203613] ? ip6_dst_gc+0x530/0x530 [ 200.207408] inet6_rtm_newroute+0xe3/0x160 [ 200.211626] ? ip6_route_multipath_add+0x1910/0x1910 [ 200.216719] ? __netlink_ns_capable+0x100/0x130 [ 200.221372] ? ip6_route_multipath_add+0x1910/0x1910 [ 200.226459] rtnetlink_rcv_msg+0x466/0xc10 [ 200.230678] ? rtnetlink_put_metrics+0x690/0x690 [ 200.235436] netlink_rcv_skb+0x172/0x440 [ 200.239481] ? rtnetlink_put_metrics+0x690/0x690 [ 200.244222] ? netlink_ack+0xbc0/0xbc0 [ 200.248104] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 200.253290] ? netlink_skb_destructor+0x210/0x210 [ 200.258127] rtnetlink_rcv+0x1c/0x20 [ 200.261824] netlink_unicast+0x58b/0x740 [ 200.265873] ? netlink_attachskb+0x970/0x970 [ 200.270269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.275792] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 200.280804] ? security_netlink_send+0x88/0xb0 [ 200.285371] netlink_sendmsg+0x9f0/0xfa0 [ 200.289423] ? netlink_unicast+0x740/0x740 [ 200.293641] ? security_socket_sendmsg+0x94/0xc0 [ 200.298381] ? netlink_unicast+0x740/0x740 [ 200.302602] sock_sendmsg+0xd5/0x120 [ 200.306301] ___sys_sendmsg+0x805/0x940 [ 200.310263] ? copy_msghdr_from_user+0x560/0x560 [ 200.315001] ? __schedule+0x809/0x1e30 [ 200.318888] ? __sched_text_start+0x8/0x8 [ 200.323026] ? __fget_light+0x2ef/0x430 [ 200.327000] ? fget_raw+0x20/0x20 [ 200.330462] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 200.335983] ? sockfd_lookup_light+0xc5/0x160 [ 200.340466] __sys_sendmsg+0x115/0x270 [ 200.344339] ? __ia32_sys_shutdown+0x80/0x80 [ 200.348746] ? exit_to_usermode_loop+0x87/0x310 [ 200.353402] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 200.358230] ? ksys_ioctl+0x81/0xd0 [ 200.361862] __x64_sys_sendmsg+0x78/0xb0 [ 200.365917] do_syscall_64+0x1b1/0x800 [ 200.369789] ? finish_task_switch+0x1ca/0x840 [ 200.374268] ? syscall_return_slowpath+0x5c0/0x5c0 [ 200.379183] ? syscall_return_slowpath+0x30f/0x5c0 [ 200.384100] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 200.390748] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.395580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 200.400751] RIP: 0033:0x455a09 [ 200.403924] RSP: 002b:00007f6716629c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.411614] RAX: ffffffffffffffda RBX: 00007f671662a6d4 RCX: 0000000000455a09 [ 200.418877] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000013 [ 200.426142] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.433568] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 200.440924] R13: 00000000000005ab R14: 00000000006fd8a8 R15: 0000000000000000 [ 200.448670] Dumping ftrace buffer: [ 200.452190] (ftrace buffer empty) [ 200.455886] Kernel Offset: disabled [ 200.459492] Rebooting in 86400 seconds..