000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 2018/04/05 15:32:11 executing program 7: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x2000, 0x0) fstatfs(r2, &(0x7f0000000040)=""/161) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000009600)) dup2(r0, r1) 2018/04/05 15:32:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x6, r0}) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, 0x12, 0x7, 0x104, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0xa}, [@generic="520544a0a527bb9403d5c31183cecabe89cc3bb93027f3b96a40e30a4731900ffe8cff3596995f0ba81ee09ab2b791d18b60cb07b8fdef8a77b252c1c159ec1a5ac2530a8c413561452301953c9d6557e09749c1bfa6ee9953042d35ce4ee0ac5c2610384a7bc717f814ef6e9dd1d9423b7dfac5a093f9fd9413575053c8c7b4063bf20ee1280536fa5db8f6fef5a6a87765b64ed8a7d847ecdfedcd99e8ebd766d8d8099fcf0f59d302fd5eaf4ed99190e3f04a88595a148d1c3e8769f0efd2fcb215a13d36a222f8025bf8310435860a9592cc59a613f3", @nested={0x10c, 0x75, [@generic="b5d05b4faa89d672918ce6029c91b8adaff12609a14012ccc959b2f66f50eb9116298afe6d8c5e4456b71b13e05b6cd3b0e59d7ccfcea6421b40aa1e670f718be0ca49bab853110cb4439ebba825e5b17e0ca5ce794538b9e47b34e8c6f69ff2623e0d02310cb4a338b4ece5782656f17d3b47a171943654b12857af7f824880c7ed1cee0e45cf2c11cc2d90e417321fc697fbe130456c136aea5f94fe23f4053a82ecd615f6597247ae87d646a7d06eb9d4fa9b1b7462df955a", @generic, @typed={0x4, 0x2}, @typed={0xc, 0xc, @str='hash\x00'}, @generic="8071a5835d359a5e85edb7cc63054423aa9da88c81767eafda56f020d1161936dd55a54129bf19b72048b5f1d78ee2", @typed={0xc, 0x90, @u64=0x8}]}, @typed={0x14, 0x4c, @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}}, @nested={0x4, 0x75}, @typed={0x8, 0x7a, @u32=0x7}, @typed={0xc, 0x71, @str='ppp1\x00'}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x10) bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000af2000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 2018/04/05 15:32:11 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x20, 0x100) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000140), 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001240), 0x13f}}, 0x20) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @empty, 'bcsh0\x00'}}, 0x1e) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000100)='&cgroup*eth0\x00') dup2(r2, r1) 2018/04/05 15:32:11 executing program 0: r0 = socket(0x1000000010, 0x802, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000640)=""/186, 0xba}], 0x7, &(0x7f0000000740)=""/131, 0x83, 0xb8}, 0x10121) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'irlan0\x00', 0x0}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xcad, 0xc0040) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x10}, 0x2, &(0x7f0000000000)={&(0x7f00000009c0)=@ipv6_getaddr={0x0, 0x16, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x3f, 0x4, 0xff, r1}, [@IFA_LOCAL={0x0, 0x2, @mcast2={0xff, 0x2, [], 0x1}}, @IFA_LOCAL={0x0, 0x2}, @IFA_ADDRESS={0x0, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IFA_ADDRESS={0x0, 0x1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @IFA_ADDRESS={0x0, 0x1, @dev={0xfe, 0x80, [], 0x11}}, @IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, [], 0xd}}, @IFA_FLAGS={0x0, 0x8, 0x80}, @IFA_LOCAL={0x0, 0x2, @loopback={0x0, 0x1}}, @IFA_FLAGS={0x0, 0x8, 0x108}, @IFA_LOCAL={0x0, 0x2, @remote={0xfe, 0x80, [], 0xbb}}]}, 0x3fe}, 0x1}, 0x0) 2018/04/05 15:32:11 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000005010040"]) fchmod(0xffffffffffffffff, 0xfffffefffffffffd) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/05 15:32:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x5}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x0, 0x4c}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x330, &(0x7f00001a7f05)=""/251}, 0x48) io_setup(0x9, &(0x7f0000002280)=0x0) clock_gettime(0x0, &(0x7f0000006dc0)={0x0, 0x0}) io_getevents(r0, 0x8000, 0x1, &(0x7f0000006d80)=[{}], &(0x7f0000006e00)={r1, r2+30000000}) recvmmsg(0xffffffffffffff9c, &(0x7f0000006c40)=[{{&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/107, 0x6b}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)}], 0x7, &(0x7f0000002300)=""/70, 0x46, 0x10001}, 0x9}, {{&(0x7f0000002380)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000002400)=""/218, 0xda}, {&(0x7f0000002500)=""/66, 0x42}, {&(0x7f0000002580)=""/61, 0x3d}, {&(0x7f00000025c0)=""/112, 0x70}, {&(0x7f0000002640)=""/103, 0x67}, {&(0x7f00000026c0)=""/96, 0x60}], 0x6, 0x0, 0x0, 0x400}, 0x9}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/114, 0x72}], 0x2, &(0x7f0000003840)=""/200, 0xc8, 0x8001}, 0xd6c}, {{&(0x7f0000003940)=@sco, 0x80, &(0x7f0000003f80)=[{&(0x7f00000039c0)=""/247, 0xf7}, {&(0x7f0000003ac0)=""/50, 0x32}, {&(0x7f0000003b00)=""/179, 0xb3}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/202, 0xca}, {&(0x7f0000003d80)=""/234, 0xea}, {&(0x7f0000003e80)=""/193, 0xc1}], 0x7, &(0x7f0000003fc0)=""/236, 0xec, 0x8}}, {{&(0x7f00000040c0)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004140)=""/255, 0xff}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/67, 0x43}, {&(0x7f00000052c0)=""/54, 0x36}, {&(0x7f0000005300)=""/214, 0xd6}, {&(0x7f0000005400)=""/128, 0x80}], 0x6, &(0x7f00000054c0)=""/96, 0x60, 0x1}, 0x16}, {{&(0x7f0000005540)=@alg, 0x80, &(0x7f0000006840)=[{&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/149, 0x95}, {&(0x7f0000006680)=""/163, 0xa3}, {&(0x7f0000006740)=""/208, 0xd0}], 0x4, &(0x7f0000006880)=""/28, 0x1c, 0x1000}, 0x5}, {{&(0x7f00000068c0)=@sco, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006940)=""/7, 0x7}, {&(0x7f0000006980)=""/61, 0x3d}, {&(0x7f00000069c0)=""/247, 0xf7}, {&(0x7f0000006ac0)=""/109, 0x6d}], 0x4, &(0x7f0000006b80)=""/172, 0xac, 0x8000}, 0x5bdaa061}], 0x7, 0x10000, 0x0) connect$ipx(r3, &(0x7f0000006d40)={0x4, 0x3ff, 0xe12, "d812b2309868", 0x4}, 0x10) 2018/04/05 15:32:11 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000002c0)={0x4, r1}) r3 = dup2(r2, r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8840}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x814}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) pipe(&(0x7f0000000080)) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x419) getitimer(0x0, &(0x7f0000000080)) getsockname$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) 2018/04/05 15:32:12 executing program 1: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x10000, 0x1, 0x5, 0x30}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000011000), 0x4) 2018/04/05 15:32:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xd, &(0x7f0000000000), 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x2600) sendmmsg$alg(r1, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)}, {&(0x7f00000010c0)='\\', 0x1}, {&(0x7f0000001100)="4565367ad7cade6f003dfdf6c8eda49c824f070ebc175b8d1e0ca3add5482395c6b444f488b2c7834eebcf77", 0x2c}, {&(0x7f0000001140)="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", 0xfb}, {&(0x7f0000001240)="87aca56335b25c025b81aed2fa104f85266c5ada99", 0x15}, {&(0x7f0000001280)="6a858e51f68c1da38612cc0f013ac5563487efae2cb97a81b61550d699e79573e8e241ed9576c65620fa43a3ee260a9f968f53bfa4baab62300eec4d13e99cbe5efa75f19fa2773bbc7ae340056c896aed1f3cc3e8953636bf73253e48bc", 0x5e}], 0x7, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="048282b5e573f3fac402251abeeadc07f3717c669512e09e497ebbc928fe219ee27f5a006c58e6155b2fcde15cb0b6b4efa3318c5614f54f00b09fc03c6f7b5ff45f0d59c66f1e31246c21f775f65472def110eeb27f0358055a26ab06fde65893549cf5d02ed4e0db2d7dc287d05db8d1a11c36afedacabba98d1081043410532ec65f86d54fe1bf415547895d85ffc053d80ea1d052fa10e2c6d839d3f", 0x9e}], 0x2, 0x0, 0x0, 0x4}], 0x2, 0x4000) 2018/04/05 15:32:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="82493e9cd6a3", [], {@mpls_uc={0x8847, {[{0x4, 0x3, 0x10000, 0x1}], @ipv6={0xfffffffffffffffc, 0x6, "704dc2", 0x74, 0x0, 0x4, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[@hopopts={0x0, 0x7, [], [@generic={0x1f, 0x17, "439c7bf01893272073e23f36391757b7acd82506f3b1fe"}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x5}, @pad1={0x0, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x7b, 0x2, 0x1, 0x1, 0x0, [@remote={0xfe, 0x80, [], 0xbb}]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x7fff000, "71229c", 0x2, "91edf5"}, "7ab4a996"}}}}}}}, 0x0) 2018/04/05 15:32:12 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x1000000000000000, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000a2effc), 0x8001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x7c, "07e96dc63caecc60bd40c69a83c856f4aa5d54300f7455b42a6a4b5ed09d521f179a6b431d6e384fb1f66d36787ccc728d07c69ce755ac09d17923ce65b86aba81706b1c1c3edb670bc52e023187a303cdad80daf8b572a221127df139db19bf5f9e48d72e31db1d2970de09565b9d94a48376da6b1d7f127e9b36ad"}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3, 0x2b, "d29d0a545c5475ca2bcdfd06b9acb5d7d9806df05c0b2f7e16239faccfac4f05cf7778ddb95ff0d6693126"}, &(0x7f0000000180)=0x33) 2018/04/05 15:32:12 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000540)="8d85c86e46e8ef4fea219de5c76d9408bbfeca0d9741e1a0", 0x18, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x301000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x6, 0x80, 0x3f, 0x7, 0x0, 0x5, 0x0, 0x8, 0x1, 0xfffffffffffffffc, 0x8, 0x3, 0x9, 0x2, 0x1, 0x4000000000, 0x2, 0x2, 0x200, 0x9, 0x7ff, 0x0, 0x5, 0x3, 0x200, 0x100000000, 0x401, 0x10001, 0x101, 0x0, 0x7, 0xfffffffffffffffe, 0x9, 0x101, 0x7, 0x7, 0x0, 0x7f, 0x4, @perf_config_ext={0x337a, 0x1}, 0x400, 0xe8, 0x1000, 0x7, 0x4, 0x101, 0x5}, r2, 0x8, r3, 0x8) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) 2018/04/05 15:32:12 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYBLOB="00000000000000000000009a08"], 0x14) 2018/04/05 15:32:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000478ff5)='mountstats\x00') ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001000)=""/4096) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @dev}, &(0x7f00000000c0)=0xc) bind$packet(r0, &(0x7f0000000100)={0x11, 0x16, r1, 0x1, 0xfff, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x14) close(r0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/115) 2018/04/05 15:32:12 executing program 1: symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0/file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x8) socketpair(0xb, 0x806, 0x100000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1000}) 2018/04/05 15:32:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x8d7) r1 = gettid() sendto$unix(r0, &(0x7f00000001c0)="07396d2214e56f2448d009710a0beb220e6cbe6169181ec66e516d6cab97d4e5be92337e921d0e1f41c248606aa712891a8af43bc846998231752fcd2540313ba53997335b4d5e589b71fd731ffc47d30a9389c7a0f2a7bc853b424fdde937235c98cd3055824429c631376d8e5d65b336673d627c05d5778eb681ab5632693801ba7370ca21a40322e0d28c9534324d1e6d6da820", 0x95, 0x40000, 0x0, 0x0) futex(&(0x7f000000bffc), 0x0, 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f0000000100), 0x0) mq_notify(r0, &(0x7f0000000280)={0x0, 0x14, 0x5, @tid=r1}) sched_setaffinity(r1, 0x74, &(0x7f0000000140)=0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x3, 0xfff, 0x100000000, 0x1, 0x1f, 0x3}) futex(&(0x7f000000bffc), 0x4, 0x7ff, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000901ffc), 0x0) 2018/04/05 15:32:12 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x301000) r1 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x104}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x8000000040102) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000002c0), &(0x7f0000000380)=0x4) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xff}) r4 = dup2(r3, r3) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) write$binfmt_misc(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xa2e) sendfile(r4, r2, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:12 executing program 0: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001100)="99", 0x1) 2018/04/05 15:32:12 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', 'selfmime_type\x00'}) getpeername$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000100)=""/43, &(0x7f0000000180)=0x2b) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xe02, 0x4) finit_module(r0, &(0x7f0000000280)='ppp1\x00', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000ac0)={0x100, {0x2, 0x4e22}, {0x2, 0x4e24}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8, 0x1, 0xffff, 0x2, 0x80000001, &(0x7f0000000a80)='lo\x00', 0xffffffffffffffe0, 0x6, 0x3}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) ioctl(r0, 0x8000, &(0x7f0000000300)="205b58e1468564edadf14d223a36866a") bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) socketpair(0x10, 0x2, 0x84, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000200)) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x40000004, 0x800000000000852b, 0xffff, 0x10000007fffffff}, 0x14) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="b8", 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000040)="f5", 0x1, 0x1, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000400), 0x1000000000000232) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000002c0), 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000240)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x0, @rand_addr}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000020affc), 0x4) shutdown(r0, 0x1) 2018/04/05 15:32:12 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-blowfish-asm,sha3-512-generic)\x00'}, 0x58) r1 = dup3(r0, r0, 0x80000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000001c0)=0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) clock_settime(0x7, &(0x7f0000000280)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x3c, 0xf26c, 0x0, 0x5, 0x14d, 0x10001, 0x80000001, {0x0, @in6={{0xa, 0x4e20, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x3, 0x7f, 0x7f, 0x2, 0x3}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x84) 2018/04/05 15:32:12 executing program 3: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$inet(r0, &(0x7f0000000080)=""/81, 0x51, 0x2100, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x800000000003, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, @rand_addr}, &(0x7f0000000280)=0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000100)) 2018/04/05 15:32:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x3b1080, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000140)=0x8) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x3, 0x1f, @dev={0xfe, 0x80, [], 0x17}, 0x8}, 0x1c) accept4$alg(r1, 0x0, 0x0, 0x800) fsetxattr(r0, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000200)="2f6465762f1e7978dddc06d4", 0xc, 0x3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000010c0)="0f1d83a8f1a1d837ac0eddd776a851c296cdd4c1f31c996a8fbdc81574d0d16b538bd97eaf7079e98f3af912d3a60b40e366a834fd476f44ac697a3e1f2a763786fd650b13798f9200b18dfdea63b896cf2e6fc33a677c813c4653da01cb4c8e637bfabab495d3a40938a85f9a46431de8eae6a149fb3a990e8ffb8f5863daa0321f2abb05f088f4c15117b0bba67dd4413562eb42249bff1eb249c47cf08d8bc53d101f645b9426a80340a3476a0f8af62da3fe8da9f29e4f445f44bf9989b3b5009e373004dcf2031cf654825087cd1aac8b23bcb0b72450b67c572f8ab7ea873530dbcb1876a552065413aee2c6535ddd4b5a07ae8e2b574e3296a6da3522ddf6f991dae6b2001e41244cc3b477f630bdcad346e5c28c4399dec10f18a86626497744ee47a0fa55494c443bb7815e3605eae492928f9d3b87f788791c46b04c4772e09e04321ff9b62516f4f15b1c638078a711fd86dfccbcb272bf71f7c4a954ee1859471c27ab899fba867405b8ec9dfee6e3aed42c3673bb0a83ab4885e4517ba8eadb2768c3d031fa7178e4253ce330caf37e852f9f7f71b8f89d8a0ed98b2e4629887f9feb0186b024a7430948ec056757647b70831c5598dcfa47b35419a1e69b65efa30ccb5daadb2c9d3d9a56a9b16a6564f530aac3f68ef89dc24a991ca4882fc6f9c068fa2ab266610e010da3d618310a415a7fba51c75bdcf412e6d19f41f58b88aa1b10ab1423f1dd5bc34654bbeebff90177763a509856360a89b3366e6dec0b471f2596a0ab19d1a3a4a6d322fc5b069f23c1080eeee80d085c92df87a20b6e0e352d8f5b176b0e991f99bf75d08c018d918c962ddb76b1ed39ece5b62e812ed06d94e91fcd4fcf3a51a5b0af271cde1bc8220a49443c1a2dbd6f6a3a6e8753dca6ed8fb08feb2bec8d8678ef5920d4d13e0f5024e7af6b22a2ee4443831186e02d7c5b1bb0335a3d494f69ada509bbe53edc887c7136a68543a6b9fd2b0885a92c7cefdf1f172f9e3bbbebe2d5497ee9a2b4ec37d6cccf5dc411aea1f3592646485b7e9c0bcddff8ad845fc8232ee5ac0a2d761b40f10b07c8ecc50f274c122d0731ac58b3459a2201bcd7e5d221b5e55f493394dbcc0a60cf459ed6a7defafb775997e0c215f7cbf98bd86571e296ac6fe72691a2ad0df43770ebd54146ea53b79a8d16ce63bc40cbd36a9139480493b074a628d0ab42b2de504aa4d2a76fb70c33ca79bbc5c8af2fa401c7347518b19594f750217227670d5ec2cba2732017a102fcc90cc3dad32e66acf73f38725f6e247d2279198af7550342800413ec9b490042c962dd43939f3bcd1274ddae2b61a8b0cacdb54585f963fc82292243832a8a68d2573ef86436ff9b27a5fc8119e3a5c7093e0d4e1a9c26651cfb09b28e8f052d2722f9a5b800531b271aa76a27f4aee847c219e733bb521e5e493a135179846bad1ddbd09b33fffb038a3aebc39c80c538d6a0a629b43bfce2dc71fd87ab66dcbd8c116dd8ed5af1299bb00aff3a349fad1f51a5bcef28ba816697aeaaaa98a3f6dbfc2cc746fecbc8ca542dbcf3f88f199e797eccece0f75b6e950c4ae76c626522d122b8ed2ee8a1dbdc3023ee7ba0b68503e4ed45d04f1b98d71abf84b8905356c196e96f1c4cabd8aad0b3f628a407371af807638a7d1805d9570c1fe4f4092307ab178e83dfb931f14dd980002ec3f8334bd87dbf091ce2af2f53dc11cfcda9e87e689042a7399d57dfb3ed64f9f02534e4e5f4e78e8652918a0791d3fee7de104b5e6bc10d14881eaba1d3d3883fae032722131b044f8158f0b990a154f103a858c3bb37c35405ce7dba0b77af7432c6084c8b121e13332876a6ae7e560eb6c0425b16eb12c8b139350f364d5936e4d359c8578966bf08935e8e5f0258cd93cb5cd3330a69aba8b3a9dcb2dc45fba920974fc902d6b19aec09121c3c2c23f46a83de9c317ece024d8f07c24003432837c8eeb178064e12bd72dc92d5a131f446c85b416528e6bca0ab9a317051320164b6cd5a5bf18ef1c3fe874e843f736af45bc4dbcd1cb7600a6c0881c50cc5b466b98967d827b160a1a9590c4a7aea89c0e27b7c7f863d91fa60c5e8d361f140d1508bc6520d4aacbe6f81b5e92e05b3ff08134ca1dfcebfc5f1f82c0ff578006908a162ae41122874b9f5a1159deb1df197c75ee02e792d2f835262416c21a7492d5127b8b9ed774952a744734907b22a2b3f4b263ac410b441594c7588951b04dadf817b070ed264c8c51464747c30898b591c73b1806672ba523d474a1be77afe17687869b2e6bc0423601e8963d77abccb4ec50560ec86afa593e17503c39b94371a99145a3f00d43b6e9ffe8f549610b548a3a1a1ff1cbdad113283c0839903b784fce68f7d6b4a5633d4662d2f2e2cfccc2623bce21e7ff180dd9eddece9c147a4d2298b4c6d555474e32b2f96d71fa7b7507a038e91c497d5ac00000000000000039a1f15acb9e57d7927b8b2d6bbc0a713fde6f47c7166aa5af1661fac076b9ec9b9e5a716d110dc2018197fab80962441677304754d39f6d0d9951e68ca148667fd10285c835f63320e160a25b1be93cef1574457fc400c3d636e3c97102026daad8c569abcd32d4b5c66a5676346a18f908f2c7d059b989ca3228057ac9f7521c332d9572c4af491384ec33f3eba4ee8a56e8164760f9a1092bc2adfc647de6dd83889622d5d24eaf02bc306f7aa232c62c594750f0b88c7d5e263ae5f673faf63aa355eab1caf6a00168cdf6d36c2eda78f422747fd3279d00f4dc77df5fea2d7bea8ec319c2eac0193486fc85e7923a02cd8dc751794772754665ec5d120be9f8cc1016d576d76def546b5c9ef8c74b257bfc046ea55cfab281c68a4151b99a1eea9f304bfebe9cd5c5a7a70e239bb801af0141e52d6e9e5cd803934e86e4cf3c814aecf598470ba625600e447930ca58f0b88216c33c4234ee75ab07810a1199e15b4d8b1293a42176d44ab5cc106a86c524793e8e222c35dd0ad08c5f4e2a2b804e572a6b03587c014171e0a80a49af0625da98f8c61b2df97f191657308d51db7d40bba83e31845e6561e126d1831e9edcbbc79d3ad7f0b309ee578252b3a34295c3a236ffc44066bee087cdaf030c91defb0e863f985e7918bf692872ba08e4b474ba81cbcdca7890992ccba0403c4445792c57da3b0c52fdca7e2f78d7ee02cad17e3b692077ceb76140e75c2609fa97eae7f89f037618f496d4deb730430c30a177abfbbfcdbfd4865703b3f55830d29e4859d89c7b9461bc215b46246cd874568933601187ca59fe0ec38e84f8259d846a40686708dcf042830132e2bba3bc56e9fe55b7cd625a31b588b0d880e1b861a820c1ba062c375b049267aec508323587009fb3c420950442d065c56a62d521f697689cba629de2ba5727db5c24de6bd0cc19a77bd0549af2534655f1a74b41418f8e75254ddf77645ec1aa58884aa9ee9c43013257393e48608b6bb66b22ff8d3c0131fc45e178d7d9d9e230920493aa57a9c484927d046457a2d9a21f2c257e5b9af7807875050713a933c8c2672b5b6af6ecf73cc2686ca0e595213553cb8a0ab8c746a2b4ade54bdd86c95fd559a5ee98907c441fc802f3a930347580b0849f38fcb4aa2d43e631313fdfe6f3ec513329e1d0f290e7a3b39558f1ea9fc5cfc0b5e567fdb6a7100abd8751084c730b31ae47cb75d99f4b5a5c686eb7b81b0c46e9183993fc9b837f22dfc32012046096bd978fbdc3357e905a694dc64a1762e59efc9bc7c3e38b279fa246b54fcaba4d931ec22a70d25bfb1170cc14a6e52f1d1e5e95f18b5c1bfc74d0374ce4c663e523bfec0988854384c9587f7cf1793810c888de4d37b58d869aa6ebf4c25d5a80848d333dc7d220d22378e8666cad9c6062d7cdf3ab835b94e504a52f6fe7dda2565f45f5da663be896c7d2a58e3ec89632f79ff12b19facf5488e7c6f8f60289def93e05933c7b944eda18985ae3efe586f70984f388f085bda214f8fa3b32406d037555435a1f96817d74255010443b7e2644cebd0f171c8b735bbccc0e0138f12db41f6f079e6c20b771f8e3346b9a351450c01cbe6df29a9f649f592fc6f806a6cd9e2a43af47647b0095ce6a5e38f3393be179e490c4c4b731c21cd35ad30726c6e5c5c2a719bc97d7d449aa1b22a4ad9bc27cf3e39eeddd14786b90d374c4ebb0e02330e4dcd4f5b1ffbe9cf7259f39dc13549d27ab238e50a1b27879c7d48ca963417a95f34c0509c116b8e4c32d4eefd120822948bd7f9db6c23d79a617dea8128eade6a1ead6bbf060a1675c11c26d157d4ec50d92ff401d4f6ccb0b97754ec93f638a763b1af40ab6862203bbcb4f1f8e7b1645768f6c2d3c053b89aa0b89868957d0936f5fc1311e6896dd37ed8bfa6a5a6db8da4a4feb50bb8b3b186563072729a00cb1bca8af784608b9f047d068cd44436be2fa1747429913042ab15870981fa21732df14f55fddcefff4bb50fae21084d087446204822f9d782ac42bccd91da8361db6a1c197eca400c86f147d9cd5dd64911d90144744dbb96a60137551b85e3ff74c94cc9367d7bc8cfe7fbd8bb6a007ac9815d3f42ef3b4bd2ee7af58c32d72147144aac9156e18c460547d56dca235a592ca599bd10677d1ff6960b38c7d4ab9798444abe14a8804bdd0336eaaaa5b822223a0b6c4869b1c0dcbe5aab0c38e56026c4186778d938465b2768ebcfa252d271fb6581116b690ff0906e1af5d39be6ee5d8cac8759e51680f3509e4fcb5a8147f2118ec1533ec8de3565091863000000000000941ce22b8668e2111e904859973a1a58adfd7b32e4d739538e892460b82623b227eaa0b34365bf988955fb957c80f20822e2c037a109444f1a7065e0b69b224c65b1bae7f82d8cbe03a23a979736ddf9915953e7c8e83752b320e1c13068348b2df10ddcb302023bfbae8df5bebedec5a6fde635a8caa012afe1482ad3dd43e5257e6edf9005193e987f2295643517e13f8654f8b561a400df66ecd7d670403a703ab257db1e664971b5b17cdf1ffd58f660f73c59df36453777f414421e23dadea25d4f8111082c26bf70cb6a42eba004f62203dd903f124b0463a36f8267f3cd4440580d039990ae80ab95c25a806347e8d7cf97a9dd2e086e79c5404efd2804836f659a350a515a3c5f3c0ba3f2ae514d933718195f1bb98242f89943a37d79e8ba2f24dcbeeab8e5f11b228be6766bc28a584bacfb3ca1bf4bf8a98e677c76f56198f647aeeb2ba71509de6ba7daff173710176b9f27becebd05228fbb3e85315ed0ed54bd7b88714f8235a492c6bb709c2263bc84fc5c6fdc7e4413bcbab5a5499b4556eba860b8558e4b1bff3dbca82bb09b5e97f3c1fa5b8db27db4e2214b0c463f8e2e01d62977c5d81ae58ef606e1b38e3039eb2c702a7ac8a8557bd4bf2fdf37329aa145b2417671826013152a744bc9769e3a034707841616d34182903d274bb3fe0935a55d8f480840775b4b6336ee183b6064591844d90d19950cc733b4d3ce9388d4c1919cff4bba4591b6434c24f4e1168a3f9c8600240b6b878a94ef5f81042ebe0b54b3f4fec5b4e8e2f8aac092f7b3be53ccdf78ae376ed050d90b4c9c4b4a08fc4093ebba1d28cfb5be3fce5c51111b73b1e405c00c3bf6e243bd79fa7dbeb8072855403ce7683c006442a827a84b04add108a95857bab05b24e08822540d52580458ff371cde9d76ddeaa489a60619c5980c2a6d686571b42acb53b882c180e1e8e322ac3f1a5875d8aeab4e7bb0bd87f86f5e898a195cd7d8163640fa00c199e3ba6051f630881f66126031f6c8f49390cfc27c3bb4708d835ff6cd9e51ade766b492d4fe0ed4325375d1ad2ece9a462029ebf26953723b204dc0d461831c2646503a8dc8a47638abfbf56124a2c2563a2f9580a403d81c283053f2242ebd34a563e9d7773115b48fe86e101a5fd51dc980b7f08906e7e7554ee41639b793c1306e8f408e1d41919fa0", 0xffffffffffffff51) 2018/04/05 15:32:12 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x0, 0x0, 0x3}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0xff, 0x0, 0x6, 0xfff}, 0x10) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") 2018/04/05 15:32:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x22, 0x6004}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000040)="0f20c06635000000400f22c00f019ae500eaf91ea9000f01ca66b9b40b000066b80000000066ba000000000f300f35ba200066edc7f832003e0f01dff8", 0x3d}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x80, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r0) 2018/04/05 15:32:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0), 0x281, &(0x7f0000000000)=[@op={0x10, 0x117, 0x3}], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000005880)=""/4096, 0x1000}}], 0x80002b8, 0x0, 0x0) setsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000040)=0x9, 0x4) 2018/04/05 15:32:13 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1000001, 0x80051, r0, 0x4) r1 = socket(0x17, 0x1, 0x46e0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x3, {{0x2, 0x4e22}}}, 0x84) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20}}}, 0x90) r3 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x2, 0x80000000, 0x5, 0x0, 0x0, 0x20000, 0x9, 0x7, 0xc2e, 0x749e, 0x9, 0x101, 0x7, 0x4, 0xfffffffffffffff7, 0x9, 0x8, 0x88b5, 0x9ba, 0x5, 0x0, 0x3, 0x10001, 0xfff, 0x7, 0x56, 0x7fff, 0x3, 0xfffffffffffff800, 0x8, 0x1ff, 0x3, 0x5, 0x101, 0x3, 0x0, 0x70000000000000, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x11010, 0xb01, 0x1f, 0x0, 0x9, 0x2, 0x7}, r3, 0xd, r4, 0x1) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10001, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000100)={0x5}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) 2018/04/05 15:32:13 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', 'selfmime_type\x00'}) getpeername$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:13 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x6, 0x0, [{0x100000, 0x20, &(0x7f0000000000)=""/32}, {0x1006, 0xbd, &(0x7f0000000040)=""/189}, {0x3000, 0x76, &(0x7f0000000100)=""/118}, {0x0, 0xaa, &(0x7f0000000180)=""/170}, {0x4, 0x4b, &(0x7f0000000240)=""/75}, {0x6000, 0x1000, &(0x7f0000000680)=""/4096}]}) close(r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x100008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r2}) 2018/04/05 15:32:13 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x1f) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x6, 0x186, &(0x7f0000000080)="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", &(0x7f0000000180)="df9f8d00dee2e9b11a4aa1b8347911f23fbb63167ff1e346b9f35601addba4e8cc72d8cb1ad14410aa61b9fcaacf59fffb83b62916b3ed9297cabbf51d0a0461c991186e68209f5387ea1b7f8e9e5c1f33f5c616a7f719b2948a96b68e2d8a6eadd6075b998c2a266a357b45afd065c40a74db9af3a5e1b2bf832a6767f9cbd8", 0xfb, 0x80}) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000240)={0x1, @random="ae6822b70548"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x6) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd, @time={r4, r5+10000000}}], 0x1c) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) getpeername$inet6(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) 2018/04/05 15:32:13 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000cc48000007000000000000000000000033020000050000000000000000000000000000000000000000000000000000002580000001000000000000000000000000000000060000000000000000000000000000000000000000000000000000000300000002000000000000000000000000000080629d0000000000000000000078000000000000000000000000000000"]) r1 = socket(0x11, 0x4000000000080003, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x600080) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x544, 0x0, 0x1b4, 0xbc, 0xbc, 0x1b4, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000200), {[{{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, 0xff000000, 0xffffff00, 'bridge0\x00', 'syzkaller1\x00', {}, {0xff}, 0xed, 0x2, 0x20}, 0x0, 0x98, 0xbc}, @TTL={0x24, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1000, [0x1, 0x6, 0x0, 0x2, 0x7f, 0x6], 0x4c22bc54, 0x80000000, 0x9}, {0xffffffff, [0x4, 0x3ff, 0x100000000, 0xffffffff00000001, 0x3, 0xdac], 0x7, 0xab18000000, 0x6}}}}, {{@uncond, 0x0, 0xbc, 0xe0, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x3}}]}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xe0, 0x104, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x4}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x24}}}, {{@uncond, 0x0, 0xbc, 0x118, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x1f, 0x0, 0x7fff}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0x3, 0xf, [0x1, 0x2a, 0x1a, 0x15, 0x37, 0x3a, 0x37, 0x1c, 0xa, 0x3a, 0xa, 0x1, 0x23, 0x21, 0x28, 0x26], 0x2, 0x7, 0x3}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5a0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000040)='{', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) listen(r3, 0x4) accept4(r3, &(0x7f0000000100)=@l2, &(0x7f0000000380)=0x1eb, 0x0) sendmmsg(r1, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x16f, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "85016dfe9b78"}, 0xa7, &(0x7f0000000140), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 2018/04/05 15:32:13 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000e30791715bc19548ca43bb16fc3ec9dc3c16524a74d0800a8b3b84190cee6a91eb5dbb27f38b2617dbf2c8d7a8f256e33681c072610754f7cbab68b9ef883913816a9826a3d18c0d5fd9074ee74ba47e63e089d8454dbd209e9e8fe325fe535b44e385a91990090210dd7898b4f907f224abd484", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x400, 0x30, 0x8, 0x14}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x9, 0x32a5, 0x81, r4}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f00000000c0)=0x8) connect$bt_rfcomm(r3, &(0x7f00000002c0)={0x1f, {0x2, 0x7, 0x5, 0x2, 0x8, 0x100}, 0x7}, 0xa) r6 = dup(r0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000240)) 2018/04/05 15:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x2c4) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'yam0\x00', r3}) 2018/04/05 15:32:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x100) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vcan0\x00', 0x2203}) accept4(r0, 0x0, &(0x7f0000001080), 0x800) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/05 15:32:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="79a176108b34ff9e522308399c3e4945", 0xffffffffffffffa7) 2018/04/05 15:32:13 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000ff1)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000085d000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000001c0)=0x1ff, 0x4) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/163) getrusage(0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x8000000000000}) 2018/04/05 15:32:13 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000280)={r2, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x7f7d1e53, 0x4, 'queue1\x00', 0x9882}) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = dup2(r3, r3) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x4, 0x20, 0x1, 0x0, 0x505, 0x1f, 0x1, 0x93, 0x6, 0x5}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r4, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200022000) r1 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0xc000, 0xffffffffffffffff, 0xffffffffffffffff, 0x3f, 0x0) write$fuse(r1, &(0x7f0000000100)={0xf5, 0x0, 0x8, @random="35099710ae03b02adb01020aff04162d0b41f0a7576294319947131fb8fa0afca10f40cad03c60063d52c2ee9f3b7797ecce3fe622cdca39a1dfa2f366846d9c55dd09b8828100749e159d8711ecaf96ae763d6425369f6f740ac7b96bee97ebc4596b822678a63371ff49ee7091fa56975d433c597d439e957bff9ebe613f22cae54a72abec818ace9eb3840c75bfb31474879caeb5ec89a66f72488d50eb5e6d7686bcc481c5b3d27586daec596371389982833f9e8d7dc5cec2dd2a7abb1e1ae399cc38f1fe4e5f3b2b29eb8af0858cc4ae61fbb13ff4d521bcc706f7589deb6cd754e3"}, 0xf5) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x207, @time={0x77359400}}) 2018/04/05 15:32:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x408200, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={r3, 0x2}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000300)=r5, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x9, 0x101000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x5, 0x6}, 0x88) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x200000000000000]}) 2018/04/05 15:32:13 executing program 0: seccomp(0x2, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00001a7fd8)}) creat(&(0x7f0000000040)='./file0\x00', 0x80) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e24, 0x9, 0x4e22, 0xdd90, 0xa, 0x80, 0x6679dde0f8cef390, 0x3f, r1, r2}, {0x0, 0x3, 0x1, 0x80, 0x3, 0x5, 0x4, 0x1000}, {0x5, 0x1, 0x8, 0x2}, 0x0, 0x6e6bbe, 0x0, 0x1, 0x2}, {{@in=@broadcast=0xffffffff, 0x4d3, 0x32}, 0xa, @in=@loopback=0x7f000001, 0x3504, 0x4, 0x0, 0x4a, 0x7, 0x332280000000, 0x3247}}, 0xe8) 2018/04/05 15:32:13 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000049ff0)={0x67, 0x100000}, &(0x7f0000048000)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x17e1, 0x400) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000380)=""/253) r1 = socket$inet6(0xa, 0x805, 0xffffffff00000001) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0x3, 0x7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000240)={@multicast2, @multicast2, 0x0}, &(0x7f0000000280)=0xc) accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000940)=0x346, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)=@ipmr_delroute={0x184, 0x19, 0xb20, 0x70bd25, 0x25dfdbff, {0x80, 0xa0, 0x20, 0xdf58, 0xfe, 0x3, 0xfe, 0xb, 0x900}, [@RTA_PRIORITY={0x8, 0x6, 0x100000001}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_MULTIPATH={0xc, 0x9, [{0x0, 0x101, 0x8, r4}]}, @RTA_MULTIPATH={0x2c, 0x9, [{0x3, 0x9, 0x6, r5}, {0x3, 0x0, 0x9, r6}, {0xc679, 0xbd, 0xfffffffffffffff7, r7}, {0x3, 0x37c5c29c, 0x2, r8}, {0x6, 0x1b, 0x4, r9}]}, @RTA_METRICS={0x8c, 0x8, "41ca0d6617a1c6f04153927ae425e71c0a81a969e72477f3436034259fbb186dc41d024672d0d2a4742237d729db373e25b3e2edac38e902ef7ce7f9f5896e778363c24dbd1f70363601aa4adc6a9194367930466ec9db71697066d4fc8e4a521f9b1e69caee9805fd4774a9f0d29838839635bddadb7b28ee8da828c55271c2b60d3442a1f0"}, @RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP={0x8c, 0x16, @generic="30dc0d4e9ba2b1a1cc29923cfd223b1aa7b402204badaa2bcf51311991676d036f5363683b8d767321a40ad1cb93fc6d7955fc0dbb446ee507b50c3aa7b1f52b786fe70d4c86bbb9acafa8829cf07d049c0d3de976cc7f2ba732ff3bd9702181d6571b76e0d1900101d339b5d6911eec49267f1b03d7e9332a158c09aa3fba7b8716dd2c19"}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 2018/04/05 15:32:13 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r1, &(0x7f0000000240)={0x0, 0x0, @loopback}, &(0x7f0000000280)=0x10) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/04/05 15:32:14 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0xc0440, 0x20) ioctl$DRM_IOCTL_GET_STATS(r0, 0x807c6406, &(0x7f0000000080)=""/187) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000001c0)={0x8, 0x8, 0x1, 0x2}) close(r1) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x5, 0x0, 0xffffffffffffffd5}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000200)={0x1564e94, 0x0, 0x2}) accept4(r2, &(0x7f0000000240)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80, 0x80800) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000ff8000)=0x40000000, 0x3) 2018/04/05 15:32:14 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x50aa08d9, 0x80000000200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x33, @rand_addr=0xfff, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x6000000000000000, 0x43}, {@broadcast=0xffffffff, 0x4e24, 0x0, 0x10, 0xe78, 0x64dd6c2a}}, 0x44) ioctl$KDGKBLED(r1, 0xc0045103, &(0x7f0000000000)) 2018/04/05 15:32:14 executing program 2: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000300)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xd, 0x44031, r0, 0x0) sigaltstack(&(0x7f00006d4000/0x3000)=nil, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) userfaultfd(0x800) socketpair$inet(0x2, 0x80806, 0xa45, &(0x7f00000000c0)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x4200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4008641c, &(0x7f00000002c0)={r2, &(0x7f00000001c0)=""/210}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f00002dd000)='comm\x00') 2018/04/05 15:32:14 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', 'selfmime_type\x00'}) getpeername$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000f4fc8)={&(0x7f0000005000)={0x10}, 0xc, &(0x7f00000edff0)={&(0x7f0000063a70)=@bridge_getneigh={0x20, 0x1e, 0xa21, 0xffffffffffffffff, 0xffffffffffffffff, {0x7}}, 0x20}, 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x14, &(0x7f0000001980)}, 0x0) 2018/04/05 15:32:14 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r0, r0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x21}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:14 executing program 3: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="f7040000670cc48ea56eb70370ac0fc648fd0f16e7c29aa9bac9d0c7f7cc27e25c1f0166f06ee5e0d43c6cff8a2f67186d4dfa30c67b1cefd02ece217ad1629c9ed37cd5f0a862fa903817ed282631f0020bec12b1b3fa4d569aec7c92a043d22bca7b8e07724323111092f896fa4a52a1e5a5ce9a0f4eec06680362629fd4ac491b61e408010bb75c9aab000635636b4f810c2f12a85ca1a1361cd71ed23a1908582f78e45c36f3ad6fa8759b1856aa2fb2d280e04e88a6a3aa672b03c2691fb9551dff314aa4bbb3eecdebb9a173903f2336faa67dac6a58ad43a3d7bed20f5a48a73ea0ae7d28161fa50d1a82ecb85f076e254fb8c724f52da15e0ca1eca766f0f888a06345e42fbe28fe84e61da3193f5300b6a65dda42c24325b815585c690724ddaca1ee27c68f5cbe27f969faff057eb1e06b26648164837a79302efb5ae6a61a715a8033f49705525ddf58e6c73ee0b15f47082bcfac1106dabb5a1516f9f0344f9daf019a7793ae4da59971f1850e839645251f1a5fabfa058caa012e8a34a0b387c1315be18285b0ff9f5d6bf1450953682dea3e4daf67103a3d00bf926b7334ad5eb19ad09ecd6ba1855e2b002b92062f80adb046baae9a6e658eddae35d651564097ea9c6b266422c2e36d74f9b5ea22e1c1395994048194ae76807042eba6b08c6123ef509dcfb41446efb979e32558f8937565a88e80b264d190cdb689b933401e6c6e46077772fe37af936dfcdda8a17053dba5860cac27583e2ed01ab316f5f9f6b65163402bddd6b240436fbc547f79a935c83132667de574c369a9d4cd519345ebbde4d18f9e4afdc7fce60000f2bfde502ab0403dce8f7d16693333c43d0678e2131eca6960c9cd19699d4416e6ad10b05f5649f7606241b97cdbab79a1442081501adfe561e76d2e156408cbf40f2c8ca7fda29fd0ce2c8d6b176cee060166143d58c90aca7618acbb91a424af699ead8251c8b8f81f4aa793ccd5d85a4b293e4e2df1bd807620d5453021a3f7253db9377a7551292be7d0d6998a966bfc221d61960f39f049228176784e12ff0d6d5201f9fa71564b62c6d74b1e3e6150c3ed4a05c4745fd3790668cfdf6462f3f1ed4e95c9e091b78dcc929f468164555f21c65f277f3c677b7429779860814ea639592921133b371e597fe41d397c96984f42e2b41e1edcede2e9b8619bf147c1e74aca85be37043af64f9c4a0cc0227e074fae965de0e7ced01720d9909f7fc8bb07cc3323c5c9d0f1f7163e333dac3c6c6f874fb2f16068bf6a5d46d1de23a9a4fbc94a0ee1bccd144887be89ffe9a631de04dcfa85980c0d3eca5f7419d6ae771b17132420e06f08e10b2f53264ae1325bcff7612ae9a5592b2a11fbf775aad43953b99cbeaf005476f9b8e2d55306bf3fe77a14af951d2dda2701b881aa49d28572d04d39afdc8ef4ab25acc399dd0b206d9a7fcf814c8e58dd7b9eec11967e9be4732a023d82afddb9251ffb4d8f5c14b3b88bc4ff2b86827dc128439eaef32548f3d6f5bdd8be60cf2724c1a43df7d729dd36592af0973da53c15cdf1fb40ddc39418efaea9a36ca3eca2ba5eb607eec13c83f5e698a8f22c45ec7d14fe248d5b5abeb61f159febcb37ce8a95361a1e48f710f9770a1460b36bbdace7e2049ea1edcc986524d2683f2a9865230e6688cd59e959df83cafa1063b149de39d1e11e41aa8a02af7640728f9c7b91b8c195e58074ededfad8a62521150036fb4088a4c757c36ba32134d6a3b24018f7faee19391b832cdd16b97fc5acf201e0adbce1864ae3dc2288"], &(0x7f0000000040)=0x4ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept4$netrom(r1, &(0x7f0000000080)=@full, &(0x7f0000000000)=0x48, 0x800) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000100)=0x20, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 15:32:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:14 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) sendmsg$nfc_llcp(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x27, 0x1, 0x2, 0x1, 0x1, 0x101, "493b2c3195e3efc8d72a60e018f2dfd9e9ed692515c20d6cf5cb1a8fd4d623928e56683483aa5a4f85e126ebcfd86792e0fcfb2ac84cf6daf893255a5990e1", 0x2f}, 0x58, &(0x7f0000000040)=[{&(0x7f0000000140)="de390aa768684c1190d642a5d0f53e44453bf46bc31982766b9328c6944f1b8ad0f26abfd0be6582f3d4587222c82faf13049dff8e851a40b3c1d40ae366df5326f03c659267d5e0c677d8f2c4bce3af15a6fdc0c24a2422d1b1e114bc17f9856dc11853d6d718c12c0cd6d3e8477e863d3a4210b810ad3869d854abe73da5782b1c94fbac06f64c2b4664f61ed8d5a2f3da975ca3e5bb529fc86ec8eb8a94945349c1673f975220656abb615f09e0ea5abb46c08673ecd56961bb6528da4978f5d7b22c8615dc9a70d0221a146569e43c9e9fea477d2adf941a96ca5524", 0xde}, {&(0x7f0000000240)="5f07dcd3f137d5f459a1ebff7d63c576008d26e5f883ea9708c5c8e964fbf6fb5fd1b2cd07eb84895c62d7757edddfc28bce1edc3b160aff2aa03c0e941359af95fbb3b3a5e4e3285e8f", 0x4a}, {&(0x7f00000002c0)="c6643a47323c2b70888d5a4ee21c382047b3a8d3d61a497b78ce5623b60f6f28cae3912ff45efbe07ead05e286c5a508909071258c103edd4d485dd4fae454a063c9999ca4edd4877ebc3edc", 0x4c}, {&(0x7f0000000340)="e549bb649487f9649c424045355ce7289480c6d978e1ffb07f47c598afd25877268a1169d0c1c7fc59637fe363280c08bb4dc0439259584def309221a95181efeb0c1f742e91fba3d940ef4c850e8c7c9f500df7b186beb7db6f5a992ec6e689eec3e993f3d1eb7ce698e323a569576faaf47714c404d3937b86a0958b64da83aa792c04dd070a72702f804ebc2793c5ba4ba493f39f8df8ae4ba39dd9cec589946c586da5b7ececae37cf1aeff3ec93c551d0a2804f7aaf8a878ac877717ec6c472f721b3c0285827fa48ef1f3a4bde46016c3e8da166fb74a30b5afa4405105e5293efc16f68fe06", 0xe9}], 0x4, &(0x7f0000000440)={0x6c, 0x0, 0x4cd8e3c8, "817c01f6cfbec86822abe8ef7e546a8e0eada546e33e31b0395c0812ea13a88c97632ac75a86e81ebc3277e7a62d9ed13c1512ae9b79754a316aea47f519e667c4bd1caea40634d9ed1d7865bac9ff1a70a1c608abe2d55e58c2d4539efb6bcb"}, 0x6c, 0x800}, 0x4000000) 2018/04/05 15:32:14 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x4, 0x430, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000080), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x46c) 2018/04/05 15:32:14 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000080)) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000040)=0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000001180)=0x1008) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000011c0)={r1, @in6={{0xa, 0x4e24, 0x8001, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, &(0x7f0000001280)=0x84) 2018/04/05 15:32:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) lseek(r0, 0x0, 0x1) 2018/04/05 15:32:14 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioprio_get$pid(0x3, r1) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) name_to_handle_at(r1, &(0x7f00009c2000)='./file0\x00', &(0x7f0000398000)={0x8}, &(0x7f0000565000), 0x1400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2018/04/05 15:32:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6={{0xa, 0x4e20}}}, &(0x7f000064b000)=0xa0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x20) 2018/04/05 15:32:14 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f00000001c0), &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000fc0)={0x200080000000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) select(0x40, &(0x7f0000000200)={0x8, 0x288f028, 0xffff, 0x49, 0x200, 0x5, 0x0, 0x7}, &(0x7f0000000240)={0x20, 0x4, 0x3f, 0x400, 0x7fffffff, 0x8, 0x40, 0x6}, &(0x7f0000000280)={0x2, 0x0, 0x9, 0xf386, 0x5, 0x9, 0x7, 0x2}, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0xd9b, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}}, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) [ 317.491644] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/05 15:32:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000004000)={0x2}, 0x20) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000004000), &(0x7f0000001ffc)=0x4) 2018/04/05 15:32:15 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', 'selfmime_type\x00'}) getpeername$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000140)={0x10}, 0x303, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1d, 0xfffffffffbffffff, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x400, 0x802) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xd0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x3, @empty, 0x7}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0xa97a}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0xfffffffffffffffe, @mcast1={0xff, 0x1, [], 0x1}, 0x81}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x1}, &(0x7f00000002c0)=0x8) 2018/04/05 15:32:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x296, 0x2, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0x0, 0x1}, 0x1, 0x0, 0x1, 0x1, 0x3, 0x3, 0x803f}, &(0x7f0000000100)=0x20) r3 = dup3(r2, r0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x10) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x2, 0x4, 0x9, 0xfffffffffffffe01, r4}) 2018/04/05 15:32:15 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x80000000, 0x4) r1 = memfd_create(&(0x7f0000000000)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x22300, 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, &(0x7f000000a000)=0x57, 0x7ffff) 2018/04/05 15:32:15 executing program 3: socketpair(0x1b, 0x3, 0x100000000, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x200000) r2 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x194, 0x34, 0x104, 0x70bd27, 0x25dfdbfc, {0x1a}, [@typed={0xc, 0x24, @u64=0x117}, @nested={0x174, 0x29, [@generic="397a998bf0df28b62ed96e665210f864b9d5c08bc558d3d34fd89f72d1b3447a7f92df6c2886b455c677fce3455a60c7289a62fc56dc55cfb0ed5ff3209d5b0eb2fe6f", @generic="c125b848f32c439d366d231903a83193acc5e5776b1d0f8a1bf639de2f6f3dd3115733c94710ef82aa4bfaf6465a450e7d0d9d3f37af7c35f9419ddc7217cf749b105a51289f29a98328fd2e0ff74230868a87b52bad519ef9dcf0887342f14e6e9b4c97b18179cbfa8d07d4cf548faa870394271e822bd2f36d3b98f071bcd105f7acbb25bec7eb9ef5c5b4894595e21dac17eed29e246d06c6723cf90a1879a1076ebb366efda46524f09a9435c7378d81732dbb2363e08884b657e89cc29438a5542b609fa8a02da76f3ca22325fb8668c8e712372c039a31f8002cfbd3fde8921f3d7d696f07a61e2a43b0a18c55c887e5ace40e83c56c79fd", @typed={0x14, 0x2c, @ipv6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1000}}, @typed={0x8, 0x23, @uid=r2}, @typed={0x14, 0x79, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000680)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000006c0)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000700)="6e65742f696f365f7461626c65735f74617267656b7300e530d36ba530") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/05 15:32:15 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x418b42a8}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x9, 0x2}, &(0x7f0000000140)=0xc) fcntl$setflags(r2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x3, 0x1ff}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x1}, 0x2) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000004c0), 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) 2018/04/05 15:32:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="3b56c0324f6d8c6a6df32b4431f33181b6ec272af1837188f619b4a24505f4dc4dd3298ce4f7c5ac067898cd1996ba66bb5a30ad3489aadaa19d9f3a38f98088071686b0aa1e16ac43d9208a8fee700a", 0x50}], 0x1, &(0x7f0000000480)}, 0x0) recvmsg(r1, &(0x7f000005efe4)={0x0, 0x0, &(0x7f0000304fe0)=[{&(0x7f00001a6000)=""/167, 0xa7}], 0x1, &(0x7f000084bfe8)=""/24, 0x18}, 0x0) 2018/04/05 15:32:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r2, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r4, 0x4c01) sync() r6 = getpid() name_to_handle_at(r4, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000740), 0x0) migrate_pages(r6, 0xfd, &(0x7f0000000540)=0x80, &(0x7f0000000580)=0x1) getrusage(0xffffffffffffffff, &(0x7f0000000480)) ftruncate(r3, 0x2) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) truncate(&(0x7f0000000780)='./file0\x00', 0x3) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f00000003c0)="0aab95906cbf78d0113b9b11c035ec1b838e455485a0ae0c1dc7ead287ca35d95f330970a765dba3809e348d3d739c34fcbb996a276d6eae518354b310b63d5e6d4f02c584c900b9eed1ccd8c2d601c345a16a9770811f407c4232bb44f3f941d8cfe9138c1c2a09b466a541396572c076d8f96f042779cc2bdc8794dff7d80969b0a082393a735bb99d9c59fd538646854b79ccff7fdd4025a5c58b1e2acca8fd4f9a") r7 = eventfd2(0x0, 0x0) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000007c0)={r8, 0xfffffffffffffffe, 0x3, r7}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r7, 0x80000002, 0x2000000002, r8}) 2018/04/05 15:32:15 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x400) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) 2018/04/05 15:32:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000c03000)=[@in={0x2}], 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'bpq0\x00', {0x4, 0xc, 0x6, "fc91f8852f05", 0x100}}) r2 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="74b57cffe49d0c0358106a1ad5cb747465bf71b583b09fb11bed8a07dbdbeaf72f337da79d9a401c9ee788a76123ef7bc71b474c8cc44206aa4fbc2dae8c8cabd9ac5ae24610f8be31da36a7670858eb9d67f1ad91da18ad1d50ef258b1731eb4f2646ac2c10f5d3e0b912a608baa9caa9888b99c586c692ef0de15dae3b8d4e45c86bd0045c25a523e9beb3bb838e65"], &(0x7f0000991000)=0xffd3) 2018/04/05 15:32:15 executing program 2: socketpair$inet(0x2, 0xf, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20}}, 0xe, 0x5, 0xfffffffffffffffd, "0479a94b0270470b8bad7b6f42b3371a223300d1a7928aef0093141b6c21b90e40bbb48b57369b66eb8f90d28ea444c6af527ef10505b07b4f772ed64fad7e5aedc591ba519400b61caf397b7f106e65"}, 0xd8) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x28000000, 0x101040) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x50) utimensat(0xffffffffffffffff, &(0x7f0000fdd000)='./file0\x00', &(0x7f00007ccfe0), 0x104) 2018/04/05 15:32:15 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x1000000000084000) r2 = fcntl$getown(r1, 0x9) getpgid(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000004c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x20) 2018/04/05 15:32:15 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0xffffffffffffffff, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x9, &(0x7f00000014c0)=[{&(0x7f0000000100)="864b7a55a2deb51bc658bfb02255c5a7f6ffa7aef9a3868a0217f36891be1d9d139433827484ab707dd54866602bd5c0c1ffe12631eadf7e2dbbd05160839d1b644a45e0291305efdf47d5955b7a7ba5fddb0e4cee3dd101d148658029aaa3974072700b552e3eb8b7786ac993cf200b7f439c4fe31ce7e820fe751f3a508ac603704c4a0b6cd6ffd65faea7d422a04a9e419274", 0x94, 0x1ff}, {&(0x7f00000001c0)="46666d3a84b3cff763737d76d234c8006a39b05ad59d1e53c3fb4b5e268937a093", 0x21, 0x2}, {&(0x7f0000000200)="a6f1c708668ffba285fe69f02b49820371164cf46ee3116c7aa29803e900f59c01aa4f7130a1312e2479832a7975f2e17f88966c5c6acf83e6009e461addb7fd61b59ddcfb1e4464d8c8bdfd8696", 0x4e}, {&(0x7f00000004c0)="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", 0x1000, 0x8}, {&(0x7f0000000280)='TC', 0x2, 0x7}, {&(0x7f00000002c0)="e7fe1749f10a9cf52ea2b889a4263dbe2f1ec169", 0x14, 0x7}, {&(0x7f0000000300)="5c174a72e0585c182d1306e7cbf62d83531e0020852d0945b3412c498e", 0x1d, 0x36}, {&(0x7f0000000340)="e414aa7b5cd3deefed71276a22f8277af5b1c34a12056e663bea4bad8163aa77a18a397854a3cb6593ff846558b53ab91d1d7c7901eea21b3cd731c9dde1c5d9901d2d27b8cccbd54c889e8dc264916fc6c1035c867ab3ca121006a5bf4048e304cec4a6f5d9e51cd8266808b2238911c7710426c657a430a42b8dd110ca183af43eff44db2b2f81bfec40d64309", 0x8e, 0x6}, {&(0x7f0000000400)="1d0adb427cd0e23aa8e3a803328b007739068643d84b5bfb264dfd76891035e266757cc1b11bf682e6550283b3af93b410d81ee89ceb34b797b618230259ef83c8694c2111a076624a1a101205a0c171", 0x50, 0x40}], 0x2000000, &(0x7f0000001540)={[{@unhide='unhide', 0x2c}]}) 2018/04/05 15:32:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @multicast1=0xe0000001}, {0x0, @random="082514b266b2"}, 0x4, {0x2}, 'rose0\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xa6, "e395d845d21e4d473dcb6800fafbcba4c91ed0dbb629d5fd0cc2192799586ca5db9b91069a50b91b08d2206f0c087bd99baa0405131a646c94dc993e9471f7a4093758cc74151a40cf36a159bfcda794724c7568603349b907ff1092e513db3a2e0e6de0a137b79956fd1d416300cbc0ce435ca34f23d6764bd98a4dfade3c27228ea047a13107b2ee34950ce4f791d5481ca66879c4fbb255f1cc19537683f9262e077ec107"}, &(0x7f0000000100)=0xae) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x1, 0x4}, 0x10) 2018/04/05 15:32:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="f9e2"]]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000240)="0f01d10f23bdbaf80c66b85cea958566efbafc0c66ed66b9960000400f32660f3a624300080fc75dc8fe8b0f000f0d5e42baf80c66b842a2378366efbafc0cb80b47efba4200ec", 0x47}], 0x1, 0x0, &(0x7f0000000140), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xf000) clock_adjtime(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc827}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0x101, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/05 15:32:16 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', 'selfmime_type\x00'}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCXONC(r1, 0x540a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, [0x800, 0x5, 0x2b0, 0x5, 0x9, 0x1, 0x9, 0xfff, 0x400, 0x8, 0x4fa, 0x3, 0x800, 0x3, 0xffff]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x3}, 0x12d) r4 = dup(r0) write$eventfd(r4, &(0x7f0000605ff8), 0xffbe) 2018/04/05 15:32:16 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0xfffffffffffffffe, 0x0) close(r1) r2 = fcntl$getown(r0, 0x9) sched_setparam(r2, &(0x7f0000000440)=0x4f9e) r3 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x1}) io_setup(0x6, &(0x7f0000000380)=0x0) io_cancel(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x71f, r3, &(0x7f0000000680)="9d1b98f852ec52999973514bf4f7bcb8aeaa8adf72de882e3c6911d853e99e80f0acdfce6faf174510b23b4f7377ebbdb7b7b74c1ba4e878a4bdd85b80e67a4846efa4da1e69f156da050d71890b224486abe36363d7d9744b34e7e32417884e09a51b9314052b53f229b9607cc14cb54f501a70bc74f4fb01e52ad04a439677749fe205aff5143f1125b905d81f398746d5540d6f98ccbc1ec84fa9a5b7ad71c415fad2ebb226292a5692531f41b26d7fc88eb6d0166132a5256ff4063f11eaaee7982fabc2f302023b83f77c783307ae25a4e23c", 0xd5, 0x3, 0x0, 0x1, r1}, &(0x7f0000000400)) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e00)={{{@in6, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000540)=0x70, 0x4) 2018/04/05 15:32:16 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3fc00000000000, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00000001c0)={0x57, 0x10000, 0x6, {0xe7c3, 0x2}, {0x4000000000, 0x81}, @ramp={0x7, 0x20, {0x1f, 0x7, 0x3, 0x5}}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x6, 0x3, 0x1e, 'queue0\x00', 0x200}) setsockopt$inet_buf(r1, 0x0, 0x3c, &(0x7f0000000140)="652e1655d5164c82fd679a7b888cda66077ea8c77859d9d86103cde79e8d8687cf035968e40ac2707821f3c598c3f6a3761bd1bf496795f431f5d03283d66c", 0x3f) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:16 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000de2ff1)='/dev/sequencer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) ppoll(&(0x7f0000c50000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000302ff8), 0x8) ioctl$DRM_IOCTL_RES_CTX(r0, 0x5100, &(0x7f0000000000)={0x4b1, &(0x7f0000000040)}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r0, &(0x7f0000000300)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x32002}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000440)={0x300, 0x26, 0x100, 0x70bd25, 0x25dfdbff, "", [@generic="9653bde3f246b3c3a326be7ebf6e3a5a1aeeba5f6b3ef002c6e621656d19685da9df3a49dd4ad52a9d39ecbdaa5c6947b67cfc46a8a10aa8f91a3c9abfea5d4b76e31cca669300eaeedfceb4c62452da7d0094ebc7e1495d24e637791e37f362834c56e178ec1de83d200330665d7e4a37c8a56639c9506e7a2674a899da23d5e123c4167eff9668e57b9b943e02c17838fc1b4cb4694c90b28c3392484d5e6f182849f249948ea465aca2344814999a6d703b1e1d869053e7c2a02194fd7414a0706b66", @nested={0x22c, 0x4b, [@generic="8fa38ff6a2781c6a298e2fe3bec7176191caaf2deb4bb4151c53da25d0b3e952695399484c73ac3ebf37c7a2588f9e94172a4df7e1d751b2556d8efb17c63a932d38c665ff35eb87f458b5202c9260e4691a9d84594ad979060b56c6ed51b1fb9283e31b9f9cb7812a10e272a356ec553ada17bc078eea00509eb75920a72d5ee1a95ea0222cb4383d1eef32faac7bda91c740e82a1b36d03eafb408ad1b4a0860d233", @typed={0x8, 0x93, @u32=0x9}, @typed={0x4, 0x4d}, @generic="402d38923663a9c51d0f9efad0c6de34e3c62156bf0770273653899f108b66cb9a67a60d474dc269afa131c936f4fc9299d55eaa3699d6a0354b8e64aa86a076752dcefeeca9770a10ff6f69258613bf815ce73122c8dec86decd1a982066ab7332fdcf4b80f347fbb4137b6ccfa4af3f2ba863fe410b5cb718f44a59035831f12ec822a23270947d8b7f01afa6ac35cfe1b4ecf3d44169e1fc624867af949a842020c0953785ccc1579cbb68b2455346e85883e1120e132d915be4ecafccb06a7df0db2af46f66b4f5dd32ec2c8a3e43e81", @generic="a553e6cfdaf6bcde5e6d55c66994f0337fd82de21df1a31dce700ac52a43aaaf7ee7163ba41281a6a11302dee47d734845fb3a41d65c281b81ebbe49244a03f9ca6493b4fdde52c1f519b8b1e35b0c1da150cd4c1c8b02bd477fc84ee7be8885336aaaa6d0a5622f947347c9617ac4e400ea451b5cbf36fe85aa765799f2e57ceb40e0ef8c9a03a728488bf87d7833e68b146e7afa1f64f2d065d9cf", @typed={0x8, 0x2d, @pid=r1}]}]}, 0x300}, {&(0x7f0000000740)={0x2178, 0x16, 0x0, 0x70bd25, 0x25dfdbff, "", [@generic="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", @typed={0xc, 0x1b, @u64=0xfff}, @nested={0x1150, 0x91, [@typed={0xbc, 0x4d, @binary="5b4d1b95bca08cdcadf4d340c6ab68357a2c77ed445be16a646ad872e58b30e7bc1dfaa734334ea8d6fc0b5b8505a0ac3be483d27ac0225c7e7706b12d6d316087f46d079ca37bc22403ed34281dc2d6389fe75ca3bdae036cc0feaf72a4a475ba11b69f2cf0b91f848f12f34d2f26eef07fc65f8d17b7503f95af62b6c3f501b80d3312a1c0d537038e6abb66394c62e2ea60350683ea0a45a0ac271832d4ed3b3f9695fe6f78036c432c99c8fa45442926d2a1c8faf6"}, @generic="b75e3e9c73342efc69cdff2954194f5165ea0278b9a61ef2d21d71575add8b44cec13f15ce118157ae894ee49f417181204924f54531c6e4c86628a06908a73df2eaa0069e3d249b86e990322e6531dcd2bf2742f97b278496119eab5ede27b270977568fa5006ec839a2cd6d79bf14fef41e944581c04719522f075f6a88773a4", @typed={0x4, 0x15}, @generic="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", @typed={0x8, 0x91, @uid=r2}]}, @nested={0xc, 0x84, [@typed={0x8, 0x6f, @fd=r0}]}]}, 0x2178}], 0x2, 0x0, 0x0, 0x80}, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x232, 0x6, 0x4, 0x8, 0x0, 0x80000000, 0x6, 0x81, 0x3, 0x101, 0x7}, 0xb) 2018/04/05 15:32:16 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:16 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xffffffff00000000, 0x208000) perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x400, 0x8, 0x8, 0xba7, 0x0, 0x100000000, 0x80, 0x8, 0x8, 0x1ff, 0x4, 0x55, 0x9, 0x1, 0x5, 0x1, 0x8001, 0x3, 0x9, 0x7, 0xfffffffffffffff9, 0x8, 0xda7, 0x3, 0xffffffff, 0x4000000000000, 0x1b5, 0x1, 0x40, 0x938, 0x5, 0x8, 0xaccc, 0xab02, 0x8, 0x4, 0x0, 0xfffffffffffffffd, 0x4, @perf_config_ext={0x9, 0x1}, 0x440, 0xa8e, 0x0, 0x1, 0x1, 0x1, 0x7}, r1, 0x10, r2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x400}) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000238ff8)=@abs, 0x6e, &(0x7f0000000040), 0x0, &(0x7f00000005c0)}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1d4, &(0x7f0000000080)}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/05 15:32:16 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x6) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x0) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000200)={0x2, 0x4}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x80, 0x100000001, 0x200, 0xffffffffffffffb1, 0x10001, 0xa6, 0x3ff, 0xfffffffffffffffc, 0x7, 0x100000000, 0xf0f, 0x479f, 0xfffffffffffffffb, 0x10001, 0x9, 0x100000000], 0x1000, 0x20000}) bind$unix(r2, &(0x7f000000d000)=@abs={0x1}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000240)=0x7, 0x4) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x1}, 0x8) 2018/04/05 15:32:16 executing program 7: r0 = socket$inet(0x2, 0x7, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x4, 0x0, [{0x0, 0x2, 0x100000000, 0x401, 0xff}, {0x80000008, 0x9, 0x4, 0x4, 0x8}, {0x8000000b, 0x1, 0x7b, 0x7, 0x25}, {0x1, 0xb69, 0x4, 0x5, 0xa7a}]}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000200)=0x24) 2018/04/05 15:32:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x800, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x74, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x8001}, @in6={0xa, 0x4e20, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x7e8}, @in6={0xa, 0x4e20, 0x80000001, @empty, 0x7fffffff}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @broadcast=0xffffffff}]}, &(0x7f0000000200)=0xc) delete_module(&(0x7f0000000000)='ppp0.\x00', 0x800) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/05 15:32:16 executing program 3: kexec_load(0x2, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000000)="fb8065a2e847e4d5025ddba43950742b22b4cc9e958793f311f1d2", 0x1b, 0x5, 0x9}, {&(0x7f0000000040)="4b8c9690ce4db6ef92dece15be212c065a76aa30e59a1380caed1cd5f14a676b2703be7c3418c226f37c9803f9547568136c5315e8c9cab5665bf9242de188baacd8c1ade9a2db0e265312c34afe0c6416686a630b8489e7915669943645d1f219e2f04b6f192a473fc468e5bb8363f87526766200adeaf951580b1788a46d86cbe5f682a2601564b5809f8e4eacd0c4d7ccc5a5e6b97add416c2f311c91d0c28a79b28654638da058d43fa43f4b759565219bc54ae707e5682304da18c4e1a221046faf21ea6c264fdbbe3042f27159de0ff89d9c67949f551ddaf239d09c3e84875d7da6db4090ff29badc4735b4f203b7", 0xf2, 0x401, 0x20}, {&(0x7f0000000140)="788d42e82630e4107a39efd8d86bc7614659fc2e5c8a6c7e3f3c8486c32fe541002c615c560fc469121e0c5d885fca2ff9ddd4d4de67bee796e882d814", 0x3d, 0x8000, 0x8}, {&(0x7f0000000180)="5ed77157348fad5f8f15354b2a1769ed16851cbe64095cc89921f381b76ebef0c03ef952d7c34d25fb518246031e99fee50e81cdd55207e1", 0x38, 0x1, 0x6}, {&(0x7f0000000300)="6911ded62030605bd4f73a086dbe379ffe2c3b8be48d799c445dfa6c21bfd56dadefc906fbf6a3772905ca998f739ad10ee81d154fd730b481f533d0e5319d50d3aa83f7ce46b753362b124ea1d1e66db3525c3f5eada56d82dc1098287b9e9bebd2507c48815cc57bfb94f8c55c2b7d489925e48972241910ad1fe8a30d57bf3a0a6ba86a8ebebdd67b46724e459f599cc3866673f60c1bef76c7f9a63419ed05195c99da8b78a7e9aabe558da82e198dc22a471113cfe031af82a00e5bc20b36a5b2798aeff45409e8", 0xca, 0xfffffffffffffff9}], 0x280000) r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'\x00', 0x1000}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x3131, {0x1f, 0x7, 0x1f40c0000000, 0x3f, 0xffff, 0x1ff}, 0x8, 0x40}, 0xe) 2018/04/05 15:32:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="636f6d6d009a6fbc7f89e05f0ca1670146b0a06588fade94e2342574d6aa576386157afa0bb7e2dbdf35a8635e8ca865234bc1a83fea4527838a54f7327fa8dbaeabc6b5883011ab529454f70cd4d64a93fda80be3b9d6100086925d2011cc89ddc7f9e81e5db9795ec9cad0962c763d8536fdd37eede69702e54feef070b2de6afc9d69ab96851794a56022bfdc5a214316b6351d52eed0e52b63204cfe4b3319410a848c97b522be99641febe2bf1368456f9a3dc5d7c8bc357203a394ee6fc38c14491f91e8f8da209fae99c0a73ec569a6fd4f25a661cfaf9b6d5be7f9fdf94195a1278dd4c12e8f88e9b2e1b203402597a7cca9ae71dcadbb35586f35f804000000d8c88bcae5e5b6") ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/11) readv(r0, &(0x7f0000bf5000)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0xa0440, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000100)={0x2, 0x8, 0x2, 0x4}) 2018/04/05 15:32:16 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) write(r2, &(0x7f0000000080)="539704c8c23518b9ebe09eae57fd17fc2488cd3a400480efb84f7f261e0f3001", 0x20) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6664001a000000") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0xca7f, 0x4, 0x9d, 0x9, 0x40}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, &(0x7f0000000100)=0x4) fchdir(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000140)='8/file0\x00', 0x0, r2, 0x0, 0x7, 0x100000000000000, 0x4) 2018/04/05 15:32:17 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x3, 'bcsh0\x00', 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000013000102000000000000000000000000", @ANYBLOB="34b854d33d328850870bf99a3cd9ba00000000000000000800210000000000"], 0x2}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r1}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3, 0x3, 0x1, &(0x7f0000ff9000/0x4000)=nil, 0x8}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x199f, 0x30}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r5, 0x100000001, 0x5, 0x8}, &(0x7f00000001c0)=0x10) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x80, 0x40) 2018/04/05 15:32:17 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x0, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x104) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:17 executing program 2: r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) sendfile64(r0, r0, &(0x7f0000000000)=0x5d, 0x4) fcntl$setlease(r0, 0x400, 0x0) pipe(&(0x7f0000000040)) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 2018/04/05 15:32:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0xf, 0x0, &(0x7f0000000000)="62d6e104000000d4327af178305d6f"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x0, 0xd9, 0x4, 'queue1\x00', 0x3}) 2018/04/05 15:32:17 executing program 7: getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x2c, 0x1, 0x7, 0x5, 0x504}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800050500000000000000000a0000906bb64613f827ad9c045400000000086892f200"], 0x24}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)=0xce, 0x4) 2018/04/05 15:32:17 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) pwrite64(r2, &(0x7f00000004c0)="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", 0x1000, 0x0) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x20000) r1 = getpgrp(0xffffffffffffffff) getpriority(0x2, r1) fcntl$setlease(r0, 0x400, 0x3) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]]}) [ 320.172960] binder: 23026:23029 ioctl c0306201 20000000 returned -14 [ 320.187616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 320.196525] binder: 23026:23029 ioctl c08c5334 20000040 returned -22 [ 320.206215] binder: 23026:23029 ioctl c0306201 20000000 returned -14 [ 320.206286] IPVS: Unknown mcast interface: bcsh0 2018/04/05 15:32:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001b80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001bc0)={'ipddp0\x00', r2}) lstat(&(0x7f00000017c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000018c0)={{{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x0, 0x4e22, 0x3c, 0xa, 0x80, 0x20, 0x0, r3, r4}, {0x5, 0x1, 0x10000, 0x4, 0x8, 0x9, 0x5, 0x3}, {0x2, 0x7, 0x4, 0xffffffff}, 0x1000, 0x6e6bb6, 0x2, 0x0, 0x0, 0x3}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d4, 0x32}, 0x0, @in6=@loopback={0x0, 0x1}, 0x34ff, 0x3, 0xa5215d60f4f60c0f, 0x3ff, 0x0, 0x1, 0x9}}, 0xe8) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd85, 0x6, 0x0, 0x0, 0x3}) r5 = syz_open_pts(r0, 0x1) r6 = dup3(r5, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) recvmsg(r5, &(0x7f0000001780)={&(0x7f0000000400)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000100)=""/22, 0x16}, {&(0x7f00000014c0)=""/247, 0xf7}, {&(0x7f00000001c0)}, {&(0x7f00000015c0)=""/244, 0xf4}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/126, 0x7e}], 0x6, 0x0, 0x0, 0x4}, 0x100) sync_file_range(r7, 0x9, 0x4, 0x4) preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(r7) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_setparam(r8, &(0x7f0000000180)=0x8) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r9 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000380)={r10, 0x5}, &(0x7f00000003c0)=0x8) ioctl$sock_netdev_private(r6, 0x89fd, &(0x7f00000001c0)) writev(r6, &(0x7f0000001b40)=[{&(0x7f00000001c0)="5b1e0d274e94f0589db208", 0xb}, {&(0x7f0000000200)="ae469ea361ab841e68edf2151161c02451ff11bd2f160d145bac2901dd4c9a8b894f2233a2d52b06805e459adfa21adb16ebbd475ac39c390758e1da32da9b8dad58d0809250e3005d156c213046da380f33f7daab266ac4c2e9c8d3e9421b17f715729112b94429b215219a4992dfb9687d4b35", 0x74}, {&(0x7f0000001ac0)="2e8ce55ccf0aa13f3a4b1cb749e96770f2dfcf8748bd68e54ac39548cc2bc1734226f4b05e0a2b27a02942b227d5390b54c8b75d40b4569d84f05eb50450756e3b1e1870c8196f1df54e2d3c70a2574f8a2d39", 0x53}], 0x3) mknodat(r9, &(0x7f000003f000)='./control\x00', 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r9, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000500)=@req3={0x45, 0x8001, 0x800, 0x0, 0x0, 0x0, 0x8}, 0x1c) 2018/04/05 15:32:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0xca1e, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="00a8c0eb676d93ad000cfe08ac2a7fd3c924d96da1f685a4fdff80e61c7a80707749d9e2ac60e815c15d1ef51cbc3d2250a54ff708f5c9bb45fa96cc"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = gettid() kcmp(r4, r5, 0x0, r0, r2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x100}, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000200)={0x7fffffff, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0086438, &(0x7f0000000240)={0x5, r6}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x9, 0xd230, 0xffffffff}, 0x10) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/05 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x80805, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x80000001}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x11}, 0x1c) 2018/04/05 15:32:17 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000280)={{r4, r5/1000+10000}, {r6, r7/1000+30000}}, 0x0) r8 = dup2(r3, r0) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000001c0)={0x7fffffff, 0x7}) sendfile(r8, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:17 executing program 1: r0 = socket(0x1e, 0x8, 0x7f00000000000000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) bind(0xffffffffffffffff, &(0x7f0000d01ff0)=ANY=[], 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r0) [ 320.214289] binder: 23026:23044 ioctl c08c5334 20000040 returned -22 [ 320.224195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 320.233192] IPVS: Unknown mcast interface: bcsh0 2018/04/05 15:32:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="0a07f5b005e381000100200000000000e6e6000000000000000000edffffff0000", 0x21) socket$netlink(0x10, 0x3, 0x16) 2018/04/05 15:32:17 executing program 3: times(&(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x20000000000, 0x0, @loopback={0x0, 0x1}, 0x80000000}, 0x89afd465c676460) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0xffffffffffffff76, &(0x7f0000000000), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000290000003e0000001e000000"], 0x10}}], 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000002c0)={{0x6, 0x9}, {0x1, 0x200}, 0xfffffffffffffff8, 0x4, 0x9}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000140)=0xc6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0x1, &(0x7f0000000100)=0x2) 2018/04/05 15:32:18 executing program 4: r0 = socket$inet6(0xa, 0x80005, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0xd73}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1, 0x20b, 0x6, 0x3, 0xfffffffffffff001, 0xffff, 0x5, r1}, 0x20) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f0000bc0fe2)=""/30, &(0x7f0000d23000)=0x1e) 2018/04/05 15:32:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) write(r0, &(0x7f0000000000), 0x0) r1 = socket(0x2, 0x80e, 0x9) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r3 = dup(r0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x306, 0x70bd25, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xae94}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x541e423ddb18e08e) 2018/04/05 15:32:18 executing program 6: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000003c0)=0x14, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000080)=@raw=[@generic={0x4, 0x6, 0x0, 0x7}, @alu={0x0, 0x7ff, 0xf, 0x0, 0xe, 0x80, 0xffffffffffffffff}, @jmp={0x5, 0x88, 0xf, 0x4, 0x3, 0x80, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xf1, &(0x7f0000000100)=""/241, 0x41000, 0x1, [], r2}, 0x48) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r3, r3) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r1, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) getrusage(0xffffffffffffffff, &(0x7f00000003c0)) r2 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000000240)='K', 0x1, r0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000500)="cd", 0x1, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="b33ab760d897c094255cf9fbf6a72319a95779ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd34b1f50ae08c5387ed8fd2498b600579f3af3f864e1c324f6928f0000000000000000", 0xc0, r1) r5 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="2f6465612f7675746f66730719", 0x0) setrlimit(0x8, &(0x7f0000000280)={0x1f, 0x10001}) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r4, r5}, &(0x7f0000000280), 0x0, &(0x7f000010c000)={&(0x7f0000000340)={'crc32\x00'}, &(0x7f0000000080)}) 2018/04/05 15:32:18 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0xfffffffffffffcd1) socketpair(0xa, 0x2, 0x4b80000000000000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f0000000040)={0x8, 0x1}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="eb", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) 2018/04/05 15:32:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) close(r0) 2018/04/05 15:32:18 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:18 executing program 2: mmap(&(0x7f0000000000/0xfe4000)=nil, 0xfe4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x2, 0x6, 0x4, 0x0, 0x4, 0x3, 0x7, 0x187, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r2, 0x3000000000000000}, 0x8) ioctl(r1, 0x4000000002283, &(0x7f0000139000)='4') readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1) write$evdev(r1, &(0x7f0000b5df88)=[{}, {}, {}, {{0x77359400}}], 0x60) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/167, &(0x7f00000000c0)=0xa7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x0, 0xffff}, 0x8) 2018/04/05 15:32:18 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x101}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/05 15:32:18 executing program 7: mkdir(&(0x7f0000000080)='./control/file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./control/file0\x00', 0x40000000082) mount(&(0x7f0000000440)='./control/file0\x00', &(0x7f0000000500)='./control/file0\x00', &(0x7f0000000480)="6265667362b4bdf86a6944ac10465c053f0785e4b87e1ad000edc1dc176856829c23a9b34952ff1f8f885b474aad0b835288cda924232fca82d49900dca7f98a3a58", 0x1027402, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="84000000001d33a33a000000000000fffffff1000c00000000000000000000005b05000000a04810d4647cd5291cb4e2bf501db1bb949869c29c4d914d9f26425e66f74d03000bc1700612dbc30600833a43947abf61e5309f7f1969136edf946b2187c350cd847a7f6a91d73294c0356675a9e8aa5944f2a432a15b3fe56aa166091f"], 0x83}, 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0xe}, r3}, 0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) mount(&(0x7f0000000140)='./control/file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='udf\x00', 0x0, &(0x7f0000000200)="025aa62cc9af851a853406a9a61ce7b6427fd8531fc2ddeab43fdf5ed742466e3686ad0056f3132ed8e49ba7ae64a3382e92d5893cfa4863bf32c523dbfe8ddc7c144d36722de016093be9f6db9507229465f169e2b9c8aed2dd9d535d2a72a4e1a430b04725669c78179dde2c5d831dd1dfe5e73243524be1c5b44092c54491b8c31f231302185a3141fb0d4f0e43effbe6cb600f4ad1f32b0093ee41851d54c899b3c1494441c126545a6dc56123c93e87bd2523553b5d1d7c7ff5b0a2184ae1dff1cd539bd3bd0d2755de74e1e4ab78427667a686483a8e53b80fd98c0655efd72bb3") setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000070fe4)={0xa}, 0x1c) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') 2018/04/05 15:32:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r1 = signalfd4(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) sendfile(r0, r0, &(0x7f0000000040)=0xfffffd, 0xfff8000000000001) 2018/04/05 15:32:18 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x5, 0x7, 0x81, &(0x7f0000ffa000/0x4000)=nil, 0x8}) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:18 executing program 1: unshare(0x20000) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') set_mempolicy(0x8003, &(0x7f00000000c0)=0x81, 0x93c) setns(r0, 0x8000000000) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x6c, 0x0, 0x5}, 0x8) io_setup(0x47, &(0x7f0000000440)=0x0) seccomp(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f0000000800)=[{0x0, 0xfffffffffffffffb, 0x100000000, 0x4000000000000000}]}) ioperm(0x7, 0x5, 0x2) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000100)="3946c93f4026ce2b4b55d164be5a264980e76f0ec565a7c5e245850e623f830dd3b671ff8cb768114b1d12235fa808aa80efb9b56d66a33a4ea4de288f1706748e53a8bee27db64ba067af00e968cf1abf87853a47e2c709423ab9c658f291fbd8a245527208bf4546dbe3816e03f4e1270d4859b32e0e1f92", 0x79, 0x6, 0x0, 0x0, r0}]) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000008c0), &(0x7f0000000900)=0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/43, &(0x7f0000000240)=0x2b) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000280)={@mcast2, 0x0}, &(0x7f00000002c0)=0xffffffffffffff0c) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{0x3, 0x7, 0x0, 0x101}, 0x3d, 0x2, 0x0, 0x0, "b624bc513e4b327c3a53bc8fea0b72e3e82d33ee3d3357f2190eba067213971d3263a0b096aeb1b2c52c3e6176a7929a3bbcf0f0e39fdbefbdc67ab90a32297e"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="0180000001040320"], &(0x7f00000007c0)=0x2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000840)={r5, 0x5}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in6=@local}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30020100, &(0x7f00002c9000), &(0x7f0000d70ffc), &(0x7f00001cc000), &(0x7f0000154000)) 2018/04/05 15:32:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000bfff8)='keyring\x00', &(0x7f0000ba9ffb)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x4210002) keyctl$revoke(0x3, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) 2018/04/05 15:32:19 executing program 4: r0 = memfd_create(&(0x7f0000000000)='vmnet0posix_acl_access\x00', 0x10003) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0xa6, 0x7ff, 0x2, 0x2}) r1 = open(&(0x7f0000991000)='./file0\x00', 0x10442, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r1, 0x40305828, &(0x7f0000000080)={0x2}) 2018/04/05 15:32:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[{0x3, 0x6}, {}, {0x0, 0x2}, {0x2, 0x20}, {0x0, 0xfffffffffffffe02}, {0xf, 0xfffffffffffffb85}, {0x3, 0x800}, {0x4}], 0x8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) bind$inet(r0, &(0x7f0000142ff0)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f0000243fca), 0x0, 0x200080c2, &(0x7f0000000600)={0x2, 0x4e22}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b26000)=0x1ffa, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440), &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000009c0)=ANY=[], &(0x7f00000005c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delrng={0x10, 0x14}, 0x10}, 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/18, &(0x7f0000000680)=0x12) getpeername$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, @loopback}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000001c0)=0x8) geteuid() syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40086436, &(0x7f0000000900)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000980), &(0x7f0000000540)=0x4) ioprio_get$uid(0x0, 0x0) prctl$setfpexc(0xc, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=""/148, &(0x7f00000008c0)=0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0), 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="eb", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) 2018/04/05 15:32:19 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x204040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={r1, 0x2, r0}) r2 = socket$inet6(0xa, 0x802, 0x20000000000) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'bond0\x00', @ifru_mtu}) exit_group(0x280000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400010b000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="290000acd833b837164288587de1d738a5162653f6ea45f01b6151c212ab6938f6c497f5e254e0162a9f689b4b6d0591ed080171173b3e60a8374e556ff1c83364d7b058a707aa5edf3b49f1582ec86e95cb85bfc7db7f473e2e6013dd53410f0000000000003eabda91e8807d8e29e5e4422c1862a0eec1654377bdb39774e5980585e8ec6eb59b91128e55e1ef922031dee25720e2f29c5c8603d16d203a62bb13921a28491238c56c815998bdcb590000000000"], 0x20}, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 2018/04/05 15:32:19 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000000)={"626f6e643000000600", @ifru_names='gre0\x00'}) ioperm(0x0, 0x4c, 0xe9) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x100000001, 0x4}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x81, 0xffffffff}, 0x8) 2018/04/05 15:32:19 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000080)) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:19 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x20) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f0000000280)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000140)="b5043d1472dea8a76a3290a049c72b1871e0698a77f48ec900f15f50d2312c335387037ace6e0637aa6cda988d54a66c6f809030a5efd61ba84c813ca27df19820a018f6516b846bf83d04f135d4e10b14bdc0c4ead773a2f15ff364ba6e91bbb8cbdb6913aaae1e5318451ae4bf003544acdeb6caca8ebe1877818b59c0505c40437a160e49474ff13fb341f0ad9c5946bc7a", 0x93, 0x40800, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000240)={0xff}, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00') setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000100)={0x3, 0xfffffffffffffe01}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[{0x4000000f, 0x10000000002}, {0x8, 0x1f}, {0xb, 0x7ffd}], 0x0) 2018/04/05 15:32:19 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) close(r0) 2018/04/05 15:32:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="92d201944d585a5326e3a72a9e66180579f1f146f0957f45aba216", 0x1b, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)="100a6afa60d86fc05a261ac274ef61e79ce5a174bdba51662ed79146e30cd0386c23143d0e66db3f9a2366f7a9cd6081f54e2f58461f8bd8ea68da07defe76209c42239bf11f12df563441bfe0d55c0b913aa951afe86af472fa313a40a19ebf6de103224af276d2c38d83a9a58d56da123d972e6e1dc752ccd933b29ceddb3aa73184659c31a1132c1c03619e22dfa2af8bccb2d8fee83e822c86e038522b8a3dc0d7aef9a71565e9a962a82123fbcd652f74f5d3b5e1fd34a59d4e9f94cb3bb561eb951b8a4c34a9510fd5708a3f325d327949e9ad", 0xd6, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)='procem1vboxnet1vmnet0em0\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000500)={r1, r2, r3}, &(0x7f0000000540)=""/140, 0x8c, &(0x7f0000000700)={&(0x7f0000000600)={'sha224-generic\x00'}, &(0x7f0000000640)="2bb626c787bc745cda1e6f33e77c6ec9d92232906f08f74e8393deb53a94cff8cde55f14467016fde27c32debf44d626030cec4e5f7112bec17a7ed51b51e191a33060cc5dd078a78f335e3a5b508da86b6f49c85019d1b6eb3387c3d336ff6f62e9d5af61cadcc457f113825b8d043c1a1f46f9958627dcc850c1e6d5e8985a2c4a0c367fb4f3647dfa", 0x8a}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @cond}) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="a7b4d6ae1bf91374e47d02bdaf821478a3d08f3273a709a98ee992d302d97ea83927a423ba7e5d4b13115a15b186bdb55c6c775b350fdc1d2a09445a029998b0dd2d4724bdb82495f43679677f2449de987a33276a1f37ca3cf5cffdbaa64d7480584603a229c37f7fbb9f6ffc9a7d53b35e8015956bbd5f5cdc828791b3cba8aca84ff4c00063f7ac5ca378c17818aa086480d148c43e183d4ec8fae1e722f6825951ffee374623b15dd954bdf582569feea20a108d61903eefdc1698506ad8c3406de3ec2564815c62c7c257d079687e49", 0xd2, 0xfffffffffffffffc) keyctl$get_security(0x11, r4, &(0x7f00000001c0)=""/13, 0xd) 2018/04/05 15:32:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='net/fib_triestat\x00') ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0x3, 0x61, 0x6, 0x6, 0x2, 0x4, 0x8001, 0x0, 0xfffffffffffffffe, 0x1f}) readv(r2, &(0x7f0000bf5000)=[{&(0x7f0000175fb8)=""/72, 0x48}], 0x1) 2018/04/05 15:32:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f2508fb13583605d0008a230e7a657f9", 0x12) 2018/04/05 15:32:19 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x82c0}, {r0, 0x8}, {r0}, {r0, 0x8700}, {r0, 0x210}], 0x5, 0x1) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x400000b5, 0x0, 0x6}, {0x8b5, 0x0, 0x6}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x7}, {0xbbf, 0x0, 0x100}]}) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/138, &(0x7f00000001c0)=0x8a) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x4) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) [ 322.118766] bond0: Invalid MTU 0 requested, hw min 68 2018/04/05 15:32:20 executing program 7: r0 = socket$inet(0x2, 0x7, 0x401) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x1}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40, 0x0) close(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r4, &(0x7f0000000140)="29af661d322d078f41564ce905f45d947c28598509d76ff591e94f2b0d3dc1b0a6bbf6d4f307267f2003f7ccf652c13297aa279a681954a30e9b401158130e607729904a53928f673ae5665695c62281045122cf688d79b7cac1629b51515da97374ade7a708064915b448232251f8fc6bc3ce69c8cd758a1781f668d29d3c1b506827e12680f8aa74bc2021fba192c54e3634d6b21422a2c0b468f5b997cbe4e1093a825731", 0xa6, 0x4000000, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2) r6 = socket(0x7, 0xa, 0x0) sendto$ax25(r6, &(0x7f00000000c0), 0x0, 0x20000000, &(0x7f0000000100)={0x3, {"3fcd78c43d7ad5"}, 0x6}, 0x10) 2018/04/05 15:32:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000040)={r1, r2+10000000}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) setsockopt$inet6_dccp_int(r3, 0x21, 0x7, &(0x7f00000000c0)=0x10000, 0x4) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000080)={0x1, 0xa333, 0x8, 0x4, 0x100000001}) dup2(r3, r0) flock(r0, 0x2) 2018/04/05 15:32:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0x7) setsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000040)="bdad5bcd0a00e2070fcee1b95a2158e87c5413a4d9ddfd25cddf1a68a8", 0x1d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x874e, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, {0xa, 0x4e21, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x17, [0xe039, 0x1, 0x9, 0xcd, 0x8, 0x4a5, 0x8, 0x9]}, 0x5c) r1 = syz_open_dev$sndctrl(&(0x7f0000b1dfed)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000ce8b40)={{0x6, 0x0, 0x0, 0x0, "27e4d7449d3cd931ca5cf1c2584b2899dd8ae333c2cfcf9025ac443252bd24703fda89db0677f5cd1b773925"}, 0x0, [], {0x77359400}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/116) 2018/04/05 15:32:20 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r1, r2) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:20 executing program 4: r0 = memfd_create(&(0x7f0000309fff)='I', 0x0) pwrite64(r0, &(0x7f000004c000)="da1ed4c6dded1b78fc32304d94d0495eb57495f26bd5e020039135e969d62de70774035020e85d75ca98aa392bd9112c8139f55a2a9aee87aa62b0c9a368a1866279463154ba1d39b42c188aa87a1db69f69fbfd67731bfaf62b639f911c4fe5aa163574d70d3127cad9d17ea2b888dfd9b4338d606825114f0aec9522b8eb85", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f000009c000)='./file0\x00') creat(&(0x7f0000656000)='.\x00', 0x4) open$dir(&(0x7f0000c91ff8)='./file0\x00', 0x0, 0x0) 2018/04/05 15:32:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = dup3(r0, r1, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') io_setup(0x3, &(0x7f0000000040)=0x0) fchmod(r0, 0x2a) io_submit(r3, 0x2, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000001c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000000)="8685bdc37b3e06f1", 0x8, 0x0, 0x0, 0x0, r2}]) 2018/04/05 15:32:20 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) close(r0) 2018/04/05 15:32:21 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe19, 0x40000) madvise(&(0x7f000000d000/0x1000)=nil, 0x1000, 0xe) 2018/04/05 15:32:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x68) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x400, 0x4, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) lookup_dcookie(0x6, &(0x7f0000000240)=""/147, 0x93) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000080)=""/187, 0xbb) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000340)) write(r0, &(0x7f0000000040)="1300000010ecffdde200f4088000050002230a", 0x13) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e20, 0xffffffff, @remote={0xfe, 0x80, [], 0xbb}, 0x100}, {0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1, [0x6, 0x4, 0x8, 0x9, 0x7fff, 0x3, 0x8, 0x101]}, 0x5c) 2018/04/05 15:32:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd128-generic)\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KDENABIO(r1, 0x4b36) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="64eb5d2482355153e1d9bf0a3423bb0b4330cea3670c67f976bc1ee7d6009e2fbc42cd1df37341a1443e731e7794fb559418e709891261a796c854a9fb09b7ba01", 0x41) getsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 2018/04/05 15:32:21 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r1}) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = dup2(r3, r3) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r4, r2, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100fedb8ad6a61e55c8b7501eeb6d00", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) getsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000180)=""/158, &(0x7f0000000240)=0x9e) keyctl$session_to_parent(0x12) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x40, 0x0) 2018/04/05 15:32:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:21 executing program 7: socket$vsock_stream(0x28, 0x1, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000280)='/dev/loop#\x00', 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000004c0)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x7ffd, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000500)) r1 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000940)="1d65ccbcfaa5aa269627d5a9c31ec8c81e37330612a2fa3e724b28af6ccb08144cbd6befcb051d2291b0fa5c8b1970de27b38679cf0c86fcbd7ebcd190e4d2db99fa1e15bf27967d8fb3c2023c1346dce5821b78b3b7c7618fe5cf81d3238ab19884be6cd9bf6a8437b870333b4a8e7253f7e9e046a8463de94bdba66855d7d77f70cd5c66264f32d2279763", 0x8c, 0xfffffffffffffffb) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c200000331867c74618b080502ffff9a07000000225e7dfab0fdb489f3faa505f006fe1e52902e04e88e09ab67253f42e4d4e9b42215837e5fb3e812b9e7109759f4d6a96ab9370450bf71ba0beed280f1f7f64c814ed1fbf80bd7d9c5da72b2a76499610b68f13c5e6afaab0206cd02ce64ae57eb873cced2a914279b1501cb5f93ee94fe9837f4416b60043f2f5b1041c462591abcebb6adf22c293166cb04f773c799f4974d6cd53ba34020175ff3e30c369f127202cbc9c5c350738630a852b6d3252ab1"], &(0x7f0000000200)={0x1, 0x1, [0xd14, 0x32a, 0x90c, 0xa3b]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x58) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f289b21e0", 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="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"], &(0x7f0000000040)=0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="d407000000040000006430d4011f966afc5b45061e44fbffdeab05e884e9a9cad336c5ba7c1349d685809b10ab42008139231688885dd3ca7bc02111d1534813f06435a202b6232590a52296dd1a7a9d779a8d355123429daf6726aab1eaaddf399d8ceae06a499c1e1630185793f5f20f89eb1c138baf026883dedbd72cfc69b0c1f1292601693fac2dab27239d0605d2660e1c0a56d40c0ac75463f87c81a98ae8e7d907801cb7b2f2b1ac7913ca02581162196df4fedad7e65c0daa36cc3bb656"], &(0x7f0000000240)=0x2) getpeername(r5, &(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000180), 0x4) setsockopt$inet6_buf(r4, 0x29, 0xca, &(0x7f00000001c0)="3ec2e6f6b72e2912ed3f2fde4eb5ab232014e9", 0x13) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffed}, {0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e23, 0x7fffffff, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, {0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff}, 0x9, [0x4, 0x9, 0x4, 0x7fff, 0xffffffffffffff0f, 0x3, 0x8000]}, 0x5c) keyctl$chown(0x4, r1, 0x0, r2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x10001}, &(0x7f0000000600)=0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x41) syz_open_dev$sndmidi(&(0x7f0000000640)='/dev/snd/midiC#D#\x00', 0x8, 0x201) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000840)={0x3, 0x0, 0x4}) recvmmsg(0xffffffffffffffff, &(0x7f00007f9000)=[{{&(0x7f000051e000)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000df9000)}}, {{&(0x7f0000a18ffa)=@hci, 0x80, &(0x7f0000000400)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/202, 0xca}, {&(0x7f0000000cc0)=""/194, 0xc2}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f0000000dc0)=""/143, 0x8f}], 0x6, &(0x7f0000259f14)=""/236, 0xec}}], 0x2, 0x101, &(0x7f0000fd0000)={0x77359400}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x3, 0x0, 0xfec, 0x80000001, 0xffffffff, 0x60d, 0x4, 0x101, 0x80000000}) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) 2018/04/05 15:32:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x5}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/04/05 15:32:21 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) 2018/04/05 15:32:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:21 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$netrom(r0, &(0x7f0000000200)=@full, &(0x7f0000000280)=0x48, 0x80800) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40086410, &(0x7f00000001c0)={0xf0, &(0x7f00000000c0)="19be2c816bf495898733810f5e672e6d73d600fbfa2f7e0507b0d8ced972e9963479cbea2aae090cec80ec3ffb278ad19e588f2a6e2b2f70aed47689734f5a3afb7cc7ca36441ccf26da7cfe404757e9fefdf68de491a448f0d93301d9d524f3f6ee1d207beb977a72c57bb8d19d6342a5d0764e673dc0efea79088aeca93aea1b72b15effcdbbcce4577fd3b286725c851a3c94839921b5f33441b36025ea5c30b053913bea833a53cbe67b9b339f69ec3f5782423ecee3bdc13ce51d9dec61d2de40fdcdd9a4af4b29db3e8c476fca34e6b0211aec9a7670a421c62d2fd3683cc9dbfac6e7680d3ff8d78bdc6b7d4a"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:21 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x84100, 0xee) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) r3 = gettid() r4 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) lstat(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() r11 = geteuid() r12 = getegid() r13 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001fc0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000020c0)=0xe8) getresgid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000021c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0, 0x0}, &(0x7f00000022c0)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002300)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000002440)=0xe8) getresgid(&(0x7f0000002480), &(0x7f00000024c0)=0x0, &(0x7f0000002500)) r22 = gettid() lstat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getgid() r25 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002600), &(0x7f0000002640)=0xe, 0x80000) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = fanotify_init(0x50, 0x2) socketpair$inet6(0xa, 0x80f, 0x3, &(0x7f00000026c0)={0xffffffffffffffff}) r29 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r30 = openat$dir(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x111200, 0x80) r31 = socket$inet_dccp(0x2, 0x6, 0x0) r32 = accept4$llc(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002780)=0x10, 0x80000) sendmsg$netlink(r0, &(0x7f00000028c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc, &(0x7f0000001c80)=[{&(0x7f00000001c0)={0x1c4, 0x35, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@generic="179693485e7f780557846b267d156cb271c4172cec3d2072dcb925592cbc61f1ff78ba6ae345e5917a01709348884d19322d4ca88eaaa7173b9278221e040e41ee9e3e023ef3d06743f8f340a6571cc989e2645dd35bcccc9b474dd1b34538237a6eb89f2ac087195c819eb45033e14c918430137b16851d8d74b55cb3c2f5e6674b8f9a81793acdcfd18a64de7e109556f51599fe57b2b10b74bf8b59667e61b8086a0f15da2cd8df2a0aca4a09be3991368570172cf55859a5a885a4d095cd", @nested={0x6c, 0x32, [@typed={0x4, 0x6c}, @generic="43822277bce05297ac0e0766d1a8cfbbcd2d04bd476f9d7524a30380fcd588adceed63cb645068af8accf2e461029b5b2b2b59b24a96974e10fea383ccb5173e646c6ae58ffcd35a59363aa1be7e6ca9a11614bded07", @typed={0x8, 0x16, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @typed={0x4}]}, @typed={0x8, 0x44, @uid=r1}, @generic="0305ff00cab1c1ea0fa38bd12db0456392a88c781db896660964e57cfeb4bad57de8bd79d82defae83b6a94156c27e866f30699e384bac3e8d7babd1928b57da4d8840a60f4b1f02d29b5d6a83416b8dd4ef8108214121975c04bf71d4295362273ffb656fcdeec20b2600d728245eb2c169b656f4b8534a45596baa736525"]}, 0x1c4}, {&(0x7f0000000500)={0x11a0, 0x23, 0x100, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1190, 0x35, [@typed={0x14, 0x7, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="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", @typed={0xc, 0x56, @u64=0x7}, @typed={0x8, 0xa, @uid=r2}, @generic, @generic="202b23b4957c309dd0967fea7288689583e1363744030b7fe9c0327a1c824b05befbf54d67b50d0ab6e61a34d447fcc46df6190262b268d8d39be92d1dc0be7b9579fa7324fe5a41cd015a1e97247853916fc7856dca81a9cabb12998527395107666444ac9c90d02a6ff60175daafa2665d1e52c7841c90cc9161ad26c95f93541b3deb8d6eb136b0ef33f94518195e70121bdde77b5b2830c2ab25c9c65553d8e1bc4d1bd1ba12f9fb6acc15860e6ee044bfedcee770f770380c", @generic="db7f8071a61a9b5039dee022daab7105a45887de5c24d398b1f653ccbcf7c2ac3a27211dd63dea60e8e31ed440a1da21a9021169a34232b4a7ea20a3c0c8d8d182e8a640ecd8c72c3850d6c6e464e0979d53f7213d37e32b04f7d4e86f2dd72da40337ba64835c0394b307039b46ecc59650d00c90ece659fb044a00cc8c50b6590e41e74e1aab30fcfc72b0211f8cde7e06a1c518ec8aa12420", @typed={0xc, 0x2f, @u64}]}]}, 0x11a0}, {&(0x7f00000016c0)={0x25c, 0x25, 0x200, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x42, @u32=0x3}, @nested={0x134, 0x68, [@typed={0x8, 0x1b, @str=',\x00'}, @typed={0xc, 0x4e, @u64}, @typed={0xc, 0x79, @u64=0x8001}, @generic="42b11222d1d6100ce99b6cd107719c803b14dee74ffe0b3b19e43e3a9c9fc2b35226f794d1b8917eea50d8878c6b54c26e88a20cdc769a00a9cd9a2350adda3116aa34f7cde8575ac1a4a08f6550a03c6b1cfeaaa3894aa33ee6b9cfa553b80ab661bf797b1efc0d6fc67c36898cb6deb92ee9240e218df50da12ff526edc871e075f3295a15a00eb216a997802e199a9f32c579ae68ba3ff5b6b74e82e95828db146916906621a4e9", @typed={0xc, 0xf, @u64=0x3384}, @generic="3b5a9a536490285ae6d4b57f3d6da8a3fc48804b8f3359cceb215ad296b3322f511f89cbdc3de4c0c6372e6469558b3f34a63aa403f2200f4079a2530be3bd13da72c82a02c41a1fdbb1ac693957608f3e04aa59fe5eeefd"]}, @nested={0x110, 0x3, [@generic="f04e2fbcceca5a346bdb8f630363f5158c33e345afa373a477e5bba49c1279c2a3b24790dbc4e79271e2d9adfaeb895ab188504f931e22353ae47f4b006af4f8c44a79237d3c3b41f70ba3b091518ddf2cd338fd63dc06e02b44071e11ab35b8ef22d12c57c2c97715b061f8cdf76fb1172161ccf0864df1e578fb0d7718cb6c92c16ffd5dda6db213de25e425af8d5c609678ec7294fad5aced51d70951eb858e5aa3903df4940a4905f5f2a8f1b4a9954bde430516d1b2f2ee8ec730dbc787ed554c45578c467a0af9c3931fe477bbffbb8947d6eb3723c10bc55d29ec3751520c25040834c8e49e2e4ad1b2696962395a483c6d831b7e28ae36", @generic="fe65b9572511fc40083a1ece93ca"]}]}, 0x25c}, {&(0x7f0000001940)={0x154, 0x35, 0x900, 0x70bd25, 0x25dfdbfc, "", [@nested={0x108, 0x7f, [@typed={0x8, 0x9, @u32}, @generic="2b0cd1a7b587bd9deb300ca331c822897754253546404f5404df0623670ab6f55bf13003cb938a656da340912faea3f1c37344b0d4b2a6a828855b4c182fb547e10f958507605d17553789906b1386a77eac99ccadca38deba44be200ff40b6ea16a9b2924da63bf2fa4b3777fb1b2cae9a2ac79fb1bdf7063941e89753859a62584c89c860ef6497566b9b2cffbae11cc3b31c148457c780d53cf68d219adf79020d9", @generic="b15eaa8563f763c09d0e33cd0d0386852b4dbccdf262b42f11230359ebd0523230d15a8e981324103357129eed51fee4ea005c4894fcec6ed397edd4493850bfb59efb6373f2660639fa858fca299e25c5", @typed={0x8, 0xc, @pid=r3}]}, @generic="18a21a922afac15a62adeae8e5a00dcda74798db7e3b5f00937cbde330b5994aa344699112e96816ad2999d3d7eca868a60328105688220a73"]}, 0x154}, {&(0x7f0000001ac0)={0x188, 0x1e, 0x200, 0x70bd26, 0x25dfdbff, "", [@nested={0xdc, 0x4f, [@generic="f61d73d1124fccaea347358598781fc785a4d7747c42ff", @generic="c9124f217bb6805565bea6970afcc3a9fd27c1b6072829af2cd51bc4df1956a66df50ad46de9475544aea8cd3c0e2b2931a39ce439e00787a1b532197dd302f62f77e0f65219d0a5ba46e3d5f5477998820df85847e4e5597b9d79d11c98b0e51dc862bb5b041e43c2590abbafdf0e967aab", @generic="7099f66e3b01df23be15fa508e2ee9890cef15fe25404b461a3cda33471707d3ea500bbe9a6be708b7786b855e129fb00726d8c989fd716af4bbc3fea103c53be8d9a9c0493211055d213f668d55"]}, @typed={0x18, 0x53, @binary="875032558e32fb0e9eb8cfc04f79e34ec3a89c8e"}, @generic="1cbcb3cbd672c7170fabfd7ccd9321a5c40a7f00d3692c037fd07a36d29bf33cb9b1f63447c938f086b027bf18713bd47dc7ceb00aad9fb52d90042407157cf93f98933d36d454c85dacc721de4bb04f938df93c61b34f13686532058cf1d34197b160b83a6b9fd4c5f6ce1ed5a0db7515db8e09fe616b679e92ce888ecc835f12fa"]}, 0x188}], 0x5, &(0x7f00000027c0)=[@cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}, @cred={0x18, 0x1, 0x2, r10, r11, r12}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @rights={0x1c, 0x1, 0x1, [r25, r26, r27, r28]}, @rights={0x14, 0x1, 0x1, [r29, r30]}, @rights={0x14, 0x1, 0x1, [r31, r32]}], 0xec, 0x20044000}, 0x91) 2018/04/05 15:32:21 executing program 1: socketpair$unix(0x1, 0x2001000000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x2, 0x0) sendmsg$netrom(r2, &(0x7f0000000940)={&(0x7f0000000480)=@full={{0x3, {"8c07a56cc34d11"}, 0x100000000}, [{"527507748a487b"}, {"c0dde1cec32b69"}, {"eb7beaf664b983"}, {"3207a9c413476b"}, {"99f4691835825e"}, {"d59d1029aeb7e8"}, {"20ca05ccb0bc2a"}, {"ca3ad38052b84c"}]}, 0x48, &(0x7f0000000900)=[{&(0x7f0000000500)="f7641923ac2430db7c893a29059a637ec1568280bf9f6fb2b439cfc198c3894deafcc7e3d058cd562911336babc4a019d2ef5c2a9afc3d0561c842ae8f78d4305ecc2b67d36a12489bde2feac9751df9a1ebdb2192570836dd06362f5e34961b7a9d2bde7e8a454e8f409de48668fb751f72e70d2756fabdf881a14992d82a147d5ec2c03f", 0x85}, {&(0x7f00000005c0)="9a6e033bb1ee57447f99a40835941a1e88dc040a00a91aa907cc32410a579ba1360e15391b79fa9747a5dc1d14e6a2682d387ef65049551734c57c34fb91817e2e68e7004478c06f6336ffd8f4e70ee67fdb09015491a88e82876d739dd2aba2819dab1c8ef887e2d2fea9a0b5f32c17f397efe56403096eee07726f75b50c67a273d029cd4fede012c7df56edf83da041fcc15504603fdef91d12eefcdf0504be7e7fd0bd55725a1736f2f1674553976d22bfc1723045172bcbac642a35d821ded5635bed9656e098769b1f1a", 0xcd}, {&(0x7f00000006c0)="ffaa0e4c9f080e48d37e0cd3f277d2b730882fa413ce0185570c27e911a98d658070048c2387636da97cc851bd61b74d02886bd6184d386323b0cece344b57", 0xfffffffffffffd93}, {&(0x7f0000000700)="ed8482a6adc2fba9cfe9a7779ec34d22096d29d29b6664c8e96232093c1c48f0868366f336a8a551b916e04d88dc1cd7159982a16c908823142ca9f6a2d7186d26dc159a3d69b15f7ee544b72ac1ae0415a14458efb38c3e410e9f619144243ce29b2b6fe0a0b414e9776a6deec6ea5c32547c5778107994c1640ee7f9be31f9d7a6", 0x82}, {&(0x7f00000007c0)="0a9c131949e3e0774168e33405fb80ae42f1924788bd315a5a2b1f499eb2e7980540b389a5070c8f0290f30a805efe2be13d3512c8e7f6cfc3a50012f45f271ba7a298dcd7fc8fbfcc3fdc1a7c334876a4a372c694d48f54b2174269e5c2fe66ab928ad34209efcde2015bbca98237f7cf4c04877c6b247b575ef5536351ae84a7c60c94827cf93508b56a9e1eccb36d6f22e0f44bbac4c809f5cc83000fa35831d0fc8043868e1187c6629680c7", 0xae}, {&(0x7f0000000880)="799ea41a702bfdee74ded7d9cf973bcc3344ba9ca073ef6a3667a4b2db2918c78994ad31f822ee7a4c45df37e11aab44010a5c940b7350a9b92ce65b4bf8d547e8da37fbb9c6957f54902e", 0x4b}], 0x6, 0x0, 0x0, 0x4000000}, 0x44) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000980)=""/207, &(0x7f0000000a80)=0xcf) write(r1, &(0x7f0000000080), 0x383) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x2ec, 0xffffffff, 0x0, 0xbc, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x19}, @broadcast=0xffffffff, 0xffffff00, 0xffffff00, 'rose0\x00', 'nr0\x00', {0xff}, {}, 0x73, 0x1, 0x9}, 0x0, 0x98, 0xbc}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xbc, 0xe0, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xf, 0xccc, 0xc0}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xffffff00, 'gretap0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x1, 0x22}, 0x0, 0x98, 0xbc}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x348) 2018/04/05 15:32:21 executing program 7: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000080)) 2018/04/05 15:32:21 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) connect$netrom(r1, &(0x7f0000000180)=@full={{0x3, {"eab37204e16c32"}, 0x200}, [{"aa13139889e0ec"}, {"bb23f0b579a1ca"}, {"6f58f8cb638d4e"}, {"70d1053872c3a3"}, {"93ce5a0c15cd2c"}, {"163263c5b79ad7"}, {"1b409d09f7105c"}, {"c3150149841607"}]}, 0x48) r2 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmmsg$unix(r2, &(0x7f0000002700)=[{&(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0)}], 0x1, 0x0) 2018/04/05 15:32:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:21 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f00000000c0)='cgroup.controllers\x00') r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) read(r2, &(0x7f0000000380)=""/178, 0xb2) socket$inet(0x2, 0x6, 0x2) 2018/04/05 15:32:21 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socket$bt_hidp(0x1f, 0x3, 0x6) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:21 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000083) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f0000000040), 0x8, &(0x7f0000000080)) getsockopt(r0, 0x4, 0x40008000000007d, &(0x7f0000000100)=""/8, &(0x7f0000fc8ffc)=0x1cf) 2018/04/05 15:32:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x304, 0x70bd2b, 0x25dfdbff, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x36}, @FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4008001) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/04/05 15:32:22 executing program 5: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:22 executing program 2: r0 = gettid() r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000044000)) setitimer(0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x9, 0xffffffffffffffff, 0x80000000, {0x77359400}, 0x9, 0x6}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f00000004c0)) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x0, 0x20020) tkill(r0, 0x15) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40106435, &(0x7f00000002c0)={0x6a3b, r4, 0x2, 0x557}) 2018/04/05 15:32:22 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={r4, 0x2}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r0, &(0x7f0000000080)=0x2, 0x80000000) 2018/04/05 15:32:22 executing program 3: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x1}) 2018/04/05 15:32:22 executing program 7: r0 = epoll_create(0x9) lseek(r0, 0x0, 0x1) socketpair(0x0, 0x2, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, r3) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) fchmod(r1, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="1d116477fbaa287ba53d668e519c424b", 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x3, r4, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000200)={0x4, 0x0, 0x10001, 0x81}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40086439, &(0x7f0000000240)={0x80, r6}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e23, 0x100, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x80000001}, {0xa, 0x4e20, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x71dd, [0x4, 0x4, 0x101, 0x0, 0x6, 0xb1b, 0xd4f, 0x8]}, 0x5c) ioctl$TIOCCONS(r5, 0x541d) 2018/04/05 15:32:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/237) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00008e5ff6)='/dev/cuse\x00', 0x0, 0x0) epoll_create1(0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/05 15:32:22 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100000000, 0x111200) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc00c6419, &(0x7f0000000440)={0x5, &(0x7f00000000c0)=""/168, &(0x7f00000003c0)=[{0x5, 0x95, 0x3, &(0x7f0000000180)=""/149}, {0x7, 0x52, 0x65, &(0x7f0000000240)=""/82}, {0x5bc, 0x3f, 0x7407, &(0x7f00000002c0)=""/63}, {0x7f, 0x36, 0xeade, &(0x7f0000000300)=""/54}, {0xfffffffffffffe00, 0x6c, 0x6, &(0x7f0000000340)=""/108}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) socketpair$inet6(0xa, 0x5, 0x9, &(0x7f00000005c0)) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000580)={{&(0x7f00000004c0)=""/99, 0x63}, &(0x7f0000000540), 0x11}, 0x20) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:22 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x10000000000002, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) dup3(r2, r2, 0x80000) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 2018/04/05 15:32:22 executing program 7: r0 = socket(0x10, 0x3, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1ff, 0x5, [0x8001, 0xff, 0x1, 0x6, 0x134]}, &(0x7f0000000040)=0x12) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x6}, &(0x7f00000000c0)=0x8) write(r0, &(0x7f000059a000)="260000005e0009000000eaf83a000000fdffffff0c000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/05 15:32:22 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x1000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f000077a000), 0xfeee, 0x0, &(0x7f0000d5a000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/04/05 15:32:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:23 executing program 1: r0 = socket$inet(0x2, 0x2, 0xfffffffd) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$getregs(0xc, r1, 0x5, &(0x7f0000000080)=""/204) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'nr0\x00', 0x9}) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000000340), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0xffffffffffffffcc) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/05 15:32:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000fe048b0ae3faa7bc7988ae48f1e2"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000180)=""/100) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x200000) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000080)) 2018/04/05 15:32:23 executing program 4: r0 = socket$packet(0x11, 0x9, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4f00070000000000000085980400000000a9572426a476c2", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000012, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x8000, 0x4) 2018/04/05 15:32:23 executing program 5: unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(0xffffffffffffffff, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:23 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='oom_score_adj\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r2 = fanotify_init(0x2, 0x40000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r2, 0xa) r3 = syz_open_procfs(0x0, &(0x7f000067fff8)='syscall\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, 0x10003, 0xfffffffffffffc00}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000140)={0x0, r4, 0x10001, 0x6}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendfile(r1, r3, &(0x7f0000000040)=0x4, 0x800000200000006) 2018/04/05 15:32:23 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000140)={0x7d3, 0x3ff, 0x6, 0x8, 0x3f, 0x1ff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x9, 0x400000000000062}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000811000), &(0x7f0000fbbf1a)=""/230}, 0xe) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000001c0)=0xf727, 0x8) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, r1, 0x0) tee(r0, r1, 0x7, 0x5) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x4ec2) syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0xfffffffffffffffe, 0x1000000000003fd}], 0x1c) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x80000000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/18) 2018/04/05 15:32:23 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1000, 0x20040) connect$ax25(r0, &(0x7f0000000080)={0x3, {"2730e53c5bc499"}, 0x7}, 0x10) r1 = socket(0x1e, 0x80804, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'irlan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)={0x7, 0x0, 0x10001, {0x0, 0x7530}, {0x77359400}, {0x3, 0x800, 0xc2, 0xffffffffffffffff}, 0x1, @can={{0x3, 0x4, 0x4ad00000, 0x9}, 0x2, 0x0, 0x0, 0x0, "cc4c39456a996f5e"}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) connect$ax25(r1, &(0x7f000056eff0)={0x1e, {"03491f0800"}, 0x9}, 0x10) 2018/04/05 15:32:23 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:23 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f00009cefa8)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = socket$nl_route(0x10, 0x3, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000100)="40a9977d36d546d4f8ec7bea8d3d89e9ac8e1e1e6b6bb23d432dd2680ed4400d9ef452707cf7fe1c7252f32e66550d2a3afe1f3b7fd0755777373ba0547fbd4460e250fd05292adc44e98765efff5d9226a34ad60d1c244bafdca3c3671da412fd8d42ab9363dade4976a5a5656c7262e48ba68b2089a024dc5fa417e2a4b24cbf3fa953c083c18ac549fcf1835ba904e2a13259c8e646f5cfc2a79c793ce1d105ca541dc73c", 0xa6}, {&(0x7f00000001c0)="5c19feaf5ce0d1ab91d5475c1b8be2964d99448f520f700aa5a18dc2477bafc884afc1c87f0f02357663a33fbde347a2564757281c794814f11295875aea404ae9611638185073d30913fcdb5565553fac3eb8d6d13eb66d2fc334eaa667c29d0fc0cc13ab121762a086e539e591fc4c3c7e2f5c16d700ad04266fd329571ba8d4bf916d04cad212a6ad6f21a62ae78a88380a1e058daa4fdd4e07ffe919", 0x9e}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x125002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a45322, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000ce3fe0)={{0x77359400}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f0000ae7000), 0x0, &(0x7f0000845ff0), &(0x7f000079dff8), 0x8) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r6 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(r6, r5, &(0x7f0000a2effc), 0x8001) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000000c0)={0x0, 0x4582, 0xffffffffffff0004, 0x5, 0x1}) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x80000) 2018/04/05 15:32:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000dd0000)={0x1, 0x2000000005, 0x1ffc}, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c26fa791aa16c4e705621927de9424e8000000000000bd623148f5e01060ee7e8a3390735f53dd2b0b17b10bcf04e58a0000000000000000"], &(0x7f0000867fe8)) 2018/04/05 15:32:23 executing program 7: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00002dbff0), 0x115c) 2018/04/05 15:32:23 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f00000000c0), 0x200000080000000) 2018/04/05 15:32:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1000000000004e23, 0x0, @loopback={0x0, 0x1}, 0x8000}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2}}}, &(0x7f00000001c0)=0x98) 2018/04/05 15:32:23 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3, 0x42000) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) 2018/04/05 15:32:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000008ffc), &(0x7f0000729ffc)=0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, 0x100, 0x400, 0xf5, 0x3f, 0xfffffffffffff245}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x4}, 0x8) 2018/04/05 15:32:24 executing program 7: syz_emit_ethernet(0x76, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, [{[{0x9100, 0xfffffffffffff089, 0xffffffffffff8001, 0x1}], {0x8100, 0xfffffffffffffcda, 0xff, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0xffffff88, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, [], "f601929f106531aa"}}}}}}}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x9, 0x0, 0xffff}) 2018/04/05 15:32:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@ra={0x5, 0x2, 0x71cb8f4e}, @enc_lim={0x4, 0x1, 0x400}, @jumbo={0xc2, 0x4, 0x85a1}, @pad1={0x0, 0x1}, @calipso={0x7, 0x40, {0xfffffffffffffff7, 0xe, 0x7ff, 0x2, [0x1f, 0xfff, 0x0, 0x7, 0x3ff, 0x2, 0x44a0b9bf]}}]}, 0x60) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="393a340d231c04e5c2b076b1172946c7ba3d38"], 0x13) write$cgroup_int(r1, &(0x7f00000000c0)={[0x34]}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) 2018/04/05 15:32:24 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}}, &(0x7f0000000100)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x1) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/5) 2018/04/05 15:32:24 executing program 6: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2f70, 0x101040) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r0, &(0x7f0000000040), 0x80000003) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x288200, 0x0) 2018/04/05 15:32:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x2240, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0x3, 0x1, 0x11d, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000200)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="7885ba43466b848112f77052ed1fe87fd4d69c0f3d205733cf79b176610f4c6bf418fa44200da5fe083b210efd27e84ca5d127568fcef295ea61", 0x3a) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101080, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000240)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000180)={0x1, 0x7, 0x7}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="ae453ee13500221d1c0b4eb3857314b2e3deef23444be254ad595102173374671fc7b9cf332672ccf6873f39c20ac0ec1a11af1a1dadfbe5905592ee21a25d78be14ab13d9da75acb194ce86aa47d1c97dbd3f66b64d0ffa089ac220227998ac59471b5ee821750bbed944796a6c5ce8fc34e9b501ae37a3379d2e9359e6dd17") 2018/04/05 15:32:24 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005e4ff0)='/dev/sequencer2\x00', 0x8002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bpq0\x00', 0x3}, 0x18) write$sndseq(r0, &(0x7f000000a000)=[{0x7ffd, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 2018/04/05 15:32:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:24 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404480, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/177, 0xb1, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:24 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000580)={0x40}, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x202, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f0000000480)=0x1e) r3 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x9, 0x3fffc) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000040)={"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"}) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000680)={'ip6tnl0\x00', @ifru_flags=0x4000}) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000500)=0xd4c, &(0x7f0000000540)=0x4) 2018/04/05 15:32:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) poll(&(0x7f00006affd0)=[{r0}], 0x1, 0xfffffffffffffeff) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x10000) ioctl$TCFLSH(r2, 0x540b, 0x2) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f00000000c0), 0x4) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 2018/04/05 15:32:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@ra={0x5, 0x2, 0x71cb8f4e}, @enc_lim={0x4, 0x1, 0x400}, @jumbo={0xc2, 0x4, 0x85a1}, @pad1={0x0, 0x1}, @calipso={0x7, 0x40, {0xfffffffffffffff7, 0xe, 0x7ff, 0x2, [0x1f, 0xfff, 0x0, 0x7, 0x3ff, 0x2, 0x44a0b9bf]}}]}, 0x60) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="393a340d231c04e5c2b076b1172946c7ba3d38"], 0x13) write$cgroup_int(r1, &(0x7f00000000c0)={[0x34]}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) 2018/04/05 15:32:24 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {0xc}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x975}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404480, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/177, 0xb1, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:25 executing program 1: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xaec000)=nil, 0xaec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ae5000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000140)=ANY=[@ANYBLOB="010000458f25000500"]) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4082, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x80000001}, &(0x7f0000000100)=0x8) 2018/04/05 15:32:25 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x80000000, 0x9, 0x10000}, 0x0, 0x0, r1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@generic={0x2, 0xffffffffffffee59, 0x400}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x3f, 0x100, &(0x7f0000000080)}) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000180)={r4, 0x20}) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000001c0)={0xb0, 0xffffffff, 0x9}) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x9, {0x9, 0x5695000, 0x4, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1f}, 0x5}, 0xe) 2018/04/05 15:32:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404480, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/177, 0xb1, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000021ff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80002, 0x1) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x17f4a328, 0x7, 0x80, &(0x7f0000ffb000/0x1000)=nil, 0xa61a}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000013000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0x4}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r2, r5, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2018/04/05 15:32:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x27, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x7ff, 0x0) 2018/04/05 15:32:25 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)) listen(r1, 0x0) dup2(r0, r1) 2018/04/05 15:32:25 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x0, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404480, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/177, 0xb1, 0x20, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:25 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2400, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000007000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 2018/04/05 15:32:25 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:25 executing program 7: r0 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='encrypted\x00', 0xffffffffffffffff) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="803c00", r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) 2018/04/05 15:32:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x404480, 0x0) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:25 executing program 1: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000740)=ANY=[@ANYBLOB="00000000e8ffffff001f899b66df070072e4a298d61c2759751de0920f639d4fc3c87d983557c195da413e6713a95722f4ec0c3633624e3084e7064c2d7f02f51c8cf23f790e3ecf72c0a387684b9324a1e21f00fc2914d5a4232ac251083f31c62ff46f896ea6fc0372f9091359e863cb588be24012ec6cf0dc55182461b5c7b42eb7b8c8c03152758c038d4de997d81a836a3eccac61fb1afca7da1ab591b080d7ebd4a20021522d6916159921702305116f05f51b5bdc447fd1951102ae3ea34cf50c8e932182c60479ad91eb1f8100c804033f62bec6d43ba08d7471aa2857c7b2b7712a91536b9ee92869d1acfba53d01859228b47c78c7ddad7adc3f32c3f7f8ebffd8781b0d601daec4f0426d98ba9f8cf0858cb41b1c953c8b38d985360b9cf98e061221f12a1ba639e48b646daa20d780752d30b73683950495a221c59d96c94d0001aa18ce47757ec4099c"], 0x1}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000003c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r5}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000600)) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) r6 = syz_open_dev$sndctrl(&(0x7f0000000540)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000240)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) socket(0xa, 0x80806, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00'}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) 2018/04/05 15:32:25 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001640)={0x0, 0x7b}, &(0x7f0000001680)=0x8) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000001400)={0x7b, 0x0, [0x6, 0x2, 0x4, 0x100]}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000016c0)=r2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc004240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000000)={&(0x7f0000a7eff4)={0x10}, 0x248, &(0x7f0000f93000)={&(0x7f000024e000)={0x14, 0x1, 0x2, 0xf09}, 0x14}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x1f, 0x180, 0x7}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001300)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000c73000)={0x20000000000002e3, &(0x7f0000000140)}, 0xffffffb6) connect$inet(r1, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendmmsg$nfc_llcp(r1, &(0x7f0000001600)=[{&(0x7f0000000080)={0x27, 0x0, 0x2, 0x3, 0xffffffffffffff81, 0xf0c9, "f78406dd6f775f597762d60d4412f31caf7e1f614831fcd2f7b76378ffbde051d1665c5c914428737d0aca5765fe3608aef7cb90f7bab618589109b1113067", 0x30}, 0x58, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x800}], 0x1, 0x800) readv(r1, &(0x7f0000aae000)=[{&(0x7f0000e89000)=""/109, 0x6d}, {&(0x7f0000b8bf4f)=""/177, 0xb1}], 0x2) 2018/04/05 15:32:25 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 328.069281] device bridge0 entered promiscuous mode [ 328.102195] device bridge0 left promiscuous mode [ 328.158157] device bridge0 entered promiscuous mode [ 328.163864] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 2018/04/05 15:32:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:26 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(0xffffffffffffffff, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:26 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) open(&(0x7f0000000040)='./file0\x00', 0x240000, 0x85) dup3(r0, r2, 0x7fffe) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000100)={0x0, 0x10001, 0x3f, &(0x7f00000000c0)}) 2018/04/05 15:32:26 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200)={0x0, r1}) 2018/04/05 15:32:26 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x2) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x100) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) 2018/04/05 15:32:26 executing program 1: r0 = socket(0x11, 0x802, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="00007f00000000080000000000000000"]}) 2018/04/05 15:32:26 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x700) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x5, 0x3, 0x2, 0x2}) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x2802, 0x140) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000200)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x2, 0x106002, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="e3ee5f151d06d9134a176d547720c6681c30c085bde590d85b554b69cbc6c66e7e61419291075a14b8853437f8977f5130218a", 0x33}, {&(0x7f0000000380)="af6380ca63c7c027368a2c55514f93da70709d9771c87b139865acb48051c7fba5c0583498c27485b0a0e773fad317e6bcc1679e5fac3b421aab15b87dc60e976975768a23424c6f6ffa9311c4dd819e8ac8c00178b42a82058948480e75fa40dbc5b56eb35752ccd5de3daf3f5883b8ef816f64fa07bba94c8fbcb8642cf4c078118ba1ccd2279fc90729acaecf2e6d5c821be221900feef588d36e5ac26946e7fc36b029ad49058a95c7b6cc2e81c76695bfdd697206", 0xb7}], 0x2, 0x2) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000480)="6f2afc0dcc781ad91e4fa3d4f235623706b0423bc0787e498c95ea0ddff7361705a3e7b3aa7dd35d8cca1680c60981fafa42a0d370ab027cd1", 0x39}, {&(0x7f00000004c0)="72a621249731b56a5af1b67390e8f533da92126db9ab51ac2ad9f2de2ba25250724958c1a71af90a96b1b2847388d0fcd08f8bb99a1c6ca1763ac0ccf2aa04d84ff59b41dafef9e5be4233234e74dd6cba42ed7071838d4ff42d8d5133891ba98529b8674675694261f30aac63a134c77095570747fca0b611b1b5f7ec4c47cb3a93684fdc788abba91d0b3309f1597b35507bfcefc7ca4814df30351e9412699d69ad6bd424c1f1c715a86d68bbcb136dfbf6b1027e97432b7c726bb125863d25", 0xc1}, {&(0x7f00000005c0)="d19f9c9d40b9d70cc15a", 0xa}, {&(0x7f0000000600)="ce8ced55031c42b8464412bbbfa0114ea2895a8be482139d7bc64db9b0b49327733b379e87f4ebf6fe3066d62588bf73d83c1a9bcab510d9b1f10a1eb57dc228bf5c8ea11ec711ef077e34a2b3bbe84d5cfb828fb3c8a589901bb7a6b81f5e8640b088675f9bba641177eb29d24bdca401bd554d70497378c1ece00587926128661ae287a39befb77f19f63bcba3a0a5fef61af9", 0x94}], 0x4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000780)={0x3, 0x8, 0x10000, 0x6, r2}, &(0x7f00000007c0)=0x10) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000800)=""/104) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000880)={'broute\x00'}, &(0x7f0000000900)=0x50) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000940)=0x4, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000980)={'nat\x00'}, &(0x7f0000000a00)=0x50) accept4$nfc_llcp(r0, &(0x7f0000000a40), &(0x7f0000000ac0)=0x58, 0x800) r4 = perf_event_open$cgroup(&(0x7f0000000b40)={0x7, 0x70, 0x200, 0x1ff, 0x100000001, 0xea8, 0x0, 0x3, 0x41902, 0x9, 0x81000000000, 0x4, 0x3f, 0x100000001, 0x0, 0x5b, 0x1, 0x1, 0xfff, 0x800, 0xbd0, 0x8, 0x7f, 0x8, 0x7, 0x4, 0x200, 0x44b, 0x8, 0x40, 0x5dcd, 0x9, 0x8, 0xff, 0xe6, 0x0, 0x208f, 0xd7, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000b00), 0xa}, 0x40, 0xff, 0x800, 0x7, 0x5b, 0x7972, 0x5}, r0, 0x8, r0, 0xb) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000bc0)={r3, 0x459c276, 0x5b3, 0x72, 0x100000000, 0x1, 0x2, 0x8, {r3, @in6={{0xa, 0x4e24, 0xb753, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x401, 0x4574, 0x4, 0x4, 0x7}}, &(0x7f0000000c80)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000cc0)={r2, 0x5c5f}, &(0x7f0000000d00)=0x8) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000d40)={0xffffffff, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/qat_adf_ctl\x00', 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r1, 0x28, &(0x7f0000000e40)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000ec0)={'gre0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000f00)={@remote={0xfe, 0x80, [], 0xbb}, r6}, 0x14) get_mempolicy(&(0x7f0000000f40), &(0x7f0000000f80), 0x400, &(0x7f0000ffe000/0x2000)=nil, 0x1) r7 = syz_open_dev$admmidi(&(0x7f0000000fc0)='/dev/admmidi#\x00', 0x5, 0x40000) mknodat(r7, &(0x7f0000001000)='./file0\x00', 0x80, 0x7) r8 = inotify_add_watch(r5, &(0x7f0000001040)='./file0\x00', 0x200) inotify_rm_watch(r5, r8) 2018/04/05 15:32:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockname$ax25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="acd5060000005ac7a4"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000000140)=@raw=[@alu={0x7, 0xffffffff, 0xd, 0x4, 0x7, 0xfffffff8}, @alu={0x7, 0x5, 0xb, 0x4, 0x1, 0xffffffff, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x14d4, 0x0, 0x0, 0x0, 0x401}, @ldst={0x3, 0x0, 0x3, 0x4, 0x7, 0xffffffc0, 0x4}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6f, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/04/05 15:32:26 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) flistxattr(r0, &(0x7f0000000080)=""/101, 0x65) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r2, r2) pwritev(r0, &(0x7f0000001700)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000200)="1989d81e85d7525bc92ede0721b57b8bd6f0983c77d89caec339afa2e61581424b7924e0ac3c4a8a1db9a1e781167bcfc4a9864444a3024ccc40f6663068ff539da2eb95dd5896b57ce7316ed8adaf12d8bcbd0ea939e63cacc9ad37e7c01c2b0dd7bd5809679efcd2c935d53462eea833cfa3b8a816979518fe3ca1f9e74c60db4ee2aa8b9d22509c6798449a504a691114d4e5ce1f5d7d66c43b182a90e0dcf946e966dadb0a3e3bc8a9eddb6a3c0d59e651c6308c9c3b4b4c4fcbb8ea58a569f8c6d7bc8785ec0fd255fe8f3a6ba77d6bae0d81555d4c26ce6e07980ddfa4b84f8629d320f8fd893aabcc462af05f", 0xf0}, {&(0x7f0000000300)="e89ae9cdf85ef894b7b17ec3f38ca9b4a540c8a4ceed1304c2552d1aa11353cf3111d0449c8b93e80d780a98ca71fb6c3358c27aaf22d7a96bb4a225ca8c6531d7281a09137211ecc732f93fb7f2d5b9f5bcf2e12d417a196ff62a63b3262602cd428e4e23a56192ab1a88d87da535c3ad265206ecc35eac77d28d931f05a8358607d493a50b09b45ca11d885b19d8a3ad93715080b14cbfac8093275d3756e16f0bbde44e7fb2446e2230c2b889f475516a78f907dcae990e42e7f4841649e3767dee4aef0fc2c689354c0d2182277ea2cff2ba27ec", 0xd6}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3df06c298ed218ebde2ed2681afe78d2434de304b2e107705def0d9c6e3802d4b627aae329f229374469670de79db58866ad8a6e5b1928a77e611ec3a7a8bfe7b289c14342d484cd2f1624c278c263525828bf3356428a228f9e97ad464791ae7ed4ca9c4c0fed04348cd9475c95ba35686a08013b5328714ca2407aa55b7c0a555180a2b7fe63de566d6c9a8e10982c090cff7b0504cdcaf3988e2199f1a43816c74fbea8d7e175a84f40dd5532dee95e5d202a785fc636ce592a128808cd3bca579a4d1d308bebbec2d01983", 0xcd}, {&(0x7f0000000400)="d08d66be64f7c227f350fa6cde6efa9af145137976b139204fafbe55241fe0f66df47c5b2f492e17496e5dd28e07916739f5d426c30aa8846afa74465791a8112919d63eb8a19facd7a539f0591be6c9865b1cb1cfee2a66e4c18d4f3a1285cb108369f6033345bfef90845820ea486a5d73a6097dd53a286fd915552baf", 0x7e}, {&(0x7f00000015c0)="b1db92671e535d391d111f4999d081a2aff97755a18db21dccccc50f6219fd0d58454526da8d32306e3e13a45816d4626eb5cc8901abd8def740d79b177f0607b9f68e47d2679e3efa42ddd9c139826eb8e7f5a7db79fab496f91fd472ad6bf42c0e4fef1bfab377546734", 0x6b}, {&(0x7f0000001640)="83a8aa3e9e2c6be4c84a65874667f39eadab28f38247bd23c8f5f87d87b274e64be4f23e26cd", 0x26}, {&(0x7f0000001680)="7e9d84ad499872", 0x7}, {&(0x7f00000016c0)="780b78527fc363ce77bdbb3d904f48304f3e9392eeb904d394f7f00bc6215e74de3ac8941515fcd03ccb54f14e444aa5f0cdf85892a82c71d1b7995f23e7", 0x3e}], 0xa, 0x0) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r1, &(0x7f0000001780)=0x2, 0x80000000) 2018/04/05 15:32:26 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff), 0x0, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:26 executing program 7: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000100)="51af093bc47b6d3e7477cfb045eee874e1ea2f2ac0468254b93d8f515003e8657b598197bdaae6d3a749cf9d09b82af9d0a04f0f74a427f12da617d639570237d64b37b66031cbd38aed8958dc1f531d910488d2ef91e7c4dac1d038ebc91a4eb370e226f06dc0bdd04575bbf0030b8aceea7f4cf303ce9435cbe7", 0x7b) r2 = socket(0x2, 0x3, 0x40000000000000ff) sendto$inet(r2, &(0x7f0000637000)="ac0100000000000000010001000000000c002388d7000007668098fc23471cf423070b00000000000000034eb6a1bacf", 0x30, 0x0, &(0x7f00008d7000)={0x2}, 0x10) [ 328.902158] QAT: Invalid ioctl 2018/04/05 15:32:26 executing program 3: syz_emit_ethernet(0x6210e594e129d23, &(0x7f0000000000)={@random="ff3997ffcd00", @empty, [], {@x25={0x805, {0x1, 0xfffffffffffff4ea, 0x0, "32dccd5c747ca9093ab2a35e77d7aab956b4e3c43e6df6726bb4fa9e69cf9ea9042d7f4dc752b11363373cc2f090ac56add080c69f32a2a02ff7052ce190595e186fd84d9b5c4f2a95d6ca9fa1a389bc64be218fd962671c3036df81a0f741b493b2129d18e256ba2597cb746e02cc59f2aba671b2e99cc6ad9254a32e633437d602cf5f3a5a1763bff0edd7466bb7a77fd03b9491dce34c2d6365f43daad451edad422291d6438c416b5925388b3d68a37ad942368ac49354b66f9597e86cf1d78ba1b67f3b60e1e20c6652d97ad9aa42cf2ba7771ac50a15"}}}}, 0x0) 2018/04/05 15:32:26 executing program 1: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='-$.', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x802}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x428, 0x94400) r2 = getpgrp(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000000c0)={r1, r1, 0x1c0000}) getpeername$ax25(r1, &(0x7f0000000100), &(0x7f0000000180)=0x10) r4 = dup2(r0, r0) mq_timedreceive(r4, &(0x7f00006b0f7d)=""/131, 0x83, 0x0, &(0x7f0000ccf000)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) r5 = add_key$keyring(&(0x7f0000001200)='keyring\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="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", 0x1000, r5) [ 329.044857] QAT: Invalid ioctl 2018/04/05 15:32:27 executing program 4: r0 = socket(0xa, 0x3, 0x2) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0068d5151d65a904d7000000000000000000000002"]) ioctl(r0, 0x8916, &(0x7f0000000000)) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000180)=""/48) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000200)) ioctl(r0, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x1}}}, &(0x7f0000000140)=0x98) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) bind(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x80) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1) 2018/04/05 15:32:27 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="a9", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x200000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi={0xffffffffffff6a46, 0x1000, 0x4b9}}, {0x7, 0x6, 0x0, 0x0, @msi={0xf, 0x401, 0x200}}, {0x3, 0x2, 0x0, 0x0, @adapter={0x3, 0x0, 0xfffffffffffffff8, 0xffff, 0x10000}}, {0x9d, 0x3, 0x0, 0x0, @sint={0x0, 0x8f9}}]}) listen(r0, 0x7) r2 = accept4(r0, 0x0, &(0x7f00000000c0)=0x3df, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000200)) sendmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="d7", 0x1}], 0x1, &(0x7f00000006c0), 0x0, 0x80}}, {{&(0x7f0000000800)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)}], 0x1, &(0x7f0000000b00)=[{0xc}], 0xc}}], 0x2, 0x0) 2018/04/05 15:32:27 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) eventfd(0x3cfb) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040), &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x80, 0x2, 0x1f}, &(0x7f0000000100)=0x10) r1 = syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) close(r0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000240)={0x4, r1}) 2018/04/05 15:32:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) syz_open_pts(r0, 0x0) 2018/04/05 15:32:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:27 executing program 5 (fault-call:2 fault-nth:0): r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:27 executing program 2: clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:27 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f00000000c0)="9cf70324b13e45d6b8164ccdd5a80213a5cbe3b940a846d2859ce23e41d6a671b34e58c3079a43765e4e820d59c1c37473c7cad694974339b86b85dfb4c4980c481d77bf1823b2b8894e9f7b89f495a9b18e9f5c7c382e4fbed9914b6f966a358e5550ff388d6a838ec50d6e5af59f933b9b55506ff24c27cdfda56a30e33563cd9d460e1b990182d18da2196d91899fa391a7d5c3823197857a0f39b1b969c2ea4ab3ea0a93c6e659c925529f0b9278b628ffa22b6ec191b5fd23bb69ceef289c95f011c5622dc071d9261eaedbc1eed37e1b00f381e9ae11ba8639ae51ef58943fd6c24abd99f4e1f13a799c905dd113e413", 0xf3, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:27 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0xa0406) r4 = dup2(r3, r3) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x800, 0x4) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x8001, 0x5, 0x6, 0xc324, 0x1, 0x2, 0x3, 0xfffffffffffffff9, 0x6, 0x4}) sendfile(r4, r2, &(0x7f00000000c0)=0x4, 0x80000000) 2018/04/05 15:32:27 executing program 3: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x8, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) socketpair(0x1b, 0x7, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 2018/04/05 15:32:27 executing program 2: clone(0x0, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:27 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_open(&(0x7f0000000180)='\x00', 0x2, 0x30, &(0x7f00000001c0)={0x9f50, 0x9, 0x2, 0x1, 0x101, 0x98ea508, 0x5, 0x81}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) mq_timedsend(r0, &(0x7f0000000040)="6638bb81e73ee3fc0ad1f17532e2e01c33d4bfea4c16b46ee848d9b9fe2ad09372cee1ea3b4ad6513a486b4d7aa3d8051835d7f725beff32ffc3a5ad372e5c9bc0e546d7e68286b8811d7113d03bd8cfb633a718409ae5f024e368f6f72f7c694353527074ec5c8640c34c689bbeb80c5fb1a2d1831b14624a79dcb0d0425dde6c13d1dc23ed22751c5701d5bf40e2e509c7f0b2839ffc5a0f240c6708315fd43dfd5ba5987c9117358cb83287b059b48183599b76b4caee74ea4cad5e5a3a396a10b782832e491d", 0xc8, 0x0, &(0x7f0000000140)) 2018/04/05 15:32:27 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8003, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x5, 0x2, 'client0\x00', 0xffffffff80000006, "17c267c83823c05b", "a0ef99c40894cc0156e7153302c775f6047d7f675e852251a3c221641bff2d0a", 0x6, 0x1ff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r1, 0x6, 0x3}, 0x14) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000033, &(0x7f0000000040), 0x4) 2018/04/05 15:32:28 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xd9da, 0x20000) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x303, 0x400, 0x1, 0x5, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setitimer(0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @broadcast}, &(0x7f0000000180)=0xc) 2018/04/05 15:32:28 executing program 2: clone(0x0, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:28 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x10000, 0x1, 0x4, 0x9, 0x7}, 0x14) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r3, r4, 0x1}) r5 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000140)=0xff, 0x4) sendfile(r5, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000808fc8)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000e69fb8)=ANY=[@ANYBLOB="280000001800210cffff0000020000000000000000000000000000000000", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) r1 = dup2(r0, r0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="8fa095fd1c9b890bd72fab21724035f83502ca52bec1137eb94b1d1fcd43c27c04d01600844eba7d7385ef5d294846b3dd047cea4debf2d697bd12f4ed2166f101468762fdbbfd6bb8a8272d5f9a89e9c13ebf2bd0948f55303f2143ffe7e875c94097084d6561076828819007999b16b409c19f5b4c3eefc24bf5ab9053d97fc6b2de27c56af91841acd31003f8ddb17f9eebfa1135321b4322c04d8a06c616afe730bcd58ff244be925a6ea61daf6c30205c07a1c7af7d9218cc25349b2cf76b64a6c21fd75bc7a8b7620b92f52946155a5ff3ce97c4144635579b054b89c5f1", 0xe1) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x80000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000100)={@host=0x2}) 2018/04/05 15:32:28 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000100)=""/252, &(0x7f0000000040)=0xfc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) setresuid(r2, r3, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x2000000000000000, 0x2e, 0x0, 0x0}) r5 = syz_open_pts(0xffffffffffffff9c, 0x2400) ioctl$TCSBRKP(r5, 0x5425, 0x25) 2018/04/05 15:32:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x80000001) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000200)=""/254) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000500)=""/4096) r4 = dup2(r2, r2) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000040)={@remote, @rand_addr}, &(0x7f0000000080)=0x8) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) 2018/04/05 15:32:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:28 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8a38, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffdf0c}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="cd390b081bf2ffffffff7d18930d374ec2d17effff86dd6002210f00303a000000000000f0fffffffffeff00000000ff8f00000000000000000000000000010200e40300000000609433df000000000000000000000000cf14eb4e0000000000000000000000000000000000000000b3851579620bf15e22deddbb406af667f51bbb32241bc8564bfa327b4cc4b57e6111b50f5904676da1b0f294391a26563e4d33b513ed8453b0"], 0x0) 2018/04/05 15:32:28 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x200) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f00000000c0)={0x77359400}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)="7076342f76f546a0dad11cfe2f73b250203ee3dd99d42c5877855b342d9bb68c5d3bb7c70bf11f803868dad7f84e5c1dd95d5976b692511acc1192243d51962187463a85a827a4e46a32b43b8923eaf7beab8c79f9a3ba63b0cfb951da0c46641d49c02f68684a5a5695ee8b415ac9583abab4241ca286e184f818632141d6c7a85a78e6b4e2e14a1db6b4653b57a499b5147d7ad9f1235fc83b4048f55e8308e37f2cfab2f3", 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x3) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:28 executing program 2: clone(0x0, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)="53b096912ded81e3157915c7509665b3b1f4cd63d99a051e9d2c4946fec266c87179991136ed5b8f8bc95ef4f899e3c35ba2d3c54328d37669e07f94a903144ab7c70668b580ed3b1cd0efab56cff2b94afba3938ce100e387739af9ebaa829187558ba25e94316787a22c4bc4b18a2b88f12509030df555b8e6715640058a975be6ab13259dc21e22b00d910383d9bdbfbf6831daa0d03de50ba16d39feacd3066c2980804ba749d6c43b8e31bfaae2537892a72ab58ed9151a4d67c03822308b61249655799ed85c307b7c571a898f407299bce35afb255b") 2018/04/05 15:32:28 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt(r0, 0x10e, 0x87, &(0x7f0000000000), 0x0) ioprio_set$pid(0x1, 0x0, 0x7ffe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2080, 0x107) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x94, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x1f}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x8400000000000000, @local={0xfe, 0x80, [], 0xaa}, 0x8001}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e21, 0xf81, @empty, 0x80000001}]}, &(0x7f0000000200)=0xc) 2018/04/05 15:32:28 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='self-eth1#/.lo\\ppp0&{\nFppp0md5sum-$cpuset\x00', 0x2) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)="6777f20ebf712fbc381fb204559a9ea5f24d254ed7c95c96e17bc921112d3cd386558e359b4cdc522b2825d9af3c8ba9b3ac2b62e7281a1e763e74470ea107d83fcff28e85818ad8c47c", 0xfffffffffffffc9d) 2018/04/05 15:32:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000065eff6)='map_files\x00') ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000d80)={0x1, 0x0, [{0xc0000003, 0x2, 0x2, 0xfffffffffffffffa, 0x7c2, 0x8}]}) fremovexattr(r0, &(0x7f0000000200)=@random={'osx.', 'map_files\x00'}) getdents64(r0, &(0x7f0000000040), 0x20b) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000d40)={0xffff, 0x7, 0x9, 0x4}, 0x8) write$binfmt_elf32(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7f454c462e000700018000000000000003003f000500000083020000380000004102000003000000000020000100ff070200ff070000000005000070189f000000000000000800000800000000000000c2ffffff96de00000600000004000000030000001d000000050000000002000001000000250a00002c979cb1b8f3283662a2bd9c26f900e2c1145dbc63a1ee2756bb854d49b357f2eff6f2b54d432637d2de876eea8d56818458d43fbb59a8bedb11f32bdb49fb30e8c2cf31245e173da56f98db08a8cf75b9cf137afc3093396d9f1e3d41151374a84c18859610123ba4baf23813f90bcee52818ecf6c26e16974fc5fe9e9d0cb5e7d6aafb53e153a04a6621b363bd5fc4d7335249fcb138ad49d073636b0bfd64fd357520bdae8d9a479829442da930d8965e927d9d29fe407c07672b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020a8175723c19ecf9d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb34) recvfrom$ipx(r0, &(0x7f0000000000)=""/161, 0xa1, 0x0, &(0x7f00000000c0)={0x4, 0x7ff, 0x3, "d869802ee431", 0x6}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/137, &(0x7f00000001c0)=0x89) 2018/04/05 15:32:28 executing program 5: mq_open(&(0x7f0000000140)='-$\x00', 0x43, 0x20, &(0x7f0000000180)={0x7, 0x1, 0x3, 0x7f, 0x3, 0x4}) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24}, {0x2, 0x4e24, @broadcast=0xffffffff}, 0x34, 0x401, 0x5, 0x2, 0x1, &(0x7f00000002c0)='eql\x00', 0x4, 0x80, 0x9}) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x40500) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)={0x6, [0xff, 0x9, 0x67, 0x401, 0xf200000000000, 0x0]}, &(0x7f0000000240)=0x10) mq_timedreceive(r0, &(0x7f0000000040)=""/224, 0xb, 0x0, &(0x7f0000acf000)) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:28 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x400000101842, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/113) sendfile(r0, r0, &(0x7f0000000040), 0xfffffffffffffe00) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) sendfile64(r0, r0, &(0x7f0000000100), 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4a, 0x10000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300)={0x7ffffffc}, 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x3, 0x1000}, 0x2}, 0xffffffffffffff04) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000280)={0x0, 0xff80000, 0x8, &(0x7f00000001c0)}) 2018/04/05 15:32:28 executing program 2: clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:28 executing program 5: r0 = mq_open(&(0x7f0000000040)="4b98a9", 0x6e93ebbbcc0884f3, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, 0x0, 0x400000040}) r1 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x400000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0xfc60}}, 0xfa1, 0x1, 0x2, 0x3ff, 0x8}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x1, 0x30}, 0xc) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:29 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="0f988400000000000000158f61312b38f77df803ced1377b4a990fd4cdb10b0d7a9d37517456fc74c4a3888e9f97bd28ad0d71da2ac2a6ec8de65a12d7228009000000f6137369a045235e7ae6912c9da6a923ea9578b46057a51d65ab631595c606c2eb4b177a668081dc04caa1f150", 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0xffffffffffffffcb, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x9, 0xc, 0x3, 'queue0\x00', 0x7}) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x3f, 0x4) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0xa080) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000567000)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r0, 0x5382, &(0x7f0000ca7000)) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x5, 0x0, 0x7, "7ddde51fac44e0a69b0a6f71b5b1ef05c4c261f1193772ed0153339d8196bd92981bdbf43d3a978397de097ab9c061189bf1dd6eca2f5dab0229989ee38008", 0xe}, 0x58) 2018/04/05 15:32:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000001a80), 0x1) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) fchown(r1, r2, r3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) kcmp(r4, r4, 0x7, r1, r5) acct(&(0x7f0000000600)='./file0\x00') r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYBLOB="710000001f00"]) perf_event_open(&(0x7f00000019c0)={0x7, 0x70, 0xffffffff, 0x1, 0x3, 0x81, 0x0, 0x2, 0x400, 0x3, 0x2, 0x5, 0x9, 0xfffffffeffffffff, 0x7fffffff, 0x1, 0x8, 0x4, 0x7fff, 0xffffffff, 0xfe6, 0x0, 0x3450, 0x40, 0x8000, 0x4, 0x401, 0x6, 0xfffffffffffff000, 0x4, 0x5, 0x4, 0xffff, 0x7, 0x1, 0x800, 0x7, 0x198, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001980), 0x3}, 0x10, 0x4, 0x6, 0x0, 0xcd, 0x401, 0xfffffffffffffffd}, r4, 0x0, r6, 0x3) r7 = request_key(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)='[\x00', 0xfffffffffffffffc) r8 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000700)="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", 0xfc0, 0xffffffffffffffff) r9 = add_key(&(0x7f0000001700)='id_legacy\x00', &(0x7f0000001740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001780)="4dc30074756ddb2f3a36753227cddbb9e7ba45f4232482f0d3a2e3a2a6141f1a3c5faf0247047054bddc7aec1f4cd5b9e58d2e87ed8f4060f1abdc542967db7525cc16940f43352ac8e37baf8c87b05a06d64460435a4eeb730ec268dbd877f881c69fad0c36327a3f4fd7184f360ea7443ceb124212275b36eaae270fd422e771bbe61e9d6ac4d0f17062eceae69d1936bd483ded681f3172db5fde20a3cbd7dfd7d6bdaf337203efe22ac0235a657837c7ff90e35ae7820ba664a6550c74d4a23ed550123b5a8515a5655bc8e12b3d34164b868cd1c1e9d1a85a9dfe636ef6bb48925c94af6043746d", 0xea, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001880)={r7, r8, r9}, &(0x7f00000018c0)=""/4, 0x4, &(0x7f0000001940)={&(0x7f0000001900)={'poly1305-generic\x00'}}) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000300)={0xfed, 0x2, 0x0, 0x0}) lseek(r11, 0x0, 0x2) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001a40)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000240)) r12 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000680)=r4) getsockname$inet(r12, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000016c0)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r13 = dup2(r0, r1) getsockopt$netrom_NETROM_T4(r13, 0x103, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/04/05 15:32:29 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x10000}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x86}, 0x8) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x80, 0x4) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:29 executing program 2 (fault-call:0 fault-nth:0): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:29 executing program 4: ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) prctl$getname(0x10, &(0x7f0000000400)=""/61) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/04/05 15:32:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:29 executing program 1: mkdir(&(0x7f0000a09000)='./file0\x00', 0x160) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000100)={0x0, r0}, &(0x7f0000000180)={0x1400, 0x0, 0xc91, 0x2, 0x4, 0x8000}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}}, 0xe40, 0x0, 0x8, 0x43, 0x1}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x54, "e1b9e1a0afa00e8a29612681877895e45f74932a69af641b174bc5a450696a8972468fa0e8260bcb0b04a322208ef717bbd9b1f172a44a1d6b726ea5f73385048fc7e73e328e7db27644450648ebe3d62c02b44ae4cb0ad3d570ebdd67154a94afe4baf7f22c4754169905bc2ee185f6167d10d7ccccaca4e2871ef95845b18663eeb24eae3a7a4ea1fe1855e4b57d444b91e3b1dcc4dba526996b"}, &(0x7f00000003c0)=0xa3) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') 2018/04/05 15:32:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000880)=ANY=[@ANYBLOB="070000001800ffff000000000000189b6812e645798a0302", @ANYRES32=0x0], 0x20}, 0x1}, 0x0) pkey_alloc(0x0, 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x40040) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x1}) 2018/04/05 15:32:29 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000950000/0x3000)=nil, 0x3000, 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) [ 331.701787] FAULT_INJECTION: forcing a failure. [ 331.701787] name failslab, interval 1, probability 0, space 0, times 0 [ 331.713060] CPU: 1 PID: 23700 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 331.720047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.729373] Call Trace: [ 331.731936] dump_stack+0x1a7/0x27d [ 331.735539] ? arch_local_irq_restore+0x53/0x53 [ 331.740182] ? __lock_acquire+0x638/0x3c30 [ 331.744393] should_fail+0x914/0xae0 2018/04/05 15:32:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 331.748077] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.753160] ? __lock_acquire+0x638/0x3c30 [ 331.757370] ? find_held_lock+0x35/0x1d0 [ 331.761411] ? check_same_owner+0x320/0x320 [ 331.765705] ? rcu_note_context_switch+0x710/0x710 [ 331.770608] should_failslab+0xec/0x120 [ 331.774555] kmem_cache_alloc_node+0x56/0x760 [ 331.779023] ? print_irqtrace_events+0x270/0x270 [ 331.783812] copy_process.part.38+0x1ab9/0x6140 [ 331.788453] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 331.793615] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 331.798692] ? print_irqtrace_events+0x270/0x270 [ 331.803420] ? lock_acquire+0x1d5/0x580 [ 331.807368] ? lock_acquire+0x1d5/0x580 [ 331.811342] ? alloc_set_pte+0xf74/0x1780 [ 331.815469] ? __cleanup_sighand+0x50/0x50 [ 331.819679] ? __lock_acquire+0x638/0x3c30 [ 331.823887] ? print_irqtrace_events+0x270/0x270 [ 331.828620] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 331.833782] ? lock_downgrade+0x980/0x980 [ 331.837905] ? print_irqtrace_events+0x270/0x270 [ 331.842636] ? kasan_check_read+0x11/0x20 [ 331.846761] ? rcu_is_watching+0x85/0x130 [ 331.850892] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 331.856055] ? __lock_acquire+0x638/0x3c30 [ 331.860261] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 331.865426] ? find_get_entries_tag+0xeb0/0xeb0 [ 331.870071] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 331.875231] ? print_irqtrace_events+0x270/0x270 [ 331.879958] ? print_irqtrace_events+0x270/0x270 [ 331.884748] ? __pagevec_lru_add+0x30/0x30 [ 331.888956] ? lock_acquire+0x1d5/0x580 [ 331.892902] ? trace_hardirqs_off+0x10/0x10 [ 331.897196] ? trace_hardirqs_off+0x10/0x10 [ 331.901493] ? __lock_acquire+0x638/0x3c30 [ 331.905699] ? check_same_owner+0x320/0x320 [ 331.909995] ? find_held_lock+0x35/0x1d0 [ 331.914027] ? trace_hardirqs_off+0x10/0x10 [ 331.918344] ? _parse_integer+0xe9/0x140 [ 331.922379] ? trace_hardirqs_off+0x10/0x10 [ 331.926671] ? _parse_integer+0x140/0x140 [ 331.930789] ? check_same_owner+0x320/0x320 [ 331.935082] ? find_held_lock+0x35/0x1d0 [ 331.939113] ? trace_hardirqs_off+0x10/0x10 [ 331.943433] ? get_pid_task+0xa5/0x150 [ 331.947292] ? lock_downgrade+0x980/0x980 [ 331.951412] ? find_held_lock+0x35/0x1d0 [ 331.955450] ? __f_unlock_pos+0x19/0x20 [ 331.959395] ? lock_downgrade+0x980/0x980 [ 331.963515] ? kasan_check_write+0x14/0x20 [ 331.967746] ? proc_fail_nth_write+0x9b/0x1e0 [ 331.972213] ? map_files_get_link+0x3b0/0x3b0 [ 331.976679] ? trace_hardirqs_off+0x10/0x10 [ 331.980973] ? find_held_lock+0x35/0x1d0 [ 331.985012] _do_fork+0x1f7/0xfa0 [ 331.988440] ? fork_idle+0x2d0/0x2d0 [ 331.992126] ? __lock_is_held+0xb6/0x140 [ 331.996168] ? __sb_end_write+0xa0/0xd0 [ 332.000115] ? kasan_check_write+0x14/0x20 [ 332.004322] ? fput+0xe0/0x150 [ 332.007487] ? ksys_write+0x184/0x220 [ 332.011271] ? SyS_read+0x30/0x30 [ 332.014711] ? kasan_check_write+0x14/0x20 [ 332.018952] compat_SyS_x86_clone+0x3b/0x50 [ 332.023249] ? compat_SyS_x86_fallocate+0x60/0x60 [ 332.028066] do_fast_syscall_32+0x3ec/0xf9f [ 332.032363] ? do_int80_syscall_32+0x9c0/0x9c0 [ 332.036917] ? finish_task_switch+0x284/0x970 [ 332.041386] ? syscall_return_slowpath+0x2ac/0x550 [ 332.046301] ? prepare_exit_to_usermode+0x350/0x350 [ 332.051291] ? sysret32_from_system_call+0x5/0x3c [ 332.056108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.060923] entry_SYSENTER_compat+0x70/0x7f [ 332.065304] RIP: 0023:0xf7fc0c99 [ 332.068637] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 332.076314] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 332.083554] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 332.090795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/04/05 15:32:29 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xd16, @local={0xfe, 0x80, [], 0xaa}, 0x3359}}, [0x7fc0000000000, 0xb5c, 0x2, 0x6, 0x5, 0xffffffffffffffe0, 0x800, 0x40, 0xd1f, 0x8, 0xfff, 0x5, 0x6, 0x80000000, 0xa26]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3}, &(0x7f0000000200)=0x8) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) tee(r0, r2, 0x12000000000, 0x1) sendfile(r3, r1, &(0x7f0000000080), 0x80000000) 2018/04/05 15:32:29 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x3}, 0x10) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r2, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) read$eventfd(r1, &(0x7f0000000140), 0x8) read$eventfd(r0, &(0x7f0000000100), 0x8) 2018/04/05 15:32:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000200)={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x20, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 'ifb0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=""/93, &(0x7f0000000300)=0x5d) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000180)=ANY=[@ANYBLOB="af95925e265fe272f8763fad9573f2140000001d00ffff000000000000000000000000"], 0x1}, 0x1}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x204400, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x4, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000540)=0x5) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3e5e, 0x80400) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000580)=0x7, 0x4) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000100)={@empty, r4}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f000012b000)={0x5, 0x1, 0x200, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x2000000000000d, 0x2, 0x4, 0x6, 0x5, r5, 0xffffffffffffffff, [0xa]}, 0x2c) ioctl$int_in(r3, 0x5450, &(0x7f0000000400)=0x2401) timer_getoverrun(0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x400000) [ 332.098035] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 332.105274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x240) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000001140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001180)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000001280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007f40)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000008040)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008480)={0x0, 0x0, 0x0}, &(0x7f00000084c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000085c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008580)={&(0x7f0000008500)=@ipv6_getroute={0x64, 0x1a, 0x582fd61c70fea53c, 0x70bd28, 0x25dfdbfb, {0xa, 0x80, 0x14, 0xb89, 0xfe, 0x3, 0xfd, 0xa, 0x1000}, [@RTA_MARK={0x8, 0x10, 0xffffffffffffff12}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x33, @u32}}, @RTA_MULTIPATH={0x2c, 0x9, [{0xfe8, 0x3aa8, 0xfffffffffffffffd, r1}, {0x6, 0x10001, 0x6, r2}, {0x400, 0xfffffffffffffffe, 0x100000, r3}, {0x6, 0xfffffffffffffffb, 0x2, r4}, {0xffff, 0xb2f8, 0x7, r5}]}, @RTA_IIF={0x8, 0x1, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000004dc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000004d80)={&(0x7f0000000980)=@newlink={0x2c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}]}, 0xffffffffffffff93}, 0x1}, 0x0) [ 333.146399] FAULT_INJECTION: forcing a failure. [ 333.146399] name failslab, interval 1, probability 0, space 0, times 0 [ 333.157737] CPU: 1 PID: 23742 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 333.164730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.174054] Call Trace: [ 333.176617] dump_stack+0x1a7/0x27d [ 333.180229] ? arch_local_irq_restore+0x53/0x53 [ 333.184874] should_fail+0x914/0xae0 [ 333.188563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 333.193699] ? percpu_ref_put_many+0x132/0x230 [ 333.198256] ? memcg_kmem_charge_memcg+0x74/0x110 [ 333.200490] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 333.203071] ? mem_cgroup_css_online+0x170/0x170 [ 333.203084] ? find_held_lock+0x35/0x1d0 [ 333.203103] ? check_same_owner+0x320/0x320 [ 333.203112] ? rcu_note_context_switch+0x710/0x710 [ 333.203121] should_failslab+0xec/0x120 [ 333.203128] kmem_cache_alloc+0x47/0x760 [ 333.203135] ? rcu_is_watching+0x85/0x130 [ 333.203145] ? rcu_pm_notify+0xc0/0xc0 [ 333.215499] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 333.219206] prepare_creds+0x78/0x3d0 [ 333.219214] ? abort_creds+0x150/0x150 [ 333.219222] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 333.219232] copy_creds+0x7b/0x420 [ 333.219238] ? lockdep_init_map+0x9/0x10 [ 333.219247] copy_process.part.38+0xc0a/0x6140 [ 333.219253] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 333.219261] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 333.219269] ? print_irqtrace_events+0x270/0x270 [ 333.219278] ? lock_acquire+0x1d5/0x580 [ 333.295249] ? lock_acquire+0x1d5/0x580 [ 333.299202] ? alloc_set_pte+0xf74/0x1780 [ 333.303337] ? __cleanup_sighand+0x50/0x50 [ 333.307549] ? print_irqtrace_events+0x270/0x270 [ 333.312294] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 333.317460] ? lock_downgrade+0x980/0x980 [ 333.321586] ? print_irqtrace_events+0x270/0x270 [ 333.326319] ? kasan_check_read+0x11/0x20 [ 333.330442] ? rcu_is_watching+0x85/0x130 [ 333.334578] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 333.339746] ? __lock_acquire+0x638/0x3c30 [ 333.343957] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 333.349123] ? find_get_entries_tag+0xeb0/0xeb0 [ 333.353773] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 333.358937] ? print_irqtrace_events+0x270/0x270 [ 333.363668] ? print_irqtrace_events+0x270/0x270 [ 333.368402] ? __pagevec_lru_add+0x30/0x30 [ 333.372616] ? lock_acquire+0x1d5/0x580 [ 333.376565] ? trace_hardirqs_off+0x10/0x10 [ 333.380863] ? trace_hardirqs_off+0x10/0x10 [ 333.385165] ? __lock_acquire+0x638/0x3c30 [ 333.389376] ? check_same_owner+0x320/0x320 [ 333.393698] ? find_held_lock+0x35/0x1d0 [ 333.397759] ? trace_hardirqs_off+0x10/0x10 [ 333.402064] ? _parse_integer+0xe9/0x140 [ 333.406121] ? trace_hardirqs_off+0x10/0x10 [ 333.410427] ? _parse_integer+0x140/0x140 [ 333.414558] ? check_same_owner+0x320/0x320 [ 333.418865] ? find_held_lock+0x35/0x1d0 [ 333.422907] ? trace_hardirqs_off+0x10/0x10 [ 333.427211] ? get_pid_task+0xa5/0x150 [ 333.431080] ? lock_downgrade+0x980/0x980 [ 333.435215] ? find_held_lock+0x35/0x1d0 [ 333.439266] ? __f_unlock_pos+0x19/0x20 [ 333.443221] ? lock_downgrade+0x980/0x980 [ 333.447350] ? kasan_check_write+0x14/0x20 [ 333.451563] ? proc_fail_nth_write+0x9b/0x1e0 [ 333.456038] ? map_files_get_link+0x3b0/0x3b0 [ 333.460515] ? trace_hardirqs_off+0x10/0x10 [ 333.464820] ? find_held_lock+0x35/0x1d0 [ 333.468864] _do_fork+0x1f7/0xfa0 [ 333.472303] ? fork_idle+0x2d0/0x2d0 [ 333.475999] ? __lock_is_held+0xb6/0x140 [ 333.480060] ? __sb_end_write+0xa0/0xd0 [ 333.484023] ? kasan_check_write+0x14/0x20 [ 333.488238] ? fput+0xe0/0x150 [ 333.491411] ? ksys_write+0x184/0x220 [ 333.495191] ? SyS_read+0x30/0x30 [ 333.498625] ? kasan_check_write+0x14/0x20 [ 333.502847] compat_SyS_x86_clone+0x3b/0x50 [ 333.507148] ? compat_SyS_x86_fallocate+0x60/0x60 [ 333.511970] do_fast_syscall_32+0x3ec/0xf9f [ 333.516278] ? do_int80_syscall_32+0x9c0/0x9c0 [ 333.520840] ? finish_task_switch+0x1b9/0x970 [ 333.525314] ? finish_task_switch+0x17a/0x970 [ 333.529795] ? syscall_return_slowpath+0x2ac/0x550 [ 333.534706] ? prepare_exit_to_usermode+0x350/0x350 [ 333.539705] ? sysret32_from_system_call+0x5/0x3c [ 333.544532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.549359] entry_SYSENTER_compat+0x70/0x7f [ 333.553747] RIP: 0023:0xf7fc0c99 [ 333.557088] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 333.564779] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 333.572031] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 333.579281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.586531] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 2018/04/05 15:32:30 executing program 2 (fault-call:0 fault-nth:1): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:30 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='eth1selinuxkeyringem1', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x10000, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xf8c7, 0x7, 0x8002, 0x0, 0xee9, 0x1f, 0x8ec, 0x100000000, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x19, "f4cd4410e5b6ce2b9bca276e1eb1e5ebdaa24dad5ee0e951e5"}, &(0x7f00000001c0)=0x21) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="164681908dd967e3440fce24b616ec9829c35ceb92939a752f7b377d1b37c758aa82044f92f33635b105a1bd5781eff4ce641c3ddcf489bfe666707e672ab4987979a968674a9e32f928581082e77eb4284b6266e32ecfc05e58e56a7d7612e5833ebad9de86dd07cbe966ac8f6abc95205b78ec6edd3bea74950523a056918f58fb194d0fdefd480daa89", 0x8b, 0x4}, {&(0x7f0000000380)="082f88932dfb19e2332c02a90e4d7723b9460e92ba40ca84f8c8a960b25c00a73188f290d1def3980ddc15f57d611ac1a259a2c222873f273aafd05b24", 0x3d, 0x3}], 0x8000, &(0x7f0000000400)={[{@file_umask={'file_umask', 0x3d, [0x31, 0x34, 0x32, 0x34, 0x31, 0x37, 0x32]}, 0x2c}, {@creator={'creator', 0x3d, "ab55b0dd"}, 0x2c}, {@quiet='quiet', 0x2c}]}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000200)={0x2}) 2018/04/05 15:32:30 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000240)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c200, 0x4) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000003c0)={0x9, 0x0, 0x80, 0xfff, 0xe11}) r5 = gettid() perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x7, 0x6, 0x2, 0x1, 0x0, 0x3a, 0x0, 0xd, 0x3ff, 0xff, 0xfff, 0x8, 0x4, 0x3, 0x4, 0x7f, 0xd56, 0x9, 0x5, 0x3, 0x10000, 0x7, 0x7, 0x4, 0x2, 0x100000001, 0x89, 0x2, 0x7fff, 0x1, 0x21ab, 0x5, 0x8000, 0x2, 0x7, 0xffffffffffffffc1, 0x0, 0xfffffffffffffc01, 0x4, @perf_bp={&(0x7f0000000400), 0xa}, 0x0, 0x5, 0xf29, 0x7, 0x8, 0xe8, 0x4}, r5, 0x6, r4, 0xb) r6 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x10000, 0x2) ioctl$TIOCLINUX5(r6, 0x541c, &(0x7f0000000140)={0x5, 0x1, 0x8, 0x7fff, 0x4}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() fchown(r6, r7, r8) add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000540)="49debe41e2758f917a745b2850dc74631274bafb0fc232b9aad241920cab0bee5d1bb3604a8c2a43b151284a3c866201cb28af4f875774960158054e831d04fc513ea309b1fd9c8d0f4fb54993b793ecf5b15bb2dcb20fe1120a40a497021542c269d56813acc93e5b869a7674c01161975621e59a9836ca6e2ee0d0595b977a8108d9694f524fceba3934f8aa2420616fd374e494e9bfc1decca8874ba7e91f32ce1bd44055c52b73478bb9e99314ce23695797f88ad257ef5e5dc1596d739f597b9fc4f89c24393084058db9cc18c8a32f3f3b0ac7f353a9c7da52f426bf47d4361aab7fb22130411b9eef59adb7", 0xef, r1) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000a3dffa)={'sha1-generic\x00'}}) 2018/04/05 15:32:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3, &(0x7f0000000340)=""/30, &(0x7f0000000040)=0xffffffbe) 2018/04/05 15:32:30 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000001a80), 0x1) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) fchown(r1, r2, r3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) kcmp(r4, r4, 0x7, r1, r5) acct(&(0x7f0000000600)='./file0\x00') r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYBLOB="710000001f00"]) perf_event_open(&(0x7f00000019c0)={0x7, 0x70, 0xffffffff, 0x1, 0x3, 0x81, 0x0, 0x2, 0x400, 0x3, 0x2, 0x5, 0x9, 0xfffffffeffffffff, 0x7fffffff, 0x1, 0x8, 0x4, 0x7fff, 0xffffffff, 0xfe6, 0x0, 0x3450, 0x40, 0x8000, 0x4, 0x401, 0x6, 0xfffffffffffff000, 0x4, 0x5, 0x4, 0xffff, 0x7, 0x1, 0x800, 0x7, 0x198, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001980), 0x3}, 0x10, 0x4, 0x6, 0x0, 0xcd, 0x401, 0xfffffffffffffffd}, r4, 0x0, r6, 0x3) r7 = request_key(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)='[\x00', 0xfffffffffffffffc) r8 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000700)="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", 0xfc0, 0xffffffffffffffff) r9 = add_key(&(0x7f0000001700)='id_legacy\x00', &(0x7f0000001740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001780)="4dc30074756ddb2f3a36753227cddbb9e7ba45f4232482f0d3a2e3a2a6141f1a3c5faf0247047054bddc7aec1f4cd5b9e58d2e87ed8f4060f1abdc542967db7525cc16940f43352ac8e37baf8c87b05a06d64460435a4eeb730ec268dbd877f881c69fad0c36327a3f4fd7184f360ea7443ceb124212275b36eaae270fd422e771bbe61e9d6ac4d0f17062eceae69d1936bd483ded681f3172db5fde20a3cbd7dfd7d6bdaf337203efe22ac0235a657837c7ff90e35ae7820ba664a6550c74d4a23ed550123b5a8515a5655bc8e12b3d34164b868cd1c1e9d1a85a9dfe636ef6bb48925c94af6043746d", 0xea, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001880)={r7, r8, r9}, &(0x7f00000018c0)=""/4, 0x4, &(0x7f0000001940)={&(0x7f0000001900)={'poly1305-generic\x00'}}) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000300)={0xfed, 0x2, 0x0, 0x0}) lseek(r11, 0x0, 0x2) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001a40)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000240)) r12 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000680)=r4) getsockname$inet(r12, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00000016c0)) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r13 = dup2(r0, r1) getsockopt$netrom_NETROM_T4(r13, 0x103, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 2018/04/05 15:32:30 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000000040)=""/224, 0x18, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x1, r0}) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@sco, &(0x7f0000000240)=0x80, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r2}) r3 = socket(0x10, 0x200000000002, 0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x1000, 0x9, 0x8, 0x4, 0x0, 0x5b2f, 0x2180, 0x8, 0x5, 0x3, 0x1, 0x0, 0xfffffffffffffb9d, 0x7, 0x1f, 0x5, 0x8, 0xffff, 0xe6a1, 0xfffffffffffff000, 0x1, 0x1f, 0x24000000000000, 0x9, 0x5, 0x80000001, 0x1, 0x86, 0x80, 0x6, 0x8, 0xb6, 0x8, 0xbb, 0x100000001, 0x2, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x8000000}, 0x20, 0x9, 0x7, 0x7, 0x100000000, 0x1}, r4, 0x7, r0, 0x1) write(r3, &(0x7f00003c1000)="1f0000000b06fd00010000f600008001fffff80009000180060007ec000000", 0x1f) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg(r3, &(0x7f0000000540)={&(0x7f00000002c0)=@l2={0x1f, 0x5, {0x1, 0x6, 0x8, 0x4, 0x7ff, 0x3ff}, 0x3, 0x1}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[{0x68, 0x107, 0x7fff, "ddf453e1235e89de321f13a979fa00de06247dcfc5bd392e2eb8eec5f89368c581bc7f7721395aaadbbdc5272c20a74cfeb5f50066b764f6bef814ff5ecedda263a8bce16a83f7bd63e0210d2c8c0f9339f4a8556242ddfa21"}, {0x108, 0x103, 0x14a, "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"}, {0x48, 0x84, 0x9, "4319d7c44a95401010daf66d69fad008e9d422a4d183b0a38152545e5852602ff92d199ee381bbd85db7b33b111fa62c4507bb60c4f10978b4"}], 0x1b8, 0x1}, 0x48010) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x100) 2018/04/05 15:32:30 executing program 3: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80042, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/05 15:32:30 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2e0000, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0xa, 0x1, 0x1, {}, 0x363, 0x8001}) [ 333.593781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(0xffffffffffffffff) 2018/04/05 15:32:31 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x438490e3163e97c9, 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x3, 0x20, 0x3, 0xff}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:31 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x8000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/1) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000080)="4ee2688f4ee689bd8a583349ad4fa986e1a61292dcc45e3642a6cf153e50460503e6d97b69c5ddadd4d2de17dc770f0fa6ea576a631dc7987df569d8538e", 0x3e) 2018/04/05 15:32:31 executing program 5: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x2, 0x40010, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r2, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)={0x0, 0x989680}) 2018/04/05 15:32:31 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00005c8000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x4000000006) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$ipx(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x0, "502200000006"}, 0x10) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000640)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) close(r2) flock(r1, 0x2) flock(r0, 0x1) r4 = gettid() readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r5, 0xa, 0x12) fcntl$setownex(r5, 0xf, &(0x7f00002cb000)={0x0, r4}) recvmsg(r6, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r6) tkill(r4, 0x16) close(r1) 2018/04/05 15:32:31 executing program 1: r0 = socket(0x11, 0x803, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80c2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x102000002, 0x4) 2018/04/05 15:32:31 executing program 4: syz_emit_ethernet(0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="ee40a87f80730182c2000000000d00098b9ea624569a25a940fd884594e425aa7d0cba7bdea51c8404f4d28c766d8dd5cb39134dadde5c5286ea9a832e32f7968a32c3d4d5e2a6520e2effb6ce000000000000000000"], &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc={0x27}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x10, 0x1, 0x1, "03"}], 0x10}}], 0x2, 0x0) 2018/04/05 15:32:31 executing program 2 (fault-call:0 fault-nth:2): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:31 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x8912, 0x0) 2018/04/05 15:32:31 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x88, 0xb, &(0x7f0000001900)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000090040000d003000000040000ffffffffd003000050020000f0040000f0040000fffffffff0040000f004000005000000", @ANYPTR=&(0x7f0000001880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000000000004800444e4154000000000000000000000000000000000000000000000000000100000000ac141400000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f000000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000000000000000000ffffac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x4f0) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0xdd, "84dc16f7b9969a2b311cfe112d04dd7b1ef050c56620daece69f8af3b4caf0f91a4878a4d649aae6055dbdf476af7072b65d6be976c93d568d12fcf7fab7a2114107600b4d82c4bda2025b9046a3ae396d9824a29a5d6067c355ef26a499b9b274385881645b014f4c25efc0fa2239223d4942ff401008438d418eaf0b488b60050b301edc9fb29a5937b1693c4577b2f4deb86e1c020c7a6ee0231add7ab0b1ca68507e8d17e8f68094765e60173255d861a663420c2cd413c6bf4e912c0e54b076b1ba0116f73c6c235ac59a065e5cb1f1757c1ffb8540fed7a4eefa"}, &(0x7f0000000200)=0x101) r4 = dup2(r3, r3) fremovexattr(r2, &(0x7f0000000080)=@known='system.advise\x00') write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r4, r2, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, r0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)=@pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xbf7, 0x0, 0x1, 0x5}) [ 334.653766] FAULT_INJECTION: forcing a failure. [ 334.653766] name failslab, interval 1, probability 0, space 0, times 0 [ 334.664929] binder: 23789:23790 ioctl 8912 0 returned -22 [ 334.665079] CPU: 1 PID: 23793 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 334.674726] binder: 23789:23799 ioctl 8912 0 returned -22 [ 334.677603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.677612] Call Trace: [ 334.677629] dump_stack+0x1a7/0x27d [ 334.677643] ? arch_local_irq_restore+0x53/0x53 2018/04/05 15:32:32 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xfffffffffffeffff}, 0xfffffffffffffdc4) bind$inet6(r2, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x2}, 0x1c) accept4(r2, 0x0, &(0x7f0000000100), 0x0) [ 334.677655] ? kasan_kmalloc+0xad/0xe0 [ 334.677664] ? kasan_slab_alloc+0x12/0x20 [ 334.677675] ? kmem_cache_alloc+0x12e/0x760 [ 334.715677] ? prepare_creds+0x78/0x3d0 [ 334.719652] ? copy_creds+0x7b/0x420 [ 334.723372] should_fail+0x914/0xae0 [ 334.727086] ? percpu_ref_put_many+0x11a/0x230 [ 334.731222] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 334.731664] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.731680] ? kasan_check_read+0x11/0x20 [ 334.731695] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 334.731708] ? find_held_lock+0x35/0x1d0 [ 334.731729] ? check_same_owner+0x320/0x320 [ 334.764473] ? rcu_is_watching+0x85/0x130 [ 334.768609] ? rcu_note_context_switch+0x710/0x710 [ 334.773521] ? security_prepare_creds+0x89/0xb0 [ 334.778175] should_failslab+0xec/0x120 [ 334.782132] kmem_cache_alloc+0x47/0x760 [ 334.786171] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 334.791241] __delayacct_tsk_init+0x20/0x80 [ 334.795545] copy_process.part.38+0x1d28/0x6140 [ 334.800192] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 334.805360] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 334.810444] ? print_irqtrace_events+0x270/0x270 [ 334.815182] ? lock_acquire+0x1d5/0x580 [ 334.819132] ? lock_acquire+0x1d5/0x580 [ 334.823085] ? alloc_set_pte+0xf74/0x1780 [ 334.827223] ? __cleanup_sighand+0x50/0x50 [ 334.831439] ? print_irqtrace_events+0x270/0x270 [ 334.836186] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 334.841355] ? lock_downgrade+0x980/0x980 [ 334.845485] ? print_irqtrace_events+0x270/0x270 [ 334.850220] ? kasan_check_read+0x11/0x20 [ 334.854346] ? rcu_is_watching+0x85/0x130 [ 334.858484] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 334.863658] ? __lock_acquire+0x638/0x3c30 [ 334.867873] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 334.873044] ? find_get_entries_tag+0xeb0/0xeb0 [ 334.877702] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 334.882870] ? print_irqtrace_events+0x270/0x270 [ 334.887609] ? print_irqtrace_events+0x270/0x270 [ 334.892344] ? __pagevec_lru_add+0x30/0x30 [ 334.896563] ? lock_acquire+0x1d5/0x580 [ 334.900518] ? trace_hardirqs_off+0x10/0x10 [ 334.904820] ? trace_hardirqs_off+0x10/0x10 [ 334.909125] ? __lock_acquire+0x638/0x3c30 [ 334.913337] ? check_same_owner+0x320/0x320 [ 334.917641] ? find_held_lock+0x35/0x1d0 [ 334.921683] ? trace_hardirqs_off+0x10/0x10 [ 334.925984] ? _parse_integer+0xe9/0x140 [ 334.930033] ? trace_hardirqs_off+0x10/0x10 [ 334.934332] ? _parse_integer+0x140/0x140 [ 334.938456] ? check_same_owner+0x320/0x320 [ 334.942757] ? find_held_lock+0x35/0x1d0 [ 334.946797] ? trace_hardirqs_off+0x10/0x10 [ 334.951099] ? get_pid_task+0xa5/0x150 [ 334.954967] ? lock_downgrade+0x980/0x980 [ 334.959099] ? find_held_lock+0x35/0x1d0 [ 334.963147] ? __f_unlock_pos+0x19/0x20 [ 334.967099] ? lock_downgrade+0x980/0x980 [ 334.971229] ? kasan_check_write+0x14/0x20 [ 334.975448] ? proc_fail_nth_write+0x9b/0x1e0 [ 334.979923] ? map_files_get_link+0x3b0/0x3b0 [ 334.984396] ? trace_hardirqs_off+0x10/0x10 [ 334.988699] ? find_held_lock+0x35/0x1d0 [ 334.992742] _do_fork+0x1f7/0xfa0 [ 334.996188] ? fork_idle+0x2d0/0x2d0 [ 334.999885] ? __lock_is_held+0xb6/0x140 [ 335.003936] ? __sb_end_write+0xa0/0xd0 [ 335.007892] ? kasan_check_write+0x14/0x20 [ 335.012103] ? fput+0xe0/0x150 [ 335.015274] ? ksys_write+0x184/0x220 [ 335.019053] ? SyS_read+0x30/0x30 [ 335.022481] ? kasan_check_write+0x14/0x20 [ 335.026701] compat_SyS_x86_clone+0x3b/0x50 [ 335.031003] ? compat_SyS_x86_fallocate+0x60/0x60 [ 335.035829] do_fast_syscall_32+0x3ec/0xf9f [ 335.040135] ? do_int80_syscall_32+0x9c0/0x9c0 [ 335.044697] ? finish_task_switch+0x1b9/0x970 [ 335.049168] ? finish_task_switch+0x17a/0x970 [ 335.053644] ? syscall_return_slowpath+0x2ac/0x550 [ 335.058551] ? prepare_exit_to_usermode+0x350/0x350 [ 335.063551] ? sysret32_from_system_call+0x5/0x3c [ 335.068374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.073210] entry_SYSENTER_compat+0x70/0x7f [ 335.077596] RIP: 0023:0xf7fc0c99 [ 335.080939] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 335.088626] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 335.095871] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 335.103118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.110365] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 335.117613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:32 executing program 2 (fault-call:0 fault-nth:3): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:32 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f00000001c0)='\x00', 0x7, 0x4, &(0x7f0000000480)=[{&(0x7f0000000200)="a096d9dbbddb13b3cf0b717d2eb2ffc4e1fd5dd6cac07319f966bef931b4f1b9bb31e4f6266fcbd38b20b30d23a361aae23ab68649970240caa6c07d94648d67a8c022066be8818aad26ed835513062c2088957d929a9c590898d7082f963eee774077a6408b77fe02cdc3cc6740f7dca523749b84f8c2cb553b5e4efb2801bad40d33aa79d56f8ab5945eb3d2eac4aa8a624af5286d57531bce62a3905940fa1bf3225b9686c711d3865199f50273b1bf4c0874f3f4f4ee4b578aa4b1bc6a82f1128cb8214e3fb5deb5f8ed53f3db826995d8740ae71629b796946c50ba9323", 0xe0, 0xfffffffffffff2dd}, {&(0x7f0000000300)="6b458a6616b43c8e9a8bee9fac2b57106f1bc65808bfd28f71893dc796fb71c964f584bce49709ae7e539b78f69b63cdaadb88a13f59ec04e79c65555499e9c5d0013fe6393d13dce10d1c64ebab67ffb28cb3d3c093f896e16716773bf022ae9ce9efde485694d65407cebf510f19671c99d21976fdb69b7bfc54ffb2919366a280a731eb235a17e4bc6d8cea6bf5b30179642cb8e538312cf4f03ca8ca9d1b3a0330d82b0f7b0a3d16beb7a06875449df6765772a3f5e83b32d9a0bb7e", 0xbe, 0x5}, {&(0x7f00000003c0)="553df537", 0x4, 0x8}, {&(0x7f0000000400)="028755135469545e4e703c245d5090ceca800b2258dfc8ab4a97a6602f10ef8e4ed764a38faf9d4b45c9a563c0ca62facdc3168c12a7d9f3070f966914edf0b7876071b61d0ad6e4b54424139d44e51e71a9ac67fa8950839853e671f8792ef1b2f0effda5b6e37198", 0x69, 0x9}], 0x2000000, 0x0) r1 = dup3(r0, r0, 0x80000) sendto$inet6(r1, &(0x7f0000000540)="bee9ed6db211e3e173211b8ae44a4cd2de57fa147146bcc819acf8515fd43499eaa7543e0e0b2c395f768ca9c0241dc6d79a20eeb8758cf37c72715d99ce68be40d4cf9e10a8ff3f414e8e63c8f30a7c83932b8a65cecd76fac4160fa1a8b515f2cd7e6dde67244cf95c37c553bc534b45fa82c30bc01c1f1be50a29cf074b59999cb87e4120359f9ba422ad8b368e545a27ad90bfced017", 0x98, 0x4000000, &(0x7f0000000600)={0xa, 0x4e22, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffff80}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8a790a0000000800e3000100060006000004080076a702007cd6efc6666cec8b2bcb5be1b0cf9b11620271c9529eba6dd6fe8b354c2b753f3574f7de5acf310156cfedc7e49f200d4788acb014d4aa24a6de68504f5bb5ab129a0d80793a2ea786bacd80088d2ab99048d900000000"], &(0x7f0000000680)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000006c0)={r2, 0x3}, &(0x7f0000000700)=0x8) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x64c5, 0x404000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x7}, &(0x7f0000000140)=0x8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) getsockname$netlink(r3, &(0x7f0000000740), &(0x7f0000000780)=0xc) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x5, &(0x7f0000acf000)={r5, r6+30000000}) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000004c0)) sendto$inet6(r3, &(0x7f0000000840)="b801442cffdf776815a6f59500d7d60710e9c0a3018d01f74f0fe9c3996e8c965517414f3dab3b90982c0ec13f294945014b93ec4fd00dee0a066de11768975ffeb1801fa73cec0f56d93c843b19aec67ee40a4f6cf28ecb7e16abd49f7b473b7a75703915e2afaeb8a98276cb3bc88fa92a40b8ec70ca38d412fce8bd6ea7fbcc36e72fc1b0217f1f250407c91220260d82fb6d3c6f690ac8313e68ecd1849d956dd8e28dfabe60e1a49d4cc0eaa521f88b4c5590094bb70f92be587d5ba4433c73d6b7293bf76c7f168c2cf62e0d0aef4155d6fc206b9a02425d3689c0db726be699f5486decd7744e", 0xea, 0x20000000, &(0x7f0000000640)={0xa, 0x4e22, 0x80000000, @mcast1={0xff, 0x1, [], 0x1}, 0x20}, 0x1c) 2018/04/05 15:32:32 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x4) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0x0, 0x7f, 0x6, 'queue1\x00', 0x2}) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3a9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000016c0)}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100, 0x80000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000000c0)) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005f40)=[{0x0, 0x0, &(0x7f0000001700), 0x200000000000011a, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002c40)=[{{&(0x7f0000002500)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002ac0)=""/67, 0x43}], 0x1, &(0x7f0000002bc0)=""/114, 0x72}}], 0x1, 0x0, &(0x7f0000002d40)) 2018/04/05 15:32:32 executing program 4: r0 = socket$inet6(0xa, 0x0, 0xfffffffffffffffc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000004380)=@ax25, 0x80, &(0x7f0000001fc0)=[{&(0x7f00000045c0)=""/4096, 0x1000}], 0x1, &(0x7f00000059c0)=""/170, 0xaa}}, {{&(0x7f0000007140)=@hci, 0x80, &(0x7f0000007700)=[{&(0x7f00000072c0)=""/191, 0xbf}, {&(0x7f0000007540)=""/201, 0xc9}], 0x2, &(0x7f0000007740)=""/198, 0xc6}}], 0x2, 0x0, &(0x7f0000008100)={0x77359400}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x8000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xe2f0, 0x1, 0xffff, 0x0, 0x7ff}, 0xc) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)) 2018/04/05 15:32:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000e0fff3)='/dev/usbmon#\x00', 0x0, 0x80009) ppoll(&(0x7f0000000140), 0x2000000e, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000100), 0xfff8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x2}) [ 335.211140] FAULT_INJECTION: forcing a failure. [ 335.211140] name failslab, interval 1, probability 0, space 0, times 0 [ 335.222495] CPU: 1 PID: 23824 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 335.229513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.238865] Call Trace: [ 335.241460] dump_stack+0x1a7/0x27d [ 335.245096] ? arch_local_irq_restore+0x53/0x53 [ 335.249765] ? find_held_lock+0x35/0x1d0 [ 335.253839] should_fail+0x914/0xae0 2018/04/05 15:32:32 executing program 1: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0x4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x800, 0xff) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @loopback=0x7f000001}, {0x0, @random="0ef80b31bd18"}, 0x14, {0x2, 0x0, @rand_addr}, 'ip6tnl0\x00'}) [ 335.257569] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.262678] ? trace_event_raw_event_lock+0x340/0x340 [ 335.267871] ? perf_trace_lock+0xd6/0x900 [ 335.272017] ? find_held_lock+0x35/0x1d0 [ 335.276098] ? check_same_owner+0x320/0x320 [ 335.280417] ? debug_mutex_init+0x1c/0x60 [ 335.284568] ? rcu_note_context_switch+0x710/0x710 [ 335.289482] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 335.294492] should_failslab+0xec/0x120 [ 335.298457] kmem_cache_alloc+0x47/0x760 [ 335.302504] ? __mutex_init+0x1ed/0x290 [ 335.306463] ? SyS_membarrier+0x800/0x800 [ 335.310598] dup_fd+0x114/0xdf0 [ 335.313856] ? kasan_check_read+0x11/0x20 [ 335.317984] ? do_raw_spin_unlock+0x9e/0x310 [ 335.322377] ? ksys_dup3+0x5c0/0x5c0 [ 335.326078] ? perf_event_init_task+0x1d5/0x820 [ 335.330727] ? sched_fork+0x476/0xc10 [ 335.334508] ? ktime_get_with_offset+0x2c1/0x420 [ 335.339333] ? copy_semundo+0xb5/0x340 [ 335.343206] ? SyS_semop+0x30/0x30 [ 335.346729] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 335.351731] ? __lockdep_init_map+0xe4/0x650 [ 335.356123] ? security_task_alloc+0x81/0xb0 [ 335.360519] copy_process.part.38+0x1eb3/0x6140 [ 335.365167] ? perf_trace_lock+0xd6/0x900 [ 335.369297] ? print_irqtrace_events+0x270/0x270 [ 335.374039] ? trace_event_raw_event_lock+0x340/0x340 [ 335.379211] ? lock_acquire+0x1d5/0x580 [ 335.383163] ? lock_acquire+0x1d5/0x580 [ 335.387122] ? alloc_set_pte+0xf74/0x1780 [ 335.391259] ? __cleanup_sighand+0x50/0x50 [ 335.395476] ? print_irqtrace_events+0x270/0x270 [ 335.400224] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 335.405392] ? lock_downgrade+0x980/0x980 [ 335.409523] ? print_irqtrace_events+0x270/0x270 [ 335.414261] ? rcu_is_watching+0x85/0x130 [ 335.418398] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 335.423572] ? __lock_acquire+0x638/0x3c30 [ 335.427785] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 335.432967] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 335.438144] ? trace_event_raw_event_lock+0x340/0x340 [ 335.443312] ? perf_trace_lock+0xd6/0x900 [ 335.447445] ? lock_acquire+0x1d5/0x580 [ 335.451397] ? trace_hardirqs_off+0x10/0x10 [ 335.455704] ? __lock_acquire+0x638/0x3c30 [ 335.459918] ? trace_event_raw_event_lock+0x340/0x340 [ 335.465089] ? find_held_lock+0x35/0x1d0 [ 335.469137] ? perf_trace_lock+0xd6/0x900 [ 335.473268] ? trace_event_raw_event_lock+0x340/0x340 [ 335.478435] ? check_same_owner+0x320/0x320 [ 335.482738] ? find_held_lock+0x35/0x1d0 [ 335.486782] ? trace_hardirqs_off+0x10/0x10 [ 335.491084] ? get_pid_task+0xa5/0x150 [ 335.494955] ? perf_trace_lock+0xd6/0x900 [ 335.499089] ? find_held_lock+0x35/0x1d0 [ 335.503138] ? __f_unlock_pos+0x19/0x20 [ 335.507093] ? lock_downgrade+0x980/0x980 [ 335.511224] ? kasan_check_write+0x14/0x20 [ 335.515437] ? proc_fail_nth_write+0x9b/0x1e0 [ 335.519914] ? map_files_get_link+0x3b0/0x3b0 [ 335.524394] ? find_held_lock+0x35/0x1d0 [ 335.528436] _do_fork+0x1f7/0xfa0 [ 335.531874] ? fork_idle+0x2d0/0x2d0 [ 335.535585] ? __sb_end_write+0xa0/0xd0 [ 335.539546] ? kasan_check_write+0x14/0x20 [ 335.543759] ? fput+0xe0/0x150 [ 335.546930] ? ksys_write+0x184/0x220 [ 335.550711] ? SyS_read+0x30/0x30 [ 335.554146] ? kasan_check_write+0x14/0x20 [ 335.558369] compat_SyS_x86_clone+0x3b/0x50 [ 335.562672] ? compat_SyS_x86_fallocate+0x60/0x60 [ 335.567495] do_fast_syscall_32+0x3ec/0xf9f [ 335.571801] ? do_int80_syscall_32+0x9c0/0x9c0 [ 335.576362] ? finish_task_switch+0x1b9/0x970 [ 335.580833] ? finish_task_switch+0x17a/0x970 [ 335.585313] ? syscall_return_slowpath+0x2ac/0x550 [ 335.590222] ? prepare_exit_to_usermode+0x350/0x350 [ 335.595221] ? sysret32_from_system_call+0x5/0x3c [ 335.600051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.604880] entry_SYSENTER_compat+0x70/0x7f [ 335.609720] RIP: 0023:0xf7fc0c99 [ 335.613063] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 335.620753] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 335.628003] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 335.635254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.642503] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 335.649757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000032c000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x400000, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f0000000180)={0x4, r3, 0x10001, 0x7ff}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r5 = dup3(r0, r1, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x7, 0x0, 0x5, 0x10000, 0x0, 0x80000001, 0x8000, 0x2, 0x9, 0x1, 0x0, 0x200, 0x10001, 0x5, 0x100, 0xff, 0x6, 0x7ff, 0x8, 0x80000000, 0xfe6, 0x0, 0x80000001, 0x0, 0x1, 0x5, 0x101, 0x80, 0x567, 0x4, 0x4, 0x6, 0x95dc, 0x80, 0x8000, 0x0, 0x0, 0x47c, 0x0, @perf_config_ext={0x7, 0x1}, 0x4000, 0x4, 0x7, 0x0, 0x25a8, 0x9, 0xffffffffffffffff}, r6, 0xb, r2, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0) dup2(r0, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x400, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000080)=0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/04/05 15:32:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:33 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) write(r1, &(0x7f00000004c0)="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", 0x1000) sendfile(r3, r0, &(0x7f0000000040), 0x80000000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r4, 0x34, "d9eaf3664e54c2509799476b254208d1927e339b57797aa78e27fb5c422b7f7c107b8f30210583350f8fed74c7419310eb1b3dc1"}, &(0x7f0000000140)=0x3c) 2018/04/05 15:32:33 executing program 3: getpgrp(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x4d) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x5) 2018/04/05 15:32:33 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x4, &(0x7f0000664fc0)={0x0, 0x80, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000000040)="e68c23a67dc79f4f3f9b156b", 0xc, 0x0, &(0x7f0000000080)) 2018/04/05 15:32:33 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x0, 0x101000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) sendto$ax25(r1, &(0x7f0000000000), 0x0, 0x800, &(0x7f0000000080)={0x3, {"05373dfb9dba68"}, 0x3}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/247, 0xf7}], 0x2) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) 2018/04/05 15:32:33 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="cb", 0xb5, 0x9, &(0x7f0000000080)={r1, r2+10000000}) 2018/04/05 15:32:33 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) fcntl$addseals(r0, 0x409, 0x8) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = dup2(r3, r3) r5 = fcntl$getown(r2, 0x9) sched_getparam(r5, &(0x7f0000000080)) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r4, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001240)='/dev/rtc\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001280)={'syz_tun\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r2, 0x0, 0x6, r1, r1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x80000000, 0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001300)={0x0, @dev, @broadcast}, &(0x7f00000012c0)=0xc) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={r4, @multicast1=0xe0000001, @rand_addr=0xffffffffffffff9c}, 0xc) mq_timedreceive(r1, &(0x7f0000000080)=""/48, 0x30, 0x1, &(0x7f0000000140)={0x77359400}) mq_timedsend(r1, &(0x7f0000000200)="5d5a9506e58e74d9406f4cc22df84bc3ca602f841118f77b66f601c3a78bebee71305669f44512b7b60658384bcc93341f860d2bc3213d7eae548067e26aec2fbe6a1b3390e2c43caacf71cedfb89cc562d270e8314defde45fb19c35bf91cd0a2a353d9b0ed3cd8606f74777e6b3766d872e27d87aea08af2e72c824036133d52c86c2674c7c012d708cb31ec8826cbbc0daf6b9468f9ad667b86f568f66401d0662627ec28b59a30b24722141dfc2b8bcc6e56c25683666634fcaeaaa4e1ef8f1cb0363e52972112cc157dc5a11a656fd6ef7c4501d2203a13d901a0347a5bd0a2bf622e76de75ea1fc23293eac7548a1b557b81b2a58ed03bf7804da858a66480b9e31e17c35bad405a442ae0d4365393e355e257fa5b7336b8baae056c9a64b7a4b26b3e19d606f4bbe287ef1976e3df86dbbd798aac881363d7f9f21f001942cbfda5fa7d5319c0e93e882da3a0e65cfe5a4db47838ee5f7defe074db763a1a63805282fa55962f016c61640822db1889dffc576b0377b0af0f8d86dc0578067019020518c80b79522e58c9fee858af8346dac7b1eb8118e68c7ea20235a236b266045a6ca5897e9aef7a0d8a451580ccce6278f638bfd724c34f74888ef6a0bcbdf99bc74cecac88226b0dba25209ce2b1786b1f5081512bd2257bb253755f231cfa7df814914ecc21adf88269b6bcc6576f9d66d8d09c69a65bac79ab067337b032b130aac9cec41c4317326d8e889ee56cbe2e2334bb9cf0955e11423afd54489394b92ba77a188c536638c298dc40f99855dce3082f3cee9a49bbdc4e02bcf544d8730e7acd689eb189ca73c4cd53d8d1be52e7b03c802f107c2300fa7b62e3e9c18eb8a73b21abe72c38a6d66a9f759849fe604b98f2a8f84c53795231827d240f0e2109cfe9fadc21bbfb8c8532333a3f83c61c8ce1359844f8bc5373e213289e045cbbf2e6c6451a676508121fe4b3f338b2a0a341f5e897dd2de8685a7cbb9e5057a7344ea32f86db6000d91e436c9925b934182ec9597e4a0ced8cc25779387df6594d83185b4c476f6125cab785f42a5f8f1743341711fa52cfdde4b3802537978b17bf7dc458d8057775cafa06b51897dfc57d6fc12407c1893ebedc3804e041ef49396292afc381182979994a65b5f43e817bb8c1cdc20965573f6e6f76cac703ca62d0d8619d46f8a47d3da7ea67444a724eb64609302ff47eb072ef941aff270a80ab10e4b37793ded1443be31c01ee60f5cfb053c69d5d7b1d0ab3b2200454067a7a9811c33658d90c40f7afbb96356ca7e2edfc22d43e5882d72db8929c8706ca69623be5de1951cd2fc8a0d6f2bb38e2c73b2190a27f6b927166ae48cfe2a210a35af1b9b946724856d327a2c8075644dc2a0b8c536771f3204985613133864686925767a2bb71d39c1e2a23ff0e40d901ba5d82e9a6148cce12f299b4de2a07be41a2560fd29bab462b775df76fafda0ef24ce6cea53333c395ce01044367e8e87c7b49275e6cf03648575461931b1c5fdd450339e03b467417437946420ba328b1433779c62cafae0cd64e9a636d70bd7d520ca4b92f54afefd89430130e8f91cd7877beb793641d311db74ebbc3fb16092126ed75e82665d9f50fc47b07ec4835e9165f799e74b55f8f95283391f415c353ed123914ce51196abd36639e0b586cb870e6a192305496809f43d80736dae6863bdf5a7c35b7f157597e2ddce4c9f374c7670c1ee12bbb650e9467d54a09f0ae6a0ceac8f06d66e148ac97f15120fde50719d899a42d5fcc4c7ebd15bcdfcb8b14ba169e85fb3b2286dff2f5061f1b22c28afbc6f940c24ba53a571f20f0551fd03f772c1867e57cce042bbe520a95ceace7a8c3779f5cbb87351d71314167c78837b420c3696ec54daeae163377ab24b4655faaf3cc6941a2095e863fbb39ab950656aadf30d3446ed9b123ea35155557841983295b65086f74f6907d50b5d43a01fd766f9c22115fa798f5268dc5cda23f17ef8270ca8fe94e46f7bfad15f8f27bb7b90de42c295699f29561cd776199e6b6b752763b80af07a8b25451629ce7646552041fe8b080c64e59b346bf99fdcfbd2cc1719b0e5948df23ab941db91125e22a2994dedb69639ae24fe21bb3e5c3e6f709e71c21787e193ed33f1d1fb946715b70d2e6f269d485877f1e1ab06a2e0ce4ce4d9c12154118d4bc4140abc441f68e385fee0b1b87dc68c37be10fd816b1bf83ec8e8744d65b6f9a7c16222113589be3c025beedbbbc64f8c399ce6a44a887bde29492c55cee8817edd52d0e5b79eb7905be02f581336644815e90bb68a201f00aa7303bdd898c32dd81fb24fcb74c46bf29670db3dbde78faccfffc996dedacb8f37673f2c3b45403d3c906837a5e6399b444d52c59ea1f71f14d71b8a766671aba7ac3ba066353de1f830553150b67424ed0b1c216384321cad95b9ff7c970363da0ff3c8a4a6fbc68e68672b8e4919a66aad3d44fcb6be17e34188bc356df882474039df58ff8133609c61ed7b4482252d958dc1c249740f88d055bd8a1af0753853641dcbb6165a5568fc4aa419bc0a5f691421dfc9eb0b60712d060d7baf3c5fd9f825d2671b3294c1cc3dfa12ce9ced734dcc7ac9097621d3bfaacfdc9438d713caad07843c44eae8981e22d83f9041a72b751f4a8321097b80a21722c3c51643c4da1545699a02ecf3294bb68d5877635679bdc96c7ab2de2ccc02feca27ab19c2a250d20e0c25536b0ba30571b7d41252208f62c0028882e652d6d2accda564e34b298a5581d8654c76286973b5e285475def198683476081ed63e66cc4abe44a7529489f9f605da5815676692479d489731b0d835890b259d613a555c2950f81acb0f7981d970afcf44d13a0bb27b0df633565c6f74d0ef7dd62a2b84a201e0018e7076f9dce0f16baeddc198b8d34c849b8f0221ffa3264df16bb236cffe3e7065c991bb69c72cf5fa896c98cf2e603a65ac098c670e0f02bae888480b46554d1b9bebaeb61b63ac551dd0af35f645c13150975e74b8dc9665b17b200c1a5c8a8b0e36e8ded4d9ae9859d21a476ceb18b564cf38a9784481f217a7f65dcc4d90d73658aceacc413a68a4f01160676c598f1dd0b9af2d99df387712ebae439d13ab1fe4012d36e3a851a773e9cfd0d8829af61904e9d8eef6c853913f6b9906de0110ce19635873c06b1cfd903357722086cb8e56f8f29e4846c21f5a09bb8f0b4c85b4abfe908e9ffbc5d309a1ff7c5104eb816ace4a295736acebf5867636135986357bf37a2304883d6c795453c3f639d19240d3377fe9341f13ff39b70fd7ce0b4b6a078516de31830619e1a2d38e3cd1aa0fef8253f04bda11910cd3cb55c95dbf40952d2de7b6030adb2263227172b2dbe33bbc773c4d052523356b38217d93b63db5047d86d7007121169e5c7a8629beeceff1a53a86534d9717e7ee483f2617f884c53c23231f0176cd92a9143d68cdbbca25c7ee3831e77d829d123dd2d2e21f6738ae7c0dbc71170620faef085352f499e540051b7de3c44d0b1d79d6f190ba32b90b83b2302919b5a101a2ba97d77a47462533ef57bf7841d082972da6ab51ab2ea358799dde9d9b2edd97027885dc332cf5bb0d2692ad60ef342eeaaa449ef122118bddcee7491edbeb1404f2ee69f2fb98f942ef0ab73899fb168ac3ca8846ae9095509bb15b9c814e4187a640d5762c23781886e02f69d9bc9f9eb552847f9f5297c286e6c40c1ac9feac26cc341184ab0311e287addc0264b0e2e8acb8c32d2726190f9eddf782f0d3b180b5b5e0db526ff18a37401f550ec24417e528b41ce6a0c3f2ec1cc6782254f549b37f0793c7f60cac680cbc23dfc4b0281684d72dd11d0c08e11c73c85f448d6a3157d843ce132d89dc7d3163aa85fd3f3b30c87394d95fed972a303924d3dda5293933773afd9b5a2787e50232d8d81344c14789818dd7df6820dfad2a12b5fe605a7f440edcd08b898ce0394288b7e67ab31316d54662800f617e3871ce2504ae2d77e019d9df6f0d53e324b9ed24d30c52c265bb0316407f3e0faaba81e21919c37be4f6d65770f5bb162b8d9ac63c513f6504cc1f3deb8f812fe52bc18a1f2021cea8f68944ad7c6d3b432d2385e2a2bfae348834417e5bdc00a0f99e8274297fef43165c452c0ed7940759bedffdeabc3bf6ba83f2f7a418e3f2e44b94ef26d5aa070d317ad583f9ef92ceebb2b58948ad357b7efa16878a70de9452778c0c51404e691f22312b1788abeadcd843a7e65c55c9a6149faaf31c8edd30afbb2b2b216ead1a2dac85af121f8264faf59eadff6f9b5d1c9cd0f5198e176f40a6ce0ee70e77b9bebe5debbdf2eafde4971dc7932ec01b9941a38fadda284adb0ada1499541bf0c346455d6d9bb147bfb5bee0e68264cb0a0888c3f4e5c67385fc4e5498e798ab5ad5b8c10f9241e8288d6bc4f21e3c6f74360d90eaf3c38f134c19846c5bc0d946cf99ef706314166bcebe1244e034d4572bf79a4926573215734c94ba472ecb234b359376fcb684614dfd6f2d80d867f7f788aa59e348e16520d261e85e6ed209d3270df2a0918201e673a674fd9fcfb861999013b9917a117eea9bcd58398c6081c3638dd58f773b2444d07e6874832fc10e2299787f9b5c8df887c1aec5bb314be0c9492b51214894e3e048070e700c19c94c27347477adad74a641c666a70a85a98c18f953c898562aa53cb92b83c1a0dbd0b31c36786716eef50b6242eea475bfd5f258602589173ba3872d2d7add5b717596916e8eede9eff2572180ff26318f6ec626bd9f86c9be95dd1a75708bc3f5986e39a4f6e688e8eb0900fa0dfbfdc2eeca2c7c7a768dff2c9b41a2235a55311727e132391b19fc35f25dba1344657edbbf02147c0522c60efa764b440ca38a443e307d989d7a107853245730d8ecb29ed5e77e0e1db65f3865b57eacbe995457f31d611ca22208424f6b87e37c34cfd4d340dc165db43e98cf568c7a0bbc5ec404877312eb64a3341495c5b9b03d98a329f2375e984749347e7b31b8b2d663c3bc2d76e5106e698ee7553989459012b9def620262d37f621dbbc4560be910f1a6bac4bca54a4a86bf3a5d84eb5edb7647b9ef90ebb0efc4a4bd509568d4e69dc63d0880fe1b5435c1235485b27630a839518f568838c96ee61f37e9c9cf626a8fcde95fe4555d7a5a454d3332fe8aeb38a5937898e04507b19c91b934f9e8d70c9f277588551a19881b73166699fb29eb3d828f2efdaf9e2b75729c41ccc2973c08676997853765ef69322a61ac46599d67f18a626093f03969093cc66e57d9c929976915a373bcc93258ec47c5788c4bb0834ccea61344c22833fdf0f74cf18fb2b72f28aa948f9e0fe22b0c64050d4c0ba0bd55fe9d4d1b4ecfcbdb138e8f28672d49c7e6ba83293ed4e3b8bdae456644db077cc8415de8c8724f2ebdf2025726f7132a417d2c3791549a5e281f59deffb2386ee987526d36829080fc31050ddfa3a569bb496bdf910903ba26d17b207b5f2d1a4c5958b6420a65474f0b032b80990a316f832d8b5c79a882246823ea250a62e546ffa135ed0d895d40bb862d0c0d19e9f7df95bde5bb8c0090f737fc829180070c0f429c6af320fc1da154930226716dbdfcc510337564ff6ab3bf0997e25fd6236e953786b03ad69105dd3d37b76ff2e0ef44803919e8ec929d447c90e14ec1f5a64d70d3648e81aad6fb0a5ed424fe5e79627aadc9784448d508e1b10a7781450b7426f2b432e", 0x1000, 0x1f, &(0x7f0000001200)={0x0, 0x1c9c380}) 2018/04/05 15:32:33 executing program 2 (fault-call:0 fault-nth:4): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:33 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={{0xfffffffffffffffd, 0x100000000, 0x3, 0x5, 0x80, 0x7e79}, 0x7d}) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:33 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x100c0, 0x0) r1 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x0) getdents64(r1, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000009c0), 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x4000000000000d) r2 = fcntl$getown(r1, 0x9) waitid(0x2, r2, &(0x7f0000000040), 0x20000000, &(0x7f0000000200)) getdents(r1, &(0x7f0000000100)=""/65, 0x41) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x4a) open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f000016d000)={"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"}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000080)={0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000c40)={{0x0, 0x1f}, 'port1\x00', 0x20, 0xa0000, 0x6, 0x3f, 0x7, 0x800000000000000, 0xfff, 0x0, 0x5, 0x9}) r5 = add_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0)) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000008c0)="68942302dcbc1920eb000a38414531b020cb470b82fe4439abf04b7e7e4997763766ed38d0944e9ddced98681869745b534311f0d7ed76d1c6c9d115167bd0162e92e7fe62ef490a4fa46afa9e8ac78bb64119d2549b99e82697a4a806a2c76c69fc14ce827e832d1348935d88ef93e766675bcc188e5ed9059c63a4f6d644ac810f9debd658c7fe783c9343a2dbe7", 0x8f, r5) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') [ 335.996363] FAULT_INJECTION: forcing a failure. [ 335.996363] name failslab, interval 1, probability 0, space 0, times 0 [ 336.007737] CPU: 1 PID: 23890 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 336.014746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.024084] Call Trace: [ 336.026658] dump_stack+0x1a7/0x27d [ 336.030265] ? arch_local_irq_restore+0x53/0x53 [ 336.034912] ? __kernel_text_address+0xd/0x40 [ 336.039391] should_fail+0x914/0xae0 [ 336.043084] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.048164] ? save_stack+0xa3/0xd0 [ 336.051769] ? trace_event_raw_event_lock+0x340/0x340 [ 336.056936] ? perf_trace_lock+0x900/0x900 [ 336.061151] ? do_fast_syscall_32+0x3ec/0xf9f [ 336.065629] ? entry_SYSENTER_compat+0x70/0x7f [ 336.070193] ? find_held_lock+0x35/0x1d0 [ 336.074244] ? check_same_owner+0x320/0x320 [ 336.078545] ? rcu_note_context_switch+0x710/0x710 [ 336.083452] ? dup_fd+0x89e/0xdf0 [ 336.086885] should_failslab+0xec/0x120 [ 336.090839] kmem_cache_alloc_trace+0x4b/0x740 [ 336.095397] ? do_raw_spin_unlock+0x9e/0x310 [ 336.099781] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 336.104338] ? __lock_is_held+0xb6/0x140 [ 336.108383] alloc_fdtable+0x7f/0x280 [ 336.112165] dup_fd+0x8d4/0xdf0 [ 336.115427] ? ksys_dup3+0x5c0/0x5c0 [ 336.119125] ? perf_event_init_task+0x1d5/0x820 [ 336.123770] ? sched_fork+0x476/0xc10 [ 336.127552] ? ktime_get_with_offset+0x2c1/0x420 [ 336.132293] ? copy_semundo+0xb5/0x340 [ 336.136162] ? SyS_semop+0x30/0x30 [ 336.139681] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.144678] ? __lockdep_init_map+0xe4/0x650 [ 336.149067] ? security_task_alloc+0x81/0xb0 [ 336.153460] copy_process.part.38+0x1eb3/0x6140 [ 336.158109] ? perf_trace_lock+0xd6/0x900 [ 336.162234] ? perf_trace_lock_acquire+0xe3/0x980 [ 336.167054] ? print_irqtrace_events+0x270/0x270 [ 336.171785] ? trace_event_raw_event_lock+0x340/0x340 [ 336.176951] ? lock_acquire+0x1d5/0x580 [ 336.180901] ? lock_acquire+0x1d5/0x580 [ 336.184853] ? alloc_set_pte+0xf74/0x1780 [ 336.188987] ? __cleanup_sighand+0x50/0x50 [ 336.193203] ? print_irqtrace_events+0x270/0x270 [ 336.197945] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 336.203112] ? lock_downgrade+0x980/0x980 [ 336.207240] ? print_irqtrace_events+0x270/0x270 [ 336.211973] ? rcu_is_watching+0x85/0x130 [ 336.216105] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 336.221536] ? __lock_acquire+0x638/0x3c30 [ 336.225750] ? perf_trace_lock+0x900/0x900 [ 336.229971] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 336.235138] ? perf_trace_lock_acquire+0xe3/0x980 [ 336.239961] ? trace_event_raw_event_lock+0x340/0x340 [ 336.245128] ? perf_trace_lock+0x900/0x900 [ 336.249359] ? lock_acquire+0x1d5/0x580 [ 336.253312] ? trace_hardirqs_off+0x10/0x10 [ 336.257614] ? perf_trace_lock_acquire+0xe3/0x980 [ 336.262433] ? __lock_acquire+0x638/0x3c30 [ 336.266644] ? trace_event_raw_event_lock+0x340/0x340 [ 336.271809] ? perf_trace_lock+0x900/0x900 [ 336.276025] ? find_held_lock+0x35/0x1d0 [ 336.280068] ? perf_trace_lock+0xd6/0x900 [ 336.284196] ? trace_event_raw_event_lock+0x340/0x340 [ 336.289365] ? find_held_lock+0x35/0x1d0 [ 336.293407] ? trace_hardirqs_off+0x10/0x10 [ 336.297707] ? get_pid_task+0xa5/0x150 [ 336.301577] ? perf_trace_lock+0xd6/0x900 [ 336.305706] ? find_held_lock+0x35/0x1d0 [ 336.309750] ? __f_unlock_pos+0x19/0x20 [ 336.313701] ? lock_downgrade+0x980/0x980 [ 336.317830] ? kasan_check_write+0x14/0x20 [ 336.322045] ? proc_fail_nth_write+0x9b/0x1e0 [ 336.326519] ? map_files_get_link+0x3b0/0x3b0 [ 336.330992] ? trace_hardirqs_off+0x10/0x10 [ 336.335296] ? find_held_lock+0x35/0x1d0 [ 336.339337] _do_fork+0x1f7/0xfa0 [ 336.342770] ? fork_idle+0x2d0/0x2d0 [ 336.346480] ? __sb_end_write+0xa0/0xd0 [ 336.350438] ? kasan_check_write+0x14/0x20 [ 336.354649] ? fput+0xe0/0x150 [ 336.357817] ? ksys_write+0x184/0x220 [ 336.361596] ? SyS_read+0x30/0x30 [ 336.365030] ? kasan_check_write+0x14/0x20 [ 336.369247] compat_SyS_x86_clone+0x3b/0x50 [ 336.373546] ? compat_SyS_x86_fallocate+0x60/0x60 [ 336.378367] do_fast_syscall_32+0x3ec/0xf9f [ 336.382669] ? do_int80_syscall_32+0x9c0/0x9c0 [ 336.387226] ? finish_task_switch+0x1b9/0x970 [ 336.391697] ? finish_task_switch+0x17a/0x970 [ 336.396175] ? syscall_return_slowpath+0x2ac/0x550 [ 336.401084] ? prepare_exit_to_usermode+0x350/0x350 [ 336.406084] ? sysret32_from_system_call+0x5/0x3c [ 336.410906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.415732] entry_SYSENTER_compat+0x70/0x7f [ 336.420117] RIP: 0023:0xf7fc0c99 [ 336.423459] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 336.431148] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 336.438393] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:32:33 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000001c0)={0x3}) clock_gettime(0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000200)="e814392ac843110531d3e07d9b02400e537de09ea9ece587aa8e29d82fbdda0c190e95fa27581a3160eeebed1afbd2fcdaeeb9371f8d828b6f3400c9ce8dad9bc84531e7b1450e73ebd7505139f9b5b31d065e0e0a5973cc5daa61258beba272ce2d4482d4f3461d5437ce2f7c6b523adc8da84c9f329518c3e72d0a0405037f8a0d121f25ed2d57999d3a4067993dc0f2e58e3f9cb287cd4c2289cee03129dfc94e7ed3a1b3506e00101491a91fcc8aafaed591d15df3b9e95c0e1ee47ab29073f8b988d882ba270069574f96db298faa373376d615645da3ece0a89254b4ce21e8e789f2", 0xe5, 0xfffffffffffff7b4, &(0x7f0000000140)={r2, r3+10000000}) [ 336.445639] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.452884] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 336.460130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000240)='M', &(0x7f0000000300)=""/217}, 0x18) 2018/04/05 15:32:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000080)="48803d6b61439579b6d04dd4102d09b21f8e3ef66a49b9acdf65e7fc2c583929"}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x6, @loopback={0x0, 0x1}, 0xbc}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)='sit0\x00', 0x5}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0xfffffffffffffffc, 0x30}, 0xc) execveat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='sit0\x00'], &(0x7f0000000540)=[&(0x7f0000000340)='sit0\x00', &(0x7f0000000380)='/dev/audio#\x00', &(0x7f00000003c0)='sit0\x00', &(0x7f0000000400)='&\x00', &(0x7f0000000440)='securitywlan1\x00', &(0x7f0000000480)='/dev/audio#\x00', &(0x7f00000004c0)='+mime_type)}\x00', &(0x7f0000000500)='/dev/audio#\x00'], 0x1000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0xd3b4, 0x81, 0x85, 0x7}, 0x10) 2018/04/05 15:32:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:34 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x200) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:34 executing program 1: mmap(&(0x7f0000485000/0x1000)=nil, 0x1000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x5cc01) flistxattr(r0, &(0x7f0000000040)=""/211, 0xd3) uselib(&(0x7f0000000240)='./file0\x00') 2018/04/05 15:32:34 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001800)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001c80)}}], 0x2, 0x8000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) write$fuse(r2, &(0x7f00000000c0)={0x18, 0x1, 0x6, @fuse_bmap_out={0x7}}, 0x18) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:34 executing program 2 (fault-call:0 fault-nth:5): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:34 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x0, 0x0, 0x23c, 0xffffffff, 0xffffffff, 0x39c, 0x39c, 0x39c, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller0\x00', 'ip_vti0\x00', {}, {0xff}, 0xc, 0x0, 0x2, 0x18}, 0x0, 0xc8, 0x100}, @common=@unspec=@RATEEST={0x38, 'RATEEST\x00', 0x0, {'syz1\x00', 0x80000000, 0x1ff, 0x1}}}, {{@uncond, 0x0, 0x118, 0x13c, 0x0, {}, [@common=@eui64={0x24, 'eui64\x00'}, @common=@unspec=@mark={0x2c, 'mark\x00', 0x1, {0x7fffffff, 0xfffffffffffffffc}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, [0xff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffffff], 'teql0\x00', 'ip6gre0\x00', {0xff}, {}, 0x3f, 0x101, 0x1, 0x28}, 0x0, 0x13c, 0x160, 0x0, {}, [@common=@mh={0x24, 'mh\x00', 0x0, {0x0, 0xffffffffffffffe1, 0x1}}, @common=@inet=@set4={0x50, 'set\x00', 0x4, {{0x7, 0xf7f, 0x26cf}, {0xe7}, {0x20, 0x8}, 0x7}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0xff, 0x2) r1 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5daea09a9829b9c4, 0x10) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)=ANY=[]) 2018/04/05 15:32:34 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x4}, &(0x7f0000000540), 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000940)={0x10}) ioctl$TCSETSW(r1, 0x5402, &(0x7f00009dc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) r3 = syz_open_pts(r1, 0x200000000) ioctl$TCXONC(r3, 0x540a, 0xffffffff) readv(r3, &(0x7f00001aa000)=[{&(0x7f00006aaf01)=""/255, 0xff}], 0x1) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="4d84333445eca8a951986a846c5c47b68503b6b9bfb9194d56959e784903d6fce785e33be7c12ba8fda1307fec", 0x2d, 0xfffffffffffffffc) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='cpuset\x00', 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000000440)=0x10) keyctl$unlink(0x9, r4, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000480)=""/146) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000300)={0x9, 0x0, 0xffff, 0xff, 0x3, 0xdca6, 0x6, 0x3, 0x8, 0x0, 0x10001, 0x3}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x6, 0x10000000, 0x4, 0x9, 0x0, 0x1, 0x0, 0x800, 0x8, 0x40, 0x1, 0x1}) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000040)=0xcc9a, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7636}) close(r1) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="1ce2f423ff7cd65e2ba20381de1ea6d7d6f11de348ade74dcfd57ee353ad343d19421ac0259b064c3980411c2c328a800b884e674c550b240fb1a78bd640e9d49a223522cc6bd4fb65b4a65bc35a88c298fa8fc7ce1ba377cf83d2e0074618b030188cbc57da74c34cd27ea7cc775a502a1096ba", 0x74}, {&(0x7f0000000700)="0b70ff046042e343cf32333681d12ca0e41ff057e93940121bbcc5d2f7ac5a05983fe664ca5de8f9b324bda00ea9dbc081cdce73296231c1488d24e57098860772f5f79f78f5afb5d2470e77be215654cb7ed3d5026e3dc04800c14ce9a88111e38c569f0e0ab31af80d4ee56876a8f97542dd4610ea0f6debac361e8726835c054856166b637ef311b74dc3911e95341bf9fe429348bfbd25ffe877a4bb7a2d6da19dcdefc8c8d2aa51a1a2f5cb7a2e13fa216f69c6f36bcbec05134481dd9aa1b252422615bbc0f98e50", 0xcb}], 0x2, 0xa) [ 336.796058] FAULT_INJECTION: forcing a failure. [ 336.796058] name failslab, interval 1, probability 0, space 0, times 0 [ 336.807351] CPU: 1 PID: 23913 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 336.814359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.823706] Call Trace: [ 336.826293] dump_stack+0x1a7/0x27d [ 336.829921] ? arch_local_irq_restore+0x53/0x53 [ 336.834667] ? is_bpf_text_address+0xa4/0x120 [ 336.839167] ? kernel_text_address+0xd1/0xe0 [ 336.843633] ? __unwind_start+0x169/0x330 [ 336.847786] should_fail+0x914/0xae0 [ 336.851497] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.856589] ? save_stack+0xa3/0xd0 [ 336.860195] ? save_stack+0x43/0xd0 [ 336.863800] ? kasan_kmalloc+0xad/0xe0 [ 336.867668] ? kmem_cache_alloc_trace+0x136/0x740 [ 336.872495] ? find_held_lock+0x35/0x1d0 [ 336.876551] ? check_same_owner+0x320/0x320 [ 336.880858] ? rcu_note_context_switch+0x710/0x710 [ 336.885774] should_failslab+0xec/0x120 [ 336.889728] kmem_cache_alloc_node_trace+0x5a/0x760 [ 336.894731] ? alloc_fdtable+0x7f/0x280 [ 336.898687] __kmalloc_node+0x33/0x70 [ 336.902470] kvmalloc_node+0x99/0xd0 [ 336.906166] alloc_fdtable+0xcf/0x280 [ 336.909948] dup_fd+0x8d4/0xdf0 [ 336.913212] ? ksys_dup3+0x5c0/0x5c0 [ 336.916909] ? perf_event_init_task+0x1d5/0x820 [ 336.921557] ? sched_fork+0x476/0xc10 [ 336.925337] ? ktime_get_with_offset+0x2c1/0x420 [ 336.930074] ? copy_semundo+0xb5/0x340 [ 336.933940] ? SyS_semop+0x30/0x30 [ 336.937465] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.942466] ? __lockdep_init_map+0xe4/0x650 [ 336.946855] ? security_task_alloc+0x81/0xb0 [ 336.951245] copy_process.part.38+0x1eb3/0x6140 [ 336.955891] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 336.961059] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 336.966140] ? print_irqtrace_events+0x270/0x270 [ 336.970876] ? lock_acquire+0x1d5/0x580 [ 336.974829] ? lock_acquire+0x1d5/0x580 [ 336.978785] ? alloc_set_pte+0xf74/0x1780 [ 336.982924] ? __cleanup_sighand+0x50/0x50 [ 336.987138] ? print_irqtrace_events+0x270/0x270 [ 336.991882] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 336.997049] ? lock_downgrade+0x980/0x980 [ 337.001182] ? print_irqtrace_events+0x270/0x270 [ 337.005918] ? kasan_check_read+0x11/0x20 [ 337.010046] ? rcu_is_watching+0x85/0x130 [ 337.014186] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.019358] ? __lock_acquire+0x638/0x3c30 [ 337.023570] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.028750] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.033919] ? print_irqtrace_events+0x270/0x270 [ 337.038653] ? __pagevec_lru_add+0x30/0x30 [ 337.042869] ? lock_acquire+0x1d5/0x580 [ 337.046822] ? trace_hardirqs_off+0x10/0x10 [ 337.051130] ? __lock_acquire+0x638/0x3c30 [ 337.055341] ? check_same_owner+0x320/0x320 [ 337.059647] ? find_held_lock+0x35/0x1d0 [ 337.063690] ? trace_hardirqs_off+0x10/0x10 [ 337.067989] ? _parse_integer+0xe9/0x140 [ 337.072038] ? trace_hardirqs_off+0x10/0x10 [ 337.076340] ? _parse_integer+0x140/0x140 [ 337.080463] ? check_same_owner+0x320/0x320 [ 337.084765] ? find_held_lock+0x35/0x1d0 [ 337.088804] ? trace_hardirqs_off+0x10/0x10 [ 337.093105] ? get_pid_task+0xa5/0x150 [ 337.096972] ? lock_downgrade+0x980/0x980 [ 337.101107] ? find_held_lock+0x35/0x1d0 [ 337.105154] ? __f_unlock_pos+0x19/0x20 [ 337.109107] ? lock_downgrade+0x980/0x980 [ 337.113234] ? kasan_check_write+0x14/0x20 [ 337.117447] ? proc_fail_nth_write+0x9b/0x1e0 [ 337.121923] ? map_files_get_link+0x3b0/0x3b0 [ 337.126397] ? trace_hardirqs_off+0x10/0x10 [ 337.130701] ? find_held_lock+0x35/0x1d0 [ 337.134743] _do_fork+0x1f7/0xfa0 [ 337.138177] ? fork_idle+0x2d0/0x2d0 [ 337.141874] ? __lock_is_held+0xb6/0x140 [ 337.145926] ? __sb_end_write+0xa0/0xd0 [ 337.149880] ? kasan_check_write+0x14/0x20 [ 337.154093] ? fput+0xe0/0x150 [ 337.157263] ? ksys_write+0x184/0x220 [ 337.161043] ? SyS_read+0x30/0x30 [ 337.164473] ? kasan_check_write+0x14/0x20 [ 337.168692] compat_SyS_x86_clone+0x3b/0x50 [ 337.172995] ? compat_SyS_x86_fallocate+0x60/0x60 [ 337.177819] do_fast_syscall_32+0x3ec/0xf9f [ 337.182125] ? do_int80_syscall_32+0x9c0/0x9c0 [ 337.186684] ? finish_task_switch+0x1b9/0x970 [ 337.191159] ? finish_task_switch+0x17a/0x970 [ 337.195638] ? syscall_return_slowpath+0x2ac/0x550 [ 337.200545] ? prepare_exit_to_usermode+0x350/0x350 [ 337.205541] ? sysret32_from_system_call+0x5/0x3c [ 337.210364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.215190] entry_SYSENTER_compat+0x70/0x7f [ 337.219575] RIP: 0023:0xf7fc0c99 [ 337.222919] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 337.230604] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 337.237853] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:32:34 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='\'', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) [ 337.245109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.252356] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.259601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:34 executing program 5: r0 = dup(0xffffffffffffff9c) getsockname$ipx(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x5) 2018/04/05 15:32:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)={0x14, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x14}}, 0x14}, 0x1}, 0x0) fcntl$notify(r0, 0x402, 0x80000008) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="000326bd7000fcdbdf25050000000800050007000000380002000800040008000000080004000700000014000100ac1414bb000000000000000000000000080009000200000008000600000000000c00030008000500ac1414170c00030008000300040000000800040007000000440002000800080040000000080006000200000008000b000a000000080005000800000008000b000a000000080007007f000000080008000101000008000600000000803400010008000b00736970000800020089000000080006007368000008000800070000000800020000000000080204004e200000"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x4004) socket$unix(0x1, 0x7, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clone(0x20010000, &(0x7f0000000340)="9fb4a6f6c58ea03007117260c38ee0470bc0ff49a0186a13af6daac6490e4eadce3718220714549e8d9af7fef0eee2aa22a18437095c561ab5975f701143cc9c3a7f4a6432b63bcb73c948fc424779075d1fa83f3c723adc", &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000800)="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") ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000ffa000/0x4000)=nil}) 2018/04/05 15:32:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x30, 0xfffffffffffffffe, 0x0, 0x80000001}, {0x6}]}, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r0, 0x0, r2) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x3f, &(0x7f0000000000)="486cf228c428e533b225a0454e9e13ab34e23e51eb4ac520f6590f7a3ebc48a2f735c242abda6a507987d0b6a1ae27d36f1cb46faa52a17b5460d8aa37b7fca25633ed2f54302601e905e5b01569ea6235445cb9e953f385e60b6f618a4e0b2210a4875f95c8d9ba55a0f9436ee9bf2dbfb939bf3bd2f43698203c777d778951a957b9e122ac1a14abed298ba100fe55ffc22caf8c993e5f5cd25fa5a244d61b969d5a64fa85d859e1079c02b13a8b1c5d2e66d635e87c5fdf80545a87bd819d977198bfc5fc94e4582d3b17b7ed90cf5f440143df97a1592eee658ac0e4c5ec70ceadc1d9f6a6b6795ec0e93d60cc808910", 0xf2) 2018/04/05 15:32:34 executing program 2 (fault-call:0 fault-nth:6): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 337.369437] FAULT_INJECTION: forcing a failure. [ 337.369437] name failslab, interval 1, probability 0, space 0, times 0 [ 337.380767] CPU: 1 PID: 23941 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 337.387771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.397111] Call Trace: [ 337.399691] dump_stack+0x1a7/0x27d [ 337.403319] ? arch_local_irq_restore+0x53/0x53 [ 337.407997] should_fail+0x914/0xae0 [ 337.411708] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 337.416809] ? save_stack+0xa3/0xd0 [ 337.420426] ? find_held_lock+0x35/0x1d0 [ 337.424488] ? check_same_owner+0x320/0x320 [ 337.428797] ? rcu_note_context_switch+0x710/0x710 [ 337.433713] should_failslab+0xec/0x120 [ 337.437668] kmem_cache_alloc_node_trace+0x5a/0x760 [ 337.442665] ? kasan_unpoison_shadow+0x35/0x50 [ 337.447230] __kmalloc_node+0x33/0x70 [ 337.451016] kvmalloc_node+0x99/0xd0 [ 337.454717] alloc_fdtable+0x13b/0x280 [ 337.458585] dup_fd+0x8d4/0xdf0 [ 337.461850] ? ksys_dup3+0x5c0/0x5c0 [ 337.465554] ? perf_event_init_task+0x1d5/0x820 [ 337.470201] ? sched_fork+0x476/0xc10 [ 337.473982] ? ktime_get_with_offset+0x2c1/0x420 [ 337.478718] ? copy_semundo+0xb5/0x340 [ 337.482584] ? SyS_semop+0x30/0x30 [ 337.486105] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 337.491106] ? __lockdep_init_map+0xe4/0x650 [ 337.495495] ? security_task_alloc+0x81/0xb0 [ 337.499885] copy_process.part.38+0x1eb3/0x6140 [ 337.504533] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.509699] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 337.514785] ? print_irqtrace_events+0x270/0x270 [ 337.519524] ? lock_acquire+0x1d5/0x580 [ 337.523476] ? lock_acquire+0x1d5/0x580 [ 337.527429] ? alloc_set_pte+0xf74/0x1780 [ 337.531565] ? __cleanup_sighand+0x50/0x50 [ 337.535779] ? print_irqtrace_events+0x270/0x270 [ 337.540524] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.545695] ? lock_downgrade+0x980/0x980 [ 337.549826] ? print_irqtrace_events+0x270/0x270 [ 337.554559] ? kasan_check_read+0x11/0x20 [ 337.558686] ? rcu_is_watching+0x85/0x130 [ 337.562822] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.567994] ? __lock_acquire+0x638/0x3c30 [ 337.572212] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.577397] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 337.582566] ? print_irqtrace_events+0x270/0x270 [ 337.587301] ? __pagevec_lru_add+0x30/0x30 [ 337.591519] ? lock_acquire+0x1d5/0x580 [ 337.595475] ? trace_hardirqs_off+0x10/0x10 [ 337.599779] ? __lock_acquire+0x638/0x3c30 [ 337.603993] ? check_same_owner+0x320/0x320 [ 337.608766] ? find_held_lock+0x35/0x1d0 [ 337.612810] ? trace_hardirqs_off+0x10/0x10 [ 337.617109] ? _parse_integer+0xe9/0x140 [ 337.621152] ? trace_hardirqs_off+0x10/0x10 [ 337.625453] ? _parse_integer+0x140/0x140 [ 337.629580] ? check_same_owner+0x320/0x320 [ 337.633886] ? find_held_lock+0x35/0x1d0 [ 337.637929] ? trace_hardirqs_off+0x10/0x10 [ 337.642231] ? get_pid_task+0xa5/0x150 [ 337.646099] ? lock_downgrade+0x980/0x980 [ 337.650229] ? find_held_lock+0x35/0x1d0 [ 337.654274] ? __f_unlock_pos+0x19/0x20 [ 337.658228] ? lock_downgrade+0x980/0x980 [ 337.662361] ? kasan_check_write+0x14/0x20 [ 337.666575] ? proc_fail_nth_write+0x9b/0x1e0 [ 337.671052] ? map_files_get_link+0x3b0/0x3b0 [ 337.675525] ? trace_hardirqs_off+0x10/0x10 [ 337.679826] ? find_held_lock+0x35/0x1d0 [ 337.683869] _do_fork+0x1f7/0xfa0 [ 337.687304] ? fork_idle+0x2d0/0x2d0 [ 337.690998] ? __lock_is_held+0xb6/0x140 [ 337.695060] ? __sb_end_write+0xa0/0xd0 [ 337.699028] ? kasan_check_write+0x14/0x20 [ 337.703240] ? fput+0xe0/0x150 [ 337.706410] ? ksys_write+0x184/0x220 [ 337.710189] ? SyS_read+0x30/0x30 [ 337.713620] ? kasan_check_write+0x14/0x20 [ 337.717840] compat_SyS_x86_clone+0x3b/0x50 [ 337.722142] ? compat_SyS_x86_fallocate+0x60/0x60 [ 337.726963] do_fast_syscall_32+0x3ec/0xf9f [ 337.731267] ? do_int80_syscall_32+0x9c0/0x9c0 [ 337.735828] ? finish_task_switch+0x1b9/0x970 [ 337.740298] ? finish_task_switch+0x17a/0x970 [ 337.744774] ? syscall_return_slowpath+0x2ac/0x550 [ 337.749680] ? prepare_exit_to_usermode+0x350/0x350 [ 337.754677] ? sysret32_from_system_call+0x5/0x3c [ 337.759500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.764324] entry_SYSENTER_compat+0x70/0x7f 2018/04/05 15:32:35 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x20000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x20000) perf_event_open$cgroup(&(0x7f00000001c0)={0x6, 0x70, 0x8000, 0xf44, 0x991, 0x4, 0x0, 0x20, 0x10400, 0xc, 0x9, 0x4, 0x3, 0x80000001, 0x5, 0xfffffffffffffff9, 0x4, 0x0, 0x81, 0x8, 0x3223, 0xff, 0x4, 0x3, 0x7, 0x8, 0x4, 0x6, 0xffffffffffff0ae3, 0x4, 0x40, 0x401, 0x85c7, 0x1, 0x8, 0x10001, 0x6, 0x524b, 0x0, 0x100000001, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x200, 0x7655, 0x0, 0x7, 0x7fffffff, 0x3, 0x2}, r0, 0x2, r1, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x100000000, 0x4) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) getrlimit(0xb, &(0x7f00000002c0)) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r2, &(0x7f0000000680)="cbf631cd86d52397648c5fff070000000000002719d93f3b6d508dbdd7841d1388a7d8778a5717a2ab6fc9786b3cb5358d67b86d7c5ef1c3d30e49da22f8783c4bf5cbc57f0d37076585edc0c65156602f574bbb763949c79f1be36a0aa61a401a4507d88add5ae7598e928cff37e9eb73f22d0a05b5e254ff8d9b943b334fcdcf5b8be38f3c4db936f26fa5b84f80f8136c8568f1b7854ee9adb333014a2108f3b4f61f5f9c61d1df4779cb0c0c04bc85d7b8cd2061880ebd4f2b5893ec1e053459e4fa066f284562ec12c91f20d1f14806f4b228eee4aea3aefde3e07e1d3725299ab747e4a27130cdb53b0848486dbbffad827b3b89fc75651888d32149c2fe91ea05a205d40e753dd4bf37f7211cc9aead514d4dd3563e0a32f3c8dcf7f908c1d69601caae003e3ec1fc188804d45574cca72016d070661ce35328fc20cd1cf121007a6dc3fb784172055971da249d84b89ee59a6bd7593cbbc5ccb5f5af8ea573f785d6a77bf4cc1a710fe43dc96bb53c49c67d362beb70089f672bbaf22072333deba09777b749664bd0ab0ba8368319c3fb5c39c43b31faf12bf9b6d2a7c8a70fcf492eae38cb1d0be819323f73245a9852efe0180e20be3f5ae0378c817b9cea588eee1458a936699ddf1f16b92bf7a54a225846c6be586079cd39c66483295ef85af4484141d4e6aaa9a7d20a92a5ca4d2f0c6583a4443cfe237c112cb3f11ddfe50c14285d77d01ee7de5f8c3c3d020603400baab37ab56734f2109133ba1483c23f37d0259397ce8e5ac75ce605eedbbc5e13ec1f405842b39845879292c4a63bd7f06cc4bb0ae1a923af76ae7449e1db99a6a8277cafa5fec588", 0x3cdd64d27fc6e93f, 0x80000000, &(0x7f0000000040)={0x77359400}) 2018/04/05 15:32:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 337.768711] RIP: 0023:0xf7fc0c99 [ 337.772053] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 337.779746] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 337.786996] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 337.794249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.801495] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 337.808741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x101d}, 0x2c) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xf663, 0x40200) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000001"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x438, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 15:32:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x4}, &(0x7f0000000540), 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000940)={0x10}) ioctl$TCSETSW(r1, 0x5402, &(0x7f00009dc000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) r3 = syz_open_pts(r1, 0x200000000) ioctl$TCXONC(r3, 0x540a, 0xffffffff) readv(r3, &(0x7f00001aa000)=[{&(0x7f00006aaf01)=""/255, 0xff}], 0x1) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="4d84333445eca8a951986a846c5c47b68503b6b9bfb9194d56959e784903d6fce785e33be7c12ba8fda1307fec", 0x2d, 0xfffffffffffffffc) request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='cpuset\x00', 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000000440)=0x10) keyctl$unlink(0x9, r4, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000480)=""/146) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000300)={0x9, 0x0, 0xffff, 0xff, 0x3, 0xdca6, 0x6, 0x3, 0x8, 0x0, 0x10001, 0x3}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x6, 0x10000000, 0x4, 0x9, 0x0, 0x1, 0x0, 0x800, 0x8, 0x40, 0x1, 0x1}) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000040)=0xcc9a, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7636}) close(r1) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="1ce2f423ff7cd65e2ba20381de1ea6d7d6f11de348ade74dcfd57ee353ad343d19421ac0259b064c3980411c2c328a800b884e674c550b240fb1a78bd640e9d49a223522cc6bd4fb65b4a65bc35a88c298fa8fc7ce1ba377cf83d2e0074618b030188cbc57da74c34cd27ea7cc775a502a1096ba", 0x74}, {&(0x7f0000000700)="0b70ff046042e343cf32333681d12ca0e41ff057e93940121bbcc5d2f7ac5a05983fe664ca5de8f9b324bda00ea9dbc081cdce73296231c1488d24e57098860772f5f79f78f5afb5d2470e77be215654cb7ed3d5026e3dc04800c14ce9a88111e38c569f0e0ab31af80d4ee56876a8f97542dd4610ea0f6debac361e8726835c054856166b637ef311b74dc3911e95341bf9fe429348bfbd25ffe877a4bb7a2d6da19dcdefc8c8d2aa51a1a2f5cb7a2e13fa216f69c6f36bcbec05134481dd9aa1b252422615bbc0f98e50", 0xcb}], 0x2, 0xa) 2018/04/05 15:32:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040), &(0x7f0000000140), 0x0) 2018/04/05 15:32:36 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0x0, 0x40002122, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0xf7, 0x3, 0x8000}}) 2018/04/05 15:32:36 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) fcntl$setflags(r0, 0x2, 0x1) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000080)="1d52ddba4e01de77138a61e317c79c1aeda0770430a63de6fdeb7e26df1da75616e9", 0xa, 0x3, &(0x7f0000000100)={r1, r2+30000000}) 2018/04/05 15:32:36 executing program 3: write(0xffffffffffffffff, &(0x7f0000000000)="290000001400070002ffffffea08e0eb010010e2dfa4478b77", 0x19) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f00000001c0)='_'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) 2018/04/05 15:32:36 executing program 2 (fault-call:0 fault-nth:7): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 338.829910] FAULT_INJECTION: forcing a failure. [ 338.829910] name failslab, interval 1, probability 0, space 0, times 0 [ 338.841238] CPU: 1 PID: 23965 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 338.848278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.857623] Call Trace: [ 338.860198] dump_stack+0x1a7/0x27d [ 338.863813] ? arch_local_irq_restore+0x53/0x53 [ 338.868465] ? find_held_lock+0x35/0x1d0 [ 338.872514] should_fail+0x914/0xae0 [ 338.876208] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 338.881296] ? kasan_check_read+0x11/0x20 [ 338.885424] ? do_raw_spin_unlock+0x9e/0x310 [ 338.889809] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 338.894375] ? trace_hardirqs_off+0x10/0x10 [ 338.898681] ? find_held_lock+0x35/0x1d0 [ 338.902737] ? check_same_owner+0x320/0x320 [ 338.907047] ? rcu_note_context_switch+0x710/0x710 [ 338.911965] should_failslab+0xec/0x120 [ 338.915919] kmem_cache_alloc+0x47/0x760 [ 338.919960] ? kasan_check_write+0x14/0x20 [ 338.924174] ? do_raw_spin_lock+0xc1/0x230 [ 338.928396] copy_process.part.38+0x203e/0x6140 [ 338.933044] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 338.938209] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 338.943295] ? print_irqtrace_events+0x270/0x270 [ 338.948035] ? lock_acquire+0x1d5/0x580 [ 338.951991] ? lock_acquire+0x1d5/0x580 [ 338.955950] ? alloc_set_pte+0xf74/0x1780 [ 338.960090] ? __cleanup_sighand+0x50/0x50 [ 338.964309] ? print_irqtrace_events+0x270/0x270 [ 338.969054] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 338.974225] ? lock_downgrade+0x980/0x980 [ 338.978358] ? print_irqtrace_events+0x270/0x270 [ 338.983093] ? kasan_check_read+0x11/0x20 [ 338.987224] ? rcu_is_watching+0x85/0x130 [ 338.991365] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 338.996540] ? __lock_acquire+0x638/0x3c30 [ 339.000755] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.005937] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.011109] ? print_irqtrace_events+0x270/0x270 [ 339.015848] ? __pagevec_lru_add+0x30/0x30 [ 339.020065] ? lock_acquire+0x1d5/0x580 [ 339.024023] ? trace_hardirqs_off+0x10/0x10 [ 339.028332] ? __lock_acquire+0x638/0x3c30 [ 339.032545] ? check_same_owner+0x320/0x320 [ 339.036849] ? find_held_lock+0x35/0x1d0 [ 339.040892] ? trace_hardirqs_off+0x10/0x10 [ 339.045191] ? _parse_integer+0xe9/0x140 [ 339.049234] ? trace_hardirqs_off+0x10/0x10 [ 339.053536] ? _parse_integer+0x140/0x140 [ 339.057661] ? check_same_owner+0x320/0x320 [ 339.061965] ? find_held_lock+0x35/0x1d0 [ 339.066005] ? trace_hardirqs_off+0x10/0x10 [ 339.070312] ? get_pid_task+0xa5/0x150 [ 339.074179] ? lock_downgrade+0x980/0x980 [ 339.078312] ? find_held_lock+0x35/0x1d0 [ 339.082360] ? __f_unlock_pos+0x19/0x20 [ 339.086313] ? lock_downgrade+0x980/0x980 [ 339.090441] ? kasan_check_write+0x14/0x20 [ 339.094654] ? proc_fail_nth_write+0x9b/0x1e0 [ 339.099127] ? map_files_get_link+0x3b0/0x3b0 [ 339.103601] ? trace_hardirqs_off+0x10/0x10 [ 339.107903] ? find_held_lock+0x35/0x1d0 [ 339.111947] _do_fork+0x1f7/0xfa0 [ 339.115385] ? fork_idle+0x2d0/0x2d0 [ 339.119082] ? __lock_is_held+0xb6/0x140 [ 339.123137] ? __sb_end_write+0xa0/0xd0 [ 339.127092] ? kasan_check_write+0x14/0x20 [ 339.131302] ? fput+0xe0/0x150 [ 339.134471] ? ksys_write+0x184/0x220 [ 339.138253] ? SyS_read+0x30/0x30 [ 339.141681] ? kasan_check_write+0x14/0x20 [ 339.145904] compat_SyS_x86_clone+0x3b/0x50 [ 339.150204] ? compat_SyS_x86_fallocate+0x60/0x60 [ 339.155031] do_fast_syscall_32+0x3ec/0xf9f [ 339.159337] ? do_int80_syscall_32+0x9c0/0x9c0 [ 339.163899] ? finish_task_switch+0x1b9/0x970 [ 339.168370] ? finish_task_switch+0x17a/0x970 [ 339.172846] ? syscall_return_slowpath+0x2ac/0x550 [ 339.177753] ? prepare_exit_to_usermode+0x350/0x350 [ 339.182755] ? sysret32_from_system_call+0x5/0x3c [ 339.187581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.192405] entry_SYSENTER_compat+0x70/0x7f [ 339.196790] RIP: 0023:0xf7fc0c99 [ 339.200131] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 339.207820] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 339.215069] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 339.222315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/04/05 15:32:36 executing program 1: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./control\x00', 0x108f, 0x0) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f00009ad000)=0x1) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f000009ef58)={{0x80}, "706f7274310000004000000000000000000000d600fffffff0000000000000000000eda4000000000000000700", 0xbffffffdffffffff, 0x2}) readv(r2, &(0x7f0000459000), 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x383, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x6, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000200)) 2018/04/05 15:32:36 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_unlink(&(0x7f0000000040)='-$\x00') r1 = dup(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) migrate_pages(r2, 0x100, &(0x7f0000000140)=0x3f, &(0x7f0000000180)=0x2a5) inotify_init() ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080), 0x2) fcntl$setflags(r0, 0x2, 0x1) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:36 executing program 2 (fault-call:0 fault-nth:8): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 339.229562] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 339.236808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.246864] binder: 23969 RLIMIT_NICE not set 2018/04/05 15:32:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) recvfrom$inet(r0, &(0x7f0000000100)=""/117, 0x75, 0x0, 0x0, 0x25d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) tee(r1, r0, 0x0, 0xd) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0x757, @empty, 0xc02}}, 0x2400000, 0x7fff, 0x800, 0x3, 0x1}, 0x98) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) [ 339.307773] FAULT_INJECTION: forcing a failure. [ 339.307773] name failslab, interval 1, probability 0, space 0, times 0 [ 339.319105] CPU: 1 PID: 23987 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 339.326113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.335458] Call Trace: [ 339.338043] dump_stack+0x1a7/0x27d [ 339.341675] ? arch_local_irq_restore+0x53/0x53 [ 339.346349] should_fail+0x914/0xae0 [ 339.350061] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.355149] ? is_bpf_text_address+0x7b/0x120 [ 339.359624] ? lock_downgrade+0x980/0x980 [ 339.363765] ? find_held_lock+0x35/0x1d0 [ 339.367824] ? check_same_owner+0x320/0x320 [ 339.372162] ? __save_stack_trace+0x7e/0xd0 [ 339.376468] ? rcu_note_context_switch+0x710/0x710 [ 339.381383] should_failslab+0xec/0x120 [ 339.385336] kmem_cache_alloc+0x47/0x760 [ 339.389373] ? save_stack+0x43/0xd0 [ 339.392978] ? kasan_kmalloc+0xad/0xe0 [ 339.396843] ? kasan_slab_alloc+0x12/0x20 [ 339.400969] ? kmem_cache_alloc+0x12e/0x760 [ 339.405267] ? copy_process.part.38+0x203e/0x6140 [ 339.410085] ? _do_fork+0x1f7/0xfa0 [ 339.413689] ? compat_SyS_x86_clone+0x3b/0x50 [ 339.418162] ? do_fast_syscall_32+0x3ec/0xf9f [ 339.422637] ? entry_SYSENTER_compat+0x70/0x7f [ 339.427199] copy_signal+0xfe/0xa31 [ 339.430811] ? set_ti_thread_flag+0x1d/0x1d [ 339.435112] ? lock_downgrade+0x980/0x980 [ 339.439247] ? rcu_is_watching+0x85/0x130 [ 339.443375] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 339.448289] ? kasan_check_read+0x11/0x20 [ 339.452414] ? rcu_is_watching+0x85/0x130 [ 339.456542] ? rcu_pm_notify+0xc0/0xc0 [ 339.460412] ? copy_process.part.38+0x203e/0x6140 [ 339.465239] ? rcu_read_lock_sched_held+0x108/0x120 [ 339.470235] ? kmem_cache_alloc+0x466/0x760 [ 339.474537] ? kasan_check_write+0x14/0x20 [ 339.478749] ? do_raw_spin_lock+0xc1/0x230 [ 339.482966] copy_process.part.38+0x2156/0x6140 [ 339.487615] ? perf_trace_lock+0xd6/0x900 [ 339.491743] ? print_irqtrace_events+0x270/0x270 [ 339.496479] ? mark_held_locks+0xaf/0x100 [ 339.500602] ? lock_acquire+0x1d5/0x580 [ 339.504556] ? retint_kernel+0x10/0x10 [ 339.508432] ? __cleanup_sighand+0x50/0x50 [ 339.512647] ? print_irqtrace_events+0x270/0x270 [ 339.517391] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.522559] ? lock_downgrade+0x980/0x980 [ 339.526687] ? print_irqtrace_events+0x270/0x270 [ 339.531420] ? rcu_is_watching+0x85/0x130 [ 339.535556] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.540728] ? __lock_acquire+0x638/0x3c30 [ 339.544941] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.550120] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 339.555294] ? trace_event_raw_event_lock+0x340/0x340 [ 339.560460] ? perf_trace_lock+0xd6/0x900 [ 339.564590] ? lock_acquire+0x1d5/0x580 [ 339.568542] ? trace_hardirqs_off+0x10/0x10 [ 339.572851] ? __lock_acquire+0x638/0x3c30 [ 339.577065] ? trace_event_raw_event_lock+0x340/0x340 [ 339.582236] ? find_held_lock+0x35/0x1d0 [ 339.586279] ? perf_trace_lock+0xd6/0x900 [ 339.590410] ? trace_event_raw_event_lock+0x340/0x340 [ 339.595576] ? check_same_owner+0x320/0x320 [ 339.599878] ? find_held_lock+0x35/0x1d0 [ 339.603917] ? trace_hardirqs_off+0x10/0x10 [ 339.608597] ? get_pid_task+0xa5/0x150 [ 339.612467] ? perf_trace_lock+0xd6/0x900 [ 339.616598] ? find_held_lock+0x35/0x1d0 [ 339.620645] ? __f_unlock_pos+0x19/0x20 [ 339.624599] ? lock_downgrade+0x980/0x980 [ 339.628728] ? kasan_check_write+0x14/0x20 [ 339.632941] ? proc_fail_nth_write+0x9b/0x1e0 [ 339.637414] ? map_files_get_link+0x3b0/0x3b0 [ 339.641891] ? trace_hardirqs_off+0x10/0x10 [ 339.646196] ? find_held_lock+0x35/0x1d0 [ 339.650238] _do_fork+0x1f7/0xfa0 [ 339.653675] ? fork_idle+0x2d0/0x2d0 [ 339.657386] ? __sb_end_write+0xa0/0xd0 [ 339.661341] ? kasan_check_write+0x14/0x20 [ 339.665551] ? fput+0xe0/0x150 [ 339.668722] ? ksys_write+0x184/0x220 [ 339.672502] ? SyS_read+0x30/0x30 [ 339.675933] ? kasan_check_write+0x14/0x20 [ 339.680155] compat_SyS_x86_clone+0x3b/0x50 [ 339.684455] ? compat_SyS_x86_fallocate+0x60/0x60 [ 339.689276] do_fast_syscall_32+0x3ec/0xf9f [ 339.693581] ? do_int80_syscall_32+0x9c0/0x9c0 [ 339.698144] ? finish_task_switch+0x1b9/0x970 [ 339.702617] ? finish_task_switch+0x17a/0x970 [ 339.707107] ? syscall_return_slowpath+0x2ac/0x550 [ 339.712017] ? prepare_exit_to_usermode+0x350/0x350 [ 339.717018] ? sysret32_from_system_call+0x5/0x3c [ 339.721843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.726666] entry_SYSENTER_compat+0x70/0x7f [ 339.731052] RIP: 0023:0xf7fc0c99 [ 339.734394] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 339.742084] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 339.749329] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:32:37 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {}, {0x4}}], 0x1c) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:37 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x248b03, 0x0) sendmmsg$unix(r1, &(0x7f0000001380)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="817c952779c45cdf676882f9489e1dfe61b5cd04b0c963c5bdd407b0f4073c21d5d007eee8e00febdd", 0x29}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="1400000001000061bd0000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x34, 0x4000}], 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f00000013c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001440)=""/210, 0xd2}, {&(0x7f0000001540)=""/73, 0x49}, {&(0x7f00000015c0)=""/89, 0x59}, {&(0x7f0000001640)=""/144, 0x90}, {&(0x7f0000001700)=""/237, 0xed}, {&(0x7f0000001800)=""/168, 0xa8}, {&(0x7f00000018c0)=""/204, 0xcc}], 0x7, &(0x7f00000019c0)=""/86, 0x56, 0xffffffffffff8001}, 0x16d}], 0x1, 0x10000, &(0x7f0000001ac0)={r4, r5+10000000}) mq_timedsend(r0, &(0x7f0000000040)="e6793947e992880f95a7d0a99ee51f77888de0004bb0491c7de9ebed963087efbcd964ba0a6eb935c61f0c4c66c2f6b7673e5b3aefa782cb08eb8598a2e50dc0f2e37b618c9308373f0a2eb7eacee8461a1b23b71428c5fa0aae1d8c8d7448ece9972bc944a0807da2cf7382a76da164b92dda72e2b8459cc87f432417556b9c9c63196a039e370fd4969b01eac6756e1ab085c9a8133f1e75b80c4d16c70b7b9f4d740af5b4f60aff61029198cec682df925df8ab993a6a847d93eb37228979da70e79e024b186f02be5af5f5b5e67484be3f5b5124a66f52164b4ee10ec38c93f6c6c7f3a22fed6eb61eb7752ec9afd48f5f", 0xf3, 0x3f, &(0x7f0000000180)={r2, r3+10000000}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:37 executing program 2 (fault-call:0 fault-nth:9): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 339.756575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.763819] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 339.771068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.792496] binder: 23968:23996 unknown command 0 [ 339.803242] binder: 23968:23996 ioctl c0306201 20000040 returned -22 2018/04/05 15:32:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e33fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="29593829b279bb195743557a6bbf063c241e6c54a3b277f25501d31eb41a519c1f3e0c8acf53c24f28ded2ca3a3f4a2eab391e7731b460c5ca800364713dd1a67e", 0x41) sendfile(r0, r0, &(0x7f0000000080), 0x8) [ 339.847774] FAULT_INJECTION: forcing a failure. [ 339.847774] name failslab, interval 1, probability 0, space 0, times 0 [ 339.859120] CPU: 1 PID: 24005 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 339.866127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.875477] Call Trace: [ 339.878060] dump_stack+0x1a7/0x27d [ 339.881688] ? arch_local_irq_restore+0x53/0x53 [ 339.886360] should_fail+0x914/0xae0 [ 339.890076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.895182] ? debug_mutex_init+0x1c/0x60 [ 339.899330] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 339.904346] ? __lockdep_init_map+0xe4/0x650 [ 339.908751] ? find_held_lock+0x35/0x1d0 [ 339.912818] ? find_held_lock+0x35/0x1d0 [ 339.916899] ? check_same_owner+0x320/0x320 [ 339.921219] ? rcu_note_context_switch+0x710/0x710 [ 339.926140] should_failslab+0xec/0x120 [ 339.930094] kmem_cache_alloc+0x47/0x760 [ 339.934138] ? copy_namespaces+0x1a3/0x400 [ 339.938354] create_new_namespaces+0x88/0x890 [ 339.942834] ? sys_ni_syscall+0x20/0x20 [ 339.946857] ? ns_capable_common+0xcf/0x160 [ 339.951164] copy_namespaces+0x34d/0x400 [ 339.955209] ? create_new_namespaces+0x890/0x890 [ 339.959942] ? kasan_check_write+0x14/0x20 [ 339.964155] ? do_raw_spin_lock+0xc1/0x230 [ 339.968375] copy_process.part.38+0x23c1/0x6140 [ 339.973027] ? perf_trace_lock+0xd6/0x900 [ 339.977160] ? print_irqtrace_events+0x270/0x270 [ 339.981899] ? trace_event_raw_event_lock+0x340/0x340 [ 339.987066] ? lock_acquire+0x1d5/0x580 [ 339.991022] ? lock_acquire+0x1d5/0x580 [ 339.994979] ? alloc_set_pte+0xf74/0x1780 [ 339.999116] ? __cleanup_sighand+0x50/0x50 [ 340.003334] ? print_irqtrace_events+0x270/0x270 [ 340.008083] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.013255] ? lock_downgrade+0x980/0x980 [ 340.017384] ? print_irqtrace_events+0x270/0x270 [ 340.022122] ? rcu_is_watching+0x85/0x130 [ 340.026258] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.031428] ? __lock_acquire+0x638/0x3c30 [ 340.035641] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.040822] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.045994] ? trace_event_raw_event_lock+0x340/0x340 [ 340.051166] ? perf_trace_lock+0xd6/0x900 [ 340.055297] ? lock_acquire+0x1d5/0x580 [ 340.059253] ? trace_hardirqs_off+0x10/0x10 [ 340.063559] ? __lock_acquire+0x638/0x3c30 [ 340.067774] ? trace_event_raw_event_lock+0x340/0x340 [ 340.072944] ? find_held_lock+0x35/0x1d0 [ 340.076988] ? perf_trace_lock+0xd6/0x900 [ 340.081123] ? trace_event_raw_event_lock+0x340/0x340 [ 340.086292] ? check_same_owner+0x320/0x320 [ 340.090594] ? find_held_lock+0x35/0x1d0 [ 340.094635] ? trace_hardirqs_off+0x10/0x10 [ 340.098939] ? get_pid_task+0xa5/0x150 [ 340.102809] ? perf_trace_lock+0xd6/0x900 [ 340.106942] ? find_held_lock+0x35/0x1d0 [ 340.110989] ? __f_unlock_pos+0x19/0x20 [ 340.114946] ? lock_downgrade+0x980/0x980 [ 340.119074] ? kasan_check_write+0x14/0x20 [ 340.123288] ? proc_fail_nth_write+0x9b/0x1e0 [ 340.127760] ? map_files_get_link+0x3b0/0x3b0 [ 340.132233] ? trace_hardirqs_off+0x10/0x10 [ 340.136534] ? find_held_lock+0x35/0x1d0 [ 340.140578] _do_fork+0x1f7/0xfa0 [ 340.144021] ? fork_idle+0x2d0/0x2d0 [ 340.147732] ? __sb_end_write+0xa0/0xd0 [ 340.151687] ? kasan_check_write+0x14/0x20 [ 340.155897] ? fput+0xe0/0x150 [ 340.159068] ? ksys_write+0x184/0x220 [ 340.162850] ? SyS_read+0x30/0x30 [ 340.166282] ? kasan_check_write+0x14/0x20 [ 340.170500] compat_SyS_x86_clone+0x3b/0x50 [ 340.174800] ? compat_SyS_x86_fallocate+0x60/0x60 [ 340.179620] do_fast_syscall_32+0x3ec/0xf9f [ 340.183924] ? do_int80_syscall_32+0x9c0/0x9c0 [ 340.188484] ? finish_task_switch+0x1b9/0x970 [ 340.192955] ? finish_task_switch+0x17a/0x970 [ 340.197432] ? syscall_return_slowpath+0x2ac/0x550 [ 340.202340] ? prepare_exit_to_usermode+0x350/0x350 [ 340.207335] ? sysret32_from_system_call+0x5/0x3c [ 340.212162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.216986] entry_SYSENTER_compat+0x70/0x7f [ 340.221373] RIP: 0023:0xf7fc0c99 [ 340.224715] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 340.232402] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 340.239650] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 340.246901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.254157] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 340.261406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.277511] binder: BINDER_SET_CONTEXT_MGR already set [ 340.277522] binder: 23996 RLIMIT_NICE not set [ 340.291649] binder: 23968:24010 ioctl 40046207 0 returned -16 [ 340.301555] binder_alloc: binder_alloc_mmap_handler: 23968 2000c000-2000e000 already mapped failed -16 [ 340.322335] binder: 23968:24013 unknown command 0 [ 340.331842] binder: 23968:24013 ioctl c0306201 20000040 returned -22 2018/04/05 15:32:38 executing program 4: r0 = epoll_create(0x8) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x0, 0x0, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0x400) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) accept4$alg(r1, 0x0, 0x0, 0x80000) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101081, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40047705, &(0x7f0000000240)={0xd8b, 0x80000001}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) 2018/04/05 15:32:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xff, 0x10000) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000200)={0x20, 0x5, 0x1, 0x8, 0x5, [{0x1, 0x9, 0x7ff, 0x0, 0x0, 0x1}, {0x5, 0x7, 0xcbb, 0x0, 0x0, 0x4}, {0xe000000, 0x9, 0x8000, 0x0, 0x0, 0x400}, {0x3f, 0x4, 0x4, 0x0, 0x0, 0x500}, {0x3, 0x3f, 0xfffffffffffff800, 0x0, 0x0, 0x80}]}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x20040, 0x0) listen(r4, 0x7fff) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000000000000030000000800000088e5b13c23000be8b0eda3addfc5dd8cbb42c774ea14fc9383dfc1521f842f5c4b26f109ddaa9bb12d6b5f6a8154684a5500fdf6fd9d909790c54c98f435af0c88e05d54ed315be8fc5e19efe155dab755e9e150db29bf96d3a7bd7dc7c61291082f918fd7766b0162d965634530479941f1e1386e8f6d52ae96ff170b4e0200da2d49c7f1c33944df53806faa"]) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000001c0)={r5, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0xffffffffffff8000, 0x6, 0x100, 0x3}) r6 = socket(0x3, 0x80002, 0x2) getpeername$ipx(r6, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/04/05 15:32:38 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x8, 0x0, 'client0\x00', 0x0, "776076fa4453260e", "7e53b2b53004c3874443388a98bafaa0cc52b2c4c6063009043a5333ad151033", 0x7, 0xee}) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r4, 0x0, 0x80) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:38 executing program 2 (fault-call:0 fault-nth:10): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff08) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00ff0000"], &(0x7f0000000100)=0x8) 2018/04/05 15:32:38 executing program 1: perf_event_open(&(0x7f0000348f88)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x200000) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000002280)={&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'vlan0\x00'}}, 0x80, &(0x7f0000002200)}, 0x0) keyctl$join(0x1, &(0x7f0000fb7000)={0x73, 0x79, 0x7a}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) keyctl$session_to_parent(0x12) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000001c0), 0x4) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x4013}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x501800, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000480)=0x20, 0x80, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="9800de99"], 0x1}, 0x1, 0x0, 0x0, 0xd01c5258900548cf}, 0x40810) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x0, 0x8, [0x672, 0x9, 0xc00, 0x121f9c9, 0xe1, 0x8, 0x6, 0x7]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000380)={0xfffffffffffff6be, 0xff, 0x4, 0x100, 0x8001, 0x1, 0x6, 0x7, r4}, &(0x7f00000003c0)=0x20) socketpair$inet6(0xa, 0x5, 0x8000, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0), 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4041, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r7, 0x4) pwrite64(r7, &(0x7f00000001c0)="cf", 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000040)={0x0, 0x1, 0x3f}) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x80000001, 0x4, 0x1, 0x6, 0x0, 0x8, 0x9, {r5, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x4, 0x100000001, 0x97c9, 0x3, 0x386}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000180)={0x3, 0x4, 0x0, 0x5dd6, 0x3, 0x40000, 0x7, 0x3, r8}, &(0x7f00000002c0)=0xffffffffffffff54) 2018/04/05 15:32:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) listen(r1, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:38 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)) [ 340.665542] FAULT_INJECTION: forcing a failure. [ 340.665542] name failslab, interval 1, probability 0, space 0, times 0 [ 340.676842] CPU: 1 PID: 24021 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 340.684116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.693463] Call Trace: [ 340.696043] dump_stack+0x1a7/0x27d [ 340.699660] ? arch_local_irq_restore+0x53/0x53 [ 340.704316] ? lock_downgrade+0x980/0x980 [ 340.708452] should_fail+0x914/0xae0 [ 340.712150] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.717232] ? inc_ucount+0x204/0x970 [ 340.721016] ? lock_downgrade+0x980/0x980 [ 340.725153] ? find_held_lock+0x35/0x1d0 [ 340.729211] ? check_same_owner+0x320/0x320 [ 340.733514] ? rcu_note_context_switch+0x710/0x710 [ 340.738417] ? retire_userns_sysctls+0x90/0x90 [ 340.742985] should_failslab+0xec/0x120 [ 340.746940] kmem_cache_alloc+0x47/0x760 [ 340.750983] ? kasan_check_read+0x11/0x20 [ 340.755177] ? refcount_inc_not_zero+0x1a4/0x280 [ 340.759937] copy_pid_ns+0x257/0xca0 [ 340.763638] ? pidns_get+0x170/0x170 [ 340.767335] ? refcount_inc+0x1e/0x50 [ 340.771117] ? copy_ipcs+0xb3/0x580 [ 340.774725] ? ipcns_get+0xf0/0xf0 [ 340.778248] ? do_mount+0x2b90/0x2b90 [ 340.782035] ? copy_namespaces+0x1a3/0x400 [ 340.786253] create_new_namespaces+0x314/0x890 [ 340.790819] ? sys_ni_syscall+0x20/0x20 [ 340.794776] ? ns_capable_common+0xcf/0x160 [ 340.799080] copy_namespaces+0x34d/0x400 [ 340.803125] ? create_new_namespaces+0x890/0x890 [ 340.807859] ? kasan_check_write+0x14/0x20 [ 340.812075] ? do_raw_spin_lock+0xc1/0x230 [ 340.816297] copy_process.part.38+0x23c1/0x6140 [ 340.820947] ? __enqueue_entity+0x109/0x1e0 [ 340.825263] ? print_irqtrace_events+0x270/0x270 [ 340.830001] ? lock_acquire+0x1d5/0x580 [ 340.833960] ? lock_acquire+0x1d5/0x580 [ 340.837915] ? alloc_set_pte+0xf74/0x1780 [ 340.842052] ? __cleanup_sighand+0x50/0x50 [ 340.846268] ? print_irqtrace_events+0x270/0x270 [ 340.851035] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.856202] ? lock_downgrade+0x980/0x980 [ 340.860333] ? print_irqtrace_events+0x270/0x270 [ 340.865065] ? kasan_check_read+0x11/0x20 [ 340.869190] ? rcu_is_watching+0x85/0x130 [ 340.873326] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.878498] ? __lock_acquire+0x638/0x3c30 [ 340.882712] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.887890] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.893059] ? print_irqtrace_events+0x270/0x270 [ 340.897794] ? __pagevec_lru_add+0x30/0x30 [ 340.902016] ? lock_acquire+0x1d5/0x580 [ 340.905971] ? trace_hardirqs_off+0x10/0x10 [ 340.910276] ? __lock_acquire+0x638/0x3c30 [ 340.914487] ? check_same_owner+0x320/0x320 [ 340.918793] ? find_held_lock+0x35/0x1d0 [ 340.922836] ? trace_hardirqs_off+0x10/0x10 [ 340.927137] ? _parse_integer+0xe9/0x140 [ 340.931183] ? trace_hardirqs_off+0x10/0x10 [ 340.935484] ? _parse_integer+0x140/0x140 [ 340.939611] ? check_same_owner+0x320/0x320 [ 340.943914] ? find_held_lock+0x35/0x1d0 [ 340.947955] ? trace_hardirqs_off+0x10/0x10 [ 340.952257] ? get_pid_task+0xa5/0x150 [ 340.956123] ? lock_downgrade+0x980/0x980 [ 340.960254] ? find_held_lock+0x35/0x1d0 [ 340.964304] ? __f_unlock_pos+0x19/0x20 [ 340.968257] ? lock_downgrade+0x980/0x980 [ 340.972386] ? kasan_check_write+0x14/0x20 [ 340.976599] ? proc_fail_nth_write+0x9b/0x1e0 [ 340.981072] ? map_files_get_link+0x3b0/0x3b0 [ 340.985547] ? trace_hardirqs_off+0x10/0x10 [ 340.989851] ? find_held_lock+0x35/0x1d0 [ 340.993891] _do_fork+0x1f7/0xfa0 [ 340.997326] ? fork_idle+0x2d0/0x2d0 [ 341.001026] ? __lock_is_held+0xb6/0x140 [ 341.005081] ? __sb_end_write+0xa0/0xd0 [ 341.009036] ? kasan_check_write+0x14/0x20 [ 341.013248] ? fput+0xe0/0x150 [ 341.016419] ? ksys_write+0x184/0x220 [ 341.020198] ? SyS_read+0x30/0x30 [ 341.023629] ? kasan_check_write+0x14/0x20 [ 341.027849] compat_SyS_x86_clone+0x3b/0x50 [ 341.032152] ? compat_SyS_x86_fallocate+0x60/0x60 [ 341.036975] do_fast_syscall_32+0x3ec/0xf9f [ 341.041281] ? do_int80_syscall_32+0x9c0/0x9c0 [ 341.045844] ? finish_task_switch+0x1b9/0x970 [ 341.050313] ? finish_task_switch+0x17a/0x970 [ 341.054792] ? syscall_return_slowpath+0x2ac/0x550 [ 341.059700] ? prepare_exit_to_usermode+0x350/0x350 [ 341.064698] ? sysret32_from_system_call+0x5/0x3c [ 341.069522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.074347] entry_SYSENTER_compat+0x70/0x7f [ 341.078732] RIP: 0023:0xf7fc0c99 [ 341.082076] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 341.089765] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 341.097018] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 341.104267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.111514] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 341.118762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:38 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x20}, {0xa, 0x4e22, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x26, [0xffffffffffff8001, 0x3, 0x602, 0x0, 0xe, 0x254f, 0x8, 0x2]}, 0x5c) 2018/04/05 15:32:38 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x51, &(0x7f0000664fc0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000000}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) fcntl$setstatus(r0, 0x4, 0x40c00) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={{0x80000000, 0x88, 0x0, 0x5, 0x7cd67b, 0x12b}, 0xffffffff7fffffff}) sendto$ipx(r1, &(0x7f00000000c0)="710ca5e4e624e75b00c1a4bac30f7081e2b1eadebc49569918345d164c560bfb7714d514be7ffb8eef111d1183a8a0f4f8d6bcafc6ce84727f0db1fefc444a", 0x3f, 0x4080, &(0x7f0000000100)={0x4, 0x2, 0x400, "a626dcc8e378", 0x2ba}, 0x8) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 341.186204] QAT: Invalid ioctl 2018/04/05 15:32:38 executing program 2 (fault-call:0 fault-nth:11): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:38 executing program 3: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x180) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x3422, 0x0, 0x400, 'queue1\x00', 0x3f}) r1 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000643ff8)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000000)='./file0/file0\x00', 0x0) [ 341.235378] QAT: Invalid ioctl [ 341.274581] FAULT_INJECTION: forcing a failure. [ 341.274581] name failslab, interval 1, probability 0, space 0, times 0 [ 341.285991] CPU: 1 PID: 24051 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 341.293006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.302355] Call Trace: [ 341.304945] dump_stack+0x1a7/0x27d [ 341.308567] ? arch_local_irq_restore+0x53/0x53 [ 341.313227] should_fail+0x914/0xae0 [ 341.316921] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.322005] ? refcount_inc_not_zero+0x1a4/0x280 [ 341.326753] ? refcount_inc_not_zero+0x1a4/0x280 [ 341.331487] ? ida_remove+0x3f0/0x3f0 [ 341.335271] ? find_held_lock+0x35/0x1d0 [ 341.339332] ? check_same_owner+0x320/0x320 [ 341.343632] ? refcount_inc+0x1e/0x50 [ 341.347412] ? rcu_note_context_switch+0x710/0x710 [ 341.352327] should_failslab+0xec/0x120 [ 341.356281] kmem_cache_alloc+0x47/0x760 [ 341.360321] ? copy_namespaces+0x1a3/0x400 [ 341.364541] alloc_pid+0xc1/0xa10 [ 341.367977] ? sys_ni_syscall+0x20/0x20 [ 341.371929] ? __change_pid+0x400/0x400 [ 341.375882] ? ns_capable_common+0xcf/0x160 [ 341.380188] ? copy_namespaces+0x1fb/0x400 [ 341.384405] ? memset+0x31/0x40 [ 341.387739] ? copy_thread_tls+0x268/0x8f0 [ 341.391957] ? do_raw_spin_lock+0xc1/0x230 [ 341.396178] copy_process.part.38+0x274c/0x6140 [ 341.400830] ? perf_trace_lock+0xd6/0x900 [ 341.404959] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.409782] ? print_irqtrace_events+0x270/0x270 [ 341.414519] ? trace_event_raw_event_lock+0x340/0x340 [ 341.419689] ? lock_acquire+0x1d5/0x580 [ 341.423640] ? lock_acquire+0x1d5/0x580 [ 341.427595] ? alloc_set_pte+0xf74/0x1780 [ 341.431734] ? __cleanup_sighand+0x50/0x50 [ 341.435952] ? print_irqtrace_events+0x270/0x270 [ 341.440701] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 341.445870] ? lock_downgrade+0x980/0x980 [ 341.450001] ? print_irqtrace_events+0x270/0x270 [ 341.454744] ? rcu_is_watching+0x85/0x130 [ 341.458884] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 341.464058] ? __lock_acquire+0x638/0x3c30 [ 341.468272] ? perf_trace_lock+0x900/0x900 [ 341.472499] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 341.477673] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.482498] ? trace_event_raw_event_lock+0x340/0x340 [ 341.487674] ? perf_trace_lock+0x900/0x900 [ 341.491892] ? lock_acquire+0x1d5/0x580 [ 341.495845] ? trace_hardirqs_off+0x10/0x10 [ 341.500149] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.504969] ? __lock_acquire+0x638/0x3c30 [ 341.509185] ? trace_event_raw_event_lock+0x340/0x340 [ 341.514353] ? perf_trace_lock+0x900/0x900 [ 341.518568] ? find_held_lock+0x35/0x1d0 [ 341.522613] ? perf_trace_lock+0xd6/0x900 [ 341.526748] ? trace_event_raw_event_lock+0x340/0x340 [ 341.531923] ? find_held_lock+0x35/0x1d0 [ 341.535967] ? trace_hardirqs_off+0x10/0x10 [ 341.540269] ? get_pid_task+0xa5/0x150 [ 341.544136] ? perf_trace_lock+0xd6/0x900 [ 341.548271] ? find_held_lock+0x35/0x1d0 [ 341.552317] ? __f_unlock_pos+0x19/0x20 [ 341.556273] ? lock_downgrade+0x980/0x980 [ 341.560402] ? kasan_check_write+0x14/0x20 [ 341.564617] ? proc_fail_nth_write+0x9b/0x1e0 [ 341.569091] ? map_files_get_link+0x3b0/0x3b0 [ 341.573565] ? trace_hardirqs_off+0x10/0x10 [ 341.577873] ? find_held_lock+0x35/0x1d0 [ 341.581918] _do_fork+0x1f7/0xfa0 [ 341.585357] ? fork_idle+0x2d0/0x2d0 [ 341.589069] ? __sb_end_write+0xa0/0xd0 [ 341.593034] ? kasan_check_write+0x14/0x20 [ 341.597247] ? fput+0xe0/0x150 [ 341.600418] ? ksys_write+0x184/0x220 [ 341.604200] ? SyS_read+0x30/0x30 [ 341.608112] compat_SyS_x86_clone+0x3b/0x50 [ 341.612416] ? compat_SyS_x86_fallocate+0x60/0x60 [ 341.617237] do_fast_syscall_32+0x3ec/0xf9f [ 341.621544] ? do_int80_syscall_32+0x9c0/0x9c0 [ 341.626108] ? finish_task_switch+0x1b9/0x970 [ 341.630579] ? finish_task_switch+0x17a/0x970 [ 341.635056] ? syscall_return_slowpath+0x2ac/0x550 [ 341.639965] ? prepare_exit_to_usermode+0x350/0x350 [ 341.644964] ? sysret32_from_system_call+0x5/0x3c [ 341.649790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.654617] entry_SYSENTER_compat+0x70/0x7f [ 341.659008] RIP: 0023:0xf7fc0c99 [ 341.662355] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 2018/04/05 15:32:39 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000400)) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='*\x00', 0xfffffffffffffff9) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="bd111eea013a7ac5a882e1941d188c40398989685c5dae17cb06380da7b21c129c7453836776", 0x26, r1) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x6000, r3, r4, 0x200, 0x400) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:39 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7ff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffff}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x1f, 0x30}, &(0x7f00000001c0)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) ptrace$getenv(0x4201, r5, 0x5, &(0x7f0000000240)) r6 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r6, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:39 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x8200) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x5b79) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000015c0), 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) [ 341.670043] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 341.677293] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 341.684541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.691790] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 341.699040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.844878] QAT: Invalid ioctl 2018/04/05 15:32:39 executing program 4: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000100)="0400000024007ffc00001200000001ffffff1300ff1072925bbcd17be1150200000000080000746dc027d8be883496d1ea5c0dccf2fc1ce78a9daad032dc7726a2970635c05b7b03066e6b22da0049654e579e338b0cd6d7175d056b20e4ceabfbc394d391b6373599bbf58317398236b61b0be3a9012db326260068", 0x154) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000040)={{0x5, 0x1, 0x3, 0x7, 0x3, 0x3}, 0x1, 0x7, 0x7, 0xf12, 0x101, "e321af9a401cbb99ae8bc0c7661478b03916624f34a73096aec61c6928d93b8169daef911b8bf1ce06d063ef79bfc1bc98fcd8961383a427eaaf22fa5f2a0e163b13c0b036e822ce743aebf392d25fd075585de1b875d407e55e349c65509c80ace5f77b019965eef96d6b849a62807b20cdbfef7783dc03bcd04ab95f6879db"}) 2018/04/05 15:32:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x3000}) getsockname$packet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000003000000010000000000000000000000020000001601"]) 2018/04/05 15:32:39 executing program 2 (fault-call:0 fault-nth:12): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000001e}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[]}, 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r4 = getpid() setpgid(r3, r4) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) 2018/04/05 15:32:39 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x204, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x7e1c, 0x86c, 0x5, 'queue1\x00', 0x6cd2}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) 2018/04/05 15:32:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000500)=0x108, 0x4) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000080)="88", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/05 15:32:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:39 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x20000) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x647f}, 0x4) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) [ 341.877922] QAT: Invalid ioctl [ 341.906808] FAULT_INJECTION: forcing a failure. [ 341.906808] name failslab, interval 1, probability 0, space 0, times 0 [ 341.918378] CPU: 1 PID: 24088 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 341.925371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.934704] Call Trace: [ 341.937273] dump_stack+0x1a7/0x27d [ 341.940876] ? arch_local_irq_restore+0x53/0x53 [ 341.945527] should_fail+0x914/0xae0 [ 341.949217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.954297] ? __lock_acquire+0x638/0x3c30 [ 341.958515] ? radix_tree_clear_tags+0xb0/0xb0 [ 341.963076] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 341.968243] ? trace_hardirqs_off+0x10/0x10 [ 341.972539] ? trace_hardirqs_off+0x10/0x10 [ 341.976838] ? print_irqtrace_events+0x270/0x270 [ 341.981570] ? check_same_owner+0x320/0x320 [ 341.985869] ? kasan_check_read+0x11/0x20 [ 341.989993] ? trace_hardirqs_off+0x10/0x10 [ 341.994297] ? print_irqtrace_events+0x270/0x270 [ 341.999036] should_failslab+0xec/0x120 [ 342.002989] kmem_cache_alloc+0x47/0x760 [ 342.007039] ? radix_tree_node_alloc.constprop.19+0x2d0/0x2d0 [ 342.012900] ? __lock_acquire+0x638/0x3c30 [ 342.017112] radix_tree_node_alloc.constprop.19+0x1b4/0x2d0 [ 342.022801] idr_get_free+0x9d0/0xfd0 [ 342.026585] ? radix_tree_clear_tags+0xb0/0xb0 [ 342.031144] ? unwind_get_return_address+0x61/0xa0 [ 342.036047] ? __save_stack_trace+0x7e/0xd0 [ 342.040348] ? save_stack+0xa3/0xd0 [ 342.043952] ? save_stack+0x43/0xd0 [ 342.047553] ? kasan_kmalloc+0xad/0xe0 [ 342.051415] ? kasan_slab_alloc+0x12/0x20 [ 342.055538] ? kmem_cache_alloc+0x12e/0x760 [ 342.059833] ? alloc_pid+0xc1/0xa10 [ 342.063437] ? copy_process.part.38+0x274c/0x6140 [ 342.068254] ? _do_fork+0x1f7/0xfa0 [ 342.071857] ? compat_SyS_x86_clone+0x3b/0x50 [ 342.076328] ? do_fast_syscall_32+0x3ec/0xf9f [ 342.080800] ? entry_SYSENTER_compat+0x70/0x7f [ 342.085360] ? kasan_check_read+0x11/0x20 [ 342.089487] ? refcount_inc_not_zero+0x1a4/0x280 [ 342.094218] ? ida_remove+0x3f0/0x3f0 [ 342.097999] ? find_held_lock+0x35/0x1d0 [ 342.102044] idr_alloc_u32+0x1b2/0x390 [ 342.105909] ? __fprop_inc_percpu_max+0x2a0/0x2a0 [ 342.110724] ? lock_acquire+0x1d5/0x580 [ 342.114675] ? alloc_pid+0x22e/0xa10 [ 342.118365] ? rcu_pm_notify+0xc0/0xc0 [ 342.122230] idr_alloc_cyclic+0x15a/0x320 [ 342.126354] ? idr_alloc+0x180/0x180 [ 342.130042] ? kasan_check_write+0x14/0x20 [ 342.134249] ? do_raw_spin_lock+0xc1/0x230 [ 342.138462] alloc_pid+0x2ad/0xa10 [ 342.141979] ? __change_pid+0x400/0x400 [ 342.145929] ? ns_capable_common+0xcf/0x160 [ 342.150229] ? memset+0x31/0x40 [ 342.153487] ? copy_thread_tls+0x268/0x8f0 [ 342.157697] ? do_raw_spin_lock+0xc1/0x230 [ 342.161910] copy_process.part.38+0x274c/0x6140 [ 342.166553] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.171718] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 342.176796] ? print_irqtrace_events+0x270/0x270 [ 342.181529] ? lock_acquire+0x1d5/0x580 [ 342.185478] ? lock_acquire+0x1d5/0x580 [ 342.189427] ? alloc_set_pte+0xf74/0x1780 [ 342.193555] ? __cleanup_sighand+0x50/0x50 [ 342.197766] ? print_irqtrace_events+0x270/0x270 [ 342.202505] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.207671] ? lock_downgrade+0x980/0x980 [ 342.211796] ? print_irqtrace_events+0x270/0x270 [ 342.216525] ? kasan_check_read+0x11/0x20 [ 342.220648] ? rcu_is_watching+0x85/0x130 [ 342.224775] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.229943] ? __lock_acquire+0x638/0x3c30 [ 342.234153] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.239325] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.244492] ? print_irqtrace_events+0x270/0x270 [ 342.249224] ? __pagevec_lru_add+0x30/0x30 [ 342.253436] ? lock_acquire+0x1d5/0x580 [ 342.257386] ? trace_hardirqs_off+0x10/0x10 [ 342.261683] ? __lock_acquire+0x638/0x3c30 [ 342.265895] ? check_same_owner+0x320/0x320 [ 342.270193] ? find_held_lock+0x35/0x1d0 [ 342.274230] ? trace_hardirqs_off+0x10/0x10 [ 342.278527] ? _parse_integer+0xe9/0x140 [ 342.282565] ? trace_hardirqs_off+0x10/0x10 [ 342.286860] ? _parse_integer+0x140/0x140 [ 342.290984] ? check_same_owner+0x320/0x320 [ 342.295283] ? find_held_lock+0x35/0x1d0 [ 342.299318] ? trace_hardirqs_off+0x10/0x10 [ 342.303614] ? get_pid_task+0xa5/0x150 [ 342.307476] ? lock_downgrade+0x980/0x980 [ 342.311601] ? find_held_lock+0x35/0x1d0 [ 342.315644] ? __f_unlock_pos+0x19/0x20 [ 342.319591] ? lock_downgrade+0x980/0x980 [ 342.323716] ? kasan_check_write+0x14/0x20 [ 342.327926] ? proc_fail_nth_write+0x9b/0x1e0 [ 342.332395] ? map_files_get_link+0x3b0/0x3b0 [ 342.336863] ? trace_hardirqs_off+0x10/0x10 [ 342.341162] ? find_held_lock+0x35/0x1d0 [ 342.345198] _do_fork+0x1f7/0xfa0 [ 342.348629] ? fork_idle+0x2d0/0x2d0 [ 342.352318] ? __lock_is_held+0xb6/0x140 [ 342.356360] ? __sb_end_write+0xa0/0xd0 [ 342.360310] ? kasan_check_write+0x14/0x20 [ 342.364520] ? fput+0xe0/0x150 [ 342.367689] ? ksys_write+0x184/0x220 [ 342.371466] ? SyS_read+0x30/0x30 [ 342.374894] ? kasan_check_write+0x14/0x20 [ 342.379108] compat_SyS_x86_clone+0x3b/0x50 [ 342.383404] ? compat_SyS_x86_fallocate+0x60/0x60 [ 342.388220] do_fast_syscall_32+0x3ec/0xf9f [ 342.392519] ? do_int80_syscall_32+0x9c0/0x9c0 [ 342.397077] ? finish_task_switch+0x1b9/0x970 [ 342.401548] ? finish_task_switch+0x17a/0x970 [ 342.406026] ? syscall_return_slowpath+0x2ac/0x550 [ 342.410929] ? prepare_exit_to_usermode+0x350/0x350 [ 342.415921] ? sysret32_from_system_call+0x5/0x3c [ 342.420741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.425560] entry_SYSENTER_compat+0x70/0x7f [ 342.429943] RIP: 0023:0xf7fc0c99 [ 342.433285] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 342.440971] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 342.448215] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 342.455461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.462704] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 342.469948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:39 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) getresuid(&(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0x9, 0x3}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x6, 0x40}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000500)={r2, 0x58, "f40d439b7ee6f8b0db601314a259dfbc88baf12f2de66ab6e1d666f8163ab71445b5d90db6efc302d6522b845493a4974f927a7374ba42bc8a96951707c55f8869e9dbf8769b8e4524dcb2283b55e91bdc5c7d3fa879e4a5"}, &(0x7f0000000580)=0x60) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000400)={'syz_tun\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22}}, 0x5, 0xfd3d0, 0xfffffffffffffff7, 0x1, 0x20}, &(0x7f0000000100)=0x98) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000640)={'nat\x00', 0x0, 0x3, 0x5, [], 0x2, &(0x7f00000005c0)=[{}, {}], &(0x7f0000000600)=""/5}, &(0x7f00000006c0)=0x50) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000440)={0xd883, 0x1000, 0x5}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r3, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000340)=0x4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r3, 0x7ff, 0xb5}, &(0x7f00000003c0)=0x8) 2018/04/05 15:32:39 executing program 3: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400801, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xffff, 0x401}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x401, 0x5, 0x8, 0x6, 0x30000000000000, 0x2, 0x400, 0x0, r1}, 0x20) 2018/04/05 15:32:39 executing program 2 (fault-call:0 fault-nth:13): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:39 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = dup2(r3, r3) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) fdatasync(r2) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8bec, 0xffffffff80000001, 0x200, 0x8b, 0x2, 0x3, 0x6f58, 0xed, 0x40, 0x2df, 0x9, 0x6, 0x38, 0x2, 0x5, 0x9, 0x3}, [{0x7, 0x9, 0x3, 0x0, 0x7f, 0x5, 0x81, 0x40}, {0x2, 0x81f6, 0xca2b, 0x3, 0xfc, 0x2, 0x8, 0x1f}], "e6e528a14aa5eafeaffc757df4bcda1be196f3f9f08d9ca557fd5e7dacabd3641bccc32f6af618f344031c4f5fbd3c2a284d", [[], [], [], [], [], []]}, 0x6e2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in6={0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in6={0xa, 0x4e23, 0x10001, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in={0x2, 0x4e23, @rand_addr=0x400}], 0x64) sendfile(r4, r1, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:39 executing program 3: unshare(0x8000000) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000780), &(0x7f00000007c0)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x400, 0x8) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0xffffffff}) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x80080}, {0x200000000080}}) [ 342.596492] FAULT_INJECTION: forcing a failure. [ 342.596492] name failslab, interval 1, probability 0, space 0, times 0 [ 342.607825] CPU: 1 PID: 24107 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 342.614839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.624188] Call Trace: [ 342.626777] dump_stack+0x1a7/0x27d [ 342.630403] ? arch_local_irq_restore+0x53/0x53 [ 342.635058] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.640236] should_fail+0x914/0xae0 [ 342.643929] ? kasan_check_read+0x11/0x20 [ 342.648062] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.653143] ? print_irqtrace_events+0x270/0x270 [ 342.657877] ? __lock_is_held+0xb6/0x140 [ 342.661917] ? find_held_lock+0x35/0x1d0 [ 342.665966] ? check_same_owner+0x320/0x320 [ 342.670264] ? idr_get_free+0x64e/0xfd0 [ 342.674218] ? rcu_note_context_switch+0x710/0x710 [ 342.679125] should_failslab+0xec/0x120 [ 342.683078] kmem_cache_alloc+0x47/0x760 [ 342.687115] ? replace_slot+0x12b/0x500 [ 342.691065] ? unwind_get_return_address+0x61/0xa0 [ 342.695972] alloc_vfsmnt+0xe0/0x9c0 [ 342.699662] ? mnt_free_id.isra.21+0x50/0x50 [ 342.704049] ? save_stack+0xa3/0xd0 [ 342.707650] ? save_stack+0x43/0xd0 [ 342.711252] ? kasan_kmalloc+0xad/0xe0 [ 342.715117] ? kasan_slab_alloc+0x12/0x20 [ 342.719239] ? kmem_cache_alloc+0x12e/0x760 [ 342.723538] ? alloc_pid+0xc1/0xa10 [ 342.727145] ? __radix_tree_replace+0x1af/0x310 [ 342.731792] ? trace_hardirqs_off+0x10/0x10 [ 342.736086] ? radix_tree_delete+0x30/0x30 [ 342.740295] ? node_tag_clear+0xf2/0x180 [ 342.744333] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 342.749239] ? radix_tree_iter_replace+0x4c/0x60 [ 342.753973] ? find_held_lock+0x35/0x1d0 [ 342.758016] ? alloc_pid+0x2bc/0xa10 [ 342.761738] vfs_kern_mount.part.26+0x84/0x4a0 [ 342.766297] ? may_umount+0xa0/0xa0 [ 342.769898] ? kasan_check_read+0x11/0x20 [ 342.774023] ? do_raw_spin_unlock+0x9e/0x310 [ 342.778404] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 342.782960] ? idr_alloc+0x180/0x180 [ 342.786649] kern_mount_data+0x50/0xb0 [ 342.790513] pid_ns_prepare_proc+0x1e/0x80 [ 342.794723] alloc_pid+0x88e/0xa10 [ 342.798240] ? __change_pid+0x400/0x400 [ 342.802189] ? ns_capable_common+0xcf/0x160 [ 342.806489] ? memset+0x31/0x40 [ 342.809745] ? copy_thread_tls+0x268/0x8f0 [ 342.813954] ? do_raw_spin_lock+0xc1/0x230 [ 342.818169] copy_process.part.38+0x274c/0x6140 [ 342.822814] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.827977] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 342.833056] ? print_irqtrace_events+0x270/0x270 [ 342.837789] ? lock_acquire+0x1d5/0x580 [ 342.841737] ? lock_acquire+0x1d5/0x580 [ 342.845686] ? alloc_set_pte+0xf74/0x1780 [ 342.849813] ? __cleanup_sighand+0x50/0x50 [ 342.854027] ? print_irqtrace_events+0x270/0x270 [ 342.858767] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.863937] ? lock_downgrade+0x980/0x980 [ 342.868062] ? print_irqtrace_events+0x270/0x270 [ 342.872793] ? kasan_check_read+0x11/0x20 [ 342.876916] ? rcu_is_watching+0x85/0x130 [ 342.881049] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.886305] ? __lock_acquire+0x638/0x3c30 [ 342.890515] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.895686] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 342.900851] ? print_irqtrace_events+0x270/0x270 [ 342.905583] ? __pagevec_lru_add+0x30/0x30 [ 342.909796] ? lock_acquire+0x1d5/0x580 [ 342.913746] ? trace_hardirqs_off+0x10/0x10 [ 342.918044] ? __lock_acquire+0x638/0x3c30 [ 342.922251] ? check_same_owner+0x320/0x320 [ 342.926550] ? find_held_lock+0x35/0x1d0 [ 342.930589] ? trace_hardirqs_off+0x10/0x10 [ 342.934885] ? _parse_integer+0xe9/0x140 [ 342.938925] ? trace_hardirqs_off+0x10/0x10 [ 342.943219] ? _parse_integer+0x140/0x140 [ 342.947340] ? check_same_owner+0x320/0x320 [ 342.951639] ? find_held_lock+0x35/0x1d0 [ 342.955674] ? trace_hardirqs_off+0x10/0x10 [ 342.959973] ? get_pid_task+0xa5/0x150 [ 342.963837] ? lock_downgrade+0x980/0x980 [ 342.967963] ? find_held_lock+0x35/0x1d0 [ 342.972007] ? __f_unlock_pos+0x19/0x20 [ 342.975959] ? lock_downgrade+0x980/0x980 [ 342.980083] ? kasan_check_write+0x14/0x20 [ 342.984293] ? proc_fail_nth_write+0x9b/0x1e0 [ 342.988762] ? map_files_get_link+0x3b0/0x3b0 [ 342.993231] ? trace_hardirqs_off+0x10/0x10 [ 342.997528] ? find_held_lock+0x35/0x1d0 [ 343.001566] _do_fork+0x1f7/0xfa0 [ 343.004999] ? fork_idle+0x2d0/0x2d0 [ 343.008695] ? __lock_is_held+0xb6/0x140 [ 343.012739] ? __sb_end_write+0xa0/0xd0 [ 343.016689] ? kasan_check_write+0x14/0x20 [ 343.020896] ? fput+0xe0/0x150 [ 343.024066] ? ksys_write+0x184/0x220 [ 343.027841] ? SyS_read+0x30/0x30 [ 343.031268] ? kasan_check_write+0x14/0x20 [ 343.035484] compat_SyS_x86_clone+0x3b/0x50 [ 343.039782] ? compat_SyS_x86_fallocate+0x60/0x60 [ 343.044602] do_fast_syscall_32+0x3ec/0xf9f [ 343.048900] ? do_int80_syscall_32+0x9c0/0x9c0 [ 343.053458] ? finish_task_switch+0x1b9/0x970 [ 343.057929] ? finish_task_switch+0x17a/0x970 [ 343.062400] ? syscall_return_slowpath+0x2ac/0x550 [ 343.067307] ? prepare_exit_to_usermode+0x350/0x350 [ 343.072302] ? sysret32_from_system_call+0x5/0x3c [ 343.077122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.081943] entry_SYSENTER_compat+0x70/0x7f [ 343.086328] RIP: 0023:0xf7fc0c99 [ 343.089667] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 2018/04/05 15:32:40 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80100, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x8, @random="a3ea110e9c55"}) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 343.097348] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 343.104594] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 343.111836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.119079] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 343.126324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.221374] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) arch_prctl(0x0, &(0x7f0000000600)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000640)=""/4096) r3 = socket$inet6(0xa, 0x40000080806, 0x0) sync() ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000600)={@dev={0xfe, 0x80, [], 0xf}, 0x0, r1}) 2018/04/05 15:32:40 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0xffffffffffffffdb, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x7}, @in={0x2, 0x4e22, @rand_addr=0x2}, @in6={0xa, 0x4e24, 0x3ff, @empty, 0x5}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}]}, &(0x7f00000001c0)=0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20440) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="66b99c08000066b80000000066ba008000000f300f01c9ba210066b84900000066ef66b8f5ffffff0f23d00f21f86635100000000f23f867e300d9d066b8010000000f01d96567640f01c90f01dff3f236640f01df", 0x55}], 0x1, 0x40, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@ldst={0x3, 0x0, 0xb, 0x1, 0x1}], {0x95}}, &(0x7f00005fc000)='GPL\x00', 0x8000, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 2018/04/05 15:32:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:40 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = syz_open_procfs(r0, &(0x7f0000000000)='limits\x00') pread64(r2, &(0x7f00000000c0)=""/90, 0x5a, 0x0) 2018/04/05 15:32:40 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = dup2(r0, r0) r2 = getpgrp(0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0x6, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x840) 2018/04/05 15:32:40 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x48002) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0xa9a, 0x8b}, {0x5941, 0x7f}, 0x5, 0x4, 0x6}) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:40 executing program 1: r0 = socket(0x400020000000010, 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000040)=""/247, &(0x7f0000000140)=0xf7) getsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000), &(0x7f0000000180)=0x4) sysfs$2(0x2, 0x400, &(0x7f00000001c0)=""/193) 2018/04/05 15:32:40 executing program 2 (fault-call:0 fault-nth:14): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 343.460708] FAULT_INJECTION: forcing a failure. [ 343.460708] name failslab, interval 1, probability 0, space 0, times 0 [ 343.472111] CPU: 1 PID: 24136 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 343.479121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.488468] Call Trace: [ 343.491055] dump_stack+0x1a7/0x27d [ 343.494681] ? arch_local_irq_restore+0x53/0x53 [ 343.499350] ? wait_for_completion+0x770/0x770 [ 343.503936] should_fail+0x914/0xae0 2018/04/05 15:32:40 executing program 7: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000730000/0x3000)=nil, 0x3000, 0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/2, &(0x7f00000000c0)=0x2) [ 343.507654] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.512762] ? rcu_pm_notify+0xc0/0xc0 [ 343.516660] ? find_held_lock+0x35/0x1d0 [ 343.520735] ? check_same_owner+0x320/0x320 [ 343.525050] ? sget_userns+0x27d/0xe60 [ 343.528940] ? rcu_note_context_switch+0x710/0x710 [ 343.533878] should_failslab+0xec/0x120 [ 343.537854] kmem_cache_alloc_trace+0x4b/0x740 [ 343.542444] ? kasan_check_write+0x14/0x20 [ 343.546678] ? do_raw_spin_lock+0xc1/0x230 [ 343.550906] sget_userns+0x2a3/0xe60 [ 343.554602] ? set_anon_super+0x20/0x20 [ 343.558560] ? put_filp+0xa0/0xa0 [ 343.561998] ? __alloc_pages_nodemask+0xabe/0xdd0 [ 343.566829] ? destroy_unused_super.part.7+0xf0/0xf0 [ 343.571913] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 343.576913] ? save_stack+0xa3/0xd0 [ 343.580519] ? save_stack+0x43/0xd0 [ 343.584122] ? kasan_kmalloc+0xad/0xe0 [ 343.587985] ? kasan_slab_alloc+0x12/0x20 [ 343.592110] ? kmem_cache_alloc+0x12e/0x760 [ 343.596409] ? alloc_pid+0xc1/0xa10 [ 343.600023] ? __radix_tree_replace+0x1af/0x310 [ 343.604676] ? trace_hardirqs_off+0x10/0x10 [ 343.609396] ? radix_tree_delete+0x30/0x30 [ 343.613612] ? node_tag_clear+0xf2/0x180 [ 343.617662] ? proc_get_inode+0x620/0x620 [ 343.621790] mount_ns+0x6d/0x190 [ 343.625137] proc_mount+0x7a/0x90 [ 343.628570] mount_fs+0x66/0x2d0 [ 343.631918] vfs_kern_mount.part.26+0xc6/0x4a0 [ 343.636477] ? may_umount+0xa0/0xa0 [ 343.640080] ? kasan_check_read+0x11/0x20 [ 343.644207] ? do_raw_spin_unlock+0x9e/0x310 [ 343.648607] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 343.653169] ? idr_alloc+0x180/0x180 [ 343.656866] kern_mount_data+0x50/0xb0 [ 343.660732] pid_ns_prepare_proc+0x1e/0x80 [ 343.664948] alloc_pid+0x88e/0xa10 [ 343.668471] ? __change_pid+0x400/0x400 [ 343.672423] ? ns_capable_common+0xcf/0x160 [ 343.676728] ? memset+0x31/0x40 [ 343.679985] ? copy_thread_tls+0x268/0x8f0 [ 343.684198] ? do_raw_spin_lock+0xc1/0x230 [ 343.688418] copy_process.part.38+0x274c/0x6140 [ 343.693068] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 343.698235] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 343.703317] ? print_irqtrace_events+0x270/0x270 [ 343.708055] ? lock_acquire+0x1d5/0x580 [ 343.712008] ? lock_acquire+0x1d5/0x580 [ 343.715964] ? alloc_set_pte+0xf74/0x1780 [ 343.720099] ? __cleanup_sighand+0x50/0x50 [ 343.724315] ? print_irqtrace_events+0x270/0x270 [ 343.729059] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 343.734226] ? lock_downgrade+0x980/0x980 [ 343.738355] ? print_irqtrace_events+0x270/0x270 [ 343.743086] ? kasan_check_read+0x11/0x20 [ 343.747212] ? rcu_is_watching+0x85/0x130 [ 343.751352] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 343.756525] ? __lock_acquire+0x638/0x3c30 [ 343.760738] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 343.765918] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 343.771087] ? print_irqtrace_events+0x270/0x270 [ 343.775830] ? __pagevec_lru_add+0x30/0x30 [ 343.780056] ? lock_acquire+0x1d5/0x580 [ 343.784011] ? trace_hardirqs_off+0x10/0x10 [ 343.788321] ? __lock_acquire+0x638/0x3c30 [ 343.792532] ? check_same_owner+0x320/0x320 [ 343.796835] ? find_held_lock+0x35/0x1d0 [ 343.800883] ? trace_hardirqs_off+0x10/0x10 [ 343.805180] ? _parse_integer+0xe9/0x140 [ 343.809224] ? trace_hardirqs_off+0x10/0x10 [ 343.813524] ? _parse_integer+0x140/0x140 [ 343.817648] ? check_same_owner+0x320/0x320 [ 343.821953] ? find_held_lock+0x35/0x1d0 [ 343.825995] ? trace_hardirqs_off+0x10/0x10 [ 343.830300] ? get_pid_task+0xa5/0x150 [ 343.834166] ? lock_downgrade+0x980/0x980 [ 343.838298] ? find_held_lock+0x35/0x1d0 [ 343.842343] ? __f_unlock_pos+0x19/0x20 [ 343.846296] ? lock_downgrade+0x980/0x980 [ 343.850424] ? kasan_check_write+0x14/0x20 [ 343.854637] ? proc_fail_nth_write+0x9b/0x1e0 [ 343.859112] ? map_files_get_link+0x3b0/0x3b0 [ 343.863586] ? trace_hardirqs_off+0x10/0x10 [ 343.867888] ? find_held_lock+0x35/0x1d0 [ 343.871930] _do_fork+0x1f7/0xfa0 [ 343.875367] ? fork_idle+0x2d0/0x2d0 [ 343.879063] ? __lock_is_held+0xb6/0x140 [ 343.883114] ? __sb_end_write+0xa0/0xd0 [ 343.887070] ? kasan_check_write+0x14/0x20 [ 343.891280] ? fput+0xe0/0x150 [ 343.894451] ? ksys_write+0x184/0x220 [ 343.898230] ? SyS_read+0x30/0x30 [ 343.901673] compat_SyS_x86_clone+0x3b/0x50 [ 343.905973] ? compat_SyS_x86_fallocate+0x60/0x60 [ 343.910794] do_fast_syscall_32+0x3ec/0xf9f [ 343.915100] ? do_int80_syscall_32+0x9c0/0x9c0 [ 343.919659] ? finish_task_switch+0x1b9/0x970 [ 343.924130] ? finish_task_switch+0x17a/0x970 [ 343.928610] ? syscall_return_slowpath+0x2ac/0x550 [ 343.933522] ? prepare_exit_to_usermode+0x350/0x350 [ 343.938519] ? sysret32_from_system_call+0x5/0x3c [ 343.943344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.948172] entry_SYSENTER_compat+0x70/0x7f [ 343.952556] RIP: 0023:0xf7fc0c99 2018/04/05 15:32:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3f, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000800)=0xe8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000900)}, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="b8", 0x1, r0) 2018/04/05 15:32:41 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f00000002c0)=""/224, 0xe0, 0x1, &(0x7f0000000280)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 343.955901] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 343.963590] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 343.970840] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 343.978086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.985332] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 343.992580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:41 executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x1f}]}, &(0x7f0000f91ffc)=0xfffffffffffffe75) bpf$PROG_LOAD(0x5, &(0x7f0000e4d000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000d900000000000000c0ff000000000000000000000000950000000000000009e60153695c684529888faaa33cbe8ae8a975e257eeb13ddcf18305c1f47d2dc2d10d6b173160744110ff7f000000007c669cf1841600aa0b000009e6fccd"], &(0x7f0000e1c000)='GPL\x00', 0xfffffffffffffffa, 0x13a8, &(0x7f0000d35000)=""/4096}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0), 0x4) 2018/04/05 15:32:41 executing program 2 (fault-call:0 fault-nth:15): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 344.082418] FAULT_INJECTION: forcing a failure. [ 344.082418] name failslab, interval 1, probability 0, space 0, times 0 [ 344.094164] CPU: 1 PID: 24167 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 344.101182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.110531] Call Trace: [ 344.113103] dump_stack+0x1a7/0x27d [ 344.116714] ? arch_local_irq_restore+0x53/0x53 [ 344.121366] should_fail+0x914/0xae0 [ 344.125059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.130145] ? find_next_zero_bit+0xe3/0x110 [ 344.134543] ? find_held_lock+0x35/0x1d0 [ 344.138584] ? __lock_is_held+0xb6/0x140 [ 344.142629] ? check_same_owner+0x320/0x320 [ 344.146926] ? __might_sleep+0x95/0x190 [ 344.150884] ? rcu_note_context_switch+0x710/0x710 [ 344.155794] should_failslab+0xec/0x120 [ 344.159747] __kmalloc+0x63/0x760 [ 344.163179] ? lockdep_init_map+0x9/0x10 [ 344.167215] ? debug_mutex_init+0x2d/0x60 [ 344.171338] ? __list_lru_init+0xcf/0x750 [ 344.175467] __list_lru_init+0xcf/0x750 [ 344.179423] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 344.185289] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 344.190282] ? __lockdep_init_map+0xe4/0x650 [ 344.194666] ? lockdep_init_map+0x9/0x10 [ 344.198707] sget_userns+0x6a2/0xe60 [ 344.202398] ? set_anon_super+0x20/0x20 [ 344.206352] ? put_filp+0xa0/0xa0 [ 344.209782] ? destroy_unused_super.part.7+0xf0/0xf0 [ 344.214868] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 344.219862] ? perf_trace_lock+0xd6/0x900 [ 344.223989] ? save_stack+0xa3/0xd0 [ 344.227598] ? kasan_slab_alloc+0x12/0x20 [ 344.231721] ? alloc_pid+0xc1/0xa10 [ 344.235332] ? __radix_tree_replace+0x1af/0x310 [ 344.239979] ? radix_tree_delete+0x30/0x30 [ 344.244189] ? node_tag_clear+0xf2/0x180 [ 344.248231] ? proc_get_inode+0x620/0x620 [ 344.252357] mount_ns+0x6d/0x190 [ 344.255703] proc_mount+0x7a/0x90 [ 344.259132] mount_fs+0x66/0x2d0 [ 344.262478] vfs_kern_mount.part.26+0xc6/0x4a0 [ 344.267037] ? may_umount+0xa0/0xa0 [ 344.270641] ? kasan_check_read+0x11/0x20 [ 344.274765] ? do_raw_spin_unlock+0x9e/0x310 [ 344.279150] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 344.283705] ? idr_alloc+0x180/0x180 [ 344.287396] kern_mount_data+0x50/0xb0 [ 344.291260] pid_ns_prepare_proc+0x1e/0x80 [ 344.295469] alloc_pid+0x88e/0xa10 [ 344.298987] ? __change_pid+0x400/0x400 [ 344.302939] ? ns_capable_common+0xcf/0x160 [ 344.307241] ? memset+0x31/0x40 [ 344.310497] ? copy_thread_tls+0x268/0x8f0 [ 344.314706] ? do_raw_spin_lock+0xc1/0x230 [ 344.318922] copy_process.part.38+0x274c/0x6140 [ 344.323566] ? perf_trace_lock+0xd6/0x900 [ 344.327692] ? print_irqtrace_events+0x270/0x270 [ 344.332423] ? trace_event_raw_event_lock+0x340/0x340 [ 344.337589] ? lock_acquire+0x1d5/0x580 [ 344.341537] ? lock_acquire+0x1d5/0x580 [ 344.345487] ? alloc_set_pte+0xf74/0x1780 [ 344.349618] ? __cleanup_sighand+0x50/0x50 [ 344.353829] ? print_irqtrace_events+0x270/0x270 [ 344.358570] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 344.363735] ? lock_downgrade+0x980/0x980 [ 344.367861] ? print_irqtrace_events+0x270/0x270 [ 344.372594] ? rcu_is_watching+0x85/0x130 [ 344.376725] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 344.381895] ? __lock_acquire+0x638/0x3c30 [ 344.386106] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 344.391278] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 344.396449] ? trace_event_raw_event_lock+0x340/0x340 [ 344.401612] ? perf_trace_lock+0xd6/0x900 [ 344.405741] ? lock_acquire+0x1d5/0x580 [ 344.409692] ? trace_hardirqs_off+0x10/0x10 [ 344.413994] ? __lock_acquire+0x638/0x3c30 [ 344.418209] ? trace_event_raw_event_lock+0x340/0x340 [ 344.423377] ? find_held_lock+0x35/0x1d0 [ 344.427416] ? perf_trace_lock+0xd6/0x900 [ 344.431545] ? trace_event_raw_event_lock+0x340/0x340 [ 344.436710] ? check_same_owner+0x320/0x320 [ 344.441013] ? find_held_lock+0x35/0x1d0 [ 344.445052] ? trace_hardirqs_off+0x10/0x10 [ 344.449349] ? get_pid_task+0xa5/0x150 [ 344.453212] ? perf_trace_lock+0xd6/0x900 [ 344.457340] ? find_held_lock+0x35/0x1d0 [ 344.461385] ? __f_unlock_pos+0x19/0x20 [ 344.465336] ? lock_downgrade+0x980/0x980 [ 344.469461] ? kasan_check_write+0x14/0x20 [ 344.473673] ? proc_fail_nth_write+0x9b/0x1e0 [ 344.478146] ? map_files_get_link+0x3b0/0x3b0 [ 344.482619] ? trace_hardirqs_off+0x10/0x10 [ 344.486916] ? find_held_lock+0x35/0x1d0 [ 344.490956] _do_fork+0x1f7/0xfa0 [ 344.494391] ? fork_idle+0x2d0/0x2d0 [ 344.498091] ? __sb_end_write+0xa0/0xd0 [ 344.502043] ? kasan_check_write+0x14/0x20 [ 344.506253] ? fput+0xe0/0x150 [ 344.509422] ? ksys_write+0x184/0x220 [ 344.513198] ? SyS_read+0x30/0x30 [ 344.516625] ? kasan_check_write+0x14/0x20 [ 344.520839] compat_SyS_x86_clone+0x3b/0x50 [ 344.525136] ? compat_SyS_x86_fallocate+0x60/0x60 [ 344.529954] do_fast_syscall_32+0x3ec/0xf9f [ 344.534254] ? do_int80_syscall_32+0x9c0/0x9c0 [ 344.538813] ? finish_task_switch+0x1b9/0x970 [ 344.543283] ? finish_task_switch+0x17a/0x970 [ 344.547758] ? syscall_return_slowpath+0x2ac/0x550 [ 344.552665] ? prepare_exit_to_usermode+0x350/0x350 [ 344.557662] ? sysret32_from_system_call+0x5/0x3c [ 344.562480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.567301] entry_SYSENTER_compat+0x70/0x7f [ 344.571697] RIP: 0023:0xf7fc0c99 [ 344.575041] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 2018/04/05 15:32:41 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x40, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0xfffffffffffffffe}) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x101000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x8001, 0x57, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77, 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000002ff0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0xfffffffffffffffb}]}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000280)={0x0, 0x3}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r7) finit_module(r7, &(0x7f0000000480)='%$\x00', 0x3) creat(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') 2018/04/05 15:32:41 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000), 0x4) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1c, 0x480602) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x3, 0x4, 0x0, 'queue0\x00', 0x7}) io_setup(0x7ff, &(0x7f0000000300)) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) r3 = request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='cgroup\x00', 0x0) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='/dev/snd/seq\x00', r3) 2018/04/05 15:32:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x2ff}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_proto_private(r3, 0x89e2, &(0x7f0000000240)="dee2993e9db4130b88f4fdaa28cd0dd4ed1ed8bfde3795e3f074941598ac285c54eb12612382ae24d6c6f8477c2fbd5431e22f2d28ad00c0c09361fff8") futimesat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {r4, r5/1000+10000}}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x0, 0x4, @tid=r6}, &(0x7f0000000100)) [ 344.582724] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 344.589969] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 344.597217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.604464] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 344.611708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x100) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0x10000, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/05 15:32:42 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x101000) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x10e, 0x3, 0x4163, 0x2, 0x81}, 0x10) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000f21000)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x2}, 0x1}, 0x0) 2018/04/05 15:32:42 executing program 5: r0 = mq_open(&(0x7f0000000040)="2e240021fc30a9ff67ca1a90afb1e81715c38a185d6f4718d2e7b645d9725b48bfc94131e2eb84e3a847273abd2fed04306e8b10eba5f2a14806a86fc1986b7042245bb8cad3d8", 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x80000004, 0x5, 0x0, 0x0, 0x0, 0x6}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x4000000080, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x400, 0x101, 0x3, 0x58}]}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) mq_timedsend(r0, &(0x7f0000000140)="c3e1169a7c1d9c2a0000000000007541c7723a3963c6a1540b5b8315dce30c8785eb6724474f57f5db53583e74a53e0a63914833e5b83aac3417c43e735914af00000100fbbe5b8df0b39488650073f43335209c779156d6f5841b51b831a05db9c790eea2624a1aa6168dab471f8fa9400fc734ecd9c62017cd3bd51d0a6e34b9f52472fbb3e8cec5755557c407bca0b5d1d5d9391c1da50af4893f00", 0x300dd362, 0x10001, &(0x7f0000000280)={0x0, 0x1c9c380}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000200)={0x0, 0xc}, &(0x7f0000000240)=0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000300)={r3}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x8}, 0x8) 2018/04/05 15:32:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:42 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {0x0, 0x1ff}, {0x7ff}}], 0x1c) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) 2018/04/05 15:32:42 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {}, 0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 'syz_tun\x00'}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x800) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)="c8828253cb9cbd575174f063081f1f47f79e3ad719b6bf4514e7a144719647f916c2922e97799afcd39a786717f313618b8390f3babfb0c212b97beb1ca351b903e91b524d7edb4551ac41487511d1cd41a58bd23eb5f4de2948ec9df5050bbe033522b0cdb13e7b30cdbab2e6a8ebffeeb75b", 0x73) r2 = geteuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bcsh0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6, 0x4e20, 0x5, 0x4e22, 0x9, 0x2, 0x20, 0x80, 0x5e, r3, r2}, {0x3ff, 0x2, 0x5, 0x20, 0x7, 0x1, 0x1}, {0x4, 0x8, 0x5, 0x100000000}, 0x7, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d4, 0x3b}, 0xa, @in, 0x3506, 0x0, 0x1, 0x2437837f, 0xed34, 0x100000001, 0x9000000000000}}, 0xe8) 2018/04/05 15:32:42 executing program 2 (fault-call:0 fault-nth:16): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:42 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0xfffffffffffffffa, 0x40000) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000380)={0xffffffffffff0001, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x93, "b7229cda5efdd9b305f21b134a3c27ff3fad6465ac973cdc455d31b38c12c8f64265319ce85fae9b093dc292a8637a43e3edcea1dc21507627c335e6d3e03fa585db26dd8444c185150338fb7999d7f2f4b7e38c23a88ed90195968355ee959c46dffce7bb543e2ed0f703833f1554b7aaa41d55d298b55199ab4ecfc32422115bcca65d57bf428a1f8dfefe156eba9ea57b96"}, &(0x7f0000000480)=0x9b) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000004c0)={r2, 0xfffffffffffffffb, 0x0, 0x20000000000, 0x0, 0xe0}, &(0x7f0000000500)=0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x0, "dcbd7013560987c90ebd84b6e984c7242a057f7f7f8b85f0aba26dc45e69c2db87180107eba9f36e22ba7df5228e6a97e954627eb3966137d05054d92ff0e25078b35ba8d6f9e3ab5b89afb667676ae0"}, 0xd8) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, r1}) getsockopt$netlink(r3, 0x10e, 0xf, &(0x7f0000000040), &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x0, 0x0, "df2c9c75bd4c55325fe54fe4b8475c9366744ab46131ba47cc839c6d3d1f288e5da58ffb88c3c9978407767b86505a282c67a7702a239d5a0f8b7b29a332d8b0f83a005fc5f5db95c1deca497bf4535e"}, 0xd8) clone(0x0, &(0x7f00000001c0)="4a5c79b4917f49dd5bda5da20ae490f33f6199540236ad49dfab71da67655a293fb525101261975a7eacf45ddd32664e26acf548c477f73d6b459879e8b1c1c269ab6019a78f7d793cbf53b610191b1a7058c24837cf6f41f36606e7828a4dc0bde52e0052e1fb7eec16ce727589b64d852f78f1ac79bd03711b", &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)="4fc1965249fad873f7e5ac22bf678381a021b53d7a803f7b680f1ef802a937c6ea4d0d08fc76474f37a669a955689e0b4c7a8fa89c330065ce08e1c5ae06a814eef3a7b63c49c1baa4fbeb943df370dffe5ab396bc3e9f19734a7fd4203027f32ff95f5b389bcb2857d66f13336457b8a2ab8aaf42398cd00baf08b21c59040db4082cfab110dda756eacda9f327c9ce2a028766631a2de181f3591737cf6d313f7ff91e1b30a1abb5cc98fe456d5935a9eab78416a3a887d5f4bd35") close(r1) epoll_create(0x380) gettid() 2018/04/05 15:32:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8001) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0x7fffffff) exit(0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)) [ 344.842835] FAULT_INJECTION: forcing a failure. [ 344.842835] name failslab, interval 1, probability 0, space 0, times 0 [ 344.854146] CPU: 1 PID: 24201 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 344.861159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.870511] Call Trace: [ 344.873102] dump_stack+0x1a7/0x27d [ 344.876735] ? arch_local_irq_restore+0x53/0x53 [ 344.881409] ? kernel_text_address+0xd1/0xe0 [ 344.885817] ? __unwind_start+0x169/0x330 [ 344.889969] should_fail+0x914/0xae0 [ 344.893685] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.898800] ? save_stack+0x43/0xd0 [ 344.902429] ? kasan_kmalloc+0xad/0xe0 [ 344.906313] ? __kmalloc+0x162/0x760 [ 344.910025] ? __list_lru_init+0xcf/0x750 [ 344.914174] ? find_held_lock+0x35/0x1d0 [ 344.918224] ? __lock_is_held+0xb6/0x140 [ 344.922292] ? check_same_owner+0x320/0x320 [ 344.926599] ? rcu_note_context_switch+0x710/0x710 [ 344.931519] should_failslab+0xec/0x120 [ 344.935476] kmem_cache_alloc_node_trace+0x5a/0x760 [ 344.940472] ? mark_held_locks+0xaf/0x100 [ 344.944598] ? __raw_spin_lock_init+0x1c/0x100 [ 344.949164] __kmalloc_node+0x33/0x70 [ 344.952948] kvmalloc_node+0x99/0xd0 [ 344.956643] __list_lru_init+0x5d5/0x750 [ 344.960688] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 344.966556] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 344.971551] ? __lockdep_init_map+0xe4/0x650 [ 344.975942] ? lockdep_init_map+0x9/0x10 [ 344.979986] sget_userns+0x6a2/0xe60 [ 344.983681] ? set_anon_super+0x20/0x20 [ 344.987637] ? put_filp+0xa0/0xa0 [ 344.991072] ? destroy_unused_super.part.7+0xf0/0xf0 [ 344.996157] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 345.001153] ? save_stack+0xa3/0xd0 [ 345.004764] ? save_stack+0x43/0xd0 [ 345.008370] ? kasan_slab_alloc+0x12/0x20 [ 345.012497] ? kmem_cache_alloc+0x12e/0x760 [ 345.016795] ? alloc_pid+0xc1/0xa10 [ 345.020407] ? __radix_tree_replace+0x1af/0x310 [ 345.025055] ? radix_tree_delete+0x30/0x30 [ 345.029271] ? node_tag_clear+0xf2/0x180 [ 345.033321] ? proc_get_inode+0x620/0x620 [ 345.037446] mount_ns+0x6d/0x190 [ 345.040793] proc_mount+0x7a/0x90 [ 345.044225] mount_fs+0x66/0x2d0 [ 345.047574] vfs_kern_mount.part.26+0xc6/0x4a0 [ 345.052134] ? may_umount+0xa0/0xa0 [ 345.055744] ? kasan_check_read+0x11/0x20 [ 345.059874] ? do_raw_spin_unlock+0x9e/0x310 [ 345.064260] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 345.068824] ? idr_alloc+0x180/0x180 [ 345.072519] kern_mount_data+0x50/0xb0 [ 345.076386] pid_ns_prepare_proc+0x1e/0x80 [ 345.080599] alloc_pid+0x88e/0xa10 [ 345.084123] ? __change_pid+0x400/0x400 [ 345.088075] ? ns_capable_common+0xcf/0x160 [ 345.092384] ? memset+0x31/0x40 [ 345.095645] ? copy_thread_tls+0x268/0x8f0 [ 345.099856] ? do_raw_spin_lock+0xc1/0x230 [ 345.104075] copy_process.part.38+0x274c/0x6140 [ 345.108723] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.113893] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 345.118978] ? print_irqtrace_events+0x270/0x270 [ 345.123716] ? lock_acquire+0x1d5/0x580 [ 345.127667] ? lock_acquire+0x1d5/0x580 [ 345.131621] ? alloc_set_pte+0xf74/0x1780 [ 345.135760] ? __cleanup_sighand+0x50/0x50 [ 345.139973] ? print_irqtrace_events+0x270/0x270 [ 345.144720] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.149889] ? lock_downgrade+0x980/0x980 [ 345.154024] ? print_irqtrace_events+0x270/0x270 [ 345.158761] ? kasan_check_read+0x11/0x20 [ 345.162889] ? rcu_is_watching+0x85/0x130 [ 345.167034] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.172207] ? __lock_acquire+0x638/0x3c30 [ 345.176423] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.181603] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.186776] ? print_irqtrace_events+0x270/0x270 [ 345.191511] ? __pagevec_lru_add+0x30/0x30 [ 345.195730] ? lock_acquire+0x1d5/0x580 [ 345.199688] ? trace_hardirqs_off+0x10/0x10 [ 345.203995] ? __lock_acquire+0x638/0x3c30 [ 345.208210] ? check_same_owner+0x320/0x320 [ 345.212517] ? find_held_lock+0x35/0x1d0 [ 345.216560] ? trace_hardirqs_off+0x10/0x10 [ 345.220860] ? _parse_integer+0xe9/0x140 [ 345.224904] ? trace_hardirqs_off+0x10/0x10 [ 345.229203] ? _parse_integer+0x140/0x140 [ 345.233327] ? check_same_owner+0x320/0x320 [ 345.237629] ? find_held_lock+0x35/0x1d0 [ 345.241668] ? trace_hardirqs_off+0x10/0x10 [ 345.245969] ? get_pid_task+0xa5/0x150 [ 345.249835] ? lock_downgrade+0x980/0x980 [ 345.253967] ? find_held_lock+0x35/0x1d0 [ 345.258018] ? __f_unlock_pos+0x19/0x20 [ 345.261975] ? lock_downgrade+0x980/0x980 [ 345.266102] ? kasan_check_write+0x14/0x20 [ 345.270315] ? proc_fail_nth_write+0x9b/0x1e0 [ 345.274792] ? map_files_get_link+0x3b0/0x3b0 [ 345.279267] ? trace_hardirqs_off+0x10/0x10 [ 345.283570] ? find_held_lock+0x35/0x1d0 [ 345.287612] _do_fork+0x1f7/0xfa0 [ 345.291048] ? fork_idle+0x2d0/0x2d0 [ 345.294745] ? __lock_is_held+0xb6/0x140 [ 345.298795] ? __sb_end_write+0xa0/0xd0 [ 345.302749] ? kasan_check_write+0x14/0x20 [ 345.306959] ? fput+0xe0/0x150 [ 345.310129] ? ksys_write+0x184/0x220 [ 345.313909] ? SyS_read+0x30/0x30 [ 345.317339] ? kasan_check_write+0x14/0x20 [ 345.321558] compat_SyS_x86_clone+0x3b/0x50 [ 345.325858] ? compat_SyS_x86_fallocate+0x60/0x60 [ 345.330679] do_fast_syscall_32+0x3ec/0xf9f [ 345.334981] ? do_int80_syscall_32+0x9c0/0x9c0 [ 345.339540] ? finish_task_switch+0x1b9/0x970 [ 345.344013] ? finish_task_switch+0x17a/0x970 [ 345.348495] ? syscall_return_slowpath+0x2ac/0x550 [ 345.353403] ? prepare_exit_to_usermode+0x350/0x350 [ 345.358397] ? sysret32_from_system_call+0x5/0x3c [ 345.363223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.368048] entry_SYSENTER_compat+0x70/0x7f [ 345.372433] RIP: 0023:0xf7fc0c99 [ 345.375774] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 345.383463] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 345.390716] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 345.397963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.405209] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 345.412456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:42 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xfffffffffffffffb) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="05", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000040)=0x98) 2018/04/05 15:32:42 executing program 2 (fault-call:0 fault-nth:17): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80002, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0x6) mq_unlink(&(0x7f0000000040)='ppp1proc]\x00') perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000719000), 0x4) 2018/04/05 15:32:42 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x72c, 0x140) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x3, 0xfffffffffffffc5f, 0x6, 'queue0\x00', 0x9}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x3, &(0x7f000066cff0)) 2018/04/05 15:32:42 executing program 1: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)={0x0, 0x4, 0x3, 0x4}) socket$inet(0x2, 0x6, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0x1e2) r1 = dup3(r0, r0, 0x0) syz_open_pts(r1, 0x80) ioctl$TIOCSTI(r1, 0x5412, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, 0x1, 0x7, 0x7, 0x7, 0x1}, &(0x7f0000000140)=0x98) 2018/04/05 15:32:42 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x800) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) [ 345.530862] FAULT_INJECTION: forcing a failure. [ 345.530862] name failslab, interval 1, probability 0, space 0, times 0 [ 345.542169] CPU: 1 PID: 24231 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 345.549174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.558515] Call Trace: [ 345.561095] dump_stack+0x1a7/0x27d [ 345.564713] ? arch_local_irq_restore+0x53/0x53 [ 345.569371] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 345.574288] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 345.579209] should_fail+0x914/0xae0 [ 345.582904] ? is_bpf_text_address+0xa4/0x120 [ 345.587382] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.592464] ? __kernel_text_address+0xd/0x40 [ 345.596938] ? unwind_get_return_address+0x61/0xa0 [ 345.601857] ? find_held_lock+0x35/0x1d0 [ 345.605900] ? __lock_is_held+0xb6/0x140 [ 345.610388] ? check_same_owner+0x320/0x320 [ 345.614698] ? rcu_note_context_switch+0x710/0x710 [ 345.620393] should_failslab+0xec/0x120 [ 345.624349] kmem_cache_alloc_trace+0x4b/0x740 [ 345.628908] ? __kmalloc_node+0x33/0x70 [ 345.632861] ? __kmalloc_node+0x33/0x70 [ 345.636813] ? rcu_read_lock_sched_held+0x108/0x120 [ 345.641813] __memcg_init_list_lru_node+0x169/0x270 [ 345.646809] ? list_lru_add+0x7c0/0x7c0 [ 345.650761] ? __kmalloc_node+0x47/0x70 [ 345.654721] __list_lru_init+0x544/0x750 [ 345.658768] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 345.664633] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 345.669629] ? __lockdep_init_map+0xe4/0x650 [ 345.674024] ? lockdep_init_map+0x9/0x10 [ 345.678070] sget_userns+0x6a2/0xe60 [ 345.681761] ? set_anon_super+0x20/0x20 [ 345.685717] ? put_filp+0xa0/0xa0 [ 345.689152] ? destroy_unused_super.part.7+0xf0/0xf0 [ 345.694237] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 345.699235] ? save_stack+0xa3/0xd0 [ 345.702841] ? save_stack+0x43/0xd0 [ 345.706447] ? kasan_slab_alloc+0x12/0x20 [ 345.710573] ? kmem_cache_alloc+0x12e/0x760 [ 345.714872] ? alloc_pid+0xc1/0xa10 [ 345.718482] ? __radix_tree_replace+0x1af/0x310 [ 345.723134] ? radix_tree_delete+0x30/0x30 [ 345.727349] ? node_tag_clear+0xf2/0x180 [ 345.731397] ? proc_get_inode+0x620/0x620 [ 345.735523] mount_ns+0x6d/0x190 [ 345.738870] proc_mount+0x7a/0x90 [ 345.742305] mount_fs+0x66/0x2d0 [ 345.745657] vfs_kern_mount.part.26+0xc6/0x4a0 [ 345.750220] ? may_umount+0xa0/0xa0 [ 345.753824] ? kasan_check_read+0x11/0x20 [ 345.757949] ? do_raw_spin_unlock+0x9e/0x310 [ 345.762338] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 345.766899] ? idr_alloc+0x180/0x180 [ 345.770592] kern_mount_data+0x50/0xb0 [ 345.774473] pid_ns_prepare_proc+0x1e/0x80 [ 345.778698] alloc_pid+0x88e/0xa10 [ 345.782223] ? __change_pid+0x400/0x400 [ 345.786175] ? ns_capable_common+0xcf/0x160 [ 345.790488] ? memset+0x31/0x40 [ 345.793746] ? copy_thread_tls+0x268/0x8f0 [ 345.797955] ? do_raw_spin_lock+0xc1/0x230 [ 345.802173] copy_process.part.38+0x274c/0x6140 [ 345.806822] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.811988] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 345.817073] ? print_irqtrace_events+0x270/0x270 [ 345.821810] ? lock_acquire+0x1d5/0x580 [ 345.825760] ? lock_acquire+0x1d5/0x580 [ 345.829713] ? alloc_set_pte+0xf74/0x1780 [ 345.833847] ? __cleanup_sighand+0x50/0x50 [ 345.838062] ? print_irqtrace_events+0x270/0x270 [ 345.842808] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.847977] ? lock_downgrade+0x980/0x980 [ 345.852106] ? print_irqtrace_events+0x270/0x270 [ 345.856839] ? kasan_check_read+0x11/0x20 [ 345.860965] ? rcu_is_watching+0x85/0x130 [ 345.865104] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.870275] ? __lock_acquire+0x638/0x3c30 [ 345.874490] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.879669] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 345.884843] ? print_irqtrace_events+0x270/0x270 [ 345.889577] ? __pagevec_lru_add+0x30/0x30 [ 345.893795] ? lock_acquire+0x1d5/0x580 [ 345.897751] ? trace_hardirqs_off+0x10/0x10 [ 345.902060] ? __lock_acquire+0x638/0x3c30 [ 345.906272] ? check_same_owner+0x320/0x320 [ 345.910578] ? find_held_lock+0x35/0x1d0 [ 345.914620] ? trace_hardirqs_off+0x10/0x10 [ 345.918918] ? _parse_integer+0xe9/0x140 [ 345.922963] ? trace_hardirqs_off+0x10/0x10 [ 345.927263] ? _parse_integer+0x140/0x140 [ 345.931385] ? check_same_owner+0x320/0x320 [ 345.935692] ? find_held_lock+0x35/0x1d0 [ 345.939732] ? trace_hardirqs_off+0x10/0x10 [ 345.944039] ? get_pid_task+0xa5/0x150 [ 345.947905] ? lock_downgrade+0x980/0x980 [ 345.952043] ? find_held_lock+0x35/0x1d0 [ 345.956089] ? __f_unlock_pos+0x19/0x20 [ 345.960045] ? lock_downgrade+0x980/0x980 [ 345.964172] ? kasan_check_write+0x14/0x20 [ 345.968386] ? proc_fail_nth_write+0x9b/0x1e0 [ 345.972860] ? map_files_get_link+0x3b0/0x3b0 [ 345.977333] ? trace_hardirqs_off+0x10/0x10 [ 345.981646] ? find_held_lock+0x35/0x1d0 [ 345.985696] _do_fork+0x1f7/0xfa0 [ 345.989130] ? fork_idle+0x2d0/0x2d0 [ 345.992823] ? __lock_is_held+0xb6/0x140 [ 345.996874] ? __sb_end_write+0xa0/0xd0 [ 346.000829] ? kasan_check_write+0x14/0x20 [ 346.005041] ? fput+0xe0/0x150 [ 346.008212] ? ksys_write+0x184/0x220 [ 346.011991] ? SyS_read+0x30/0x30 [ 346.015426] ? kasan_check_write+0x14/0x20 [ 346.019649] compat_SyS_x86_clone+0x3b/0x50 [ 346.023953] ? compat_SyS_x86_fallocate+0x60/0x60 [ 346.028773] do_fast_syscall_32+0x3ec/0xf9f [ 346.033078] ? do_int80_syscall_32+0x9c0/0x9c0 [ 346.037637] ? finish_task_switch+0x1b9/0x970 [ 346.042113] ? finish_task_switch+0x17a/0x970 [ 346.046588] ? syscall_return_slowpath+0x2ac/0x550 [ 346.051497] ? prepare_exit_to_usermode+0x350/0x350 [ 346.056498] ? sysret32_from_system_call+0x5/0x3c [ 346.061324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.066147] entry_SYSENTER_compat+0x70/0x7f [ 346.070533] RIP: 0023:0xf7fc0c99 [ 346.073873] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 2018/04/05 15:32:43 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x154) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0xfffffffffffffbff, 0x5, 0x8cc}) [ 346.081562] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 346.088809] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 346.096055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.103303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 346.110553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:43 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) getsockname$inet(r0, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000080)=0x10) set_mempolicy(0x4001, &(0x7f0000aebff8), 0x8) 2018/04/05 15:32:43 executing program 6: r0 = timerfd_create(0x5, 0x80000) timerfd_gettime(r0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x9, 0x8003, 0x8, 0x6, 0x80000001, 0x49eb, 0x3, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r4, 0xfffffffffffffffa}, 0x8) r5 = dup2(r3, r3) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r5, r2, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:43 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) fanotify_init(0x20, 0x8400) mmap(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0x2, 0x8013, r0, 0x2a) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x80000001) 2018/04/05 15:32:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:43 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) open_by_handle_at(r0, &(0x7f0000000040)={0x9c, 0x7fff, "f6a8a90d7088a390301e391ccbcb36975faf57f4ef3a29c9eb9955adcea39badcfa696b4d82c453898c6776fe85f3bdeeef364c654c8dcb07a273af9e39d7ff5938cec83456208addc3696215ca5be2783d963d373a13eac3a9b29c67732dbd5af8dcd0fd11b4c4dc5ecd3c2db2a8d624a5ae64556f2eb403f69e1b83e727b363c80b975d6caa46b39b29894f5face6b5e819a7a"}, 0x0) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:43 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x3f, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e24, @rand_addr=0x80000001}, 0x100, 0x10001, 0x5690, 0x5, 0x8, &(0x7f0000000080)='bridge0\x00', 0x2, 0x1, 0x6}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) 2018/04/05 15:32:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="26000000130047f10701c1b00e000000000000000100000009ef18ffff00f13a050016002fc9", 0x26) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xffffffffffffffb4, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r1, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x7e7, 0x101}, &(0x7f0000000080)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_newneigh={0x2c, 0x1c, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x9c, 0x7}, [@NDA_MASTER={0x8, 0x9, 0x3}, @NDA_PORT={0x8, 0x6, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x840) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x80}, &(0x7f0000000100)=0x8) 2018/04/05 15:32:43 executing program 2 (fault-call:0 fault-nth:18): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 346.286518] FAULT_INJECTION: forcing a failure. [ 346.286518] name failslab, interval 1, probability 0, space 0, times 0 [ 346.297817] CPU: 1 PID: 24267 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 346.304823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.314170] Call Trace: [ 346.316754] dump_stack+0x1a7/0x27d [ 346.320385] ? arch_local_irq_restore+0x53/0x53 [ 346.325057] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 346.329987] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 346.334922] should_fail+0x914/0xae0 [ 346.338630] ? is_bpf_text_address+0xa4/0x120 [ 346.343112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 346.348197] ? __kernel_text_address+0xd/0x40 [ 346.352671] ? unwind_get_return_address+0x61/0xa0 [ 346.357595] ? find_held_lock+0x35/0x1d0 [ 346.361644] ? __lock_is_held+0xb6/0x140 [ 346.365695] ? check_same_owner+0x320/0x320 [ 346.369997] ? rcu_note_context_switch+0x710/0x710 [ 346.374917] should_failslab+0xec/0x120 [ 346.378873] kmem_cache_alloc_trace+0x4b/0x740 [ 346.383433] ? __kmalloc_node+0x33/0x70 [ 346.387385] ? __kmalloc_node+0x33/0x70 [ 346.391339] ? rcu_read_lock_sched_held+0x108/0x120 [ 346.396338] __memcg_init_list_lru_node+0x169/0x270 [ 346.401339] ? list_lru_add+0x7c0/0x7c0 [ 346.405293] ? __kmalloc_node+0x47/0x70 [ 346.409252] __list_lru_init+0x544/0x750 [ 346.413296] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 346.419161] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 346.424158] ? __lockdep_init_map+0xe4/0x650 [ 346.428548] ? lockdep_init_map+0x9/0x10 [ 346.432593] sget_userns+0x6a2/0xe60 [ 346.436287] ? set_anon_super+0x20/0x20 [ 346.440247] ? put_filp+0xa0/0xa0 [ 346.443681] ? destroy_unused_super.part.7+0xf0/0xf0 [ 346.448768] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 346.453763] ? perf_trace_lock_acquire+0xe3/0x980 [ 346.458587] ? save_stack+0xa3/0xd0 [ 346.462203] ? __radix_tree_replace+0x1af/0x310 [ 346.466853] ? radix_tree_delete+0x30/0x30 [ 346.471067] ? node_tag_clear+0xf2/0x180 [ 346.475116] ? proc_get_inode+0x620/0x620 [ 346.479242] mount_ns+0x6d/0x190 [ 346.482589] proc_mount+0x7a/0x90 [ 346.486032] mount_fs+0x66/0x2d0 [ 346.489385] vfs_kern_mount.part.26+0xc6/0x4a0 [ 346.493947] ? may_umount+0xa0/0xa0 [ 346.497552] ? kasan_check_read+0x11/0x20 [ 346.501681] ? do_raw_spin_unlock+0x9e/0x310 [ 346.506067] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 346.510629] ? idr_alloc+0x180/0x180 [ 346.514324] kern_mount_data+0x50/0xb0 [ 346.518192] pid_ns_prepare_proc+0x1e/0x80 [ 346.522405] alloc_pid+0x88e/0xa10 [ 346.525927] ? __change_pid+0x400/0x400 [ 346.529880] ? ns_capable_common+0xcf/0x160 [ 346.534187] ? memset+0x31/0x40 [ 346.537447] ? copy_thread_tls+0x268/0x8f0 [ 346.541660] ? do_raw_spin_lock+0xc1/0x230 [ 346.545877] copy_process.part.38+0x274c/0x6140 [ 346.550525] ? perf_trace_lock_acquire+0xe3/0x980 [ 346.555347] ? print_irqtrace_events+0x270/0x270 [ 346.560086] ? lock_acquire+0x1d5/0x580 [ 346.564037] ? lock_acquire+0x1d5/0x580 [ 346.567991] ? alloc_set_pte+0xf74/0x1780 [ 346.572132] ? __cleanup_sighand+0x50/0x50 [ 346.576346] ? print_irqtrace_events+0x270/0x270 [ 346.581092] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 346.586261] ? lock_downgrade+0x980/0x980 [ 346.590391] ? print_irqtrace_events+0x270/0x270 [ 346.595124] ? kasan_check_read+0x11/0x20 [ 346.599252] ? rcu_is_watching+0x85/0x130 [ 346.603390] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 346.608562] ? __lock_acquire+0x638/0x3c30 [ 346.612779] ? perf_trace_lock+0x900/0x900 [ 346.617005] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 346.622178] ? perf_trace_lock_acquire+0xe3/0x980 [ 346.626998] ? print_irqtrace_events+0x270/0x270 [ 346.631741] ? perf_trace_lock+0x900/0x900 [ 346.635960] ? lock_acquire+0x1d5/0x580 [ 346.639911] ? trace_hardirqs_off+0x10/0x10 [ 346.644214] ? perf_trace_lock_acquire+0xe3/0x980 [ 346.649037] ? __lock_acquire+0x638/0x3c30 [ 346.653255] ? perf_trace_lock+0x900/0x900 [ 346.657468] ? find_held_lock+0x35/0x1d0 [ 346.661511] ? trace_hardirqs_off+0x10/0x10 [ 346.665808] ? _parse_integer+0xe9/0x140 [ 346.669851] ? trace_hardirqs_off+0x10/0x10 [ 346.674153] ? _parse_integer+0x140/0x140 [ 346.678285] ? find_held_lock+0x35/0x1d0 [ 346.682327] ? trace_hardirqs_off+0x10/0x10 [ 346.686630] ? get_pid_task+0xa5/0x150 [ 346.690497] ? lock_downgrade+0x980/0x980 [ 346.694671] ? find_held_lock+0x35/0x1d0 [ 346.698717] ? __f_unlock_pos+0x19/0x20 [ 346.702670] ? lock_downgrade+0x980/0x980 [ 346.706797] ? kasan_check_write+0x14/0x20 [ 346.711014] ? proc_fail_nth_write+0x9b/0x1e0 [ 346.715493] ? map_files_get_link+0x3b0/0x3b0 [ 346.719966] ? trace_hardirqs_off+0x10/0x10 [ 346.724270] ? find_held_lock+0x35/0x1d0 [ 346.728314] _do_fork+0x1f7/0xfa0 [ 346.731751] ? fork_idle+0x2d0/0x2d0 [ 346.735446] ? __lock_is_held+0xb6/0x140 [ 346.739497] ? __sb_end_write+0xa0/0xd0 [ 346.743454] ? kasan_check_write+0x14/0x20 [ 346.747667] ? fput+0xe0/0x150 [ 346.750838] ? ksys_write+0x184/0x220 [ 346.754620] ? SyS_read+0x30/0x30 [ 346.758049] ? kasan_check_write+0x14/0x20 [ 346.762269] compat_SyS_x86_clone+0x3b/0x50 [ 346.766568] ? compat_SyS_x86_fallocate+0x60/0x60 [ 346.771390] do_fast_syscall_32+0x3ec/0xf9f [ 346.775697] ? do_int80_syscall_32+0x9c0/0x9c0 [ 346.780257] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 346.785775] ? syscall_return_slowpath+0x2ac/0x550 [ 346.790688] ? sysret32_from_system_call+0x5/0x3c [ 346.795512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.800338] entry_SYSENTER_compat+0x70/0x7f [ 346.804725] RIP: 0023:0xf7fc0c99 [ 346.808065] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 346.815755] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 346.823003] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 346.830256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/04/05 15:32:44 executing program 7: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x3f, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000100)='md5sumwlan0procppp1!@@%em1{uproc\x00', 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x1f, 0x2, 0x3f, 0x100000001}, &(0x7f0000000140)=0x14) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={r1, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0xfff, 0x1, 0x3ff, 0x6ccd0509, 0x9, 0xffffffffffffff00, 0x5, 0x401, 0x9, 0x7, 0x3f, 0x0, 0xffff, 0x4]}, &(0x7f0000000280)=0x100) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/120) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00000000c0)={0x56, 0x1f, 0x81, {0x1000, 0x80000001}, {0x3}, @period={0x0, 0x4, 0x9, 0x0, 0x100, {0x6, 0x9, 0x1b, 0xbe3}, 0x7, [0xfffffffffffffffa, 0x8d, 0x6, 0xfffffffffffffff9, 0x2, 0x8001, 0x8001]}}) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000040), 0xfffffffffffffffc, &(0x7f0000ffd000/0x2000)=nil, 0x1) 2018/04/05 15:32:44 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff004}, {0x6, 0x0, 0x0, 0xfffffffffffffbff}]}, 0x8) write(r0, &(0x7f0000000040), 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xf62}, 0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, &(0x7f0000000140)=0x4) [ 346.837506] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 346.844753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:44 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0xfffffffffffffffc, 0x1, 0x2, 0x0, 0x20}) clock_gettime(0x0, &(0x7f0000000180)) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0xffffffffffffffff, @random="d38456c27b94"}, 0x8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, "697000102e85696acbf8017b00"}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000280)=0x1) mq_timedreceive(r0, &(0x7f00000002c0)=""/224, 0xe0, 0x0, &(0x7f0000000040)={0x0, 0x989680}) mq_timedsend(r0, &(0x7f0000726fff)='\x00', 0x1, 0x0, &(0x7f000066cff0)) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x8) 2018/04/05 15:32:44 executing program 2 (fault-call:0 fault-nth:19): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:44 executing program 7: lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '.$[$*ppp1#bdev\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0xfffffea0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)="73010080001e000000", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/04/05 15:32:44 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) pipe(&(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000003100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/236, 0xec}, {&(0x7f0000001540)=""/181, 0xb5}, {&(0x7f0000001600)=""/224, 0xe0}], 0xa, 0x0, 0x32f, 0x9}, 0x4e}, {{&(0x7f0000001780)=@l2, 0x80, &(0x7f0000002940)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/109, 0x6d}, {&(0x7f0000002880)=""/170, 0xaa}], 0x3, 0x0, 0x0, 0x401}, 0x8}, {{&(0x7f0000002980)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/156, 0x9c}, {&(0x7f0000002ac0)=""/132, 0x84}], 0x2, &(0x7f0000002bc0)=""/10, 0xa, 0x3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002c00)=""/142, 0x8e}, {&(0x7f0000002cc0)=""/34, 0x22}, {&(0x7f0000002d00)=""/11, 0xb}, {&(0x7f0000002d40)=""/52, 0x32f}, {&(0x7f0000002d80)=""/201, 0xc9}], 0x5, &(0x7f0000002ec0)=""/19, 0x13, 0x3}, 0x101}], 0x4, 0x40000020, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002f80)={{{@in6=@mcast1, @in=@remote}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000003080)=0xe8) r5 = gettid() rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(r5, 0x17) ptrace$peekuser(0x3, r5, 0x0) 2018/04/05 15:32:44 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f1, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 346.994932] FAULT_INJECTION: forcing a failure. [ 346.994932] name failslab, interval 1, probability 0, space 0, times 0 [ 347.006225] CPU: 1 PID: 24291 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 347.013230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.022571] Call Trace: [ 347.025162] dump_stack+0x1a7/0x27d [ 347.028796] ? arch_local_irq_restore+0x53/0x53 [ 347.033465] ? __save_stack_trace+0x7e/0xd0 [ 347.037792] should_fail+0x914/0xae0 [ 347.041499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.046587] ? kasan_kmalloc+0xad/0xe0 [ 347.050454] ? kmem_cache_alloc_trace+0x136/0x740 [ 347.055275] ? __memcg_init_list_lru_node+0x169/0x270 [ 347.060439] ? __list_lru_init+0x544/0x750 [ 347.064653] ? sget_userns+0x6a2/0xe60 [ 347.068516] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 347.073251] ? kern_mount_data+0x50/0xb0 [ 347.077290] ? pid_ns_prepare_proc+0x1e/0x80 [ 347.081671] ? alloc_pid+0x88e/0xa10 [ 347.085362] ? copy_process.part.38+0x274c/0x6140 [ 347.090181] ? _do_fork+0x1f7/0xfa0 [ 347.093785] ? compat_SyS_x86_clone+0x3b/0x50 [ 347.098258] ? find_held_lock+0x35/0x1d0 [ 347.102296] ? __lock_is_held+0xb6/0x140 [ 347.106340] ? check_same_owner+0x320/0x320 [ 347.110658] ? rcu_note_context_switch+0x710/0x710 [ 347.115578] should_failslab+0xec/0x120 [ 347.119531] kmem_cache_alloc_trace+0x4b/0x740 [ 347.124089] ? __kmalloc_node+0x33/0x70 [ 347.128037] ? __kmalloc_node+0x33/0x70 [ 347.131986] ? rcu_read_lock_sched_held+0x108/0x120 [ 347.136986] __memcg_init_list_lru_node+0x169/0x270 [ 347.141982] ? list_lru_add+0x7c0/0x7c0 [ 347.145933] ? __kmalloc_node+0x47/0x70 [ 347.149886] __list_lru_init+0x544/0x750 [ 347.153925] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 347.159785] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 347.164777] ? __lockdep_init_map+0xe4/0x650 [ 347.169161] ? lockdep_init_map+0x9/0x10 [ 347.173200] sget_userns+0x6a2/0xe60 [ 347.176886] ? set_anon_super+0x20/0x20 [ 347.180835] ? put_filp+0xa0/0xa0 [ 347.184264] ? destroy_unused_super.part.7+0xf0/0xf0 [ 347.189342] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 347.194337] ? save_stack+0xa3/0xd0 [ 347.197939] ? save_stack+0x43/0xd0 [ 347.201540] ? kasan_slab_alloc+0x12/0x20 [ 347.205665] ? kmem_cache_alloc+0x12e/0x760 [ 347.209958] ? alloc_pid+0xc1/0xa10 [ 347.213565] ? __radix_tree_replace+0x1af/0x310 [ 347.218209] ? radix_tree_delete+0x30/0x30 [ 347.222420] ? node_tag_clear+0xf2/0x180 [ 347.226462] ? proc_get_inode+0x620/0x620 [ 347.230584] mount_ns+0x6d/0x190 [ 347.233929] proc_mount+0x7a/0x90 [ 347.237358] mount_fs+0x66/0x2d0 [ 347.240704] vfs_kern_mount.part.26+0xc6/0x4a0 [ 347.245262] ? may_umount+0xa0/0xa0 [ 347.248863] ? kasan_check_read+0x11/0x20 [ 347.252986] ? do_raw_spin_unlock+0x9e/0x310 [ 347.257369] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 347.261927] ? idr_alloc+0x180/0x180 [ 347.265615] kern_mount_data+0x50/0xb0 [ 347.269478] pid_ns_prepare_proc+0x1e/0x80 [ 347.273688] alloc_pid+0x88e/0xa10 [ 347.277205] ? __change_pid+0x400/0x400 [ 347.281154] ? ns_capable_common+0xcf/0x160 [ 347.285455] ? memset+0x31/0x40 [ 347.288711] ? copy_thread_tls+0x268/0x8f0 [ 347.292917] ? do_raw_spin_lock+0xc1/0x230 [ 347.297132] copy_process.part.38+0x274c/0x6140 [ 347.301775] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 347.306942] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 347.312028] ? print_irqtrace_events+0x270/0x270 [ 347.316759] ? lock_acquire+0x1d5/0x580 [ 347.320706] ? lock_acquire+0x1d5/0x580 [ 347.324654] ? alloc_set_pte+0xf74/0x1780 [ 347.328782] ? __cleanup_sighand+0x50/0x50 [ 347.332992] ? print_irqtrace_events+0x270/0x270 [ 347.337731] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 347.342897] ? lock_downgrade+0x980/0x980 [ 347.347026] ? print_irqtrace_events+0x270/0x270 [ 347.351757] ? kasan_check_read+0x11/0x20 [ 347.355879] ? rcu_is_watching+0x85/0x130 [ 347.360010] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 347.365183] ? __lock_acquire+0x638/0x3c30 [ 347.369393] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 347.374571] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 347.379738] ? print_irqtrace_events+0x270/0x270 [ 347.384469] ? __pagevec_lru_add+0x30/0x30 [ 347.388683] ? lock_acquire+0x1d5/0x580 [ 347.392633] ? trace_hardirqs_off+0x10/0x10 [ 347.396935] ? __lock_acquire+0x638/0x3c30 [ 347.401147] ? check_same_owner+0x320/0x320 [ 347.405444] ? find_held_lock+0x35/0x1d0 [ 347.409481] ? trace_hardirqs_off+0x10/0x10 [ 347.413778] ? _parse_integer+0xe9/0x140 [ 347.417817] ? trace_hardirqs_off+0x10/0x10 [ 347.422116] ? _parse_integer+0x140/0x140 [ 347.426237] ? check_same_owner+0x320/0x320 [ 347.430535] ? find_held_lock+0x35/0x1d0 [ 347.434576] ? trace_hardirqs_off+0x10/0x10 [ 347.438872] ? get_pid_task+0xa5/0x150 [ 347.442734] ? lock_downgrade+0x980/0x980 [ 347.446860] ? find_held_lock+0x35/0x1d0 [ 347.450899] ? __f_unlock_pos+0x19/0x20 [ 347.454848] ? lock_downgrade+0x980/0x980 [ 347.458969] ? kasan_check_write+0x14/0x20 [ 347.463177] ? proc_fail_nth_write+0x9b/0x1e0 [ 347.467646] ? map_files_get_link+0x3b0/0x3b0 [ 347.472116] ? trace_hardirqs_off+0x10/0x10 [ 347.476415] ? find_held_lock+0x35/0x1d0 [ 347.480453] _do_fork+0x1f7/0xfa0 [ 347.483882] ? fork_idle+0x2d0/0x2d0 [ 347.487572] ? __lock_is_held+0xb6/0x140 [ 347.491616] ? __sb_end_write+0xa0/0xd0 [ 347.495567] ? kasan_check_write+0x14/0x20 [ 347.499775] ? fput+0xe0/0x150 [ 347.502941] ? ksys_write+0x184/0x220 [ 347.506721] ? SyS_read+0x30/0x30 [ 347.510156] ? kasan_check_write+0x14/0x20 [ 347.514373] compat_SyS_x86_clone+0x3b/0x50 [ 347.518669] ? compat_SyS_x86_fallocate+0x60/0x60 [ 347.523491] do_fast_syscall_32+0x3ec/0xf9f [ 347.527790] ? do_int80_syscall_32+0x9c0/0x9c0 [ 347.532345] ? finish_task_switch+0x1b9/0x970 [ 347.536811] ? finish_task_switch+0x17a/0x970 [ 347.541281] ? syscall_return_slowpath+0x2ac/0x550 [ 347.546189] ? prepare_exit_to_usermode+0x350/0x350 [ 347.551185] ? sysret32_from_system_call+0x5/0x3c [ 347.556004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.560828] entry_SYSENTER_compat+0x70/0x7f [ 347.565213] RIP: 0023:0xf7fc0c99 [ 347.568552] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 347.576239] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 347.583482] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:32:45 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x7, 0x5, 0x91, "5dae3b9bea79f58163334facf59ced7aafdb9e63df0ac07b70d92ff3366dc27c80ba7c6d71ca85bc3277d6fc04459d008d63a2d6f4166f5802e495cddffc54", 0x4}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) pipe(&(0x7f00000002c0)) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x1, 0x9, 0x3, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, 0xc) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0xe0, {{0xa, 0x4e23, 0x4, @empty, 0x7}}, {{0xa, 0x4e21, 0xfffffffffffffffb, @empty, 0x9}}}, 0x104) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 347.590726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.597968] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 347.605214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:45 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000dc0000)) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8001, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000200)={0xf8b, 0x0, 0x10000, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40086439, &(0x7f0000000240)={0x8, r4}) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x400) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0xa8, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fff, 0x20004, 0x8, 0x7ff, 0x2, 0x200, 0x5, 0x8, 0xefd80000000, 0xcecd, 0x8000, 0x8, 0x81, 0x7, 0x9f28, 0x1, 0x2800000000000000, 0x1000, 0x7fe0000, 0x80, 0xe31c, 0x9, 0xfffffffffffffffa, 0x1f, 0x0, 0x9, 0x75fa, 0x3, 0x6, 0x3, 0x200, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x10802, 0xb31e, 0x5, 0x0, 0x9, 0x401, 0x5}, r5, 0x10, r1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000b1eff4)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000000180)={r6, 0x1e}) 2018/04/05 15:32:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:45 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffffc0, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) close(r1) 2018/04/05 15:32:45 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/216) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000480)={r3, 0x3, 0x0, 0x7, 0xe1}, &(0x7f00000004c0)=0x18) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @broadcast}, &(0x7f00000001c0)=0xc) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r4, 0xfff}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@l2={0x1f, 0x1, {0x101, 0x401, 0x7fff, 0x7ff, 0x80000001, 0x6}, 0x9, 0x4}, {&(0x7f0000000200)=""/16, 0x10}, &(0x7f0000000240), 0x28}, 0x9c) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000500)={0x2}) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000540)=@assoc_id=r4, 0x4) 2018/04/05 15:32:45 executing program 7: munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) clock_nanosleep(0x7, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000140)={0x81, 0x10000, 0x8}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x401, 0x5, 0x2, 0x1]}) r1 = gettid() sched_setattr(r1, &(0x7f0000000200)={0x30, 0x3aa213d3228a0016, 0x1, 0x200, 0x279, 0x2, 0x100000000, 0x9}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getpeername$packet(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000012c0)=0x14) recvfrom(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40012000, &(0x7f0000001300)=@hci={0x1f, r2, 0x3}, 0x80) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001380)={@dev, 0x0}, &(0x7f00000013c0)=0x14) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001400)=""/188, &(0x7f00000014c0)=0xbc) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000001500)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001540)={0x0, 0xbb7, 0x7}, &(0x7f0000001580)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000015c0)={r4, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001600), &(0x7f0000001640)=0x4) link(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00') getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001700), 0x10) getsockname(r0, &(0x7f0000001740)=@can, &(0x7f00000017c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001800)={@local={0xfe, 0x80, [], 0xaa}, 0x48, r3}) fgetxattr(r0, &(0x7f0000001840)=@random={'security.', 'selfwlan1.)!em0\x00'}, &(0x7f0000001880)=""/4096, 0x1000) perf_event_open(&(0x7f0000002880)={0x4, 0x70, 0x7, 0x8000000000000, 0x9a, 0xfff, 0x0, 0x3ff, 0x2021, 0x1, 0xd17, 0x800, 0x5, 0xdae, 0x4, 0x8001, 0x800, 0x20, 0x800, 0x7, 0xb49, 0x6, 0x800, 0x76f2ea63, 0x0, 0x6, 0xd209, 0x800, 0x48, 0x7, 0x5, 0x0, 0x7, 0x6, 0x3f, 0x7, 0x9, 0x4, 0x0, 0x4, 0x3, @perf_config_ext={0x520, 0x6}, 0x10000, 0x2, 0x8, 0x5, 0x2, 0x9, 0x400}, r1, 0x0, r0, 0x2) sendmsg$can_raw(r0, &(0x7f00000029c0)={&(0x7f0000002900)={0x1d, r3}, 0x10, &(0x7f0000002980)={&(0x7f0000002940)=@can={{0x3, 0x6f84, 0x1, 0xa4}, 0x8, 0x2, 0x0, 0x0, "715070788b87b22f"}, 0x10}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000002a00)={'filter\x00', 0x9a, "aa0a5a6656f9cef036bfb95d8212a5c65f0b2a5b1ada32a6a77119ae881826d090fb0b1a4a6c44894aa0ce73f7b3b8511c13fc16d92e5435a3baa718b8bbea758738878ec2ad5a1735b1c7cc515d7d6e814df6f9d6b249139fe7624fb53e0495aa868c1380406c336e94b106158f55d762c608ea9196faa75b39c1bb4358a04077283986e3c50834785fcce8415ca30d82e011c01d9bf35da184"}, &(0x7f0000002ac0)=0xbe) mount(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)='securityfs\x00', 0x0, &(0x7f0000002bc0)="f94f30bc09a140e82f42d7e78b636609e160dbb90a574429628310719dabb8151fff6cdb3e020b7c6db1e2fd722ec17ebfbd6505712ac37bc679fb6e5cb23ac5bcb56f4a27a1b713811957b2bb4e64a971363c8137a8e37ccc61d040a07f1ef45b98731c07d8f99cb852b7379320bf2ed77ed6576c8cecface19c15cc5b94a833a5ef43ec42e5c8cce002e11a6bd526ca2ba929831de") sync() ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000002c80)=0x101) sendmsg(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002cc0)="23ae3518016427673101156a99a83aa1b1f03b3611b4187d5f4f99927a906fe3d14a6cdad3f264d44a5d2f7aec08bd06ff561e192e13851c50a7", 0x3a}, {&(0x7f0000002d00)="c8023b25538c6dc7c4a4e2e3ad5ab5e51631326838156b94769a39569a72a12b4d2ca01e99b4e4febfb979b80a279f86e81a839e1d4a73265518b567d6f3bb93b1ace649ce239d6c9c84719358ad737c6dbf735f608ec542f5bab1f4dbe1bdef6821ca6ed24495bd14a083f6464f7a3b02ff02f58ee0571061c0eab54a9e68ca31f37270ebe1e88b53f479cf0636e877a7b82c71bfe4d87a6c85c6373b", 0x9d}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="10d10857ddc8e425e8d0b8e45a7fb5e63c5a42808505a992a537cac62ec25c3e8792c8028662a364fd1bbeed9b1793c1cbc803ab75019b54d6a359800e0a97dcc473aa194b6b810ebc42da5e495eb0138992c1ab2c82e9e8d5fa5b55026f0156a29f2fefe957099b590e05cdc73e0bf7f657f2f48d8242a8bfb334f76acb4b8f47981a", 0x83}], 0x4, &(0x7f0000003ec0)=[{0x54, 0x103, 0x4cbf1c36, "78a961145844e458790ee897b30c0118002a922b1909e46d5ad75e8e86dd6fa02f9c25d41e026f74ddba09e3d7df81851ba0dd5fcb5dd0c9f7ca031d09465641980ae2cbd8dea522"}], 0x54, 0x4091}, 0x4000) 2018/04/05 15:32:45 executing program 3: socketpair(0x208000000000001e, 0x80005, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000080)=""/10, &(0x7f00000000c0)=0xa) r2 = getpid() capget(&(0x7f0000000000)={0x39980732, r2}, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x3, 0x93, 0x8}) 2018/04/05 15:32:45 executing program 2 (fault-call:0 fault-nth:20): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:45 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 347.865708] FAULT_INJECTION: forcing a failure. [ 347.865708] name failslab, interval 1, probability 0, space 0, times 0 [ 347.877085] CPU: 1 PID: 24326 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 347.884095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.893444] Call Trace: [ 347.896033] dump_stack+0x1a7/0x27d [ 347.899668] ? arch_local_irq_restore+0x53/0x53 [ 347.904336] ? __save_stack_trace+0x7e/0xd0 [ 347.908661] should_fail+0x914/0xae0 [ 347.912377] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 347.917483] ? kasan_kmalloc+0xad/0xe0 [ 347.921375] ? kmem_cache_alloc_trace+0x136/0x740 [ 347.926214] ? __memcg_init_list_lru_node+0x169/0x270 [ 347.931398] ? __list_lru_init+0x544/0x750 [ 347.935628] ? sget_userns+0x6a2/0xe60 [ 347.939521] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 347.944289] ? kern_mount_data+0x50/0xb0 [ 347.948350] ? pid_ns_prepare_proc+0x1e/0x80 [ 347.952757] ? alloc_pid+0x88e/0xa10 [ 347.956468] ? copy_process.part.38+0x274c/0x6140 [ 347.961295] ? _do_fork+0x1f7/0xfa0 [ 347.964904] ? compat_SyS_x86_clone+0x3b/0x50 [ 347.969385] ? find_held_lock+0x35/0x1d0 [ 347.973433] ? __lock_is_held+0xb6/0x140 [ 347.977485] ? check_same_owner+0x320/0x320 [ 347.981793] ? rcu_note_context_switch+0x710/0x710 [ 347.986709] should_failslab+0xec/0x120 [ 347.990664] kmem_cache_alloc_trace+0x4b/0x740 [ 347.995228] ? __kmalloc_node+0x33/0x70 [ 347.999181] ? __kmalloc_node+0x33/0x70 [ 348.003135] ? rcu_read_lock_sched_held+0x108/0x120 [ 348.008135] __memcg_init_list_lru_node+0x169/0x270 [ 348.013142] ? list_lru_add+0x7c0/0x7c0 [ 348.017098] ? __kmalloc_node+0x47/0x70 [ 348.021062] __list_lru_init+0x544/0x750 [ 348.025106] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 348.030972] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 348.035971] ? __lockdep_init_map+0xe4/0x650 [ 348.040365] ? lockdep_init_map+0x9/0x10 [ 348.044416] sget_userns+0x6a2/0xe60 [ 348.048108] ? set_anon_super+0x20/0x20 [ 348.052066] ? put_filp+0xa0/0xa0 [ 348.055504] ? destroy_unused_super.part.7+0xf0/0xf0 [ 348.060593] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 348.065587] ? perf_trace_lock+0xd6/0x900 [ 348.069717] ? save_stack+0xa3/0xd0 [ 348.073328] ? kasan_slab_alloc+0x12/0x20 [ 348.077457] ? alloc_pid+0xc1/0xa10 [ 348.081069] ? __radix_tree_replace+0x1af/0x310 [ 348.085718] ? radix_tree_delete+0x30/0x30 [ 348.089933] ? node_tag_clear+0xf2/0x180 [ 348.093980] ? proc_get_inode+0x620/0x620 [ 348.098108] mount_ns+0x6d/0x190 [ 348.101463] proc_mount+0x7a/0x90 [ 348.104901] mount_fs+0x66/0x2d0 [ 348.108251] vfs_kern_mount.part.26+0xc6/0x4a0 [ 348.112812] ? may_umount+0xa0/0xa0 [ 348.116417] ? kasan_check_read+0x11/0x20 [ 348.120544] ? do_raw_spin_unlock+0x9e/0x310 [ 348.124930] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 348.129494] ? idr_alloc+0x180/0x180 [ 348.133186] kern_mount_data+0x50/0xb0 [ 348.137055] pid_ns_prepare_proc+0x1e/0x80 [ 348.141269] alloc_pid+0x88e/0xa10 [ 348.144794] ? __change_pid+0x400/0x400 [ 348.148747] ? ns_capable_common+0xcf/0x160 [ 348.153054] ? memset+0x31/0x40 [ 348.156314] ? copy_thread_tls+0x268/0x8f0 [ 348.160524] ? do_raw_spin_lock+0xc1/0x230 [ 348.164744] copy_process.part.38+0x274c/0x6140 [ 348.169391] ? perf_trace_lock+0xd6/0x900 [ 348.173518] ? print_irqtrace_events+0x270/0x270 [ 348.178254] ? trace_event_raw_event_lock+0x340/0x340 [ 348.183422] ? lock_acquire+0x1d5/0x580 [ 348.187373] ? lock_acquire+0x1d5/0x580 [ 348.191326] ? alloc_set_pte+0xf74/0x1780 [ 348.195464] ? __cleanup_sighand+0x50/0x50 [ 348.199681] ? print_irqtrace_events+0x270/0x270 [ 348.204427] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 348.209596] ? lock_downgrade+0x980/0x980 [ 348.213726] ? print_irqtrace_events+0x270/0x270 [ 348.218460] ? rcu_is_watching+0x85/0x130 [ 348.222600] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 348.227775] ? __lock_acquire+0x638/0x3c30 [ 348.231991] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 348.237175] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 348.242347] ? trace_event_raw_event_lock+0x340/0x340 [ 348.247515] ? perf_trace_lock+0xd6/0x900 [ 348.251645] ? lock_acquire+0x1d5/0x580 [ 348.255599] ? trace_hardirqs_off+0x10/0x10 [ 348.259906] ? __lock_acquire+0x638/0x3c30 [ 348.264121] ? trace_event_raw_event_lock+0x340/0x340 [ 348.269290] ? find_held_lock+0x35/0x1d0 [ 348.273332] ? perf_trace_lock+0xd6/0x900 [ 348.277465] ? trace_event_raw_event_lock+0x340/0x340 [ 348.282637] ? check_same_owner+0x320/0x320 [ 348.286942] ? find_held_lock+0x35/0x1d0 [ 348.290983] ? trace_hardirqs_off+0x10/0x10 [ 348.295286] ? get_pid_task+0xa5/0x150 [ 348.299151] ? perf_trace_lock+0xd6/0x900 [ 348.303282] ? find_held_lock+0x35/0x1d0 [ 348.307327] ? __f_unlock_pos+0x19/0x20 [ 348.311282] ? lock_downgrade+0x980/0x980 [ 348.315410] ? kasan_check_write+0x14/0x20 [ 348.319624] ? proc_fail_nth_write+0x9b/0x1e0 [ 348.324100] ? map_files_get_link+0x3b0/0x3b0 [ 348.328573] ? trace_hardirqs_off+0x10/0x10 [ 348.332876] ? find_held_lock+0x35/0x1d0 [ 348.336917] _do_fork+0x1f7/0xfa0 [ 348.340352] ? fork_idle+0x2d0/0x2d0 [ 348.344064] ? __sb_end_write+0xa0/0xd0 [ 348.348024] ? kasan_check_write+0x14/0x20 [ 348.352238] ? fput+0xe0/0x150 [ 348.355407] ? ksys_write+0x184/0x220 [ 348.359191] ? SyS_read+0x30/0x30 [ 348.362632] compat_SyS_x86_clone+0x3b/0x50 [ 348.366935] ? compat_SyS_x86_fallocate+0x60/0x60 [ 348.371757] do_fast_syscall_32+0x3ec/0xf9f [ 348.376064] ? do_int80_syscall_32+0x9c0/0x9c0 [ 348.380621] ? finish_task_switch+0x1b9/0x970 [ 348.385094] ? finish_task_switch+0x17a/0x970 [ 348.389572] ? syscall_return_slowpath+0x2ac/0x550 [ 348.394484] ? prepare_exit_to_usermode+0x350/0x350 [ 348.399486] ? sysret32_from_system_call+0x5/0x3c [ 348.404312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.409137] entry_SYSENTER_compat+0x70/0x7f [ 348.413524] RIP: 0023:0xf7fc0c99 2018/04/05 15:32:45 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffff9, 0x200000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0xffffffff, 0xbb7, 0x0, r0, 0xaebc}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004fec)={0x2, 0x4, 0x100000001, 0x40}, 0x14) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000000)='L', &(0x7f00000001c0)}, 0x20) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ed8989cb99a65177bab357473b", 0xd}, {&(0x7f0000000100)="c7a5a629f252a3165bcb67bf729be2e8e18820a7e03ea5090a42d60518dbcbae0408419141383d2dfb1c2bdacea8322ab1de26f9111c91692903ebe1736ab89be40bae915efa48c60c895b1c1ecf4b8e1e7d68", 0x53}], 0x2, 0x0) 2018/04/05 15:32:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 348.416868] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 348.424555] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 348.431802] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 348.439050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.446297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 348.453542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:45 executing program 3: socketpair(0x208000000000001e, 0x80005, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000080)=""/10, &(0x7f00000000c0)=0xa) r2 = getpid() capget(&(0x7f0000000000)={0x39980732, r2}, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x3, 0x93, 0x8}) 2018/04/05 15:32:45 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:45 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192300834b80040d8c560a060000ec04a200000543dfd87c5800004824ca94326400890005000000000000000004830600000000000000000003ed83fff5dde4ffff0f000100070c09a11b45ffd46f8a3731", 0x58}], 0x1) r1 = getpgid(0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x24980, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'vlan0\x00', {0x4, 0x8, 0x7, "d5168fa20177", 0x52b9}}) syz_open_procfs(r1, &(0x7f0000000000)='environ\x00') 2018/04/05 15:32:45 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r3, r4) r5 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r5, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/audio\x00', 0x14000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000001580)='/dev/vcsa#\x00', 0xfff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={r0, r1, 0x3, 0x1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) sendmsg$nl_generic(r2, &(0x7f0000017000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000016fd0)={0x14, 0x26, 0x301}, 0x14}, 0x1}, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001540)) r3 = socket$inet(0x2, 0x8000a, 0x9) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000001440)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000140)=0x14) readahead(r3, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[@ANYBLOB='$\x00'], 0x1}, 0x1}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0xf7, r5, 0x1, 0xdc, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) tee(r2, r2, 0x7, 0x0) r6 = dup2(r2, r3) quotactl(0x0, &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f00000016c0)="93cbd473b9a6881d6abc31bd14ade147644726") getsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001380), &(0x7f00000013c0)=0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001300)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000300)=""/4096}, &(0x7f0000000100)=0x78) 2018/04/05 15:32:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc004240a, &(0x7f00000001c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fallocate(r2, 0x2, 0x101, 0x7fff) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x6, 0x4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x1f, 0x200, 0x7a, 0x7430, 0x6, 0x1, 0x2c00000, r3}, &(0x7f0000000140)=0x20) 2018/04/05 15:32:46 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x101000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xf}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, 0x80000000, 0x6, 0x8b7d, 0x100, 0x400, 0x80000000, r2}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000b40)=@ioapic={0x5000, 0x18000000000, 0x7ff, 0xe8ca, 0x0, [{0x1ff, 0x6, 0x81, [], 0x5}, {0x0, 0x4, 0x2, [], 0x1}, {0x6, 0xf26, 0x5, [], 0x4}, {0x7ff, 0x2, 0xffffffffffffffff, [], 0xfffffffffffffffc}, {0x5, 0x7fffffff, 0x7, [], 0x7fffffff}, {0x5, 0x40, 0xcb8b, [], 0x4}, {0x8a77, 0x20000, 0x10000, [], 0x400}, {0xdd, 0x9, 0x43c, [], 0x6}, {0x2, 0x81, 0x100000001, [], 0x2}, {0x9, 0xf2, 0x6, [], 0x1}, {0xffffffff, 0x0, 0x200, [], 0x4}, {0x40, 0x6, 0x3ff, [], 0x7}, {0x0, 0x8, 0x30, [], 0x4c33}, {0x10001, 0x7fff, 0x9, [], 0x5}, {0x4, 0xbc, 0x6, [], 0x1}, {0x2480000, 0xe82, 0x1, [], 0x5}, {0x3075, 0x4, 0x89, [], 0x4}, {0x2, 0x6, 0x4, [], 0x6}, {0xfffffffffffffffc, 0xd, 0x7fff, [], 0x101}, {0x0, 0x80, 0x7, [], 0x7ff}, {0x6, 0x100, 0x81, [], 0x1f}, {0x1, 0x100, 0x6, [], 0x3}, {0x4, 0x1, 0x9, [], 0x6}, {0x2, 0x8, 0x7, [], 0x5}]}) 2018/04/05 15:32:46 executing program 3: pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000180)=0x4) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'ip6gre0\x00', {0x4, 0x7fff, 0x9, "f1c8f1c3396a", 0x7}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, r2, 0x1000) 2018/04/05 15:32:46 executing program 2 (fault-call:0 fault-nth:21): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:46 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='/dev/sequencer2\x00', 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) getsockname$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) 2018/04/05 15:32:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 349.490280] FAULT_INJECTION: forcing a failure. [ 349.490280] name failslab, interval 1, probability 0, space 0, times 0 [ 349.501603] CPU: 1 PID: 24371 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 349.508610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.517947] Call Trace: [ 349.520520] dump_stack+0x1a7/0x27d [ 349.524138] ? arch_local_irq_restore+0x53/0x53 [ 349.528792] ? __save_stack_trace+0x7e/0xd0 [ 349.533095] should_fail+0x914/0xae0 [ 349.536785] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.541866] ? kasan_kmalloc+0xad/0xe0 [ 349.545732] ? kmem_cache_alloc_trace+0x136/0x740 [ 349.550551] ? __memcg_init_list_lru_node+0x169/0x270 [ 349.555718] ? __list_lru_init+0x544/0x750 [ 349.559932] ? sget_userns+0x6a2/0xe60 [ 349.563797] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 349.568528] ? kern_mount_data+0x50/0xb0 [ 349.572568] ? pid_ns_prepare_proc+0x1e/0x80 [ 349.576950] ? alloc_pid+0x88e/0xa10 [ 349.580642] ? copy_process.part.38+0x274c/0x6140 [ 349.585458] ? _do_fork+0x1f7/0xfa0 [ 349.589067] ? compat_SyS_x86_clone+0x3b/0x50 [ 349.593541] ? find_held_lock+0x35/0x1d0 [ 349.597583] ? __lock_is_held+0xb6/0x140 [ 349.601631] ? check_same_owner+0x320/0x320 [ 349.605936] ? rcu_note_context_switch+0x710/0x710 [ 349.611242] should_failslab+0xec/0x120 [ 349.615199] kmem_cache_alloc_trace+0x4b/0x740 [ 349.619757] ? __kmalloc_node+0x33/0x70 [ 349.623709] ? __kmalloc_node+0x33/0x70 [ 349.627661] ? rcu_read_lock_sched_held+0x108/0x120 [ 349.632661] __memcg_init_list_lru_node+0x169/0x270 [ 349.637656] ? list_lru_add+0x7c0/0x7c0 [ 349.641607] ? __kmalloc_node+0x47/0x70 [ 349.645563] __list_lru_init+0x544/0x750 [ 349.649603] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 349.655464] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 349.660458] ? __lockdep_init_map+0xe4/0x650 [ 349.664843] ? lockdep_init_map+0x9/0x10 [ 349.668887] sget_userns+0x6a2/0xe60 [ 349.672587] ? set_anon_super+0x20/0x20 [ 349.676540] ? put_filp+0xa0/0xa0 [ 349.679972] ? destroy_unused_super.part.7+0xf0/0xf0 [ 349.685052] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 349.690046] ? perf_trace_lock+0xd6/0x900 [ 349.694172] ? save_stack+0xa3/0xd0 [ 349.697777] ? kasan_slab_alloc+0x12/0x20 [ 349.701898] ? alloc_pid+0xc1/0xa10 [ 349.705503] ? __radix_tree_replace+0x1af/0x310 [ 349.710150] ? radix_tree_delete+0x30/0x30 [ 349.714364] ? node_tag_clear+0xf2/0x180 [ 349.718407] ? proc_get_inode+0x620/0x620 [ 349.722528] mount_ns+0x6d/0x190 [ 349.725872] proc_mount+0x7a/0x90 [ 349.729305] mount_fs+0x66/0x2d0 [ 349.732650] vfs_kern_mount.part.26+0xc6/0x4a0 [ 349.737211] ? may_umount+0xa0/0xa0 [ 349.740813] ? kasan_check_read+0x11/0x20 [ 349.744937] ? do_raw_spin_unlock+0x9e/0x310 [ 349.749319] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 349.753879] ? idr_alloc+0x180/0x180 [ 349.757571] kern_mount_data+0x50/0xb0 [ 349.761434] pid_ns_prepare_proc+0x1e/0x80 [ 349.765645] alloc_pid+0x88e/0xa10 [ 349.769165] ? __change_pid+0x400/0x400 [ 349.773115] ? ns_capable_common+0xcf/0x160 [ 349.777428] ? memset+0x31/0x40 [ 349.780687] ? copy_thread_tls+0x268/0x8f0 [ 349.784897] ? do_raw_spin_lock+0xc1/0x230 [ 349.789116] copy_process.part.38+0x274c/0x6140 [ 349.793765] ? update_cfs_rq_load_avg.part.66+0x2d0/0x2d0 [ 349.799281] ? print_irqtrace_events+0x270/0x270 [ 349.804020] ? lock_acquire+0x1d5/0x580 [ 349.807971] ? lock_acquire+0x1d5/0x580 [ 349.811928] ? __cleanup_sighand+0x50/0x50 [ 349.816140] ? print_irqtrace_events+0x270/0x270 [ 349.820877] ? rb_insert_color+0x1580/0x1580 [ 349.825267] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 349.830430] ? print_irqtrace_events+0x270/0x270 [ 349.835167] ? print_irqtrace_events+0x270/0x270 [ 349.839910] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 349.845078] ? __lock_acquire+0x638/0x3c30 [ 349.849290] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 349.854463] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 349.859633] ? trace_event_raw_event_lock+0x340/0x340 [ 349.864799] ? perf_trace_lock+0xd6/0x900 [ 349.868925] ? lock_acquire+0x1d5/0x580 [ 349.872875] ? trace_hardirqs_off+0x10/0x10 [ 349.877178] ? __lock_acquire+0x638/0x3c30 [ 349.881392] ? trace_event_raw_event_lock+0x340/0x340 [ 349.886558] ? find_held_lock+0x35/0x1d0 [ 349.890600] ? perf_trace_lock+0xd6/0x900 [ 349.894728] ? trace_event_raw_event_lock+0x340/0x340 [ 349.899894] ? check_same_owner+0x320/0x320 [ 349.904194] ? find_held_lock+0x35/0x1d0 [ 349.908230] ? trace_hardirqs_off+0x10/0x10 [ 349.912531] ? get_pid_task+0xa5/0x150 [ 349.916394] ? perf_trace_lock+0xd6/0x900 [ 349.920523] ? find_held_lock+0x35/0x1d0 [ 349.924568] ? __f_unlock_pos+0x19/0x20 [ 349.928518] ? lock_downgrade+0x980/0x980 [ 349.932643] ? kasan_check_write+0x14/0x20 [ 349.936855] ? proc_fail_nth_write+0x9b/0x1e0 [ 349.941326] ? map_files_get_link+0x3b0/0x3b0 [ 349.945804] ? find_held_lock+0x35/0x1d0 [ 349.949843] _do_fork+0x1f7/0xfa0 [ 349.953277] ? fork_idle+0x2d0/0x2d0 [ 349.956980] ? __sb_end_write+0xa0/0xd0 [ 349.960930] ? kasan_check_write+0x14/0x20 [ 349.965140] ? fput+0xe0/0x150 [ 349.968406] ? ksys_write+0x184/0x220 [ 349.972185] ? SyS_read+0x30/0x30 [ 349.975612] ? kasan_check_write+0x14/0x20 [ 349.979832] compat_SyS_x86_clone+0x3b/0x50 [ 349.984131] ? compat_SyS_x86_fallocate+0x60/0x60 [ 349.988949] do_fast_syscall_32+0x3ec/0xf9f [ 349.993249] ? do_int80_syscall_32+0x9c0/0x9c0 [ 349.997807] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 350.003321] ? syscall_return_slowpath+0x2ac/0x550 [ 350.008232] ? sysret32_from_system_call+0x5/0x3c [ 350.013051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.017875] entry_SYSENTER_compat+0x70/0x7f [ 350.022258] RIP: 0023:0xf7fc0c99 [ 350.025597] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 350.033281] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 2018/04/05 15:32:47 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) [ 350.040527] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 350.047772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.055023] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.062269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:47 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000001c0)='{\x00', 0x40000000000000) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r1) write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd, @tick, {0x0, 0x7}}], 0x1c) sendfile(r2, r0, &(0x7f0000000040), 0x80000000) recvfrom$unix(r0, &(0x7f00000000c0), 0x0, 0x40000040, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 2018/04/05 15:32:47 executing program 3: r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, r0, 0x3) ioctl$TIOCSCTTY(r0, 0x540e, 0xff) mmap(&(0x7f0000f1f000/0x3000)=nil, 0x3000, 0x0, 0x400000000008011, r0, 0x0) mmap(&(0x7f0000f1f000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) 2018/04/05 15:32:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8f4, 0x200) prctl$getname(0x10, &(0x7f00000001c0)=""/251) sendmsg$nl_generic(r1, &(0x7f0000002680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002640)={&(0x7f0000000400)={0x2154, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {0x1c}, [@nested={0x1004, 0x3f, [@generic="69d95cd1d853da4e93f1ddbd74ab983d2622da95439cce3753d5d480a5e14578dc36d82a6b817f072e80d446698715708d19c4233ed417cd92061d5e336b7eaaac01b865474e3b549f74d999e9c1fe004783e34310eade8887e81cd3817c7c83779f87f612d1e9f772a5082f5db0b9adf367d32e436b080829278ef08860d55f2aa97ecea099a47780e694aa0b26653bf11044341ca06c57a773d18d528932ca3c281bbe83b06fd0138e1e08b7e2d403f205bd64fa981c198812d2a95da950b7fd6715b72a3a2195764d36bd7434cb2a702e6d637859b6ff1624826894f982ed5305aed82a240d063c77315048bb7eee6f1f7d030be1dd56939affeebbff461602d722d0fc24a3f6109ab7c97284981888502ac5862f7aff9232f80581aeb7fe05af28f553c9b1b6a48e5a80592c87b8b5e1b373b6bc2afe2f77acca1e0c5431a8abd4770ebaacb532af054ef4f4756268fdb99fb515fcee63243d27b4aeab9ded8fb4a40e38e68773db4a9252adbed41da31fa1708025795a32de623a4429873969acdbba58725e26b8e193b4b1626248b17112c4bc4472352ffd27ea3d903dfd798bcab25ebcc7bd3032edd76f92b07140ed072126127619d5dcc296276994454bbc988f606d42efb4d4a0ecc0b0afdf510e965c5856d017cf9b6448b81bb5a5d78507270ce2ba0b083a84e9155379bd4cd67d00884c88852d0f2d54951e41679fa322516a47514a5ed28cea193b49f4d0a47122f1b32021c627f10b4c2dfbc7f7dbca095cad9ba88c74bd03035d158485e522f8c3ce8e897ca64e8db804c072eee9d48c672b8fdc2b89efa4b54af87e235445927b6229dbf00c377c3f1dde3cc4cf92f38f6490df40e1b1d34cecd2bfc724f841dc703a5d485bef7398259b0af5cd8b22f08854fa2e7948e94fb4b6a0fd8debafd2260464441715fe335b0f630017b960ff10e3e70fc8e6e9e83dd8c1e1bd9bb590e743afda04b46a54f30a4ff836ffd80b1d841c21043a734fd55cfc197a0004986897697ea55d00c120db585d1faf2f01cfd6b7ab7aa78baef30cc6ea0ca2a89463892edc968d0d1be090a2d90b5a2e6f596017a336c70f2999104725049dbb6d83d0631d0830363ad039b10987ceac4486296e58849b25d7779e29345a5423bf5cc4bf2af508b685f1b11b325d0f4605c90b05bbccee090ca774e0eff2f5b66abebe2adc1a44eeebcc4dcfa1f35169357173c492b97fbb1557a52f678956c16d8ef7c2d845635f8a4af181e7bd77c1f29315c9b7c9b51cfb51da7cbd6983484defb8cca6f998543e815d6275759ba65b8858b369920b0a7396c40d1da0ccce5ded740724377d9594862b677586cbd49b185b1ff96c5761292810ad6e99a780fe8578b7fa833f7e9dd70ec6a9f5355876f68f4f4b11590e6323688dca6fe36b73730505b4d364e41bebf18551b5bf01645b21ba60ca6efca0cc51d08fe02d8041e67236f366ccee78bddf5c04be94fd29b0728538bdf4f1e6e9b08ac09fe32602159df909bdcc53408d1c75af3c8260067a67cdfaaede1e0affaefdf1b05e98938e4e3915e82084274d0e148312435ffebb081cfc68045e2a34c01d741216421d56933aeb83c5cbe9101e9d0b3192b26f09378436954967bda0cf76660ab53a90801d916f05566d20bcc3c96692f5eb73ddcbe355959e4e9f360080b7bb081708846348c0a10f4b2752d289dcaf945c32edcdb5e8d60aca816745f28c6ec7a845d675a37ae9e0ef86c533057afabc9709537fa631436d8f3353780c5394a4087e7a5bd36661108d6a728669a483d0e37c565b14ce9bbc4c22f4add242ed6a4fe8a80afbbf1535c2efaa1b4a078fb9399dc602943b2dd91cc3d5baf9d704c22c66c01af12a95bdb611c2420eaa6fcfe4f6d9cc4973b0487b474d53068252e516c490a8446387bcfafe9aa188094bdfcdf2f3a5f26fdcf7491e3795341920ceb0e3ce1f25242d9f3e2f63e6caa442bf5ac946c4ecbe86a99c42873a53f85f55520f33c861793f4ccf586ebb02d47650bb049c86d85d5e0e6214959cb2bb5b4960a93207a7fd9a84891aec06a17408243d887b49f6013f5d25a2cd823913327102ea2aafa5fa4b35951573e82db00330ba3b5a9f2d6d2f05db406141f16ffe420a87c11f26a0c997ac1190b6ee81ef3aff91d72ec566726b83232e7fa40a70522dd1f15e7f4c4b3151d34e5c23580ec1066844c7046816765eebff578ae4ae0fb8be157dfd187aac76f4d19b63ee0c5d3823f610650284a421d97a4f0c7e8edb4258fcdf811dd895646739d2a5bc41534971e64a090ed1845dc6506b316836cb20b4652a98593cca6f07fd949af2ad1ef861565358e3191e8528dfeda7698869c16f6740cea98bdae92a5ffdea907ac05bcc7700c310575d57ce076cadb3320fe34953d59cc07de336b023a91fc4febb471bb24e041002f9aebedb0a7ab48b4b41941bb53479c60b4636c16b8d6ba6e5e00b22aee63b44b2f336e4ea4f37653ec13a58eb0e32c49d2697032aa78365e9b5e752a475bb3f1736e311116da989064384f51fee6776bd93d6f5b85c539fcd841b9ea647555716b3b81841e8911fb606dcdee742ed4805fd231f05d284a146180b3ebcaf40860adfca6cdeeef79215dcb37fc977c712110e9360e4f3904e715899b311ad1cd925b859140b159226913cf27ce2091e43947308e19b73c0216f69e7b7f965c632598e45c1f66b9fb5da85b97b477eeda0cf30486aee9716396c609b3cb1b47ff20622377e667f3c759085eb75bb634acd525cf1708f75f9920001d7ee464478b7c7016e4657c24093af9e153bd87332af402811a5a5afbd73e51488590873bb22634ece701563edc1f8f513d483272687130b61f2e7bec58820435dc130496d4126b2bb34b6e503cdc593e7effaa20f40c83123e9b38675cdc78ebfcdeb212ec49b6061582fcb8ec5a1b8afca44a1938bed2b26a146f1ecc2d9f2617b0b5572f324465e651074d0c6abcdda2a645d78d8321b6f815a5fdd3292a6b3e14430e93296343d1304ee64e27c4249f8335df94e2bf806b5376423542cf980b9804a2095a28073606b7f22d0d92e7e65b412e072a94d60e024e478fcedfd7bc9e1490291c1a9aa97776c26f27bc45c7abdce8d14576d5b0a2322c090bf026b367fca35ce2a18ad5da2f8abc5b3b46602879f814327ceff02e04a705f8b10f46993bb8d50356808ff4c0f372735557cc927b1ff960c8eadcc5ba6dead1dc56c1497947f84dee113cd9f9af0d46c6a96335df0c75177d7d564547be4be14e14536f30ba408ef860d2d646811c00f5caa750265e7390bd122cce59b7274a5adda5db17fe5467e230f10f07e562a84144a4d8a3d190f19bb49880d94d9ba7c92207f9f209c8f0f152c81ee03e9e475179bd2d0aca6a7c66c2af56f588e316797e1ef3f89b40f01e411479ec984d95b08d868fb6e932592c69f7932ef2068e9e56c3b14f598ea5174b93ecf1c778dd8a07c4540a85b14a055098e8b08bb974a15786d28daa8b2ccb081671fb64852ccb27f4d409e0eca4232fa48d062191b2e9a6b5f674dd2dad16c90f66d7fff4ae4448b3be7815c5c817dd3f6976248a487d0922d7ea7a405b8430c144b971c6f33093b2878e261d1e1d052a343982df1d54358dc77d6a88e53e51e2d27940e945c291c1daa26bae531002bb2dc22dcf7d597b5b2e9bd884b87da423730d35d6b69b9815e85d806f851e015f7ceb506776de2d67b96f77e40c1d4f0006e10619f4d64821b22af6164c132ffe00764d1b17234e486f3fe70420727c55ac1fe1d30ea16622590d214a13b278557388a8b5eccbc83e3bd6e61b76bf02cafee03b6cc36c40fd0988cceca05c1f5149eac4e09338b82c1752adbf149dd680e7df0ea37da940dabca2228d3aad366b9cb430a754b4d6bff986033b14ab69265c8f233f349adff207248c07c27324cb4dae67cec475f0d6c84ea131d052b154b62bd55c469e44b4ffb0bbbfb72144d2f370c28db729e3fbaf3adb08cea8e2df49bef5ee0a53b46e07cf91acf5d52e7fe7797f399a55192afd83776f04e390077c11449114d5161dd64e85395d935a69ddd0e807a30d6ce19f2045ce5d965aeb592bf8a72e20415336c5e49f6179739447b53cf7580939b7626c6b850ebce6064481925e00d1da9e7ecdb377c142af3aaf53372c3ddc47414a4751893c54a3875d68fb50f7216090e21d77d7a73b5793944c7bd325f5743aff1341cdde03242e3178890c420cf5e526d1cd1a15e73d2d8670c2252cfbb834c347f3229b7bc1a04824f1d657e24b5676d2c86c677e92fc555e95a1dd8b5e913160a3311f0e1701bd05173558dc4a44e15e0feb3730fbaa0531d559fd9e151732aa4bd88acf47b6de5805ef58ef1ec80580178f3bee4d7fd57b50a8c7b119bae2d4ed3ec3bed48557e76e1d8dd318c7a313494f86d223097da0ab8d1e2df7fdf8409ed0cd8e54af135fa7db4836cfe46fb53d63db52c08f14ebfb060b63be08c0a14ed9cdb35c460d989e72c9f9cb0459ce1ace95117813d862410fa78c2d092a47427bf565662247d529edc7d5f22f9ecab6e6a74da42072bdc0722f14892a006a0173f4f64b5e74aa5670b97e173655e5299de10df134a47e93903f905565250de5ed9c823cd94d6853c0c6832e0141f49206d513c14538f0dade922010773d5cee4f2b7a3991dc80cb591e1e88681a0e4d539d3e5f50fc81f5ba7e10f861a78f0d24790dc1e38903e552f33e78d1c955277685c13ad47b0f0f5aa42f9f085e08cb2c2a9514aa0ef8ba9533a7a320df6eecbfb1e88a2233bfb632937eb9e116444529923836d925430ce21b52d2f7aea40046020261581fe5dd5f053c326f1f4ace0c0cce320a4e0aca0569bfc1b5d8624e44aeec3343bf7cc238c7d324c897c13d1fa22518f4351d0365e4cd9a0347af80901f5fcf44032fecdcfb24b7814fd499047d02290d4c7b54fe926067cfefe4f962ed688a8313b191be79e3257992c16a284ac71435c636dc94620a2ec422e885a7203bccec3c749491ad0dc46848a38dde5b889b2eae3441d20002b10294a534957a830dddde5853f14e9259778b6bcc2b56b16c90d9759e37b763f61f4364a9130bb63b48645b39025eab734c19cc87c2f2476182f97cd5573cef8615eb167522aacd9179f894aa88209238e48182a00bbdd8ea37375af50f0eddc3ab3f163f7c6a9de23c0b0a9cfa80307a1591ea7c9b1549c94fb015c5364e13f437ff36c9f9ea4a4e07759eb391b6837ab49ac5a101f383719b3b2d8a401bd0aac7dbe100b3f1c52e9694d0aa2193dcbb8243d6804e2e73fee293ab0b3503bb1917468d3874673d814de937715052507938613ebeb72649be881ba2245bb834f77f47ad800f49b2eaeca8174674209f13591b65547b1c965e04c166626c67af2d6332ff8a251c0fa91ddc6ea660f6992cc16c9619298bb5e1827834c91d6f55c8bf6ca4f9ad3957f6011f6d05cdc81cc92b2d294235a5389f78b0b81bff957cbcb530bbd35ce6c38caa73d45b67775d56c372d965909ce46f6dfac3edc8a6a8fa52f2dee63d3a1d39e6b92d056310074f6b3a3c4ab87a2c817b4ff06d90390902437ab960f25c402e444ebf706965ed1c5240ba52f49f0ee44d002023e73969a45a13777552ea7da5b54ae1501dcec5b1b11c211aa2fc28ae53d9a1c2c58476c46a36442c82409fcc1ec8710a0061362a3862048935329947df58b34ceb102406419aaf736da3599d6df4e"]}, @typed={0xc, 0x3, @u64=0x4}, @generic="adbda5134be335d812f307d37cc040727451ce589316d48d16e591ca6560906920648f53409e332f084df5b70d6dd44744d9dbc47ec0167d7f6e0ec03a", @nested={0x10f0, 0x7b, [@typed={0x10, 0xe, @str='/dev/amidi#\x00'}, @generic="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", @typed={0x8, 0x6f, @fd=r1}, @generic="f0328f79eca1c87ba3052d84d63afac6b52afca24f8e8c654feb30710a62a600cafd1bdf84db9c7055baaef7768fd6124e34452dba154e7b4fa543cb1b48aafcdf831f5fb0773f825eb6e7d6079fbb2fc34724466e92c971bdb50dbee6087a207dbc", @generic="af1886c768b649c30af68226bb3fd3cc9e74bf3fd55d7cf521a696909ff32fa466f27e8bea571a27a738927f3319e65078339a1805d562893d8f9dc31b2bd3e0d5d43e51c410905d8f93687452a76cee681d2951d00734e9c02029b584653c0f4aa0b68c655b5022682ec35748132bee3c"]}]}, 0x2154}, 0x1}, 0x40) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000002c0)=0x10000, &(0x7f0000000300)=0x4) getsockname$netlink(r1, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x2c, 0x7b, &(0x7f00000000c0)="c2cd4262065f2853a681a42d1bae82594d2d8b44e6e97a67579ac49389040bf2160181815af6cff9d1cf285e", &(0x7f0000000100)=""/123, 0x2}, 0x28) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000002580)={'mangle\x00'}, &(0x7f0000002600)=0x54) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000007000)={&(0x7f0000faffa0)={0x1c, 0x1d, 0x3, 0x0, 0x0, {0x1f}, [@nested={0x8, 0x1, [@generic='N']}]}, 0x1c}, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 2018/04/05 15:32:47 executing program 2 (fault-call:0 fault-nth:22): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:47 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)="9b2bb053c0ca88814731accf187ac2605f12e4fbbc0eca80c9f89b09aeb7c389bf3ccbdf4cc8d8245b5bfb6c7a7300d040354f715f52de11b0e3ed20d1db3b76f7289081fbbe1cd30cb048d481cacb96ed49bb739b3610598f5c6073cc0b5168df59fccc7c537ca3f8b562c0980a2e01d4fba09a282e3537f2bbb6855635ab812b38e813aa1a0a4c7ceddf3a7a56a5b5e540", 0x1) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) io_setup(0x66c, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f0000000180)="42a94df2218d641d1f5a8a2e741b3f3cc8eee6cda8dbfe25b2aeb002ea57b3e029251d7ae8abeba652f6fb118785bdcf012c5ae9015a5c89d3c869463a497a034a268be1a1039afbf9e309d5acfb2e318f12a974481f2fdf1dd22cd2a8dfbf0a907ef3049a1037374799abf8aaf0c1c0d898f051f86d62062a4e611d383b98ee360156854d871e3d1d6848951280810d2026", 0x92, 0x401, 0x0, 0x0, r0}]) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x6) eventfd(0x200) r4 = dup2(r0, r1) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x0, 0x0, 0x0, 0x3fd}], 0x30) sendto$ipx(r0, &(0x7f00000003c0)="859187c4694c9f6969e851f79fee6fb6980f41e52f1942643b8f526871004ad828153aa98b07cfa29827efc28124938e78c00b111b60baf34f405810e20e496cc8b0935d53516a111f54f5645fab2f6113afa1bf", 0x54, 0x881, &(0x7f00000002c0)={0x4, 0x7fff, 0x0, "18efec51a6f5", 0x4}, 0x10) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000000c0)=""/87) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) bind$packet(r4, &(0x7f0000000580)={0x11, 0xf7, r5, 0x1, 0x1000, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendfile(r4, r1, &(0x7f0000000040), 0x80000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x8}], 0x1c) 2018/04/05 15:32:47 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000180)=0x7) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000001, 0x80) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x684, 0x8001}) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(wp256)\x00'}, 0xfffffcbd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b23b605453b7023c611705da1bfbf1d27a06f9d0098b3ace7f67e27dd1d4e20aa8126f9d02a15c7c45adfd9e18ac27bb31538dac8956b5d07b214ffbd94296b1f2", 0x41) [ 350.204962] FAULT_INJECTION: forcing a failure. [ 350.204962] name failslab, interval 1, probability 0, space 0, times 0 [ 350.216281] CPU: 1 PID: 24402 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 350.223292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.233186] Call Trace: [ 350.233238] dump_stack+0x1a7/0x27d [ 350.233255] ? arch_local_irq_restore+0x53/0x53 [ 350.233268] ? __save_stack_trace+0x7e/0xd0 [ 350.233285] should_fail+0x914/0xae0 [ 350.233297] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.233323] ? kasan_kmalloc+0xad/0xe0 [ 350.233336] ? kmem_cache_alloc_trace+0x136/0x740 [ 350.233348] ? __memcg_init_list_lru_node+0x169/0x270 [ 350.233358] ? __list_lru_init+0x544/0x750 [ 350.233369] ? sget_userns+0x6a2/0xe60 [ 350.233380] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 350.233388] ? kern_mount_data+0x50/0xb0 [ 350.233398] ? pid_ns_prepare_proc+0x1e/0x80 [ 350.233407] ? alloc_pid+0x88e/0xa10 [ 350.233416] ? copy_process.part.38+0x274c/0x6140 [ 350.233424] ? _do_fork+0x1f7/0xfa0 [ 350.233435] ? compat_SyS_x86_clone+0x3b/0x50 [ 350.233448] ? find_held_lock+0x35/0x1d0 [ 350.233462] ? __lock_is_held+0xb6/0x140 [ 350.233480] ? check_same_owner+0x320/0x320 [ 350.233494] ? rcu_note_context_switch+0x710/0x710 [ 350.233509] should_failslab+0xec/0x120 [ 350.233519] kmem_cache_alloc_trace+0x4b/0x740 [ 350.233529] ? __kmalloc_node+0x33/0x70 [ 350.233539] ? __kmalloc_node+0x33/0x70 [ 350.233549] ? rcu_read_lock_sched_held+0x108/0x120 [ 350.233562] __memcg_init_list_lru_node+0x169/0x270 [ 350.233574] ? list_lru_add+0x7c0/0x7c0 [ 350.233584] ? __kmalloc_node+0x47/0x70 [ 350.233598] __list_lru_init+0x544/0x750 [ 350.233612] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 350.233625] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 350.233636] ? __lockdep_init_map+0xe4/0x650 [ 350.233649] ? lockdep_init_map+0x9/0x10 [ 350.233661] sget_userns+0x6a2/0xe60 [ 350.233669] ? set_anon_super+0x20/0x20 [ 350.233681] ? put_filp+0xa0/0xa0 [ 350.233693] ? destroy_unused_super.part.7+0xf0/0xf0 [ 350.233705] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 350.233713] ? perf_trace_lock+0xd6/0x900 [ 350.233724] ? save_stack+0xa3/0xd0 [ 350.233735] ? kasan_slab_alloc+0x12/0x20 [ 350.233742] ? alloc_pid+0xc1/0xa10 [ 350.233755] ? __radix_tree_replace+0x1af/0x310 [ 350.233766] ? radix_tree_delete+0x30/0x30 [ 350.233775] ? node_tag_clear+0xf2/0x180 [ 350.233790] ? proc_get_inode+0x620/0x620 [ 350.233798] mount_ns+0x6d/0x190 [ 350.233809] proc_mount+0x7a/0x90 [ 350.233819] mount_fs+0x66/0x2d0 [ 350.233830] vfs_kern_mount.part.26+0xc6/0x4a0 [ 350.233839] ? may_umount+0xa0/0xa0 [ 350.233847] ? kasan_check_read+0x11/0x20 [ 350.233855] ? do_raw_spin_unlock+0x9e/0x310 [ 350.233862] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 350.233870] ? idr_alloc+0x180/0x180 [ 350.233879] kern_mount_data+0x50/0xb0 [ 350.233889] pid_ns_prepare_proc+0x1e/0x80 [ 350.233897] alloc_pid+0x88e/0xa10 [ 350.233908] ? __change_pid+0x400/0x400 [ 350.233916] ? ns_capable_common+0xcf/0x160 [ 350.233931] ? memset+0x31/0x40 [ 350.233941] ? copy_thread_tls+0x268/0x8f0 [ 350.233949] ? do_raw_spin_lock+0xc1/0x230 [ 350.233962] copy_process.part.38+0x274c/0x6140 [ 350.233971] ? perf_trace_lock+0xd6/0x900 [ 350.233982] ? print_irqtrace_events+0x270/0x270 [ 350.233993] ? trace_event_raw_event_lock+0x340/0x340 [ 350.234002] ? lock_acquire+0x1d5/0x580 [ 350.234009] ? lock_acquire+0x1d5/0x580 [ 350.234019] ? alloc_set_pte+0xf74/0x1780 [ 350.234035] ? __cleanup_sighand+0x50/0x50 [ 350.234046] ? print_irqtrace_events+0x270/0x270 [ 350.234065] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 350.234075] ? lock_downgrade+0x980/0x980 [ 350.234088] ? print_irqtrace_events+0x270/0x270 [ 350.234098] ? rcu_is_watching+0x85/0x130 [ 350.234117] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 350.234129] ? __lock_acquire+0x638/0x3c30 [ 350.234139] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 350.234159] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 350.234174] ? trace_event_raw_event_lock+0x340/0x340 [ 350.234182] ? perf_trace_lock+0xd6/0x900 [ 350.234196] ? lock_acquire+0x1d5/0x580 [ 350.234206] ? trace_hardirqs_off+0x10/0x10 [ 350.234221] ? __lock_acquire+0x638/0x3c30 [ 350.234232] ? trace_event_raw_event_lock+0x340/0x340 [ 350.234244] ? find_held_lock+0x35/0x1d0 [ 350.234257] ? perf_trace_lock+0xd6/0x900 [ 350.234272] ? trace_event_raw_event_lock+0x340/0x340 [ 350.234280] ? check_same_owner+0x320/0x320 [ 350.234292] ? find_held_lock+0x35/0x1d0 [ 350.234302] ? trace_hardirqs_off+0x10/0x10 [ 350.234321] ? get_pid_task+0xa5/0x150 [ 350.234332] ? perf_trace_lock+0xd6/0x900 [ 350.234348] ? find_held_lock+0x35/0x1d0 [ 350.234366] ? __f_unlock_pos+0x19/0x20 [ 350.234376] ? lock_downgrade+0x980/0x980 [ 350.234385] ? kasan_check_write+0x14/0x20 [ 350.234394] ? proc_fail_nth_write+0x9b/0x1e0 [ 350.234403] ? map_files_get_link+0x3b0/0x3b0 [ 350.234412] ? trace_hardirqs_off+0x10/0x10 [ 350.234424] ? find_held_lock+0x35/0x1d0 [ 350.234434] _do_fork+0x1f7/0xfa0 [ 350.234445] ? fork_idle+0x2d0/0x2d0 [ 350.234469] ? __sb_end_write+0xa0/0xd0 [ 350.234480] ? kasan_check_write+0x14/0x20 [ 350.234488] ? fput+0xe0/0x150 [ 350.234497] ? ksys_write+0x184/0x220 [ 350.234507] ? SyS_read+0x30/0x30 [ 350.234515] ? kasan_check_write+0x14/0x20 [ 350.234530] compat_SyS_x86_clone+0x3b/0x50 [ 350.234540] ? compat_SyS_x86_fallocate+0x60/0x60 [ 350.234549] do_fast_syscall_32+0x3ec/0xf9f [ 350.234562] ? do_int80_syscall_32+0x9c0/0x9c0 [ 350.234571] ? finish_task_switch+0x1b9/0x970 [ 350.234578] ? finish_task_switch+0x17a/0x970 [ 350.234590] ? syscall_return_slowpath+0x2ac/0x550 [ 350.234600] ? prepare_exit_to_usermode+0x350/0x350 [ 350.234612] ? sysret32_from_system_call+0x5/0x3c [ 350.234625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.234639] entry_SYSENTER_compat+0x70/0x7f [ 350.234646] RIP: 0023:0xf7fc0c99 [ 350.234652] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 350.234662] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 2018/04/05 15:32:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x4, &(0x7f0000000040)={0x5, 0x75}, 0x0) 2018/04/05 15:32:48 executing program 7: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x10000}) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) readahead(r1, 0x200, 0x3) dup3(r0, r2, 0x0) 2018/04/05 15:32:48 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="000089deb326272286dd60d8abc700102f00fe80020000000000005ffeffffffffffff0000000000000000000000000000005e00000000001e00000000ff0008"], &(0x7f0000000380)) 2018/04/05 15:32:48 executing program 2 (fault-call:0 fault-nth:23): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:48 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x424442) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:48 executing program 3: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4002}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write(r1, &(0x7f0000000180), 0xff4d) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x3, 0x6a, 0x7fffffff, 0x4000008add, 0x5}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x28, &(0x7f00000002c0)}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @link_local}, {}]}) 2018/04/05 15:32:48 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000003c0)="74086e750000000000000000008c00", 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x20, 0x200) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x7, 0x0, 0x40, "16439eff94d2ebf42d406d04e34bdaa8c41cb2c740d0f8d88d8a836b6f703a9dd2f2b7e720cb287f0c6ab2cf5e375c2c1c3d7e3981e3aa0bb2b360b147825e442c82a8619eca5ea9d6b8983d9113cda8"}, 0xd8) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 2018/04/05 15:32:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 350.234668] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 350.234674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.234680] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.234685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.968903] FAULT_INJECTION: forcing a failure. [ 350.968903] name failslab, interval 1, probability 0, space 0, times 0 [ 350.980190] CPU: 1 PID: 24429 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 350.987201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.996547] Call Trace: [ 350.999134] dump_stack+0x1a7/0x27d [ 351.002761] ? arch_local_irq_restore+0x53/0x53 [ 351.007418] ? __save_stack_trace+0x7e/0xd0 [ 351.011736] should_fail+0x914/0xae0 [ 351.015438] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.020531] ? kasan_kmalloc+0xad/0xe0 [ 351.024400] ? kmem_cache_alloc_trace+0x136/0x740 [ 351.029223] ? __memcg_init_list_lru_node+0x169/0x270 [ 351.034392] ? __list_lru_init+0x544/0x750 [ 351.038604] ? sget_userns+0x6a2/0xe60 [ 351.042471] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 351.047203] ? kern_mount_data+0x50/0xb0 [ 351.051275] ? pid_ns_prepare_proc+0x1e/0x80 [ 351.055663] ? alloc_pid+0x88e/0xa10 [ 351.059353] ? copy_process.part.38+0x274c/0x6140 [ 351.064171] ? _do_fork+0x1f7/0xfa0 [ 351.067777] ? compat_SyS_x86_clone+0x3b/0x50 [ 351.072256] ? find_held_lock+0x35/0x1d0 [ 351.076300] ? __lock_is_held+0xb6/0x140 [ 351.080350] ? check_same_owner+0x320/0x320 [ 351.084657] ? rcu_note_context_switch+0x710/0x710 [ 351.089575] should_failslab+0xec/0x120 [ 351.093529] kmem_cache_alloc_trace+0x4b/0x740 [ 351.098086] ? __kmalloc_node+0x33/0x70 [ 351.102043] ? __kmalloc_node+0x33/0x70 [ 351.105996] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.110999] __memcg_init_list_lru_node+0x169/0x270 [ 351.116005] ? list_lru_add+0x7c0/0x7c0 [ 351.119964] ? __kmalloc_node+0x47/0x70 [ 351.123921] __list_lru_init+0x544/0x750 [ 351.127966] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 351.133834] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.138831] ? __lockdep_init_map+0xe4/0x650 [ 351.143222] ? lockdep_init_map+0x9/0x10 [ 351.147270] sget_userns+0x6a2/0xe60 [ 351.150961] ? set_anon_super+0x20/0x20 [ 351.154919] ? put_filp+0xa0/0xa0 [ 351.158353] ? destroy_unused_super.part.7+0xf0/0xf0 [ 351.163435] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 351.168431] ? save_stack+0xa3/0xd0 [ 351.172039] ? save_stack+0x43/0xd0 [ 351.175644] ? kasan_slab_alloc+0x12/0x20 [ 351.179768] ? kmem_cache_alloc+0x12e/0x760 [ 351.184067] ? alloc_pid+0xc1/0xa10 [ 351.187676] ? __radix_tree_replace+0x1af/0x310 [ 351.192325] ? radix_tree_delete+0x30/0x30 [ 351.196537] ? node_tag_clear+0xf2/0x180 [ 351.200584] ? proc_get_inode+0x620/0x620 [ 351.204708] mount_ns+0x6d/0x190 [ 351.208061] proc_mount+0x7a/0x90 [ 351.211493] mount_fs+0x66/0x2d0 [ 351.214844] vfs_kern_mount.part.26+0xc6/0x4a0 [ 351.219406] ? may_umount+0xa0/0xa0 [ 351.223013] ? kasan_check_read+0x11/0x20 [ 351.227142] ? do_raw_spin_unlock+0x9e/0x310 [ 351.231527] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 351.236086] ? idr_alloc+0x180/0x180 [ 351.239780] kern_mount_data+0x50/0xb0 [ 351.243646] pid_ns_prepare_proc+0x1e/0x80 [ 351.247860] alloc_pid+0x88e/0xa10 [ 351.251381] ? __change_pid+0x400/0x400 [ 351.255331] ? ns_capable_common+0xcf/0x160 [ 351.259639] ? memset+0x31/0x40 [ 351.262902] ? copy_thread_tls+0x268/0x8f0 [ 351.267113] ? do_raw_spin_lock+0xc1/0x230 [ 351.271330] copy_process.part.38+0x274c/0x6140 [ 351.275977] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 351.281148] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 351.286234] ? print_irqtrace_events+0x270/0x270 [ 351.290972] ? lock_acquire+0x1d5/0x580 [ 351.294925] ? lock_acquire+0x1d5/0x580 [ 351.298883] ? alloc_set_pte+0xf74/0x1780 [ 351.303030] ? __cleanup_sighand+0x50/0x50 [ 351.307248] ? print_irqtrace_events+0x270/0x270 [ 351.311998] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 351.317172] ? lock_downgrade+0x980/0x980 [ 351.321304] ? print_irqtrace_events+0x270/0x270 [ 351.326039] ? kasan_check_read+0x11/0x20 [ 351.330166] ? rcu_is_watching+0x85/0x130 [ 351.334303] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 351.339475] ? __lock_acquire+0x638/0x3c30 [ 351.343690] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 351.348872] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 351.354045] ? print_irqtrace_events+0x270/0x270 [ 351.358783] ? __pagevec_lru_add+0x30/0x30 [ 351.363005] ? lock_acquire+0x1d5/0x580 [ 351.366967] ? trace_hardirqs_off+0x10/0x10 [ 351.371271] ? __lock_acquire+0x638/0x3c30 [ 351.375483] ? check_same_owner+0x320/0x320 [ 351.379790] ? find_held_lock+0x35/0x1d0 [ 351.383835] ? trace_hardirqs_off+0x10/0x10 [ 351.388135] ? _parse_integer+0xe9/0x140 [ 351.392178] ? trace_hardirqs_off+0x10/0x10 [ 351.396477] ? _parse_integer+0x140/0x140 [ 351.400601] ? check_same_owner+0x320/0x320 [ 351.404902] ? find_held_lock+0x35/0x1d0 [ 351.408945] ? trace_hardirqs_off+0x10/0x10 [ 351.413248] ? get_pid_task+0xa5/0x150 [ 351.417117] ? lock_downgrade+0x980/0x980 [ 351.421252] ? find_held_lock+0x35/0x1d0 [ 351.425301] ? __f_unlock_pos+0x19/0x20 [ 351.429254] ? lock_downgrade+0x980/0x980 [ 351.433383] ? kasan_check_write+0x14/0x20 [ 351.437596] ? proc_fail_nth_write+0x9b/0x1e0 [ 351.442071] ? map_files_get_link+0x3b0/0x3b0 [ 351.446545] ? trace_hardirqs_off+0x10/0x10 [ 351.450850] ? find_held_lock+0x35/0x1d0 [ 351.454892] _do_fork+0x1f7/0xfa0 [ 351.458329] ? fork_idle+0x2d0/0x2d0 [ 351.462031] ? __lock_is_held+0xb6/0x140 [ 351.466089] ? __sb_end_write+0xa0/0xd0 [ 351.470043] ? kasan_check_write+0x14/0x20 [ 351.474254] ? fput+0xe0/0x150 [ 351.477426] ? ksys_write+0x184/0x220 [ 351.481208] ? SyS_read+0x30/0x30 [ 351.484638] ? kasan_check_write+0x14/0x20 [ 351.488861] compat_SyS_x86_clone+0x3b/0x50 [ 351.493162] ? compat_SyS_x86_fallocate+0x60/0x60 [ 351.497984] do_fast_syscall_32+0x3ec/0xf9f [ 351.502289] ? do_int80_syscall_32+0x9c0/0x9c0 [ 351.506851] ? finish_task_switch+0x1b9/0x970 [ 351.511324] ? finish_task_switch+0x17a/0x970 [ 351.515801] ? syscall_return_slowpath+0x2ac/0x550 [ 351.520710] ? prepare_exit_to_usermode+0x350/0x350 [ 351.525709] ? sysret32_from_system_call+0x5/0x3c [ 351.530536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.535361] entry_SYSENTER_compat+0x70/0x7f [ 351.539747] RIP: 0023:0xf7fc0c99 [ 351.543090] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 351.550779] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 351.558033] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:32:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000004000)=0xfffffce8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000003ffc)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0x7, 0x73b}) getsockname$unix(r2, &(0x7f0000000080), &(0x7f0000000140)=0x6e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x4b7c}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r4 = getegid() fchownat(r2, &(0x7f0000000180)='./file0\x00', r3, r4, 0x0) [ 351.565279] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.572528] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.579776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:48 executing program 2 (fault-call:0 fault-nth:24): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:48 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 351.663100] FAULT_INJECTION: forcing a failure. [ 351.663100] name failslab, interval 1, probability 0, space 0, times 0 [ 351.674443] CPU: 1 PID: 24450 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 351.681455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.690804] Call Trace: [ 351.693392] dump_stack+0x1a7/0x27d [ 351.697024] ? arch_local_irq_restore+0x53/0x53 [ 351.701688] ? __save_stack_trace+0x7e/0xd0 [ 351.705996] should_fail+0x914/0xae0 [ 351.709697] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.714782] ? kasan_kmalloc+0xad/0xe0 [ 351.718646] ? kmem_cache_alloc_trace+0x136/0x740 [ 351.723465] ? __memcg_init_list_lru_node+0x169/0x270 [ 351.728630] ? __list_lru_init+0x544/0x750 [ 351.732842] ? sget_userns+0x6a2/0xe60 [ 351.736712] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 351.741443] ? kern_mount_data+0x50/0xb0 [ 351.745480] ? pid_ns_prepare_proc+0x1e/0x80 [ 351.749872] ? alloc_pid+0x88e/0xa10 [ 351.753563] ? copy_process.part.38+0x274c/0x6140 [ 351.758380] ? _do_fork+0x1f7/0xfa0 [ 351.761985] ? compat_SyS_x86_clone+0x3b/0x50 [ 351.766464] ? find_held_lock+0x35/0x1d0 [ 351.770508] ? __lock_is_held+0xb6/0x140 [ 351.774566] ? check_same_owner+0x320/0x320 [ 351.778871] ? rcu_note_context_switch+0x710/0x710 [ 351.783789] should_failslab+0xec/0x120 [ 351.787746] kmem_cache_alloc_trace+0x4b/0x740 [ 351.792306] ? __kmalloc_node+0x33/0x70 [ 351.796256] ? __kmalloc_node+0x33/0x70 [ 351.800207] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.805202] __memcg_init_list_lru_node+0x169/0x270 [ 351.810198] ? list_lru_add+0x7c0/0x7c0 [ 351.814148] ? __kmalloc_node+0x47/0x70 [ 351.818105] __list_lru_init+0x544/0x750 [ 351.822149] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 351.828013] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.833013] ? __lockdep_init_map+0xe4/0x650 [ 351.837407] ? lockdep_init_map+0x9/0x10 [ 351.841449] sget_userns+0x6a2/0xe60 [ 351.845136] ? set_anon_super+0x20/0x20 [ 351.849088] ? put_filp+0xa0/0xa0 [ 351.852519] ? destroy_unused_super.part.7+0xf0/0xf0 [ 351.857601] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 351.862591] ? perf_trace_lock+0xd6/0x900 [ 351.866721] ? save_stack+0xa3/0xd0 [ 351.870325] ? kasan_slab_alloc+0x12/0x20 [ 351.874449] ? alloc_pid+0xc1/0xa10 [ 351.878055] ? __radix_tree_replace+0x1af/0x310 [ 351.882702] ? radix_tree_delete+0x30/0x30 [ 351.886931] ? node_tag_clear+0xf2/0x180 [ 351.890976] ? proc_get_inode+0x620/0x620 [ 351.895098] mount_ns+0x6d/0x190 [ 351.898441] proc_mount+0x7a/0x90 [ 351.901871] mount_fs+0x66/0x2d0 [ 351.905216] vfs_kern_mount.part.26+0xc6/0x4a0 [ 351.909773] ? may_umount+0xa0/0xa0 [ 351.913376] ? kasan_check_read+0x11/0x20 [ 351.917499] ? do_raw_spin_unlock+0x9e/0x310 [ 351.921883] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 351.926445] ? idr_alloc+0x180/0x180 [ 351.930138] kern_mount_data+0x50/0xb0 [ 351.934002] pid_ns_prepare_proc+0x1e/0x80 [ 351.938219] alloc_pid+0x88e/0xa10 [ 351.941739] ? __change_pid+0x400/0x400 [ 351.945700] ? ns_capable_common+0xcf/0x160 [ 351.950007] ? memset+0x31/0x40 [ 351.953275] ? copy_thread_tls+0x268/0x8f0 [ 351.957485] ? do_raw_spin_lock+0xc1/0x230 [ 351.961702] copy_process.part.38+0x274c/0x6140 [ 351.966346] ? perf_trace_lock+0xd6/0x900 [ 351.970471] ? print_irqtrace_events+0x270/0x270 [ 351.975202] ? trace_event_raw_event_lock+0x340/0x340 [ 351.980368] ? lock_acquire+0x1d5/0x580 [ 351.984316] ? lock_acquire+0x1d5/0x580 [ 351.988270] ? alloc_set_pte+0xf74/0x1780 [ 351.992400] ? __cleanup_sighand+0x50/0x50 [ 351.996610] ? print_irqtrace_events+0x270/0x270 [ 352.001363] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.006527] ? lock_downgrade+0x980/0x980 [ 352.010654] ? print_irqtrace_events+0x270/0x270 [ 352.015385] ? rcu_is_watching+0x85/0x130 [ 352.019518] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.024691] ? __lock_acquire+0x638/0x3c30 [ 352.028901] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.034075] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.039243] ? trace_event_raw_event_lock+0x340/0x340 [ 352.044407] ? perf_trace_lock+0xd6/0x900 [ 352.048533] ? lock_acquire+0x1d5/0x580 [ 352.052483] ? trace_hardirqs_off+0x10/0x10 [ 352.056784] ? __lock_acquire+0x638/0x3c30 [ 352.060997] ? trace_event_raw_event_lock+0x340/0x340 [ 352.066170] ? find_held_lock+0x35/0x1d0 [ 352.070209] ? perf_trace_lock+0xd6/0x900 [ 352.074336] ? trace_event_raw_event_lock+0x340/0x340 [ 352.079500] ? check_same_owner+0x320/0x320 [ 352.083798] ? find_held_lock+0x35/0x1d0 [ 352.087837] ? trace_hardirqs_off+0x10/0x10 [ 352.092137] ? get_pid_task+0xa5/0x150 [ 352.096004] ? perf_trace_lock+0xd6/0x900 [ 352.100140] ? find_held_lock+0x35/0x1d0 [ 352.104186] ? __f_unlock_pos+0x19/0x20 [ 352.108138] ? lock_downgrade+0x980/0x980 [ 352.112267] ? kasan_check_write+0x14/0x20 [ 352.116478] ? proc_fail_nth_write+0x9b/0x1e0 [ 352.120949] ? map_files_get_link+0x3b0/0x3b0 [ 352.125419] ? trace_hardirqs_off+0x10/0x10 [ 352.129719] ? find_held_lock+0x35/0x1d0 [ 352.133759] _do_fork+0x1f7/0xfa0 [ 352.137195] ? fork_idle+0x2d0/0x2d0 [ 352.140900] ? __sb_end_write+0xa0/0xd0 [ 352.144855] ? kasan_check_write+0x14/0x20 [ 352.149065] ? fput+0xe0/0x150 [ 352.152236] ? ksys_write+0x184/0x220 [ 352.156019] ? SyS_read+0x30/0x30 [ 352.159450] ? kasan_check_write+0x14/0x20 [ 352.163666] compat_SyS_x86_clone+0x3b/0x50 [ 352.167963] ? compat_SyS_x86_fallocate+0x60/0x60 [ 352.172784] do_fast_syscall_32+0x3ec/0xf9f [ 352.177083] ? do_int80_syscall_32+0x9c0/0x9c0 [ 352.181640] ? finish_task_switch+0x1b9/0x970 [ 352.186108] ? finish_task_switch+0x17a/0x970 [ 352.190579] ? syscall_return_slowpath+0x2ac/0x550 [ 352.195484] ? prepare_exit_to_usermode+0x350/0x350 [ 352.200566] ? sysret32_from_system_call+0x5/0x3c [ 352.205386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.210205] entry_SYSENTER_compat+0x70/0x7f 2018/04/05 15:32:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$amidi(&(0x7f000052bff4)='/dev/amidi#\x00', 0x34, 0x1) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000540)="f8", 0x1}], 0x1) 2018/04/05 15:32:49 executing program 3: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffffe}) r0 = memfd_create(&(0x7f0000000000)='ramfs\x00', 0x2) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) [ 352.214588] RIP: 0023:0xf7fc0c99 [ 352.217926] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 352.225610] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 352.232861] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 352.240105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.247349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 352.254593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x9004, 0x0) write$sndseq(r1, &(0x7f0000a74fd0)=[{0x5b94, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x30) 2018/04/05 15:32:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:49 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x4, 0x0, 0x101}, 0x9, 0x1}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 352.397974] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x38000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xd3, 0x0, [{0x40000000, 0x0, 0xffffffffffffffff}]}) 2018/04/05 15:32:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x301000) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x3, 0x100000001, &(0x7f0000000040)}) fcntl$getown(r0, 0x9) r1 = syz_open_dev$sg(&(0x7f0000961000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0xba0a) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 2018/04/05 15:32:49 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f00000025c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) clock_settime(0x4, &(0x7f0000000040)) 2018/04/05 15:32:49 executing program 7: socketpair$inet(0x2, 0x5, 0x100, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300)={0x1b, 0xffff, 0x1, 0x8}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) connect$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "cbe504807c38bcaefd3117ab07d855f07a807bdff372bc5cb2126b1bf49c1a6103c7d161f0475ac9fe0fa3b87530432b3d58eb8d924a0106c95f1bde5497c2"}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f00000002c0)={0x3, 0x3, r5, 0x8, r6, 0x401, 0x1ff, 0x5}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r3, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/04/05 15:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x1023c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = inotify_init1(0x0) dup2(r3, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9, 0x1}, &(0x7f0000000280)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180), 0xffffffffffffff80) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000600)="e1f6049b930b2d66e6bf7b731244fd886105e2986917dc9d72bb377ad485a9ddef3c7079c3f410537064c0cb48d4e1e5cb3be9ed8844a10697d5039686ba614ecaa73f803a67f406a253e6a4d0b812950a26e4fc8194559df091b0f551be2929ae475721445f3ec8d51bc3234f21932b2b16314b894b63892dc31e") socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000200)) exit_group(0x7) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)=0x3) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000400)={'ipddp0\x00'}) 2018/04/05 15:32:49 executing program 2 (fault-call:0 fault-nth:25): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:49 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x6, 0xfffffffffffffffd, [{0x3f, 0x0, 0x7}, {0x7}, {0xffff, 0x0, 0x3}, {0x100000000, 0x0, 0x6}, {0x5, 0x0, 0x8001}, {0x4, 0x0, 0x4}]}) 2018/04/05 15:32:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 352.480484] FAULT_INJECTION: forcing a failure. [ 352.480484] name failslab, interval 1, probability 0, space 0, times 0 [ 352.480644] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 352.491760] CPU: 1 PID: 24490 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 352.491767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.491773] Call Trace: [ 352.521013] dump_stack+0x1a7/0x27d [ 352.524652] ? arch_local_irq_restore+0x53/0x53 [ 352.529315] ? __save_stack_trace+0x7e/0xd0 [ 352.533637] should_fail+0x914/0xae0 [ 352.537342] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.542431] ? kasan_kmalloc+0xad/0xe0 [ 352.546298] ? kmem_cache_alloc_trace+0x136/0x740 [ 352.551124] ? __memcg_init_list_lru_node+0x169/0x270 [ 352.556293] ? __list_lru_init+0x544/0x750 [ 352.560508] ? sget_userns+0x6a2/0xe60 [ 352.564380] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 352.569118] ? kern_mount_data+0x50/0xb0 [ 352.573162] ? pid_ns_prepare_proc+0x1e/0x80 [ 352.577555] ? copy_process.part.38+0x274c/0x6140 [ 352.582377] ? _do_fork+0x1f7/0xfa0 [ 352.585986] ? compat_SyS_x86_clone+0x3b/0x50 [ 352.590468] ? find_held_lock+0x35/0x1d0 [ 352.594516] ? __lock_is_held+0xb6/0x140 [ 352.598569] ? check_same_owner+0x320/0x320 [ 352.602876] ? rcu_note_context_switch+0x710/0x710 [ 352.607795] should_failslab+0xec/0x120 [ 352.611752] kmem_cache_alloc_trace+0x4b/0x740 [ 352.616312] ? __kmalloc_node+0x33/0x70 [ 352.620266] ? __kmalloc_node+0x33/0x70 [ 352.624221] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.629221] __memcg_init_list_lru_node+0x169/0x270 [ 352.634222] ? list_lru_add+0x7c0/0x7c0 [ 352.638175] ? __kmalloc_node+0x47/0x70 [ 352.642134] __list_lru_init+0x544/0x750 [ 352.646181] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 352.652049] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 352.657050] ? __lockdep_init_map+0xe4/0x650 [ 352.661439] ? lockdep_init_map+0x9/0x10 [ 352.665490] sget_userns+0x6a2/0xe60 [ 352.669181] ? set_anon_super+0x20/0x20 [ 352.673137] ? put_filp+0xa0/0xa0 [ 352.676570] ? destroy_unused_super.part.7+0xf0/0xf0 [ 352.681656] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 352.686652] ? perf_trace_lock_acquire+0xe3/0x980 [ 352.691474] ? save_stack+0xa3/0xd0 [ 352.695091] ? __radix_tree_replace+0x1af/0x310 [ 352.699747] ? radix_tree_delete+0x30/0x30 [ 352.703960] ? node_tag_clear+0xf2/0x180 [ 352.708012] ? proc_get_inode+0x620/0x620 [ 352.712143] mount_ns+0x6d/0x190 [ 352.715493] proc_mount+0x7a/0x90 [ 352.718926] mount_fs+0x66/0x2d0 [ 352.722276] vfs_kern_mount.part.26+0xc6/0x4a0 [ 352.726840] ? may_umount+0xa0/0xa0 [ 352.730444] ? kasan_check_read+0x11/0x20 [ 352.734570] ? do_raw_spin_unlock+0x9e/0x310 [ 352.738956] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 352.743517] ? idr_alloc+0x180/0x180 [ 352.747211] kern_mount_data+0x50/0xb0 [ 352.751079] pid_ns_prepare_proc+0x1e/0x80 [ 352.755297] alloc_pid+0x88e/0xa10 [ 352.758822] ? __change_pid+0x400/0x400 [ 352.762778] ? ns_capable_common+0xcf/0x160 [ 352.767085] ? memset+0x31/0x40 [ 352.770349] ? copy_thread_tls+0x268/0x8f0 [ 352.774563] ? do_raw_spin_lock+0xc1/0x230 [ 352.778787] copy_process.part.38+0x274c/0x6140 [ 352.783437] ? perf_trace_lock_acquire+0xe3/0x980 [ 352.788261] ? print_irqtrace_events+0x270/0x270 [ 352.793000] ? lock_acquire+0x1d5/0x580 [ 352.796959] ? lock_acquire+0x1d5/0x580 [ 352.800913] ? alloc_set_pte+0xf74/0x1780 [ 352.805055] ? __cleanup_sighand+0x50/0x50 [ 352.809272] ? print_irqtrace_events+0x270/0x270 [ 352.814031] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.819206] ? lock_downgrade+0x980/0x980 [ 352.823337] ? print_irqtrace_events+0x270/0x270 [ 352.828069] ? kasan_check_read+0x11/0x20 [ 352.832200] ? rcu_is_watching+0x85/0x130 [ 352.836340] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.841513] ? __lock_acquire+0x638/0x3c30 [ 352.845728] ? perf_trace_lock+0x900/0x900 [ 352.849955] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 352.855126] ? perf_trace_lock_acquire+0xe3/0x980 [ 352.859949] ? print_irqtrace_events+0x270/0x270 [ 352.864687] ? perf_trace_lock+0x900/0x900 [ 352.868905] ? lock_acquire+0x1d5/0x580 [ 352.872862] ? trace_hardirqs_off+0x10/0x10 [ 352.877166] ? perf_trace_lock_acquire+0xe3/0x980 [ 352.882010] ? __lock_acquire+0x638/0x3c30 [ 352.886238] ? perf_trace_lock+0x900/0x900 [ 352.890455] ? find_held_lock+0x35/0x1d0 [ 352.894501] ? trace_hardirqs_off+0x10/0x10 [ 352.898801] ? _parse_integer+0xe9/0x140 [ 352.902847] ? trace_hardirqs_off+0x10/0x10 [ 352.907148] ? _parse_integer+0x140/0x140 [ 352.911280] ? find_held_lock+0x35/0x1d0 [ 352.915322] ? trace_hardirqs_off+0x10/0x10 [ 352.919627] ? get_pid_task+0xa5/0x150 [ 352.923496] ? lock_downgrade+0x980/0x980 [ 352.927635] ? find_held_lock+0x35/0x1d0 [ 352.931685] ? __f_unlock_pos+0x19/0x20 [ 352.935644] ? lock_downgrade+0x980/0x980 [ 352.939778] ? kasan_check_write+0x14/0x20 [ 352.943994] ? proc_fail_nth_write+0x9b/0x1e0 [ 352.948476] ? map_files_get_link+0x3b0/0x3b0 [ 352.952952] ? trace_hardirqs_off+0x10/0x10 [ 352.957258] ? find_held_lock+0x35/0x1d0 [ 352.961305] _do_fork+0x1f7/0xfa0 [ 352.964746] ? fork_idle+0x2d0/0x2d0 [ 352.968445] ? __lock_is_held+0xb6/0x140 [ 352.972501] ? __sb_end_write+0xa0/0xd0 [ 352.976460] ? kasan_check_write+0x14/0x20 [ 352.980678] ? fput+0xe0/0x150 [ 352.983854] ? ksys_write+0x184/0x220 [ 352.987638] ? SyS_read+0x30/0x30 [ 352.991069] ? kasan_check_write+0x14/0x20 [ 352.995295] compat_SyS_x86_clone+0x3b/0x50 [ 352.999600] ? compat_SyS_x86_fallocate+0x60/0x60 [ 353.004426] do_fast_syscall_32+0x3ec/0xf9f [ 353.008738] ? do_int80_syscall_32+0x9c0/0x9c0 [ 353.013301] ? finish_task_switch+0x1b9/0x970 [ 353.017777] ? finish_task_switch+0x17a/0x970 [ 353.022257] ? syscall_return_slowpath+0x2ac/0x550 [ 353.027168] ? prepare_exit_to_usermode+0x350/0x350 [ 353.032168] ? sysret32_from_system_call+0x5/0x3c [ 353.036995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.041830] entry_SYSENTER_compat+0x70/0x7f [ 353.046220] RIP: 0023:0xf7fc0c99 [ 353.049565] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 353.057258] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 353.064507] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 353.071758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/04/05 15:32:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 353.079009] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 353.086266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:50 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) r1 = socket$inet(0x2, 0x80000, 0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @multicast2}, &(0x7f0000000080)=0xc) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000002140)=[@in6={0xa, 0x4e24, 0x8, @ipv4={[], [0xff, 0xff], @rand_addr=0x58}, 0xffffffffffffffff}], 0x1c) ioprio_get$uid(0x3, r2) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:50 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7fff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040), 0x1) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x1, 0x1ff, 0x1000, 0x4}, {0x9, 0x200, 0x6, 0x10001}, {0x8001, 0x8, 0x7, 0x20}, {0x2, 0x100, 0x9, 0x2}, {0x7, 0x6, 0xe2f1, 0x9}, {0x8, 0x10000, 0x1, 0x3}, {0x2, 0x1, 0x9, 0x1}]}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x1) 2018/04/05 15:32:50 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80882) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000000)={[0x5000, 0xf000, 0x1f001, 0x10d000], 0xd74, 0x18, 0x9}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1000036013, r0, 0x81000) [ 353.191405] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:50 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c26fec)={0x2, 0x7f, 0x103, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000200), &(0x7f0000000040)="7eba509185703ff91465f3f38e062fcfb9038219729b0feba906cd4321395b1cc16670d981005739d87176b393e01d7a8bce0fdbdcd7ec8eeab02730588733d325787bebf8bc06cc03e408ca618c0012713f264be1408188e4f171796d2587bbbe211c5d384e093058d94271ae8c779b46053f21e7b05093035c74"}, 0xac) fstatfs(r0, &(0x7f0000000240)=""/57) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/39) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000280)={0x7834}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/231}, 0x18) 2018/04/05 15:32:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 353.323292] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:50 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x280002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000101000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f5000000000008001c00", @ANYRES32, @ANYBLOB="0843f589ad00005656a76bd0419200"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000002c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xb9, 0x101300) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x46f}}, 0x8, 0x1ff}, &(0x7f0000000180)=0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0xf2, @local={0xfe, 0x80, [], 0xaa}, 0x2}}, [0xfffffffffffffeff, 0x0, 0x413a, 0xfd4, 0xffff, 0x7061, 0x2, 0x1, 0x4, 0x2, 0x0, 0xf9, 0x6, 0xffffffff, 0x200]}, &(0x7f0000000300)=0x100) 2018/04/05 15:32:50 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000c0c500000000ff00009400000000e5000095001a0000000000"], &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) write(r1, &(0x7f0000000080)="260000005e0009000000df623339410e590000000001000000ffffff00000000000000000000", 0x26) 2018/04/05 15:32:50 executing program 2 (fault-call:0 fault-nth:26): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:50 executing program 5: mq_open(&(0x7f0000000100)='-$\x00', 0x841, 0x31, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x1f, 0x1, 0x7f, 0xfae, 0x5}) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:50 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x100) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x3, 0x2) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000748ff5)={0x0, 0x0, 0x0, 0x0, 0x400, 0x40003, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0xb) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000380)=0x4) 2018/04/05 15:32:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:50 executing program 7: r0 = socket(0x10, 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/91, 0x5b}], 0x20000000000001a7, &(0x7f0000000180), 0x0, 0x1000}, 0x40010040) r1 = dup2(r0, r0) write$vnet(r1, &(0x7f0000002380)={0x1, {&(0x7f00000012c0)=""/143, 0x8f, &(0x7f0000001380)=""/4096, 0x1, 0x6}}, 0x68) ioctl$KDDELIO(r0, 0x4b35, 0x1) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x1, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000, 0x8}], 0x82c020, &(0x7f0000001280)={[{@localflocks='localflocks', 0x2c}]}) write(r0, &(0x7f0000000040)="220000001a000704009433de0100040080010f0092ac001500fffe3b06000f00ff27", 0x22) socket$packet(0x11, 0x3, 0x300) 2018/04/05 15:32:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 353.564555] FAULT_INJECTION: forcing a failure. [ 353.564555] name failslab, interval 1, probability 0, space 0, times 0 [ 353.575849] CPU: 1 PID: 24546 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 353.581846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 353.582857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.582862] Call Trace: [ 353.582878] dump_stack+0x1a7/0x27d [ 353.582892] ? arch_local_irq_restore+0x53/0x53 [ 353.582903] ? __save_stack_trace+0x7e/0xd0 [ 353.582918] should_fail+0x914/0xae0 [ 353.621827] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.626923] ? kasan_kmalloc+0xad/0xe0 [ 353.630795] ? kmem_cache_alloc_trace+0x136/0x740 [ 353.635618] ? __memcg_init_list_lru_node+0x169/0x270 [ 353.640785] ? __list_lru_init+0x544/0x750 [ 353.645000] ? sget_userns+0x6a2/0xe60 [ 353.648876] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 353.653609] ? kern_mount_data+0x50/0xb0 [ 353.657648] ? pid_ns_prepare_proc+0x1e/0x80 [ 353.662035] ? alloc_pid+0x88e/0xa10 [ 353.665727] ? copy_process.part.38+0x274c/0x6140 [ 353.670543] ? _do_fork+0x1f7/0xfa0 [ 353.674149] ? compat_SyS_x86_clone+0x3b/0x50 [ 353.678626] ? find_held_lock+0x35/0x1d0 [ 353.682667] ? __lock_is_held+0xb6/0x140 [ 353.686711] ? check_same_owner+0x320/0x320 [ 353.691022] ? rcu_note_context_switch+0x710/0x710 [ 353.695934] should_failslab+0xec/0x120 [ 353.699888] kmem_cache_alloc_trace+0x4b/0x740 [ 353.704458] ? __kmalloc_node+0x33/0x70 [ 353.708407] ? __kmalloc_node+0x33/0x70 [ 353.712362] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.717358] __memcg_init_list_lru_node+0x169/0x270 [ 353.722351] ? list_lru_add+0x7c0/0x7c0 [ 353.726301] ? __kmalloc_node+0x47/0x70 [ 353.730255] __list_lru_init+0x544/0x750 [ 353.734296] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 353.740158] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 353.745152] ? __lockdep_init_map+0xe4/0x650 [ 353.749541] ? lockdep_init_map+0x9/0x10 [ 353.753582] sget_userns+0x6a2/0xe60 [ 353.757270] ? set_anon_super+0x20/0x20 [ 353.761225] ? put_filp+0xa0/0xa0 [ 353.764657] ? destroy_unused_super.part.7+0xf0/0xf0 [ 353.769740] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 353.774742] ? save_stack+0xa3/0xd0 [ 353.778348] ? save_stack+0x43/0xd0 [ 353.781954] ? kasan_slab_alloc+0x12/0x20 [ 353.786076] ? kmem_cache_alloc+0x12e/0x760 [ 353.790372] ? alloc_pid+0xc1/0xa10 [ 353.793978] ? __radix_tree_replace+0x1af/0x310 [ 353.798630] ? radix_tree_delete+0x30/0x30 [ 353.802841] ? node_tag_clear+0xf2/0x180 [ 353.806884] ? proc_get_inode+0x620/0x620 [ 353.811017] mount_ns+0x6d/0x190 [ 353.814365] proc_mount+0x7a/0x90 [ 353.817794] mount_fs+0x66/0x2d0 [ 353.821140] vfs_kern_mount.part.26+0xc6/0x4a0 [ 353.825699] ? may_umount+0xa0/0xa0 [ 353.829300] ? kasan_check_read+0x11/0x20 [ 353.833424] ? do_raw_spin_unlock+0x9e/0x310 [ 353.837808] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 353.842366] ? idr_alloc+0x180/0x180 [ 353.846055] kern_mount_data+0x50/0xb0 [ 353.849918] pid_ns_prepare_proc+0x1e/0x80 [ 353.854128] alloc_pid+0x88e/0xa10 [ 353.857646] ? __change_pid+0x400/0x400 [ 353.861597] ? ns_capable_common+0xcf/0x160 [ 353.865899] ? memset+0x31/0x40 [ 353.869157] ? copy_thread_tls+0x268/0x8f0 [ 353.873366] ? do_raw_spin_lock+0xc1/0x230 [ 353.877579] copy_process.part.38+0x274c/0x6140 [ 353.882226] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 353.887391] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 353.892470] ? print_irqtrace_events+0x270/0x270 [ 353.897202] ? lock_acquire+0x1d5/0x580 [ 353.901150] ? lock_acquire+0x1d5/0x580 [ 353.905103] ? alloc_set_pte+0xf74/0x1780 [ 353.909232] ? __cleanup_sighand+0x50/0x50 [ 353.913443] ? print_irqtrace_events+0x270/0x270 [ 353.918182] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 353.923347] ? lock_downgrade+0x980/0x980 [ 353.927474] ? print_irqtrace_events+0x270/0x270 [ 353.932203] ? kasan_check_read+0x11/0x20 [ 353.936327] ? rcu_is_watching+0x85/0x130 [ 353.940460] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 353.945630] ? __lock_acquire+0x638/0x3c30 [ 353.949840] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 353.955023] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 353.960190] ? print_irqtrace_events+0x270/0x270 [ 353.964924] ? __pagevec_lru_add+0x30/0x30 [ 353.969137] ? lock_acquire+0x1d5/0x580 [ 353.973089] ? trace_hardirqs_off+0x10/0x10 [ 353.977389] ? __lock_acquire+0x638/0x3c30 [ 353.981602] ? check_same_owner+0x320/0x320 [ 353.985903] ? find_held_lock+0x35/0x1d0 [ 353.989942] ? trace_hardirqs_off+0x10/0x10 [ 353.994238] ? _parse_integer+0xe9/0x140 [ 353.998277] ? trace_hardirqs_off+0x10/0x10 [ 354.002575] ? _parse_integer+0x140/0x140 [ 354.006699] ? check_same_owner+0x320/0x320 [ 354.011001] ? find_held_lock+0x35/0x1d0 [ 354.015043] ? trace_hardirqs_off+0x10/0x10 [ 354.019340] ? get_pid_task+0xa5/0x150 [ 354.023204] ? lock_downgrade+0x980/0x980 [ 354.027331] ? find_held_lock+0x35/0x1d0 [ 354.031371] ? __f_unlock_pos+0x19/0x20 [ 354.035320] ? lock_downgrade+0x980/0x980 [ 354.039443] ? kasan_check_write+0x14/0x20 [ 354.043654] ? proc_fail_nth_write+0x9b/0x1e0 [ 354.048124] ? map_files_get_link+0x3b0/0x3b0 [ 354.052594] ? trace_hardirqs_off+0x10/0x10 [ 354.056896] ? find_held_lock+0x35/0x1d0 [ 354.060933] _do_fork+0x1f7/0xfa0 [ 354.064364] ? fork_idle+0x2d0/0x2d0 [ 354.068057] ? __lock_is_held+0xb6/0x140 [ 354.072101] ? __sb_end_write+0xa0/0xd0 [ 354.076053] ? kasan_check_write+0x14/0x20 [ 354.080261] ? fput+0xe0/0x150 [ 354.083429] ? ksys_write+0x184/0x220 [ 354.087207] ? SyS_read+0x30/0x30 [ 354.090638] ? kasan_check_write+0x14/0x20 [ 354.094853] compat_SyS_x86_clone+0x3b/0x50 [ 354.099149] ? compat_SyS_x86_fallocate+0x60/0x60 [ 354.103971] do_fast_syscall_32+0x3ec/0xf9f [ 354.108272] ? do_int80_syscall_32+0x9c0/0x9c0 [ 354.112831] ? finish_task_switch+0x1b9/0x970 [ 354.117301] ? finish_task_switch+0x17a/0x970 [ 354.121773] ? syscall_return_slowpath+0x2ac/0x550 [ 354.126680] ? prepare_exit_to_usermode+0x350/0x350 [ 354.131672] ? sysret32_from_system_call+0x5/0x3c [ 354.136494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.141317] entry_SYSENTER_compat+0x70/0x7f [ 354.145701] RIP: 0023:0xf7fc0c99 [ 354.149041] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 354.156726] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 2018/04/05 15:32:51 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x20, 0x2000) getsockname$unix(r0, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r1 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='-$\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='vmnet1\x00', r1) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r2, &(0x7f0000726fff)="cb", 0x39abe07bbaa9bda5, 0x0, &(0x7f0000000040)={0x77359400}) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000380)) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) 2018/04/05 15:32:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) [ 354.163970] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 354.171217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.178460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 354.185705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000100)={'ip6gretap0\x00\x00\b\x00', @ifru_ivalue}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x7, 0x5ba9b1d4, 0x3ff, 0x8, 0x4, 0x7}, 0x76, 0x26, 0x8}) 2018/04/05 15:32:51 executing program 6: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x3, 0x3c4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f00000000c0), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0x0, 'gretap0\x00', 'rose0\x00', 'yam0\x00', 'bridge0\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0xff], @random="96590d591010", [], 0x70, 0x110, 0x13c}, [@common=@nflog={'nflog\x00', 0x4c, {{0x200, 0x120, 0xb1c, 0x0, 0x0, "dfda0273d2dc96baeb254cea0cc1efd215b96b94cdb45e514dbd2240c89d4ade5331f5bf438a163847c10a48cc980c8dd9f2a8b88e3927317c87dcf41cc80131"}}}, @common=@dnat={'dnat\x00', 0xc, {{@empty, 0xfffffffffffffffd}}}]}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}}, {{{0x19, 0x0, 0x0, 'bcsf0\x00', 'irlan0\x00', 'bpq0\x00', 'ip6tnl0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x74, 0x0, 'vcan0\x00', 'bcsh0\x00', 'syzkaller1\x00', 'tunl0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xc8, 0x120, 0x15c, [@arp={'arp\x00', 0x34, {{0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, 0x0, @broadcast=0xffffffff, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @random="8b7cbb821d7b"}}}]}, [@common=@dnat={'dnat\x00', 0xc, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}, @common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x414) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0xe5, 0x2, {0x0, 0x1, 0xffffffffffffff00, 0x3, 0x4}}) 2018/04/05 15:32:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x181000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x3}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x2000000000008, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f00000000c0)=0x1e) dup3(r0, r1, 0x0) 2018/04/05 15:32:51 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000000040)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) [ 354.286998] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000940)=0x7ff, 0x4) fcntl$setstatus(r0, 0x4, 0x6400) 2018/04/05 15:32:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000082) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x2000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0xffff, 0x3, 0x8}) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x6, {{0xa, 0x4e21, 0x4, @empty, 0x7fff}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x81, 0x7fffffff, 0x9}) sendto$llc(r1, &(0x7f0000000080)="a5088e33b8c5187fccc74a6c282ee0ccb2533116f9776954e622269ef29e09b626537b9435809cfe3c5087c93754a6e5f0294034c7a957fc76089eddf8b76145b851a0b8aa5cfe67210446e0e4845964bb368069877f0f556e549994ad902421e90347098a9bbaa72c5632a80bdb7c696de85901707e08c2d42c4cde68b26488b3618300384a59b55158d6f4d29ae512e7768ac642dbc04cf46f03c0ef3eca7c6386fa6166e635d1e853317a02a20b42f57bfa76195e2f0db578c303c92fafad254425a3a792360d847171480688f826212cc9952e15faca7dc99def9401f8653efbd9fbeeea8ee5baea8d", 0xeb, 0x880, &(0x7f0000000180)={0x1a, 0x309, 0x6, 0x7, 0x8a, 0x40, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000001c0)=""/161) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x959, 0x7fff8000, 0x100020, 0x4080, 0x1ff, 0x3, 0x6, 0x1, 0x343, 0x40, 0x112, 0xfffffffffffffffb, 0x2fda, 0x38, 0x2, 0x2561, 0x8, 0x6}, [{0x70000000, 0x1, 0x8, 0xc573, 0x55, 0x4, 0x8001, 0x81}], "46867acd54bd5e584741f8c255be61b6320e1fc76abbb232c6bf5e4c4b0f3803172d1dba7579dada20e8fb1a40e10718d072c915508c4bdc11e52bd7ebd5633c28f7208ff4427bbbabac280d4439536b4ce6429b8a066c4055e1a34285dac574b77b062d1f510bf8c4b44e90a16a6829a091918e69637bfe6e19411a39642669b347a8da10b13c5710770b4265", [[], [], [], [], [], [], [], [], []]}, 0xa05) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000dbcf68)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000dee000)=0x98) 2018/04/05 15:32:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x17a, 0x80000001, 0x81, 0x401, 0x2, 0x6, 0x5, 0x289, 0x38, 0x22f, 0x8000, 0x200, 0x20, 0x2, 0x40, 0x100000001, 0x9}, [{0x7, 0x0, 0x5, 0x7f, 0xfffffffffffffffb, 0x9, 0x8, 0x800}, {0x1, 0x1, 0x80, 0x8, 0x1, 0x7f, 0x2, 0x100}], "b6b0a71a22288309c4b68234862b9b9d1a13bc4c7491d7a9821070beeb7f470f2c7388b34c89ccad3398326b36fa9f42fd1a51dfd016584226ff8fd4a7063259736c0f9d0f6d6030d57269f9220d891c3f75e0dd0f723e7c011758176f09b794587b6a371b1255294955f39ee3f7ea7c4df6af38a52a9090b432d50cb9df8f4e5f25dd6dcf9c267324480d8c00147ea7e7542f47b1e1c207f0f762e6bceb2a7f98b726d6a953d89ac6486a7179409a006af63625d05b0d0c8f1a", [[], [], [], [], [], []]}, 0x732) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r0, 0x50, &(0x7f0000000fc0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001080)=r1, 0x4) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/208, 0xd0}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) process_vm_writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000b80)=""/167, 0xa7}], 0x5, &(0x7f0000000f80)=[{&(0x7f0000000c80)=""/156, 0x9c}, {&(0x7f0000000d40)=""/8, 0x8}, {&(0x7f0000000d80)=""/178, 0xb2}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000f00)=""/79, 0x4f}], 0x5, 0x0) 2018/04/05 15:32:51 executing program 2 (fault-call:0 fault-nth:27): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:51 executing program 1: prctl$intptr(0x1c, 0x800) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7ff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xff) 2018/04/05 15:32:51 executing program 7: lookup_dcookie(0x0, &(0x7f0000000080)=""/26, 0x1a) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74b6f6aca5f3c386a70000000078046b64110000000000000000000000000000000000000000"], &(0x7f0000000000)=0x24) writev(0xffffffffffffffff, &(0x7f0000000440), 0x0) 2018/04/05 15:32:51 executing program 5: r0 = mq_open(&(0x7f00000000c0)="2d24009de452aca73916f44f14675b9a17f44ceee2f5aa4e22e501f02d193de83d5e7bf98c233267e570f97ecb145690168601b8b3d5df522012bac71acfc02dfa7b8a9a0a461af1f30677b6fb2670302c4262", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1, 0x6, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0x3}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = socket$inet(0x2, 0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x4e23, 0x1, 'sh\x00', 0x19, 0x2, 0x20}, 0x2c) prctl$intptr(0x2f, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x9) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x1, r1, 0x1}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000380)={0x51ad, 0x9, 0x1}) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000240)=0x81) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0xfffffffffffff041}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x0, 0xb7, 0x5d91, 0x1, 0xc1}, &(0x7f0000000340)=0x98) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r4 = add_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="89487de6a82fb062497dea9b", 0xc, 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)="6d696d655f747970652a706f7369785f61636c5f61636365737363707573657474727573746564626465762f776c616e31403a24d5272500", r4) 2018/04/05 15:32:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$void(r0, 0x5451) r1 = socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x14, 0x301, 0x0, 0x0, {0x1}, [@generic="8738124d896abd6cfab45e529840ffe4b3"]}, 0x28}, 0x1}, 0x0) 2018/04/05 15:32:51 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x7, 0x100000000, 0x9ec, 0x0, 0x0, 0xffffffffffffffff, 0x80}, 0x2c) splice(r1, &(0x7f0000000180), r2, &(0x7f0000000200), 0x3ce, 0x6) bind(0xffffffffffffffff, &(0x7f00008a1f80)=@generic={0x0, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000240)={0x9, 0x6, 0xb000}, 0xffffffffffffffad) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x115) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x200000004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) accept4(r4, &(0x7f0000000000)=@nfc, &(0x7f0000000100)=0x80, 0x80000) sendto$inet(r4, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f00000004c0)=0xffffffff, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) mq_notify(r5, &(0x7f00000002c0)={0x0, 0x3b, 0x2, @tid=r6}) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x7fff, 0x101, 0x2, 0x0, 0x7, 0x8000, 0x1, 0x0, 0xd1, 0x7, 0x0, 0x6, 0x3, 0x4, 0x0, 0x1, 0x2, 0xffffffffffff8001, 0x1, 0xe474a85, 0x8001, 0x200, 0x4, 0x80, 0x0, 0x8, 0x101, 0x20, 0x5, 0x100, 0x1ff, 0x2, 0x570d, 0x6, 0x80000000, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x7}, 0x800, 0x4, 0x8, 0x1, 0x5, 0x0, 0x3f}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000340)) fcntl$setown(r0, 0x8, r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x6, 0x8, "3500ab1c1f8a19014f12a8467238e0e212e994ba26b67e0330345605caa9a60470bae916ac99824aca87961894fbd2becd99b0a7d9fc8c6f03d51d06574b661d", "081b28a88ebef98b988a50fec5aee1ac6acb916aa280750119cfbb76c0b383f81b7553188796649fda86f4acb25d7605d65c5b9d314ca3d625788cb0ec927687", "b7a813af90a0b85fdef3ece1f1aa05f1a7337f2a133dcb476a88fa8488988c7c", [0xfffffffd, 0x6]}) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000480)={'ifb0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) r8 = socket$kcm(0x29, 0x5, 0x0) sendfile(r8, r5, &(0x7f0000301ff8), 0xffffffff) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfe29) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) geteuid() fcntl$setownex(r7, 0xf, &(0x7f0000000540)={0x3}) shutdown(r1, 0x1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x5, 0x2, &(0x7f0000ffd000/0x2000)=nil, 0xaf05}) 2018/04/05 15:32:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:51 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x26e}) socketpair(0x6000000000000009, 0x1000000080a, 0x5, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @empty, 0x10000, 0x40, 0x4, 0x0, 0x0, 0x600000}) 2018/04/05 15:32:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000000000000000ef"], 0x0, 0x0, &(0x7f0000000f80)}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x133201, 0x10) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68), 0x0, 0x0, &(0x7f0000008f37)}) [ 354.532238] FAULT_INJECTION: forcing a failure. [ 354.532238] name failslab, interval 1, probability 0, space 0, times 0 [ 354.543543] CPU: 1 PID: 24612 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 354.550553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.559898] Call Trace: [ 354.562488] dump_stack+0x1a7/0x27d [ 354.566116] ? arch_local_irq_restore+0x53/0x53 [ 354.570787] ? mutex_lock_io_nested+0x16c0/0x16c0 [ 354.575628] ? __memcg_init_list_lru_node+0x169/0x270 [ 354.580821] should_fail+0x914/0xae0 [ 354.584526] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.589627] ? lock_downgrade+0x980/0x980 [ 354.593769] ? find_held_lock+0x35/0x1d0 [ 354.597824] ? __lock_is_held+0xb6/0x140 [ 354.601876] ? check_same_owner+0x320/0x320 [ 354.606177] ? __might_sleep+0x95/0x190 [ 354.610131] ? rcu_note_context_switch+0x710/0x710 [ 354.615047] should_failslab+0xec/0x120 [ 354.619001] __kmalloc+0x63/0x760 [ 354.622441] ? __kmalloc_node+0x47/0x70 [ 354.626397] ? __list_lru_init+0xcf/0x750 [ 354.630529] __list_lru_init+0xcf/0x750 [ 354.634490] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 354.640358] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 354.645361] ? lockdep_init_map+0x9/0x10 [ 354.649927] sget_userns+0x6c2/0xe60 [ 354.653621] ? set_anon_super+0x20/0x20 [ 354.657581] ? put_filp+0xa0/0xa0 [ 354.661021] ? destroy_unused_super.part.7+0xf0/0xf0 [ 354.666111] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 354.671110] ? save_stack+0xa3/0xd0 [ 354.674718] ? save_stack+0x43/0xd0 [ 354.678324] ? kasan_slab_alloc+0x12/0x20 [ 354.682451] ? kmem_cache_alloc+0x12e/0x760 [ 354.686749] ? alloc_pid+0xc1/0xa10 [ 354.690359] ? __radix_tree_replace+0x1af/0x310 [ 354.695012] ? radix_tree_delete+0x30/0x30 [ 354.699233] ? node_tag_clear+0xf2/0x180 [ 354.703282] ? proc_get_inode+0x620/0x620 [ 354.707408] mount_ns+0x6d/0x190 [ 354.710757] proc_mount+0x7a/0x90 [ 354.714190] mount_fs+0x66/0x2d0 [ 354.717542] vfs_kern_mount.part.26+0xc6/0x4a0 [ 354.722106] ? may_umount+0xa0/0xa0 [ 354.725713] ? kasan_check_read+0x11/0x20 [ 354.729843] ? do_raw_spin_unlock+0x9e/0x310 [ 354.734228] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 354.738789] ? idr_alloc+0x180/0x180 [ 354.742483] kern_mount_data+0x50/0xb0 [ 354.746353] pid_ns_prepare_proc+0x1e/0x80 [ 354.750568] alloc_pid+0x88e/0xa10 [ 354.754090] ? __change_pid+0x400/0x400 [ 354.758042] ? ns_capable_common+0xcf/0x160 [ 354.762349] ? memset+0x31/0x40 [ 354.765609] ? copy_thread_tls+0x268/0x8f0 [ 354.769819] ? do_raw_spin_lock+0xc1/0x230 [ 354.774043] copy_process.part.38+0x274c/0x6140 [ 354.778690] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 354.783859] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 354.788945] ? print_irqtrace_events+0x270/0x270 [ 354.793682] ? lock_acquire+0x1d5/0x580 [ 354.797635] ? lock_acquire+0x1d5/0x580 [ 354.801596] ? alloc_set_pte+0xf74/0x1780 [ 354.805732] ? __cleanup_sighand+0x50/0x50 [ 354.809949] ? print_irqtrace_events+0x270/0x270 [ 354.814695] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 354.819867] ? lock_downgrade+0x980/0x980 [ 354.823996] ? print_irqtrace_events+0x270/0x270 [ 354.828734] ? kasan_check_read+0x11/0x20 [ 354.832862] ? rcu_is_watching+0x85/0x130 [ 354.837000] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 354.842181] ? __lock_acquire+0x638/0x3c30 [ 354.846396] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 354.851579] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 354.856751] ? print_irqtrace_events+0x270/0x270 [ 354.861488] ? __pagevec_lru_add+0x30/0x30 [ 354.865708] ? lock_acquire+0x1d5/0x580 [ 354.869664] ? trace_hardirqs_off+0x10/0x10 [ 354.873969] ? __lock_acquire+0x638/0x3c30 [ 354.878182] ? check_same_owner+0x320/0x320 [ 354.882490] ? find_held_lock+0x35/0x1d0 [ 354.886533] ? trace_hardirqs_off+0x10/0x10 [ 354.890835] ? _parse_integer+0xe9/0x140 [ 354.894880] ? trace_hardirqs_off+0x10/0x10 [ 354.899180] ? _parse_integer+0x140/0x140 [ 354.903307] ? check_same_owner+0x320/0x320 [ 354.907612] ? find_held_lock+0x35/0x1d0 [ 354.911656] ? trace_hardirqs_off+0x10/0x10 [ 354.915958] ? get_pid_task+0xa5/0x150 [ 354.919825] ? lock_downgrade+0x980/0x980 [ 354.923958] ? find_held_lock+0x35/0x1d0 [ 354.928009] ? __f_unlock_pos+0x19/0x20 [ 354.931969] ? lock_downgrade+0x980/0x980 [ 354.936098] ? kasan_check_write+0x14/0x20 [ 354.940312] ? proc_fail_nth_write+0x9b/0x1e0 [ 354.944787] ? map_files_get_link+0x3b0/0x3b0 [ 354.949261] ? trace_hardirqs_off+0x10/0x10 [ 354.953565] ? find_held_lock+0x35/0x1d0 [ 354.957608] _do_fork+0x1f7/0xfa0 [ 354.961048] ? fork_idle+0x2d0/0x2d0 [ 354.964744] ? __lock_is_held+0xb6/0x140 [ 354.968796] ? __sb_end_write+0xa0/0xd0 [ 354.972752] ? kasan_check_write+0x14/0x20 [ 354.976963] ? fput+0xe0/0x150 [ 354.980134] ? ksys_write+0x184/0x220 [ 354.983922] ? SyS_read+0x30/0x30 [ 354.987354] ? kasan_check_write+0x14/0x20 [ 354.991574] compat_SyS_x86_clone+0x3b/0x50 [ 354.995877] ? compat_SyS_x86_fallocate+0x60/0x60 [ 355.000701] do_fast_syscall_32+0x3ec/0xf9f [ 355.005009] ? do_int80_syscall_32+0x9c0/0x9c0 [ 355.009575] ? finish_task_switch+0x1b9/0x970 [ 355.014047] ? finish_task_switch+0x17a/0x970 [ 355.018526] ? syscall_return_slowpath+0x2ac/0x550 [ 355.023435] ? prepare_exit_to_usermode+0x350/0x350 [ 355.028436] ? sysret32_from_system_call+0x5/0x3c [ 355.033260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.038089] entry_SYSENTER_compat+0x70/0x7f [ 355.042476] RIP: 0023:0xf7fc0c99 [ 355.045818] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 355.053508] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 355.060758] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 355.068007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.075260] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.082508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:52 executing program 2 (fault-call:0 fault-nth:28): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 355.111327] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 355.143224] FAULT_INJECTION: forcing a failure. [ 355.143224] name failslab, interval 1, probability 0, space 0, times 0 [ 355.154576] CPU: 1 PID: 24634 Comm: syz-executor2 Not tainted 4.16.0+ #288 2018/04/05 15:32:52 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x401, 0xff, 0x200, 0x80000000, 0x0, 0xd, 0x2205, 0xa, 0x401, 0x2, 0x80, 0x80000001, 0x6, 0x8, 0x4, 0x7ff, 0x6, 0xa892, 0xfffffffffffffff7, 0x3, 0x7f, 0xe01b, 0x343, 0xb3c, 0x8, 0x7f, 0x8, 0x3, 0xffffffffffff0000, 0x274, 0x8001, 0x2, 0x6, 0x3, 0x60a, 0x9, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10144, 0x3, 0x7fff, 0x7, 0x7f, 0x3, 0xb90}, r0, 0x10, r1, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x8078) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0x2, 0x1}, 0x20) [ 355.161596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.170949] Call Trace: [ 355.173542] dump_stack+0x1a7/0x27d [ 355.177171] ? arch_local_irq_restore+0x53/0x53 [ 355.181839] should_fail+0x914/0xae0 [ 355.185540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.190632] ? trace_event_raw_event_lock+0x340/0x340 [ 355.195818] ? lock_downgrade+0x980/0x980 [ 355.199956] ? find_held_lock+0x35/0x1d0 [ 355.204005] ? __lock_is_held+0xb6/0x140 [ 355.208064] ? check_same_owner+0x320/0x320 [ 355.212365] ? __might_sleep+0x95/0x190 [ 355.216325] ? rcu_note_context_switch+0x710/0x710 [ 355.221245] should_failslab+0xec/0x120 [ 355.225200] __kmalloc+0x63/0x760 [ 355.228636] ? __kmalloc_node+0x47/0x70 [ 355.232594] ? __list_lru_init+0xcf/0x750 [ 355.236725] __list_lru_init+0xcf/0x750 [ 355.240685] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 355.246553] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.251558] ? lockdep_init_map+0x9/0x10 [ 355.255602] sget_userns+0x6c2/0xe60 [ 355.259294] ? set_anon_super+0x20/0x20 [ 355.263254] ? put_filp+0xa0/0xa0 [ 355.266691] ? destroy_unused_super.part.7+0xf0/0xf0 [ 355.271778] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 355.276773] ? perf_trace_lock+0xd6/0x900 [ 355.280911] ? save_stack+0xa3/0xd0 [ 355.284523] ? kasan_slab_alloc+0x12/0x20 [ 355.288652] ? alloc_pid+0xc1/0xa10 [ 355.292266] ? __radix_tree_replace+0x1af/0x310 [ 355.296920] ? radix_tree_delete+0x30/0x30 [ 355.301136] ? node_tag_clear+0xf2/0x180 [ 355.305189] ? proc_get_inode+0x620/0x620 [ 355.309317] mount_ns+0x6d/0x190 [ 355.312667] proc_mount+0x7a/0x90 [ 355.316101] mount_fs+0x66/0x2d0 [ 355.319453] vfs_kern_mount.part.26+0xc6/0x4a0 [ 355.324020] ? may_umount+0xa0/0xa0 [ 355.327631] ? kasan_check_read+0x11/0x20 [ 355.331760] ? do_raw_spin_unlock+0x9e/0x310 [ 355.336150] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 355.340711] ? idr_alloc+0x180/0x180 [ 355.344406] kern_mount_data+0x50/0xb0 [ 355.348274] pid_ns_prepare_proc+0x1e/0x80 [ 355.352493] alloc_pid+0x88e/0xa10 [ 355.356023] ? __change_pid+0x400/0x400 [ 355.359980] ? ns_capable_common+0xcf/0x160 [ 355.364288] ? memset+0x31/0x40 [ 355.367549] ? copy_thread_tls+0x268/0x8f0 [ 355.371762] ? do_raw_spin_lock+0xc1/0x230 [ 355.375985] copy_process.part.38+0x274c/0x6140 [ 355.380637] ? update_cfs_rq_load_avg.part.66+0x2d0/0x2d0 [ 355.386176] ? __cleanup_sighand+0x50/0x50 [ 355.390395] ? trace_event_raw_event_lock+0x340/0x340 [ 355.395564] ? print_irqtrace_events+0x270/0x270 [ 355.400302] ? rb_insert_color+0x1580/0x1580 [ 355.404695] ? trace_hardirqs_off+0x10/0x10 [ 355.408998] ? print_irqtrace_events+0x270/0x270 [ 355.413745] ? cpuacct_charge+0x2e6/0x5c0 [ 355.417878] ? find_held_lock+0x35/0x1d0 [ 355.421929] ? __lock_acquire+0x638/0x3c30 [ 355.426143] ? lock_downgrade+0x980/0x980 [ 355.430287] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 355.435469] ? __lock_is_held+0xb6/0x140 [ 355.439510] ? __account_cfs_rq_runtime+0x600/0x600 [ 355.444516] ? set_next_entity+0x2db/0xae0 [ 355.448735] ? trace_event_raw_event_lock+0x340/0x340 [ 355.453910] ? kasan_check_read+0x11/0x20 [ 355.458040] ? __perf_event_task_sched_out+0x282/0x1570 [ 355.463389] ? trace_hardirqs_off+0x10/0x10 [ 355.467688] ? put_prev_entity+0xca/0x240 [ 355.471818] ? __perf_event_task_sched_in+0x21e/0xc10 [ 355.476987] ? perf_trace_lock+0xd6/0x900 [ 355.481123] ? perf_event_sync_stat+0x5d0/0x5d0 [ 355.485781] ? find_held_lock+0x35/0x1d0 [ 355.489828] ? finish_task_switch+0x1b9/0x970 [ 355.494304] ? lock_downgrade+0x980/0x980 [ 355.498437] ? kasan_check_read+0x11/0x20 [ 355.502565] ? do_raw_spin_unlock+0x9e/0x310 [ 355.506956] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 355.511522] ? _raw_spin_unlock_irq+0x27/0x70 [ 355.516002] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.521004] ? trace_hardirqs_on+0xd/0x10 [ 355.525136] ? _raw_spin_unlock_irq+0x27/0x70 [ 355.529614] ? finish_task_switch+0x1b9/0x970 [ 355.534087] ? finish_task_switch+0x17a/0x970 [ 355.538566] ? copy_overflow+0x20/0x20 [ 355.542449] ? __schedule+0x903/0x1ef0 [ 355.546320] _do_fork+0x1f7/0xfa0 [ 355.549756] ? fork_idle+0x2d0/0x2d0 [ 355.553468] ? __sb_end_write+0xa0/0xd0 [ 355.557428] ? schedule+0xf5/0x430 [ 355.560948] ? ksys_write+0x184/0x220 [ 355.564731] ? __schedule+0x1ef0/0x1ef0 [ 355.568683] ? SyS_read+0x30/0x30 [ 355.572117] ? kasan_check_write+0x14/0x20 [ 355.576340] compat_SyS_x86_clone+0x3b/0x50 [ 355.580645] ? compat_SyS_x86_fallocate+0x60/0x60 [ 355.585471] do_fast_syscall_32+0x3ec/0xf9f [ 355.589778] ? do_int80_syscall_32+0x9c0/0x9c0 [ 355.594339] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 355.599863] ? syscall_return_slowpath+0x2ac/0x550 [ 355.604778] ? retint_user+0x18/0x18 [ 355.608818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.613650] entry_SYSENTER_compat+0x70/0x7f [ 355.618040] RIP: 0023:0xf7fc0c99 [ 355.621384] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 355.629075] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 355.636323] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 355.643573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.650820] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 2018/04/05 15:32:53 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2000003, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/ip6_mr_vif\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000240)=0x5, 0x4) getpgrp(r3) ftruncate(r0, 0x3) ptrace$setopts(0x4200, r3, 0x8000, 0x8) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000380)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1ff}}, 0x5, 0x3f, 0x2, 0xffffffffffffff7f, 0x16}, &(0x7f0000000340)=0x98) exit_group(0xffffffffffffffc1) mq_timedsend(r0, &(0x7f0000000080)="5f57ea111b107d3067c54d831bf0a71a9895620c09aa1b00ec8463181533440ca31b35edb32d984acfbeb31415e02e8f9f5a84db3eb1da0c21553c92b85654619bed7f87a3d3e465a3292c6626904d6f79394f5a0f0915fc33feca208e3ed5a4297f92cc487bd013c8028c1541c4b4cab2fa770218cf953a99848e62b32df1c1ea891c", 0x83, 0x6, &(0x7f0000000180)={r1, r2+10000000}) [ 355.658068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:53 executing program 6: prctl$intptr(0x8, 0x1) 2018/04/05 15:32:53 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) pause() mq_timedsend(r0, &(0x7f0000000180)="7d9220509989b972ac89aaa3fecb88cfa7b47381138610a291569e41251e9ddb07fd7dfd8eb9b18e6f53b5086d56a0b57788301df792364ab76d3384dff427ea8a4ea770d0645b5a3e8cf35423ce8429d1275cbb51d9d5f1ce5cbcde7eef43d9feaa15c7978bcf6abf8bec6e2d14997276ad26068507341b2865d3eb8d56f2619edb1b0ff06483d289c4101d9d4ca0f9b29eea9fe23e4273d2c5eeb344cb73e74916aaa59d28a21e41bb071a8f083cc090ff806a38cfd41805fb232b3a7fc765d89bb0ccc9541f40f1e7573bfe299f1f07a92a4160026a4b25f7be496f7ef5c0483d", 0xe2, 0x6, &(0x7f0000000140)) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 355.719511] binder: 24621:24636 BC_DEAD_BINDER_DONE ef00000000000000 not found [ 355.741689] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 355.768703] binder: 24621:24636 BC_DEAD_BINDER_DONE ef00000000000000 not found 2018/04/05 15:32:54 executing program 4: syslog(0x3, &(0x7f0000000200)=""/215, 0xd7) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffff9c, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x9b, "541cfb6b16d14b1bd71eb37e001d8cdd8be8efbb82c4a1e2711f0b5f7de589b01bd7dfdfa230a03400280a98a644ecce4a007862b67019837497f04a933060788d9bfb82e74f7c617ae048805a9a7dab2be10115ede82e3d58cc8e0b3e0822a1f473923fc1c27ef7d659672a9b85655b1ad641873cd580462604adbd4510e44dc2bcacdceb69375c2b39c6599956404de7ba6562fb531afbd782b1"}, &(0x7f0000000100)=0xa3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x1}}, 0x7ff, 0x1}, 0x88) 2018/04/05 15:32:54 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:54 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x141980) ioctl(r0, 0x8001267, &(0x7f0000000040)) 2018/04/05 15:32:54 executing program 2 (fault-call:0 fault-nth:29): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:54 executing program 1: madvise(&(0x7f000009a000/0x4000)=nil, 0x4000, 0x3) mbind(&(0x7f00000a0000/0x13000)=nil, 0x13000, 0x200000001, &(0x7f0000000000), 0x2, 0x0) clone(0x0, &(0x7f0000141000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 2018/04/05 15:32:54 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x60b9) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000), 0x13d) 2018/04/05 15:32:54 executing program 3: mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000aa0000)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) exit(0xffffffffffffffff) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x8, 0x168, 0x1}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00002cb000)={0x0, r3}) recvmsg(r5, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r2, r5) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) tkill(r3, 0x16) dup3(r1, r0, 0x0) 2018/04/05 15:32:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x101000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x14) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000002c0), 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@ll={0x11, 0x0, r1, 0x1, 0x20, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, {&(0x7f0000000600)=""/4096, 0x1000}, &(0x7f00000003c0), 0x35}, 0x9c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc108, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x400, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="6f3387a432a3af2497ce9166b219238b2311b372ea0312415f06b38384522ce8f3b95faa826a0cb6868399c5adc95ebb1c4a86f3048789d74ff42e0cf6990756e59c064271dff149ad06e28659bf", 0x4e}, {&(0x7f0000000180)="f0510143eb704c55761d5706d3bb7e1a322bd294863b16fc34e86c7163f3f409e8f200b49fa114f8f3040606278056342a697b583de4cfd82b7c1dfa7d72b3a62283e7d68b553038ce15e507b7de3cd5101e762ec798a2d75c583311a494", 0x5e, 0x1000}, {&(0x7f0000000200)="e28ccdd3b37baa07f351e1c90b0d1ce21c3447b6e93c734b9827ec7539980603f541da98cfed0ad708e9264d97350e482d75b46c5b6b4dcab7f6bdba233b6bd96abc01b5ad6a7f02fdadb60e28b03def93c467849a70f91c5c95e86cf71a707e112df1b88563e004", 0x68, 0x5}], 0x800, &(0x7f0000001600)=ANY=[@ANYBLOB="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"]) [ 356.858750] FAULT_INJECTION: forcing a failure. [ 356.858750] name failslab, interval 1, probability 0, space 0, times 0 [ 356.870204] CPU: 1 PID: 24667 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 356.880913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.892023] Call Trace: [ 356.894610] dump_stack+0x1a7/0x27d [ 356.898243] ? arch_local_irq_restore+0x53/0x53 2018/04/05 15:32:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x7c) [ 356.902663] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 356.902916] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 356.918131] ? rcu_report_exp_cpu_mult+0x480/0x480 [ 356.923065] should_fail+0x914/0xae0 [ 356.926781] ? is_bpf_text_address+0xa4/0x120 [ 356.931277] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.936377] ? __kernel_text_address+0xd/0x40 [ 356.940871] ? unwind_get_return_address+0x61/0xa0 [ 356.945809] ? find_held_lock+0x35/0x1d0 [ 356.949870] ? __lock_is_held+0xb6/0x140 [ 356.953937] ? check_same_owner+0x320/0x320 [ 356.958254] ? rcu_note_context_switch+0x710/0x710 [ 356.963182] should_failslab+0xec/0x120 [ 356.967156] kmem_cache_alloc_trace+0x4b/0x740 [ 356.971736] ? __kmalloc_node+0x33/0x70 [ 356.975708] ? __kmalloc_node+0x33/0x70 [ 356.979680] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.984694] __memcg_init_list_lru_node+0x169/0x270 [ 356.989710] ? list_lru_add+0x7c0/0x7c0 [ 356.993674] ? __kmalloc_node+0x47/0x70 [ 356.997631] __list_lru_init+0x544/0x750 [ 357.001673] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 357.007533] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 357.012527] ? lockdep_init_map+0x9/0x10 [ 357.016567] sget_userns+0x6c2/0xe60 [ 357.020269] ? set_anon_super+0x20/0x20 [ 357.024219] ? put_filp+0xa0/0xa0 [ 357.027650] ? destroy_unused_super.part.7+0xf0/0xf0 [ 357.032729] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 357.037728] ? save_stack+0xa3/0xd0 [ 357.041344] ? save_stack+0x43/0xd0 [ 357.044956] ? kasan_slab_alloc+0x12/0x20 [ 357.049086] ? kmem_cache_alloc+0x12e/0x760 [ 357.053391] ? alloc_pid+0xc1/0xa10 [ 357.056995] ? __radix_tree_replace+0x1af/0x310 [ 357.061645] ? radix_tree_delete+0x30/0x30 [ 357.065855] ? node_tag_clear+0xf2/0x180 [ 357.069901] ? proc_get_inode+0x620/0x620 [ 357.074036] mount_ns+0x6d/0x190 [ 357.077382] proc_mount+0x7a/0x90 [ 357.080820] mount_fs+0x66/0x2d0 [ 357.084163] vfs_kern_mount.part.26+0xc6/0x4a0 [ 357.088723] ? may_umount+0xa0/0xa0 [ 357.092339] ? kasan_check_read+0x11/0x20 [ 357.096469] ? do_raw_spin_unlock+0x9e/0x310 [ 357.100871] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 357.105433] ? idr_alloc+0x180/0x180 [ 357.109122] kern_mount_data+0x50/0xb0 [ 357.112985] pid_ns_prepare_proc+0x1e/0x80 [ 357.117196] alloc_pid+0x88e/0xa10 [ 357.120716] ? __change_pid+0x400/0x400 [ 357.124666] ? ns_capable_common+0xcf/0x160 [ 357.128973] ? memset+0x31/0x40 [ 357.132234] ? copy_thread_tls+0x268/0x8f0 [ 357.136442] ? do_raw_spin_lock+0xc1/0x230 [ 357.140653] copy_process.part.38+0x274c/0x6140 [ 357.145296] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 357.150460] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 357.155538] ? print_irqtrace_events+0x270/0x270 [ 357.160270] ? lock_acquire+0x1d5/0x580 [ 357.164228] ? lock_acquire+0x1d5/0x580 [ 357.168179] ? alloc_set_pte+0xf74/0x1780 [ 357.172317] ? __cleanup_sighand+0x50/0x50 [ 357.176527] ? print_irqtrace_events+0x270/0x270 [ 357.181275] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 357.186449] ? lock_downgrade+0x980/0x980 [ 357.190574] ? print_irqtrace_events+0x270/0x270 [ 357.195302] ? kasan_check_read+0x11/0x20 [ 357.199427] ? rcu_is_watching+0x85/0x130 [ 357.203557] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 357.208729] ? __lock_acquire+0x638/0x3c30 [ 357.212939] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 357.218124] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 357.223297] ? print_irqtrace_events+0x270/0x270 [ 357.228042] ? __pagevec_lru_add+0x30/0x30 [ 357.232261] ? lock_acquire+0x1d5/0x580 [ 357.236213] ? trace_hardirqs_off+0x10/0x10 [ 357.240514] ? __lock_acquire+0x638/0x3c30 [ 357.244728] ? check_same_owner+0x320/0x320 [ 357.249034] ? find_held_lock+0x35/0x1d0 [ 357.253085] ? trace_hardirqs_off+0x10/0x10 [ 357.257394] ? _parse_integer+0xe9/0x140 [ 357.261442] ? trace_hardirqs_off+0x10/0x10 [ 357.265742] ? _parse_integer+0x140/0x140 [ 357.269869] ? check_same_owner+0x320/0x320 [ 357.274179] ? find_held_lock+0x35/0x1d0 [ 357.278224] ? trace_hardirqs_off+0x10/0x10 [ 357.282520] ? get_pid_task+0xa5/0x150 [ 357.286384] ? lock_downgrade+0x980/0x980 [ 357.290510] ? find_held_lock+0x35/0x1d0 [ 357.294551] ? __f_unlock_pos+0x19/0x20 [ 357.298501] ? lock_downgrade+0x980/0x980 [ 357.302626] ? kasan_check_write+0x14/0x20 [ 357.306835] ? proc_fail_nth_write+0x9b/0x1e0 [ 357.311307] ? map_files_get_link+0x3b0/0x3b0 [ 357.315779] ? trace_hardirqs_off+0x10/0x10 [ 357.320079] ? find_held_lock+0x35/0x1d0 [ 357.324121] _do_fork+0x1f7/0xfa0 [ 357.327553] ? fork_idle+0x2d0/0x2d0 [ 357.331245] ? __lock_is_held+0xb6/0x140 [ 357.335293] ? __sb_end_write+0xa0/0xd0 [ 357.339247] ? kasan_check_write+0x14/0x20 [ 357.343464] ? fput+0xe0/0x150 [ 357.346642] ? ksys_write+0x184/0x220 [ 357.350419] ? SyS_read+0x30/0x30 [ 357.353848] ? kasan_check_write+0x14/0x20 [ 357.358061] compat_SyS_x86_clone+0x3b/0x50 [ 357.362361] ? compat_SyS_x86_fallocate+0x60/0x60 [ 357.367187] do_fast_syscall_32+0x3ec/0xf9f [ 357.371489] ? do_int80_syscall_32+0x9c0/0x9c0 [ 357.376047] ? finish_task_switch+0x1b9/0x970 [ 357.380516] ? finish_task_switch+0x17a/0x970 [ 357.384989] ? syscall_return_slowpath+0x2ac/0x550 [ 357.389898] ? prepare_exit_to_usermode+0x350/0x350 [ 357.394896] ? sysret32_from_system_call+0x5/0x3c [ 357.399745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.404573] entry_SYSENTER_compat+0x70/0x7f [ 357.408955] RIP: 0023:0xf7fc0c99 [ 357.412292] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 357.419976] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 357.427239] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 357.434493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.441737] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 357.448994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80000e0003}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000002c0)) 2018/04/05 15:32:55 executing program 7: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x100, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x10) 2018/04/05 15:32:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:55 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) socketpair(0x11, 0xb, 0x57, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000003c0)) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2102, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000400)={0x6}, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000100)=""/184, &(0x7f00000001c0)=0xb8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000340)={0x3ceaa44f, 0x135, 0x635, 0xffffffff, 0x2, 0x5, 0x1, 0x1, 0x8001, 0x4}) r4 = geteuid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 2018/04/05 15:32:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x20002) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x0, 0x52, r0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000580)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)=0x8, 0x9c) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'\x00', 0x400}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000000)=0x1) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="a90020d9ed1adf26fa1c91040d36aca60d8a34249cdb82c6c89bdd567a00"]) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40001, 0x0) pwrite64(r1, &(0x7f0000000400), 0xffffffffffffff60, 0x0) clock_gettime(0x4, &(0x7f0000000240)) r2 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) accept4$packet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x80000) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) execveat(r2, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) select(0x40, &(0x7f0000000180)={0x8000, 0x0, 0x8, 0x9, 0x80ec, 0x40, 0xfffffffffffff048, 0xbbbe}, &(0x7f00000001c0)={0x9, 0x4, 0x0, 0x3, 0x1, 0x0, 0x81}, &(0x7f0000000200)={0x5, 0x8, 0x7fff, 0x401, 0x8, 0x44bd2408, 0x0, 0x10001}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000600)) 2018/04/05 15:32:55 executing program 2 (fault-call:0 fault-nth:30): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xd3, 0x0, [{0x40000000, 0x0, 0xffffffffffffffff}]}) 2018/04/05 15:32:55 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00003fcfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="71e67a15cdf0311cfc093a52a7d86bd1", 0xfb49898e4397571b) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/33) accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x800) recvmsg(r1, &(0x7f0000d2b000)={0x0, 0x0, &(0x7f0000d88fc8)=[{&(0x7f000009bf9d)=""/99, 0x63}], 0x1, &(0x7f0000d99fe8)=""/24, 0xd}, 0x0) [ 358.008716] FAULT_INJECTION: forcing a failure. [ 358.008716] name failslab, interval 1, probability 0, space 0, times 0 [ 358.020059] CPU: 1 PID: 24710 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 358.027070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.036422] Call Trace: [ 358.039011] dump_stack+0x1a7/0x27d [ 358.042627] ? arch_local_irq_restore+0x53/0x53 [ 358.047282] ? __save_stack_trace+0x7e/0xd0 [ 358.051590] should_fail+0x914/0xae0 [ 358.055287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.060371] ? kasan_kmalloc+0xad/0xe0 [ 358.064238] ? kmem_cache_alloc_trace+0x136/0x740 [ 358.069060] ? __memcg_init_list_lru_node+0x169/0x270 [ 358.074229] ? __list_lru_init+0x544/0x750 [ 358.078443] ? sget_userns+0x6c2/0xe60 [ 358.082313] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 358.087045] ? kern_mount_data+0x50/0xb0 [ 358.091084] ? pid_ns_prepare_proc+0x1e/0x80 [ 358.095470] ? alloc_pid+0x88e/0xa10 [ 358.099160] ? copy_process.part.38+0x274c/0x6140 [ 358.103981] ? _do_fork+0x1f7/0xfa0 [ 358.107591] ? compat_SyS_x86_clone+0x3b/0x50 [ 358.112070] ? find_held_lock+0x35/0x1d0 [ 358.116114] ? __lock_is_held+0xb6/0x140 [ 358.120171] ? check_same_owner+0x320/0x320 [ 358.124478] ? rcu_note_context_switch+0x710/0x710 [ 358.129391] should_failslab+0xec/0x120 [ 358.133351] kmem_cache_alloc_trace+0x4b/0x740 [ 358.137913] ? __kmalloc_node+0x33/0x70 [ 358.141866] ? __kmalloc_node+0x33/0x70 [ 358.145821] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.150822] __memcg_init_list_lru_node+0x169/0x270 [ 358.155821] ? list_lru_add+0x7c0/0x7c0 [ 358.159773] ? __kmalloc_node+0x47/0x70 [ 358.163732] __list_lru_init+0x544/0x750 [ 358.167779] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 358.173649] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.178656] ? lockdep_init_map+0x9/0x10 [ 358.182699] sget_userns+0x6c2/0xe60 [ 358.186390] ? set_anon_super+0x20/0x20 [ 358.190347] ? put_filp+0xa0/0xa0 [ 358.193781] ? destroy_unused_super.part.7+0xf0/0xf0 [ 358.198864] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 358.203860] ? save_stack+0xa3/0xd0 [ 358.207467] ? save_stack+0x43/0xd0 [ 358.211072] ? kasan_slab_alloc+0x12/0x20 [ 358.215199] ? kmem_cache_alloc+0x12e/0x760 [ 358.219497] ? alloc_pid+0xc1/0xa10 [ 358.223107] ? __radix_tree_replace+0x1af/0x310 [ 358.227760] ? radix_tree_delete+0x30/0x30 [ 358.231975] ? node_tag_clear+0xf2/0x180 [ 358.236028] ? proc_get_inode+0x620/0x620 [ 358.240157] mount_ns+0x6d/0x190 [ 358.243506] proc_mount+0x7a/0x90 [ 358.246939] mount_fs+0x66/0x2d0 [ 358.250290] vfs_kern_mount.part.26+0xc6/0x4a0 [ 358.254854] ? may_umount+0xa0/0xa0 [ 358.258459] ? kasan_check_read+0x11/0x20 [ 358.262588] ? do_raw_spin_unlock+0x9e/0x310 [ 358.266973] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 358.271531] ? idr_alloc+0x180/0x180 [ 358.275224] kern_mount_data+0x50/0xb0 [ 358.279092] pid_ns_prepare_proc+0x1e/0x80 [ 358.283307] alloc_pid+0x88e/0xa10 [ 358.286829] ? __change_pid+0x400/0x400 [ 358.290779] ? ns_capable_common+0xcf/0x160 [ 358.295087] ? memset+0x31/0x40 [ 358.298347] ? copy_thread_tls+0x268/0x8f0 [ 358.302560] ? do_raw_spin_lock+0xc1/0x230 [ 358.306779] copy_process.part.38+0x274c/0x6140 [ 358.311426] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 358.316593] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 358.321688] ? print_irqtrace_events+0x270/0x270 [ 358.326424] ? lock_acquire+0x1d5/0x580 [ 358.330377] ? lock_acquire+0x1d5/0x580 [ 358.334328] ? alloc_set_pte+0xf74/0x1780 [ 358.338465] ? __cleanup_sighand+0x50/0x50 [ 358.342680] ? print_irqtrace_events+0x270/0x270 [ 358.347425] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 358.352595] ? lock_downgrade+0x980/0x980 [ 358.356724] ? print_irqtrace_events+0x270/0x270 [ 358.361458] ? kasan_check_read+0x11/0x20 [ 358.365582] ? rcu_is_watching+0x85/0x130 [ 358.369718] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 358.374887] ? __lock_acquire+0x638/0x3c30 [ 358.379102] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 358.384284] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 358.389459] ? print_irqtrace_events+0x270/0x270 [ 358.394198] ? __pagevec_lru_add+0x30/0x30 [ 358.398421] ? lock_acquire+0x1d5/0x580 [ 358.402376] ? trace_hardirqs_off+0x10/0x10 [ 358.406685] ? __lock_acquire+0x638/0x3c30 [ 358.410898] ? check_same_owner+0x320/0x320 [ 358.415207] ? find_held_lock+0x35/0x1d0 [ 358.419253] ? trace_hardirqs_off+0x10/0x10 [ 358.423566] ? _parse_integer+0xe9/0x140 [ 358.427611] ? trace_hardirqs_off+0x10/0x10 [ 358.431925] ? _parse_integer+0x140/0x140 [ 358.436050] ? check_same_owner+0x320/0x320 [ 358.440354] ? find_held_lock+0x35/0x1d0 [ 358.444397] ? trace_hardirqs_off+0x10/0x10 [ 358.448704] ? get_pid_task+0xa5/0x150 [ 358.452572] ? lock_downgrade+0x980/0x980 [ 358.456708] ? find_held_lock+0x35/0x1d0 [ 358.460765] ? __f_unlock_pos+0x19/0x20 [ 358.464719] ? lock_downgrade+0x980/0x980 [ 358.468848] ? kasan_check_write+0x14/0x20 [ 358.473063] ? proc_fail_nth_write+0x9b/0x1e0 [ 358.477539] ? map_files_get_link+0x3b0/0x3b0 [ 358.482019] ? trace_hardirqs_off+0x10/0x10 [ 358.486325] ? find_held_lock+0x35/0x1d0 [ 358.490368] _do_fork+0x1f7/0xfa0 [ 358.493806] ? fork_idle+0x2d0/0x2d0 [ 358.497505] ? __lock_is_held+0xb6/0x140 [ 358.501559] ? __sb_end_write+0xa0/0xd0 [ 358.505517] ? kasan_check_write+0x14/0x20 [ 358.509730] ? fput+0xe0/0x150 [ 358.512904] ? ksys_write+0x184/0x220 [ 358.516688] ? SyS_read+0x30/0x30 [ 358.520121] ? kasan_check_write+0x14/0x20 [ 358.524344] compat_SyS_x86_clone+0x3b/0x50 [ 358.528648] ? compat_SyS_x86_fallocate+0x60/0x60 [ 358.533473] do_fast_syscall_32+0x3ec/0xf9f [ 358.537781] ? do_int80_syscall_32+0x9c0/0x9c0 [ 358.542342] ? finish_task_switch+0x1b9/0x970 [ 358.546815] ? finish_task_switch+0x17a/0x970 [ 358.551292] ? syscall_return_slowpath+0x2ac/0x550 [ 358.556204] ? prepare_exit_to_usermode+0x350/0x350 [ 358.561204] ? sysret32_from_system_call+0x5/0x3c [ 358.566035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.570859] entry_SYSENTER_compat+0x70/0x7f [ 358.575246] RIP: 0023:0xf7fc0c99 [ 358.578590] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 358.586281] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 358.593528] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 358.600777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/04/05 15:32:56 executing program 7: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xa}) read$eventfd(r0, &(0x7f0000000180), 0x8) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) select(0x40, &(0x7f0000000000)={0x8000, 0xe837, 0x0, 0xf9, 0x7fff, 0x5, 0x3, 0x6}, &(0x7f0000000040)={0x2, 0x1ff, 0x7, 0x20, 0x78e9, 0x100000000, 0x0, 0x6}, &(0x7f0000000080)={0x3f, 0x800, 0x400, 0x9, 0x3, 0x6, 0x378}, &(0x7f00000000c0)={0x0, 0x2710}) 2018/04/05 15:32:56 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r2, r1) r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r3, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r3, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 358.608028] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.615276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.631383] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:56 executing program 2 (fault-call:0 fault-nth:31): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 358.737406] FAULT_INJECTION: forcing a failure. [ 358.737406] name failslab, interval 1, probability 0, space 0, times 0 [ 358.748739] CPU: 1 PID: 24737 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 358.755750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.765096] Call Trace: [ 358.767683] dump_stack+0x1a7/0x27d [ 358.771310] ? arch_local_irq_restore+0x53/0x53 [ 358.775979] ? __save_stack_trace+0x7e/0xd0 [ 358.780304] should_fail+0x914/0xae0 [ 358.784020] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.789123] ? kasan_kmalloc+0xad/0xe0 [ 358.793007] ? kmem_cache_alloc_trace+0x136/0x740 [ 358.797847] ? __memcg_init_list_lru_node+0x169/0x270 [ 358.803031] ? __list_lru_init+0x544/0x750 [ 358.807267] ? sget_userns+0x6c2/0xe60 [ 358.811161] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 358.815912] ? kern_mount_data+0x50/0xb0 [ 358.819968] ? pid_ns_prepare_proc+0x1e/0x80 [ 358.824371] ? alloc_pid+0x88e/0xa10 [ 358.828079] ? copy_process.part.38+0x274c/0x6140 [ 358.832913] ? _do_fork+0x1f7/0xfa0 [ 358.836541] ? compat_SyS_x86_clone+0x3b/0x50 [ 358.841039] ? find_held_lock+0x35/0x1d0 [ 358.845104] ? __lock_is_held+0xb6/0x140 [ 358.849175] ? check_same_owner+0x320/0x320 [ 358.853498] ? rcu_note_context_switch+0x710/0x710 [ 358.858426] should_failslab+0xec/0x120 [ 358.862395] kmem_cache_alloc_trace+0x4b/0x740 [ 358.866973] ? __kmalloc_node+0x33/0x70 [ 358.870941] ? __kmalloc_node+0x33/0x70 [ 358.874908] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.879908] __memcg_init_list_lru_node+0x169/0x270 [ 358.884909] ? list_lru_add+0x7c0/0x7c0 [ 358.888860] ? __kmalloc_node+0x47/0x70 [ 358.892816] __list_lru_init+0x544/0x750 [ 358.896854] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 358.902716] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.907711] ? lockdep_init_map+0x9/0x10 [ 358.911749] sget_userns+0x6c2/0xe60 [ 358.915436] ? set_anon_super+0x20/0x20 [ 358.919386] ? put_filp+0xa0/0xa0 [ 358.922817] ? destroy_unused_super.part.7+0xf0/0xf0 [ 358.927899] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 358.932893] ? save_stack+0xa3/0xd0 [ 358.936494] ? save_stack+0x43/0xd0 [ 358.940095] ? kasan_slab_alloc+0x12/0x20 [ 358.944216] ? kmem_cache_alloc+0x12e/0x760 [ 358.948511] ? alloc_pid+0xc1/0xa10 [ 358.952119] ? __radix_tree_replace+0x1af/0x310 [ 358.956765] ? radix_tree_delete+0x30/0x30 [ 358.960974] ? node_tag_clear+0xf2/0x180 [ 358.965020] ? proc_get_inode+0x620/0x620 [ 358.969142] mount_ns+0x6d/0x190 [ 358.972486] proc_mount+0x7a/0x90 [ 358.975914] mount_fs+0x66/0x2d0 [ 358.979258] vfs_kern_mount.part.26+0xc6/0x4a0 [ 358.983816] ? may_umount+0xa0/0xa0 [ 358.987416] ? kasan_check_read+0x11/0x20 [ 358.991538] ? do_raw_spin_unlock+0x9e/0x310 [ 358.995919] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 359.000474] ? idr_alloc+0x180/0x180 [ 359.004164] kern_mount_data+0x50/0xb0 [ 359.008027] pid_ns_prepare_proc+0x1e/0x80 [ 359.012235] alloc_pid+0x88e/0xa10 [ 359.015752] ? __change_pid+0x400/0x400 [ 359.019700] ? ns_capable_common+0xcf/0x160 [ 359.024001] ? memset+0x31/0x40 [ 359.027261] ? copy_thread_tls+0x268/0x8f0 [ 359.031469] ? do_raw_spin_lock+0xc1/0x230 [ 359.035689] copy_process.part.38+0x274c/0x6140 [ 359.040337] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.045498] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 359.050579] ? print_irqtrace_events+0x270/0x270 [ 359.055312] ? lock_acquire+0x1d5/0x580 [ 359.059261] ? lock_acquire+0x1d5/0x580 [ 359.063210] ? alloc_set_pte+0xf74/0x1780 [ 359.067338] ? __cleanup_sighand+0x50/0x50 [ 359.071547] ? print_irqtrace_events+0x270/0x270 [ 359.076285] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.081449] ? lock_downgrade+0x980/0x980 [ 359.085575] ? print_irqtrace_events+0x270/0x270 [ 359.090304] ? kasan_check_read+0x11/0x20 [ 359.094427] ? rcu_is_watching+0x85/0x130 [ 359.098557] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.103726] ? __lock_acquire+0x638/0x3c30 [ 359.107935] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.113109] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.118274] ? print_irqtrace_events+0x270/0x270 [ 359.123006] ? __pagevec_lru_add+0x30/0x30 [ 359.127223] ? lock_acquire+0x1d5/0x580 [ 359.131176] ? trace_hardirqs_off+0x10/0x10 [ 359.135475] ? __lock_acquire+0x638/0x3c30 [ 359.139684] ? check_same_owner+0x320/0x320 [ 359.143982] ? find_held_lock+0x35/0x1d0 [ 359.148024] ? trace_hardirqs_off+0x10/0x10 [ 359.152322] ? _parse_integer+0xe9/0x140 [ 359.156361] ? trace_hardirqs_off+0x10/0x10 [ 359.160657] ? _parse_integer+0x140/0x140 [ 359.164778] ? check_same_owner+0x320/0x320 [ 359.169079] ? find_held_lock+0x35/0x1d0 [ 359.173118] ? trace_hardirqs_off+0x10/0x10 [ 359.177416] ? get_pid_task+0xa5/0x150 [ 359.181278] ? lock_downgrade+0x980/0x980 [ 359.185405] ? find_held_lock+0x35/0x1d0 [ 359.189446] ? __f_unlock_pos+0x19/0x20 [ 359.193395] ? lock_downgrade+0x980/0x980 [ 359.197519] ? kasan_check_write+0x14/0x20 [ 359.201726] ? proc_fail_nth_write+0x9b/0x1e0 [ 359.206196] ? map_files_get_link+0x3b0/0x3b0 [ 359.210665] ? trace_hardirqs_off+0x10/0x10 [ 359.214966] ? find_held_lock+0x35/0x1d0 [ 359.219004] _do_fork+0x1f7/0xfa0 [ 359.222438] ? fork_idle+0x2d0/0x2d0 [ 359.226128] ? __lock_is_held+0xb6/0x140 [ 359.230171] ? __sb_end_write+0xa0/0xd0 [ 359.234122] ? kasan_check_write+0x14/0x20 [ 359.238332] ? fput+0xe0/0x150 [ 359.241500] ? ksys_write+0x184/0x220 [ 359.245276] ? SyS_read+0x30/0x30 [ 359.248705] ? kasan_check_write+0x14/0x20 [ 359.252918] compat_SyS_x86_clone+0x3b/0x50 [ 359.257218] ? compat_SyS_x86_fallocate+0x60/0x60 [ 359.262037] do_fast_syscall_32+0x3ec/0xf9f [ 359.266340] ? do_int80_syscall_32+0x9c0/0x9c0 [ 359.270896] ? finish_task_switch+0x1b9/0x970 [ 359.275365] ? finish_task_switch+0x17a/0x970 [ 359.279852] ? syscall_return_slowpath+0x2ac/0x550 [ 359.284757] ? prepare_exit_to_usermode+0x350/0x350 [ 359.289750] ? sysret32_from_system_call+0x5/0x3c [ 359.294571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.299392] entry_SYSENTER_compat+0x70/0x7f [ 359.303775] RIP: 0023:0xf7fc0c99 [ 359.307117] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 359.314803] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 359.322048] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 359.329292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.336534] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.343867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:56 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) fadvise64(r0, 0x0, 0xffffffffffffff53, 0x2) mmap(&(0x7f0000ad4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002000), &(0x7f0000ad4000)=0x6) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002000)=ANY=[@ANYBLOB="00ec00a7"], &(0x7f0000ad3ffd)=0x4) 2018/04/05 15:32:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000001cff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @rand_addr=0x31a00dfb}, 0x10, &(0x7f0000001fc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800001374e0b81c17a51234a231001401000002000000000000000000000000000000"], 0x18}, 0x0) 2018/04/05 15:32:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:56 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="b100485caa2af972b661f1a608004500001c001000000002907800000000ffffffff11009078e0000001"], &(0x7f0000000000)) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 2018/04/05 15:32:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x20002) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x0, 0x52, r0, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000580)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)=0x8, 0x9c) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'\x00', 0x400}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000000)=0x1) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="a90020d9ed1adf26fa1c91040d36aca60d8a34249cdb82c6c89bdd567a00"]) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40001, 0x0) pwrite64(r1, &(0x7f0000000400), 0xffffffffffffff60, 0x0) clock_gettime(0x4, &(0x7f0000000240)) r2 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) accept4$packet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x80000) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) mmap(&(0x7f0000001000/0x39a000)=nil, 0x39a000, 0x0, 0x32, 0xffffffffffffffff, 0x0) execveat(r2, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) select(0x40, &(0x7f0000000180)={0x8000, 0x0, 0x8, 0x9, 0x80ec, 0x40, 0xfffffffffffff048, 0xbbbe}, &(0x7f00000001c0)={0x9, 0x4, 0x0, 0x3, 0x1, 0x0, 0x81}, &(0x7f0000000200)={0x5, 0x8, 0x7fff, 0x401, 0x8, 0x44bd2408, 0x0, 0x10001}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000600)) 2018/04/05 15:32:56 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x101, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="d6226b594ea255e124f0798c6965f349792d4c6244628d3d8571679349a45b60420a7058efd2333856ac528e684ae35834d1cf8fff262becb7562809415280cf7a96879e09b1f709ce104820f63d8f730d61e38beddf5188eb", 0x59, 0xfffffffffffffffc) r3 = request_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)='ip6gretap0\x00', 0xfffffffffffffff8) keyctl$search(0xa, r2, &(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, r3) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'ip6gretap0\x00', {0x4, 0x1, 0x2, "8407ff48df50", 0x5}}) 2018/04/05 15:32:56 executing program 2 (fault-call:0 fault-nth:32): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:56 executing program 4: r0 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) prctl$seccomp(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8, 0x4, 0x5, 0x5}, {0x8, 0x0, 0xb, 0x7f}, {0x23b, 0x6, 0x5, 0x3}, {0x3, 0x32, 0x3f, 0x8}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x101000}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000eb7000)={0x0, 0x0, &(0x7f0000000040)}) socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r1, r0, &(0x7f0000fc1ff8), 0x80000001) [ 359.548215] FAULT_INJECTION: forcing a failure. [ 359.548215] name failslab, interval 1, probability 0, space 0, times 0 [ 359.559503] CPU: 1 PID: 24752 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 359.566514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.575858] Call Trace: [ 359.578431] dump_stack+0x1a7/0x27d [ 359.582048] ? arch_local_irq_restore+0x53/0x53 [ 359.586699] ? __save_stack_trace+0x7e/0xd0 [ 359.591012] should_fail+0x914/0xae0 [ 359.594713] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.599802] ? kasan_kmalloc+0xad/0xe0 [ 359.603669] ? kmem_cache_alloc_trace+0x136/0x740 [ 359.608927] ? __memcg_init_list_lru_node+0x169/0x270 [ 359.614096] ? __list_lru_init+0x544/0x750 [ 359.618307] ? sget_userns+0x6c2/0xe60 [ 359.622174] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 359.626906] ? kern_mount_data+0x50/0xb0 [ 359.630947] ? pid_ns_prepare_proc+0x1e/0x80 [ 359.635333] ? alloc_pid+0x88e/0xa10 [ 359.639031] ? copy_process.part.38+0x274c/0x6140 [ 359.643850] ? _do_fork+0x1f7/0xfa0 [ 359.647462] ? compat_SyS_x86_clone+0x3b/0x50 [ 359.651942] ? find_held_lock+0x35/0x1d0 [ 359.655985] ? __lock_is_held+0xb6/0x140 [ 359.660045] ? check_same_owner+0x320/0x320 [ 359.664353] ? rcu_note_context_switch+0x710/0x710 [ 359.669270] should_failslab+0xec/0x120 [ 359.673227] kmem_cache_alloc_trace+0x4b/0x740 [ 359.677789] ? __kmalloc_node+0x33/0x70 [ 359.681741] ? __kmalloc_node+0x33/0x70 [ 359.685697] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.690695] __memcg_init_list_lru_node+0x169/0x270 [ 359.695692] ? list_lru_add+0x7c0/0x7c0 [ 359.699647] ? __kmalloc_node+0x47/0x70 [ 359.703605] __list_lru_init+0x544/0x750 [ 359.707650] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 359.713520] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 359.718525] ? lockdep_init_map+0x9/0x10 [ 359.722570] sget_userns+0x6c2/0xe60 [ 359.726260] ? set_anon_super+0x20/0x20 [ 359.730216] ? put_filp+0xa0/0xa0 [ 359.733649] ? destroy_unused_super.part.7+0xf0/0xf0 [ 359.738734] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 359.743732] ? save_stack+0xa3/0xd0 [ 359.747337] ? save_stack+0x43/0xd0 [ 359.750940] ? kasan_slab_alloc+0x12/0x20 [ 359.755066] ? kmem_cache_alloc+0x12e/0x760 [ 359.759364] ? alloc_pid+0xc1/0xa10 [ 359.762974] ? __radix_tree_replace+0x1af/0x310 [ 359.767622] ? radix_tree_delete+0x30/0x30 [ 359.771837] ? node_tag_clear+0xf2/0x180 [ 359.775897] ? proc_get_inode+0x620/0x620 [ 359.780034] mount_ns+0x6d/0x190 [ 359.783382] proc_mount+0x7a/0x90 [ 359.786815] mount_fs+0x66/0x2d0 [ 359.790164] vfs_kern_mount.part.26+0xc6/0x4a0 [ 359.794728] ? may_umount+0xa0/0xa0 [ 359.798334] ? kasan_check_read+0x11/0x20 [ 359.802460] ? do_raw_spin_unlock+0x9e/0x310 [ 359.806847] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 359.811406] ? idr_alloc+0x180/0x180 [ 359.815102] kern_mount_data+0x50/0xb0 [ 359.818969] pid_ns_prepare_proc+0x1e/0x80 [ 359.823186] alloc_pid+0x88e/0xa10 [ 359.826711] ? __change_pid+0x400/0x400 [ 359.830662] ? ns_capable_common+0xcf/0x160 [ 359.834967] ? memset+0x31/0x40 [ 359.838229] ? copy_thread_tls+0x268/0x8f0 [ 359.842439] ? do_raw_spin_lock+0xc1/0x230 [ 359.846657] copy_process.part.38+0x274c/0x6140 [ 359.851304] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.856470] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 359.861555] ? print_irqtrace_events+0x270/0x270 [ 359.866290] ? lock_acquire+0x1d5/0x580 [ 359.870242] ? lock_acquire+0x1d5/0x580 [ 359.874196] ? alloc_set_pte+0xf74/0x1780 [ 359.878333] ? __cleanup_sighand+0x50/0x50 [ 359.882549] ? print_irqtrace_events+0x270/0x270 [ 359.887296] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.892464] ? lock_downgrade+0x980/0x980 [ 359.896593] ? print_irqtrace_events+0x270/0x270 [ 359.901327] ? kasan_check_read+0x11/0x20 [ 359.905454] ? rcu_is_watching+0x85/0x130 [ 359.909593] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.914764] ? __lock_acquire+0x638/0x3c30 [ 359.918978] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.924160] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 359.929331] ? print_irqtrace_events+0x270/0x270 [ 359.934071] ? __pagevec_lru_add+0x30/0x30 [ 359.938287] ? lock_acquire+0x1d5/0x580 [ 359.942245] ? trace_hardirqs_off+0x10/0x10 [ 359.946549] ? __lock_acquire+0x638/0x3c30 [ 359.950766] ? check_same_owner+0x320/0x320 [ 359.955074] ? find_held_lock+0x35/0x1d0 [ 359.959117] ? trace_hardirqs_off+0x10/0x10 [ 359.963418] ? _parse_integer+0xe9/0x140 [ 359.967465] ? trace_hardirqs_off+0x10/0x10 [ 359.971769] ? _parse_integer+0x140/0x140 [ 359.975894] ? check_same_owner+0x320/0x320 [ 359.980199] ? find_held_lock+0x35/0x1d0 [ 359.984241] ? trace_hardirqs_off+0x10/0x10 [ 359.988543] ? get_pid_task+0xa5/0x150 [ 359.992411] ? lock_downgrade+0x980/0x980 [ 359.996544] ? find_held_lock+0x35/0x1d0 [ 360.000591] ? __f_unlock_pos+0x19/0x20 [ 360.004543] ? lock_downgrade+0x980/0x980 [ 360.008670] ? kasan_check_write+0x14/0x20 [ 360.012882] ? proc_fail_nth_write+0x9b/0x1e0 [ 360.017356] ? map_files_get_link+0x3b0/0x3b0 [ 360.021834] ? trace_hardirqs_off+0x10/0x10 [ 360.026139] ? find_held_lock+0x35/0x1d0 [ 360.030182] _do_fork+0x1f7/0xfa0 [ 360.033629] ? fork_idle+0x2d0/0x2d0 [ 360.037346] ? __lock_is_held+0xb6/0x140 [ 360.041400] ? __sb_end_write+0xa0/0xd0 [ 360.045357] ? kasan_check_write+0x14/0x20 [ 360.049571] ? fput+0xe0/0x150 [ 360.052741] ? ksys_write+0x184/0x220 [ 360.056522] ? SyS_read+0x30/0x30 [ 360.059966] compat_SyS_x86_clone+0x3b/0x50 [ 360.064267] ? compat_SyS_x86_fallocate+0x60/0x60 [ 360.069090] do_fast_syscall_32+0x3ec/0xf9f [ 360.073393] ? do_int80_syscall_32+0x9c0/0x9c0 [ 360.077958] ? finish_task_switch+0x1b9/0x970 [ 360.082430] ? finish_task_switch+0x17a/0x970 [ 360.086906] ? syscall_return_slowpath+0x2ac/0x550 [ 360.091816] ? prepare_exit_to_usermode+0x350/0x350 [ 360.096814] ? sysret32_from_system_call+0x5/0x3c [ 360.101640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.106465] entry_SYSENTER_compat+0x70/0x7f [ 360.110856] RIP: 0023:0xf7fc0c99 [ 360.114198] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 360.121887] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 360.129133] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 360.136383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.143630] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 360.150880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.164602] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:57 executing program 6: syz_emit_ethernet(0x56, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@canfd={0xd, {{0x3, 0x200, 0x0, 0x8}, 0x18, 0x3, 0x0, 0x0, "b03b57c3a1969581689eab71ab83eda120b002d46ed882bf98c1aa31473395989a5dc857013c2b9eb6ecc8d16de9e35e4df3757df4aa2739cbc88c85419e41cb"}}}}, 0x0) 2018/04/05 15:32:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffff80000000, 0x81) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/143) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x20000, 0x0) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40802, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x1000, 0x8000, 0x8}, 0x14) sendmsg$netrom(r0, &(0x7f0000000700)={&(0x7f0000000280)=@ax25={0x3, {"fba932aa69b33c"}, 0x9491}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="3dd4aa600d273c8e6677671038cead94fde0dd77095d18b02a43a353b3755a5577374c53ec12dba8e2652c32a1ee4f1b64048a701d", 0x35}, {&(0x7f0000000300)="a39181c7b542e5e8c0b8c598d94e76d7d9c1b359b2a181280d6cd8c03f63d86a2d9894d5ca159d14f1ea865bf62b611bb61920d1d9f44264f0cf9f80a53790ebcb60ee81c57696f8b862417b0602a2fbea7e8c20ecddd6d40d05c3015f473fd49d155a310654a2cfd54a7c443b3fac3f31ac54b22b1be82ad0ada626867ee92414867b4961eecbb4cebddf612ada3f26cd499d31a4be6e2ab12846efca5755f3ae5f6419805f6326ccdcae80dc5ea26ad4312c2bdfed159ff2556c052854b3b970ac5dfb54967dd70d54a02c250f574ca936539ee84a3ff729bc70ed2e670c6f1cdec80c27a4f4c4af2387f1f0476f7db71b", 0xf2}, {&(0x7f0000000400)="26ac8997c6afc5daa234110354354cca1f7c1b1b9b7da86617aea22d5937db25231584f05919a897cb12a5222a682afd3c0ad653f89c6cfeec2c1b2f9336d9e6559a90339b8ff3385300fa7164d6105d614d02a3487cbc7fd22e221dcf20338509c5f1204c05e81cc21d6e4cfde9926c7ccf07e7856ee13e", 0x78}, {&(0x7f0000000480)="de162a782198cae946c5cb57d5b49c0a53ccb12bc4c902ff35d257556ba7a217259573a081c10e738d2dfaf6d460e4726d1ba3f5afac35545feb965716202870751b612157b868b16f01e8a88bb30b54abffe2c158", 0x55}, {&(0x7f0000000500)="69257472b1e4b6b9aa034675fc31c98d28100fc34229482eaacf4bcc3aae44196b6496012c80a230528e136226708ba45283d6b270fb8181f9d91fdb4d135a70afe66a481f902c8ba099a42d8e8981bc0778c54d46e75ca27f762d59d2bc4bfff792ba2d2dc308a5f24f3388a1d03b360ab86a50d97ae3084945cb5ad7da2d9acbf4e5aad3dc472465dba354c90342ff4f9c1e084c062d9c8e20c6ae50e8e8c7eeaeb2d9129dc26b38f4470eb042440dfef815535d2e21a203c00baebe4decae67fd37af51b3cce0fd2609e5d1fd9ebd446425a1f7d510df3302f1f662224638a56b458f3c71db63866d", 0xea}, {&(0x7f0000000600)="30169b8a0c286cf05a59766867451231bc535d0c0a80444c64edc7f2b894dcac367384b4d394f52218d86a35a3cf17cdf14693b758dddecca3a354226ed09d956a6c5303879615be481b4afa86453c72c640f0eb077950b361f0d8e02463ad510879f348854ed9bfb524b8803e5a09518b8add1739de8519ed720d6bfacb1f63ac71a4953eeebc779e1af170b1626b1251aef8df2acf688ed8cb", 0x9a}], 0x6, 0x0, 0x0, 0x44000}, 0x4004000) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x3, &(0x7f000066cff0)) r3 = getpgrp(0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0086418, &(0x7f0000000040)={0x8, 0x1ff, 0x0, 0x4, 0x0, 0xd0dd}) syz_open_procfs(r3, &(0x7f0000000780)='net/raw6\x00') 2018/04/05 15:32:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x10000, 0x5, 0x401, 0x1, 0x1}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0x4}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @broadcast}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) connect$can_bcm(r1, &(0x7f0000000380)={0x1d, r3}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) sendto$inet(r1, &(0x7f0000000140)="1b66557b8a0d61a6e462b33ab9a0b1d4f05695180825ba6928c5ce8d338666a2ce4aeec33cc04935a71c2e53c9905a018af9e665648eb0be58d84a960b48d3534f7006439fea82e87960b7f3c4d6b71537280de7b51652569ff22db5acd3971692d3fc0819064b6cf5978443ab5fd76a913addf6d55405e2a165a30d715607b4a5ee", 0x82, 0x10, &(0x7f0000000200)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = socket(0x11, 0x3, 0x3) bind(r4, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) fsync(r0) [ 360.273329] device lo left promiscuous mode 2018/04/05 15:32:57 executing program 2 (fault-call:0 fault-nth:33): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:57 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/82) capset(&(0x7f0000fc1ff8)={0x4000019980330}, &(0x7f0000001fe8)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000001}, &(0x7f00000001c0)=0x88) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x4, 0x100000000}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}) 2018/04/05 15:32:57 executing program 7: r0 = getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x402, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80400, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cuse\x00', 0x4008100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100, 0x4) open(&(0x7f0000000480)='./file0\x00', 0x1, 0x40) pipe(&(0x7f00000004c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x200400, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='net/sockstat\x00') creat(&(0x7f0000000600)='./file0\x00', 0x140) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x80, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000680)='/dev/dsp#\x00', 0xff, 0x101000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000800)=ANY=[], &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, &(0x7f0000000440)}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000700)={{0x77359400}, {r3, r4/1000+10000}}, &(0x7f0000000740)) connect(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "c7da77fe41aae98430aca7f4ad82d9e5b938a7a2b4e55d8afd612a688a00e3d4ac775635322c1e5abb97571efb964a1863121b756a48162a50eae8ebc0060ffa94756794a35b339b6e7a70dfc077e402ec183fdd59ec6e29952a3d8d73e72a7b12fe4f4271a2a372df5ada9406b8bcefbe4ac0745531241402d5ef42120c"}, 0x80) write$rdma_cm(r2, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r2, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r5}}, 0x48) write$rdma_cm(r2, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) sendto$ipx(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000900)={0x4, 0x0, 0x0, '^*z,Iu'}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 2018/04/05 15:32:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64) syz_emit_ethernet(0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="aab617b6bbf77ad595b86bc56daaaaaaaabbaaaaaaaaaa008137ffff075c000000000000c2d51d26d57c000000000000e0d26d34"], &(0x7f00000000c0)) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x50400) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x8, 0x2, &(0x7f0000000080)}) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r2, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 2018/04/05 15:32:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffffffffff9, 0x101000) 2018/04/05 15:32:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f000096e000)=""/245, &(0x7f0000792000)=0xf5) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, 0x5, 0x9}, &(0x7f0000000240)=0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0x3f, 0x0, 0x3, 0x8}, &(0x7f0000000340)=0x98) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x40, 0x6, 0xfffffffffffffffd}, &(0x7f0000000080)=0x10) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0x80}, 0x8) syz_mount_image$reiserfs(&(0x7f0000000380)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x2, 0x2, &(0x7f0000001500)=[{&(0x7f0000000400)="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", 0x1000, 0x800}, {&(0x7f0000001400)="da11700b032eff752ea93320caaeba5da2c15e848352c2d6262ba7c359e90a744279bd2a0c1a546a6d15841c8477b62e5676ee6aecc46862be1b65b18e794604e08f9c8a8ccec5b8af76f17fb3cbf30c7427660e716d2d8f0923b364a6a3132cc6e2defc2d9f804a482cb310d7393e837154cd6d04ea9615c4af145a55cc77287964ffee87727413efdbada29019d037cfa82754e1fcad0be16488654e02fc7cc60d32a334ce86b07ea9903f401e8f0a8f4d1ebd1084f6ab81867e5348873b00a52e0823735e0fa298af141bb1052f2a4d8a2aeab9c61720ef33d8415ed856f51a54d3c4ac68de83e58eeeac23ef755adced14021810c06ddf", 0xf9, 0x1}], 0x2000, &(0x7f0000001640)=ANY=[@ANYBLOB="626c6f636b2d616c6c6f6361746f723d6861736865645f72656c6f636174696f6e2cfc6f757365725f78617474722c636f6e762c6e6f6c61726765696f2c626c6f636b2d616c6c6f6361746f723d0100000065722c7461696c733d6f66662c7461696c733d6f66662c6572726f72733d726f2d72656d6f756e742c6e6f71756f74612c61636c0100d3a37560d827131c8561afa266902527c3a9784f189e6edcab75f52170d7498f27ff4a0d4e48c4e9a5f1d04b53ba9b49c1e3795db028d98fb5ba7289c48a"]) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000100)={0x81, 0x832e, 0x800}) [ 360.361879] FAULT_INJECTION: forcing a failure. [ 360.361879] name failslab, interval 1, probability 0, space 0, times 0 [ 360.373287] CPU: 1 PID: 24783 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 360.380307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.389654] Call Trace: [ 360.392239] dump_stack+0x1a7/0x27d [ 360.395873] ? arch_local_irq_restore+0x53/0x53 [ 360.400543] ? __save_stack_trace+0x7e/0xd0 [ 360.404875] should_fail+0x914/0xae0 [ 360.408591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.413694] ? kasan_kmalloc+0xad/0xe0 [ 360.417583] ? kmem_cache_alloc_trace+0x136/0x740 [ 360.422425] ? __memcg_init_list_lru_node+0x169/0x270 [ 360.427612] ? __list_lru_init+0x544/0x750 [ 360.431857] ? sget_userns+0x6c2/0xe60 [ 360.431873] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 360.440509] ? kern_mount_data+0x50/0xb0 [ 360.444573] ? pid_ns_prepare_proc+0x1e/0x80 [ 360.448978] ? alloc_pid+0x88e/0xa10 [ 360.452700] ? copy_process.part.38+0x274c/0x6140 [ 360.452710] ? _do_fork+0x1f7/0xfa0 [ 360.452722] ? compat_SyS_x86_clone+0x3b/0x50 [ 360.452738] ? find_held_lock+0x35/0x1d0 [ 360.452751] ? __lock_is_held+0xb6/0x140 [ 360.452768] ? check_same_owner+0x320/0x320 [ 360.452780] ? rcu_note_context_switch+0x710/0x710 [ 360.483237] should_failslab+0xec/0x120 [ 360.487198] kmem_cache_alloc_trace+0x4b/0x740 [ 360.491761] ? __kmalloc_node+0x33/0x70 [ 360.495714] ? __kmalloc_node+0x33/0x70 [ 360.499672] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.504676] __memcg_init_list_lru_node+0x169/0x270 [ 360.509677] ? list_lru_add+0x7c0/0x7c0 [ 360.513631] ? __kmalloc_node+0x47/0x70 [ 360.517590] __list_lru_init+0x544/0x750 [ 360.521634] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 360.527498] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 360.532497] ? lockdep_init_map+0x9/0x10 [ 360.536544] sget_userns+0x6c2/0xe60 [ 360.540235] ? set_anon_super+0x20/0x20 [ 360.544192] ? put_filp+0xa0/0xa0 [ 360.547626] ? destroy_unused_super.part.7+0xf0/0xf0 [ 360.552711] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 360.557702] ? perf_trace_lock+0xd6/0x900 [ 360.561832] ? save_stack+0xa3/0xd0 [ 360.565441] ? kasan_slab_alloc+0x12/0x20 [ 360.569573] ? alloc_pid+0xc1/0xa10 [ 360.573182] ? __radix_tree_replace+0x1af/0x310 [ 360.577834] ? radix_tree_delete+0x30/0x30 [ 360.582047] ? node_tag_clear+0xf2/0x180 [ 360.586100] ? proc_get_inode+0x620/0x620 [ 360.590228] mount_ns+0x6d/0x190 [ 360.593576] proc_mount+0x7a/0x90 [ 360.597014] mount_fs+0x66/0x2d0 [ 360.600368] vfs_kern_mount.part.26+0xc6/0x4a0 [ 360.604930] ? may_umount+0xa0/0xa0 [ 360.608534] ? kasan_check_read+0x11/0x20 [ 360.612660] ? do_raw_spin_unlock+0x9e/0x310 [ 360.617049] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 360.621611] ? idr_alloc+0x180/0x180 [ 360.625306] kern_mount_data+0x50/0xb0 [ 360.629175] pid_ns_prepare_proc+0x1e/0x80 [ 360.633388] alloc_pid+0x88e/0xa10 [ 360.636914] ? __change_pid+0x400/0x400 [ 360.640867] ? ns_capable_common+0xcf/0x160 [ 360.645176] ? memset+0x31/0x40 [ 360.648436] ? copy_thread_tls+0x268/0x8f0 [ 360.652650] ? do_raw_spin_lock+0xc1/0x230 [ 360.656871] copy_process.part.38+0x274c/0x6140 [ 360.661517] ? perf_trace_lock+0xd6/0x900 [ 360.665646] ? print_irqtrace_events+0x270/0x270 [ 360.670381] ? trace_event_raw_event_lock+0x340/0x340 [ 360.675548] ? lock_acquire+0x1d5/0x580 [ 360.679501] ? lock_acquire+0x1d5/0x580 [ 360.683456] ? alloc_set_pte+0xf74/0x1780 [ 360.687595] ? __cleanup_sighand+0x50/0x50 [ 360.691810] ? print_irqtrace_events+0x270/0x270 [ 360.696560] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 360.701729] ? lock_downgrade+0x980/0x980 [ 360.705861] ? print_irqtrace_events+0x270/0x270 [ 360.710599] ? rcu_is_watching+0x85/0x130 [ 360.714741] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 360.719916] ? __lock_acquire+0x638/0x3c30 [ 360.724132] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 360.729317] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 360.734491] ? trace_event_raw_event_lock+0x340/0x340 [ 360.739657] ? perf_trace_lock+0xd6/0x900 [ 360.743793] ? lock_acquire+0x1d5/0x580 [ 360.747749] ? trace_hardirqs_off+0x10/0x10 [ 360.752055] ? __lock_acquire+0x638/0x3c30 [ 360.756269] ? trace_event_raw_event_lock+0x340/0x340 [ 360.761443] ? find_held_lock+0x35/0x1d0 [ 360.765490] ? perf_trace_lock+0xd6/0x900 [ 360.769623] ? trace_event_raw_event_lock+0x340/0x340 [ 360.774796] ? check_same_owner+0x320/0x320 [ 360.779100] ? find_held_lock+0x35/0x1d0 [ 360.783143] ? trace_hardirqs_off+0x10/0x10 [ 360.787449] ? get_pid_task+0xa5/0x150 [ 360.791315] ? perf_trace_lock+0xd6/0x900 [ 360.795451] ? find_held_lock+0x35/0x1d0 [ 360.799500] ? __f_unlock_pos+0x19/0x20 [ 360.803456] ? lock_downgrade+0x980/0x980 [ 360.807596] ? kasan_check_write+0x14/0x20 [ 360.811809] ? proc_fail_nth_write+0x9b/0x1e0 [ 360.816285] ? map_files_get_link+0x3b0/0x3b0 [ 360.820761] ? trace_hardirqs_off+0x10/0x10 [ 360.825065] ? find_held_lock+0x35/0x1d0 [ 360.829109] _do_fork+0x1f7/0xfa0 [ 360.832546] ? fork_idle+0x2d0/0x2d0 [ 360.836261] ? __sb_end_write+0xa0/0xd0 [ 360.840222] ? kasan_check_write+0x14/0x20 [ 360.844440] ? fput+0xe0/0x150 [ 360.847611] ? ksys_write+0x184/0x220 [ 360.851392] ? SyS_read+0x30/0x30 [ 360.854824] ? kasan_check_write+0x14/0x20 [ 360.859046] compat_SyS_x86_clone+0x3b/0x50 [ 360.863348] ? compat_SyS_x86_fallocate+0x60/0x60 [ 360.868171] do_fast_syscall_32+0x3ec/0xf9f [ 360.872478] ? do_int80_syscall_32+0x9c0/0x9c0 [ 360.877040] ? finish_task_switch+0x1b9/0x970 [ 360.881514] ? finish_task_switch+0x17a/0x970 [ 360.885992] ? syscall_return_slowpath+0x2ac/0x550 [ 360.890905] ? prepare_exit_to_usermode+0x350/0x350 [ 360.895928] ? sysret32_from_system_call+0x5/0x3c [ 360.900756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.905582] entry_SYSENTER_compat+0x70/0x7f [ 360.909969] RIP: 0023:0xf7fc0c99 2018/04/05 15:32:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000ec6000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000358fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000a5dfe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) getpeername$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) readv(r1, &(0x7f0000080000)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000909feb)='/proc/self/net/pfkey\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x0) [ 360.913313] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 360.921002] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 360.928257] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 360.935504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.942752] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 360.950011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB]}, 0x1}, 0x8000) close(r0) 2018/04/05 15:32:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfff, 0x4) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffff14, &(0x7f0000226000)={&(0x7f00008bc000)=ANY=[@ANYBLOB="1c0000004100ff0200000000fcdbdf25000000000800000000000000"], 0x109}, 0x1}, 0x180c0) fcntl$dupfd(r0, 0x0, r0) r1 = eventfd(0x1f) poll(&(0x7f0000000040)=[{r1, 0x1}, {r0, 0x1772}, {r0, 0x1}, {r0, 0x400}, {r0, 0x2000}, {r0, 0x2201}, {r0, 0x200}, {r0}, {r0, 0x1}, {r0, 0x1000}], 0xa, 0x1) 2018/04/05 15:32:58 executing program 6: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff}}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)="2f65786500000000000409004bddd9de91be10eebf000ee9a9d50f1e860000085444e08e83a3aa3f05da75af1f0200f5cd26d7a0d2ef6ae0ed78621cffc0a87164000000e39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x9}, &(0x7f0000000200)=0x88) 2018/04/05 15:32:58 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) fgetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000008000008300"], &(0x7f0000000140)=""/210, 0xd2) mq_timedsend(r0, &(0x7f0000000100)="cb", 0x1, 0x0, &(0x7f0000000040)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xc6, @remote={0xfe, 0x80, [], 0xbb}}}, 0x80000001, 0x0, 0xe8f, "456faaa1645c6dfac08aa36cde638484d006825417062748a2c74235a1b73b45985a12f08a10fad4f0e8f7414a43fec4c49282dd524a630082d98a5a4c640597a34afa3bbfb0c08eabda269c392015da"}, 0xd8) [ 361.063082] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:58 executing program 2 (fault-call:0 fault-nth:34): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x15, 0x38, &(0x7f0000000080)="69145d3dbdaf46696330cd668d477ffde8c3c950bb", &(0x7f0000000100)=""/56, 0x7, 0x1ff}, 0x28) syz_emit_ethernet(0xe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @random="fe3c9acfa43f", [], {@generic={0x8863}}}, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x70e, 0x0, 0x950]}) 2018/04/05 15:32:58 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x101, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x48, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x8}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x30000, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x29}]}, &(0x7f00000001c0)=0xc) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) 2018/04/05 15:32:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000f54ffc)=0x1ea, 0x4) sendto$inet6(r0, &(0x7f00009a1000), 0x0, 0x0, &(0x7f0000f64fe4)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}}, 0x1c) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/12, 0xc}], 0x4) 2018/04/05 15:32:58 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = getpgid(0x0) ioprio_set$pid(0xffffffffffffffff, r1, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r2, &(0x7f0000000080)=0x4) r3 = getpgrp(r1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r3) 2018/04/05 15:32:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f0000000000)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xc8, 0x128}, @unspec=@CT2={0x60, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xec}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x33c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[{0x4, 0x3}, {0x0, 0x9}, {0xf, 0x1000}, {0x2, 0x3ff}, {0x0, 0x5}, {0xf, 0x100}, {0x7, 0xa3aa}, {0x7, 0x2}, {0x0, 0x86}, {0x0, 0x6}], 0xa) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) rmdir(&(0x7f00000003c0)='./file0\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1}]}) r5 = dup2(r4, r4) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x80, 0x6}, {0x8, 0x7fff}, {0x9000, 0x7}]}) 2018/04/05 15:32:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x0) close(r0) 2018/04/05 15:32:58 executing program 7: seccomp(0x2, 0xfffffffffffffffe, &(0x7f0000028ff0)={0x20000000000003b7, &(0x7f0000000240)=[{0xc0, 0x2, 0x4, 0x2}, {0x1f, 0x1, 0x7, 0x7}, {0x15d, 0x2000005, 0x5, 0xfffffffffffffff9}, {0x7f, 0x7ff, 0x100000000, 0x100000001}, {0x2, 0x2ce5, 0x7, 0x1}, {0x200, 0x3ff, 0x344b8891}, {0x4, 0xff, 0x1, 0xffffffff}, {0x7, 0x1, 0x5, 0x3f}, {0x610, 0x0, 0x4}]}) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x80) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0xffffffff, @loopback={0x0, 0x1}, 0x3f}, {0xa, 0x4e23, 0x2, @loopback={0x0, 0x1}, 0xfff}, 0x7ff, [0x7, 0x3, 0x8, 0x48f, 0x7, 0x4, 0x8, 0x4]}, 0x5c) unlink(&(0x7f0000000000)='..') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x80000000, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @multicast1=0xe0000001}, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x8, 0x7, 0x4, 0x9, 0x200, &(0x7f0000000180)='bpq0\x00', 0x40, 0x5, 0x7bc3}) pause() ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000002c0)={0x7f, 0x9, 0x7f, 0x1, 0x7ff, 0x5}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x3b, @rand_addr=0x1, 0x4e20, 0x1, 'none\x00', 0x4, 0x8, 0x5b}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x3, 0x0, 0x10000, 0x4b}}, 0x44) [ 361.461505] FAULT_INJECTION: forcing a failure. [ 361.461505] name failslab, interval 1, probability 0, space 0, times 0 [ 361.466269] sctp: [Deprecated]: syz-executor6 (pid 24835) Use of int in maxseg socket option. [ 361.466269] Use struct sctp_assoc_value instead [ 361.472873] CPU: 1 PID: 24837 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 361.491044] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 361.492968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.492973] Call Trace: [ 361.492989] dump_stack+0x1a7/0x27d [ 361.493002] ? arch_local_irq_restore+0x53/0x53 [ 361.493018] ? __save_stack_trace+0x7e/0xd0 [ 361.523512] sctp: [Deprecated]: syz-executor6 (pid 24843) Use of int in maxseg socket option. [ 361.523512] Use struct sctp_assoc_value instead [ 361.523572] should_fail+0x914/0xae0 [ 361.544752] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.549855] ? kasan_kmalloc+0xad/0xe0 [ 361.553741] ? kmem_cache_alloc_trace+0x136/0x740 [ 361.558592] ? __memcg_init_list_lru_node+0x169/0x270 [ 361.563779] ? __list_lru_init+0x544/0x750 [ 361.568004] ? sget_userns+0x6c2/0xe60 [ 361.571882] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 361.576616] ? kern_mount_data+0x50/0xb0 [ 361.580655] ? pid_ns_prepare_proc+0x1e/0x80 [ 361.585042] ? alloc_pid+0x88e/0xa10 [ 361.588731] ? copy_process.part.38+0x274c/0x6140 [ 361.593547] ? _do_fork+0x1f7/0xfa0 [ 361.597147] ? compat_SyS_x86_clone+0x3b/0x50 [ 361.601622] ? find_held_lock+0x35/0x1d0 [ 361.606271] ? __lock_is_held+0xb6/0x140 [ 361.610319] ? check_same_owner+0x320/0x320 [ 361.614618] ? rcu_note_context_switch+0x710/0x710 [ 361.619526] should_failslab+0xec/0x120 [ 361.623478] kmem_cache_alloc_trace+0x4b/0x740 [ 361.628037] ? __kmalloc_node+0x33/0x70 [ 361.631987] ? __kmalloc_node+0x33/0x70 [ 361.635940] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.640936] __memcg_init_list_lru_node+0x169/0x270 [ 361.645930] ? list_lru_add+0x7c0/0x7c0 [ 361.649879] ? __kmalloc_node+0x47/0x70 [ 361.653831] __list_lru_init+0x544/0x750 [ 361.657874] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 361.663734] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 361.668732] ? lockdep_init_map+0x9/0x10 [ 361.672770] sget_userns+0x6c2/0xe60 [ 361.676456] ? set_anon_super+0x20/0x20 [ 361.680406] ? put_filp+0xa0/0xa0 [ 361.683834] ? destroy_unused_super.part.7+0xf0/0xf0 [ 361.688916] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 361.693909] ? save_stack+0xa3/0xd0 [ 361.697511] ? save_stack+0x43/0xd0 [ 361.701117] ? kasan_slab_alloc+0x12/0x20 [ 361.705239] ? kmem_cache_alloc+0x12e/0x760 [ 361.709535] ? alloc_pid+0xc1/0xa10 [ 361.713145] ? __radix_tree_replace+0x1af/0x310 [ 361.717788] ? radix_tree_delete+0x30/0x30 [ 361.722000] ? node_tag_clear+0xf2/0x180 [ 361.726048] ? proc_get_inode+0x620/0x620 [ 361.730168] mount_ns+0x6d/0x190 [ 361.733511] proc_mount+0x7a/0x90 [ 361.736943] mount_fs+0x66/0x2d0 [ 361.740287] vfs_kern_mount.part.26+0xc6/0x4a0 [ 361.744845] ? may_umount+0xa0/0xa0 [ 361.748448] ? kasan_check_read+0x11/0x20 [ 361.752571] ? do_raw_spin_unlock+0x9e/0x310 [ 361.756954] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 361.761522] ? idr_alloc+0x180/0x180 [ 361.765217] kern_mount_data+0x50/0xb0 [ 361.769082] pid_ns_prepare_proc+0x1e/0x80 [ 361.773303] alloc_pid+0x88e/0xa10 [ 361.776832] ? __change_pid+0x400/0x400 [ 361.780783] ? ns_capable_common+0xcf/0x160 [ 361.785086] ? memset+0x31/0x40 [ 361.788347] ? copy_thread_tls+0x268/0x8f0 [ 361.792557] ? do_raw_spin_lock+0xc1/0x230 [ 361.796771] copy_process.part.38+0x274c/0x6140 [ 361.801414] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 361.806580] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 361.811667] ? print_irqtrace_events+0x270/0x270 [ 361.816400] ? lock_acquire+0x1d5/0x580 [ 361.820352] ? lock_acquire+0x1d5/0x580 [ 361.824303] ? alloc_set_pte+0xf74/0x1780 [ 361.828435] ? __cleanup_sighand+0x50/0x50 [ 361.832645] ? print_irqtrace_events+0x270/0x270 [ 361.837383] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 361.842547] ? lock_downgrade+0x980/0x980 [ 361.846671] ? print_irqtrace_events+0x270/0x270 [ 361.851404] ? kasan_check_read+0x11/0x20 [ 361.855531] ? rcu_is_watching+0x85/0x130 [ 361.859662] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 361.864834] ? __lock_acquire+0x638/0x3c30 [ 361.869047] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 361.874220] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 361.879399] ? print_irqtrace_events+0x270/0x270 [ 361.884133] ? __pagevec_lru_add+0x30/0x30 [ 361.888350] ? lock_acquire+0x1d5/0x580 [ 361.892300] ? trace_hardirqs_off+0x10/0x10 [ 361.896599] ? __lock_acquire+0x638/0x3c30 [ 361.900809] ? check_same_owner+0x320/0x320 [ 361.905110] ? find_held_lock+0x35/0x1d0 [ 361.909148] ? trace_hardirqs_off+0x10/0x10 [ 361.913445] ? _parse_integer+0xe9/0x140 [ 361.917483] ? trace_hardirqs_off+0x10/0x10 [ 361.921782] ? _parse_integer+0x140/0x140 [ 361.925906] ? check_same_owner+0x320/0x320 [ 361.930204] ? find_held_lock+0x35/0x1d0 [ 361.934242] ? trace_hardirqs_off+0x10/0x10 [ 361.938539] ? get_pid_task+0xa5/0x150 [ 361.942401] ? lock_downgrade+0x980/0x980 [ 361.946527] ? find_held_lock+0x35/0x1d0 [ 361.950569] ? __f_unlock_pos+0x19/0x20 [ 361.954519] ? lock_downgrade+0x980/0x980 [ 361.958644] ? kasan_check_write+0x14/0x20 [ 361.962857] ? proc_fail_nth_write+0x9b/0x1e0 [ 361.967326] ? map_files_get_link+0x3b0/0x3b0 [ 361.971799] ? trace_hardirqs_off+0x10/0x10 [ 361.976096] ? find_held_lock+0x35/0x1d0 [ 361.980133] _do_fork+0x1f7/0xfa0 [ 361.983565] ? fork_idle+0x2d0/0x2d0 [ 361.987255] ? __lock_is_held+0xb6/0x140 [ 361.991301] ? __sb_end_write+0xa0/0xd0 [ 361.995251] ? kasan_check_write+0x14/0x20 [ 361.999459] ? fput+0xe0/0x150 [ 362.002625] ? ksys_write+0x184/0x220 [ 362.006401] ? SyS_read+0x30/0x30 [ 362.009829] ? kasan_check_write+0x14/0x20 [ 362.014047] compat_SyS_x86_clone+0x3b/0x50 [ 362.018350] ? compat_SyS_x86_fallocate+0x60/0x60 [ 362.023166] do_fast_syscall_32+0x3ec/0xf9f [ 362.027468] ? do_int80_syscall_32+0x9c0/0x9c0 [ 362.032031] ? finish_task_switch+0x1b9/0x970 [ 362.036498] ? finish_task_switch+0x17a/0x970 [ 362.040971] ? syscall_return_slowpath+0x2ac/0x550 [ 362.045876] ? prepare_exit_to_usermode+0x350/0x350 [ 362.050869] ? sysret32_from_system_call+0x5/0x3c [ 362.055688] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/05 15:32:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000cab000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000938ff8), 0x228, &(0x7f00005c7ff0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendto(r1, &(0x7f0000000340)="8d85c80800e8ef4fea219de5c76d9408bbfeca0d8841e1a0c43669d9bd527f6cd4cf5b0e1b1022a2a7e5610d52e46040dba8da2803e30c7a5f0a70cb64d287dc619a69913f3e0dde5329316e64c0fe0d95ac9921955e4a0ef1e799dfffcca9c7cc72c6e2", 0x64, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000d2b000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f000084bfe8)=""/24, 0x18}, 0x0) 2018/04/05 15:32:59 executing program 3: r0 = memfd_create(&(0x7f0000000100)="2f7b06003170707031253a656d30f9", 0x40000001) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="48a19981", 0x4}], 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001000), &(0x7f0000005000)) 2018/04/05 15:32:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x0) close(r0) [ 362.060507] entry_SYSENTER_compat+0x70/0x7f [ 362.064892] RIP: 0023:0xf7fc0c99 [ 362.068228] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 362.075912] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 362.083157] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 362.090403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.097648] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.104912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:32:59 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x40, 0xc8080) clock_gettime(0x0, &(0x7f0000003940)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003900)=[{{&(0x7f0000001080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001100)}, {&(0x7f0000001140)=""/210, 0xd2}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/140, 0x8c}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/85, 0x55}, {&(0x7f0000003380)=""/230, 0xe6}, {&(0x7f0000003480)=""/7, 0x7}], 0x8, &(0x7f0000003500)=""/104, 0x68, 0x400}, 0x7}, {{&(0x7f0000003580)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003600)=""/82, 0x52}, {&(0x7f0000003680)=""/77, 0x4d}, {&(0x7f0000003700)=""/12, 0xc}, {&(0x7f0000003740)=""/227, 0xe3}], 0x4, &(0x7f0000003880)=""/70, 0x46, 0x4}, 0x100000000000000}], 0x2, 0x40000041, &(0x7f0000003980)={r2, r3+10000000}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80585414, &(0x7f0000000080)=""/4096) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:32:59 executing program 3: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x36c, 0x23c, 0x110, 0xffffffff, 0x23c, 0x110, 0x3d4, 0x3d4, 0xffffffff, 0x3d4, 0x3d4, 0x5, &(0x7f0000000040), {[{{@ip={@broadcast=0xffffffff, @empty, 0x0, 0x0, 'bcsh0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}, {{@ip={@broadcast=0xffffffff, @rand_addr, 0x0, 0x0, 'gretap0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0x0, 0x0, 'syzkaller1\x00', 'bcsh0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @rand_addr, @gre_key}}}}, {{@ip={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'irlan0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5dc) 2018/04/05 15:32:59 executing program 6: r0 = socket(0xa, 0x8080f, 0x3f) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000080)={@remote, @loopback, @local}, &(0x7f00000000c0)=0xc) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) r1 = socket$inet(0x2, 0x2000000080002, 0x0) connect$netrom(r0, &(0x7f0000000100)=@full={{0x3, {"b4d0a4ccf6261c"}, 0x6}, [{"e2a7415c6810cb"}, {"54e370c72c6c42"}, {"541be920f20dcf"}, {"e4910a7ee6404b"}, {"1f3e24fdc17d12"}, {"f4f908416cff5a"}, {"972d185ae18542"}, {"86ff0c0e33ed74"}]}, 0x48) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000040), 0x4) 2018/04/05 15:32:59 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000700)={{0x0, 0x7, 0xa3, 0x4, "501f843e6160c29c4e6b38870172b95cf37b05d267a6fa4bbbe8f886d4e73c855880f93bb5e81c682138221a"}, 0x0, 0x0, 0x2, r1, 0x7ff, 0x3, "4e6865dedcb13409a58105ac2ae098ddedce144ebc5eff8599604687e501b2e5573466c0b1725e6e860b3da6ebabd4cf22f9c9a2e8824bd6676ff9710d21cd07", &(0x7f0000000080)='-ppp1user\\lo\x00', 0xd, [], [0x1, 0x8, 0x13269960, 0x10000]}) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r2, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="fe9a4e61ffde1d777b1f2b22493f398a08bcf9a5f190794f6972d1c1bd5f6bb2f14d7dab507ffa00be8e56346e78540f5970dd7b9497cfdd2c90716e7b1d9064d136bab71a", 0xffffffffffffff27, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f0000000240)={{0x4, 0x0, 0x5, 0x20, "de51232756bad6f782305f4764fa7da494b2a659c9dca1fe565e5a8d06a115c12bd68c6d7b7538e19f2a5241", 0x6c40}, 0x8, [0x7fffffff, 0x8, 0x5ba9, 0x9, 0x6, 0x348e, 0x20, 0x5, 0x20, 0x80, 0xaa4, 0x80000001, 0x7, 0x100000001, 0x6, 0x6, 0x6, 0xfffffffffffff800, 0x1000, 0x3ff, 0x200, 0x6, 0xfa, 0xfffffffffffffffc, 0xddf, 0x2, 0xd9, 0x8001, 0x1, 0x90000000000000, 0x8f4, 0x4, 0x3, 0x5, 0x0, 0x6, 0xffffffff80000000, 0x2, 0xfffffffffffffffe, 0x6, 0x3ff, 0x2000000000, 0x7d, 0x4, 0x7, 0x8000, 0x4, 0x5, 0x8, 0x2, 0x1, 0x2, 0x9, 0x3, 0x5, 0x1ff, 0xffff, 0x1, 0x80, 0xc07d, 0x4, 0x1ff, 0x80000001, 0xfffffffffffff033, 0x100, 0x0, 0x7, 0x1000, 0xd6, 0x7, 0x7f, 0x1, 0x8001, 0xa62, 0xe3, 0x313, 0x1, 0x2e6, 0x5, 0x8, 0x243, 0x9, 0x378, 0xfff, 0x6, 0x2a, 0x6, 0x9, 0x8001, 0x8000, 0xffffffffe3573919, 0x8, 0x3, 0xbab, 0x7, 0x1, 0x8001, 0xde2, 0x6, 0x10000, 0x182b000, 0x827, 0xa41e, 0x3, 0x9379, 0x0, 0xffffffffffffc1b7, 0x2, 0xfffffffffffff853, 0xff, 0x4, 0xaf8f, 0xed0, 0x2, 0xbd, 0x8, 0x7, 0xb3, 0x8, 0x8, 0x1000, 0x2, 0x3, 0x1, 0x101, 0x4, 0x2, 0xdb]}) mq_timedsend(r2, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) [ 362.167751] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/04/05 15:32:59 executing program 6: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9f8, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000d92ffc), &(0x7f0000000000)=0x4) 2018/04/05 15:32:59 executing program 2 (fault-call:0 fault-nth:35): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:32:59 executing program 3: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2, &(0x7f0000001680)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/155, 0x9b}], 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)=""/18, 0x12}], 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x3, 0xfffffffffffffffd}, 0xffffffffffffff6b) write(r0, &(0x7f0000001740), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x6, r0}) fchmodat(r2, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000080)=""/93) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8000, 0x8000, 0xc0, 0x5, 0x800, 0x3, 0x7, 0x6, 0x3bb, 0x38, 0x2fa, 0x9, 0x3, 0x20, 0x2, 0x7fff, 0x1, 0xffffffffffffffff}, [{0x6474e551, 0x9f, 0x2, 0x1, 0x8000, 0xffff, 0x7, 0x80000000}], "6560d63659a029f5e4ed5f81274017ed1a2bdc232f4eb5a753729b3557406eaf69"}, 0x79) 2018/04/05 15:32:59 executing program 6: r0 = perf_event_open(&(0x7f00000019c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="ba210066b88f46000066ef0f23522eab0fc75bf50f09c0b1001000c5263c56653e0f20e166b8d81000000f23d80f21f86635800000b00f23f89d", 0x3a}], 0x1, 0x5c, &(0x7f0000000280)=[@flags={0x3, 0x100}, @cr0={0x0, 0x40050001}], 0x2) r3 = gettid() r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fff, 0x200000) ioctl$TUNDETACHFILTER(r4, 0x400854d6, 0x0) process_vm_writev(r3, &(0x7f0000000700)=[{&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f00000006c0)=""/27, 0x1b}], 0x6, &(0x7f0000001980)=[{&(0x7f0000001c00)=""/209, 0xd1}, {&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/166, 0xa6}, {&(0x7f0000000040)=""/11, 0xb}], 0x5, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000180)="6eb5ae5a00175a24aa0000000000000000") ioctl$TUNATTACHFILTER(r5, 0x400854d5, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0xfff, 0x8, 0x6, 0x7ff}, {0x6, 0x2, 0x80000001, 0x401}, {0x8f, 0x3f, 0x1}, {0x5, 0x7, 0x1, 0x5}, {0xff, 0xb092, 0x7, 0x3}, {0xe8b, 0x4, 0xffff, 0x7}]}) ioctl$TUNDETACHFILTER(r5, 0x400854d6, 0x0) epoll_wait(r5, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 362.320439] kvm: vcpu 0: requested 34187 ns lapic timer period limited to 500000 ns [ 362.321249] FAULT_INJECTION: forcing a failure. [ 362.321249] name failslab, interval 1, probability 0, space 0, times 0 [ 362.339861] CPU: 1 PID: 24889 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 362.346875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.356223] Call Trace: [ 362.358815] dump_stack+0x1a7/0x27d [ 362.362451] ? arch_local_irq_restore+0x53/0x53 [ 362.367126] ? __save_stack_trace+0x7e/0xd0 [ 362.371455] should_fail+0x914/0xae0 [ 362.375176] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.380280] ? kasan_kmalloc+0xad/0xe0 [ 362.384157] ? kmem_cache_alloc_trace+0x136/0x740 [ 362.388982] ? __memcg_init_list_lru_node+0x169/0x270 [ 362.394152] ? __list_lru_init+0x544/0x750 [ 362.398368] ? sget_userns+0x6c2/0xe60 [ 362.402237] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 362.406970] ? kern_mount_data+0x50/0xb0 [ 362.411039] ? pid_ns_prepare_proc+0x1e/0x80 [ 362.415428] ? alloc_pid+0x88e/0xa10 [ 362.419122] ? copy_process.part.38+0x274c/0x6140 [ 362.423941] ? _do_fork+0x1f7/0xfa0 [ 362.427547] ? compat_SyS_x86_clone+0x3b/0x50 [ 362.432034] ? find_held_lock+0x35/0x1d0 [ 362.436080] ? __lock_is_held+0xb6/0x140 [ 362.440132] ? check_same_owner+0x320/0x320 [ 362.444438] ? rcu_note_context_switch+0x710/0x710 [ 362.449357] should_failslab+0xec/0x120 [ 362.453315] kmem_cache_alloc_trace+0x4b/0x740 [ 362.457878] ? __kmalloc_node+0x33/0x70 [ 362.461840] __memcg_init_list_lru_node+0x169/0x270 [ 362.466840] ? list_lru_add+0x7c0/0x7c0 [ 362.470795] ? __kmalloc_node+0x47/0x70 [ 362.474755] __list_lru_init+0x544/0x750 [ 362.478800] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 362.484670] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 362.489673] ? lockdep_init_map+0x9/0x10 [ 362.493716] sget_userns+0x6c2/0xe60 [ 362.497405] ? set_anon_super+0x20/0x20 [ 362.501362] ? put_filp+0xa0/0xa0 [ 362.504795] ? destroy_unused_super.part.7+0xf0/0xf0 [ 362.509881] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 362.514874] ? perf_trace_lock+0xd6/0x900 [ 362.519001] ? save_stack+0xa3/0xd0 [ 362.522614] ? kasan_slab_alloc+0x12/0x20 [ 362.526739] ? alloc_pid+0xc1/0xa10 [ 362.530349] ? __radix_tree_replace+0x1af/0x310 [ 362.534998] ? radix_tree_delete+0x30/0x30 [ 362.539216] ? node_tag_clear+0xf2/0x180 [ 362.543264] ? proc_get_inode+0x620/0x620 [ 362.547392] mount_ns+0x6d/0x190 [ 362.550741] proc_mount+0x7a/0x90 [ 362.554176] mount_fs+0x66/0x2d0 [ 362.557525] vfs_kern_mount.part.26+0xc6/0x4a0 [ 362.562089] ? may_umount+0xa0/0xa0 [ 362.565694] ? kasan_check_read+0x11/0x20 [ 362.569823] ? do_raw_spin_unlock+0x9e/0x310 [ 362.574213] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 362.578774] ? idr_alloc+0x180/0x180 [ 362.582470] kern_mount_data+0x50/0xb0 [ 362.586339] pid_ns_prepare_proc+0x1e/0x80 [ 362.590554] alloc_pid+0x88e/0xa10 [ 362.594078] ? __change_pid+0x400/0x400 [ 362.598035] ? ns_capable_common+0xcf/0x160 [ 362.602345] ? memset+0x31/0x40 [ 362.605604] ? copy_thread_tls+0x268/0x8f0 [ 362.609816] ? do_raw_spin_lock+0xc1/0x230 [ 362.614039] copy_process.part.38+0x274c/0x6140 [ 362.618686] ? update_cfs_rq_load_avg.part.66+0x2d0/0x2d0 [ 362.624204] ? print_irqtrace_events+0x270/0x270 [ 362.628943] ? lock_acquire+0x1d5/0x580 [ 362.632894] ? lock_acquire+0x1d5/0x580 [ 362.636859] ? __cleanup_sighand+0x50/0x50 [ 362.641076] ? print_irqtrace_events+0x270/0x270 [ 362.645818] ? rb_insert_color+0x1580/0x1580 [ 362.650213] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 362.655385] ? print_irqtrace_events+0x270/0x270 [ 362.660125] ? print_irqtrace_events+0x270/0x270 [ 362.664873] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 362.670048] ? __lock_acquire+0x638/0x3c30 [ 362.674261] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 362.679444] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 362.684617] ? trace_event_raw_event_lock+0x340/0x340 [ 362.689783] ? perf_trace_lock+0xd6/0x900 [ 362.693913] ? lock_acquire+0x1d5/0x580 [ 362.697869] ? trace_hardirqs_off+0x10/0x10 [ 362.702175] ? __lock_acquire+0x638/0x3c30 [ 362.706393] ? trace_event_raw_event_lock+0x340/0x340 [ 362.711562] ? find_held_lock+0x35/0x1d0 [ 362.715605] ? perf_trace_lock+0xd6/0x900 [ 362.719755] ? trace_event_raw_event_lock+0x340/0x340 [ 362.724925] ? check_same_owner+0x320/0x320 [ 362.729231] ? find_held_lock+0x35/0x1d0 [ 362.733273] ? trace_hardirqs_off+0x10/0x10 [ 362.737576] ? get_pid_task+0xa5/0x150 [ 362.741445] ? perf_trace_lock+0xd6/0x900 [ 362.745576] ? find_held_lock+0x35/0x1d0 [ 362.749620] ? __f_unlock_pos+0x19/0x20 [ 362.753574] ? lock_downgrade+0x980/0x980 [ 362.757704] ? kasan_check_write+0x14/0x20 [ 362.761921] ? proc_fail_nth_write+0x9b/0x1e0 [ 362.766395] ? map_files_get_link+0x3b0/0x3b0 [ 362.770874] ? find_held_lock+0x35/0x1d0 [ 362.774918] _do_fork+0x1f7/0xfa0 [ 362.778355] ? fork_idle+0x2d0/0x2d0 [ 362.782069] ? __sb_end_write+0xa0/0xd0 [ 362.786033] ? kasan_check_write+0x14/0x20 [ 362.790246] ? fput+0xe0/0x150 [ 362.793420] ? ksys_write+0x184/0x220 [ 362.797202] ? SyS_read+0x30/0x30 [ 362.800632] ? kasan_check_write+0x14/0x20 [ 362.804857] compat_SyS_x86_clone+0x3b/0x50 [ 362.809162] ? compat_SyS_x86_fallocate+0x60/0x60 [ 362.814005] do_fast_syscall_32+0x3ec/0xf9f [ 362.818317] ? do_int80_syscall_32+0x9c0/0x9c0 [ 362.822880] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 362.828399] ? syscall_return_slowpath+0x2ac/0x550 [ 362.833314] ? sysret32_from_system_call+0x5/0x3c [ 362.838138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.842970] entry_SYSENTER_compat+0x70/0x7f [ 362.847359] RIP: 0023:0xf7fc0c99 [ 362.850702] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 362.858393] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 362.865639] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 2018/04/05 15:33:00 executing program 1: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x2000) r1 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r2 = dup2(r1, r0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000002c0)="a3", 0x1}], 0x1) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x100000000, 0x0, "084adb9d6114eb806939441ed20c7b48979b8eab9f7d8ef3150d5306318685d918dc1bbb71fa62c6cdcbf7b3e57dd7ed41a210c904accd8c3d585e28094cca", 0xc}, 0x58) 2018/04/05 15:33:00 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000000140)="3d3730f16f704778145e48b0f8fc55132b6469f4047bdbc9f4ea0c4e61d9c9d094f2ecbfcd05c48c1c398e", 0x2b, 0x3ff, &(0x7f0000000180)={0x77359400}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000000040)="cb3e3571aeff24121a27afa099c23a99aaafb754ad064c5dadb36b27e0751c2597331b4c77511616365e8a1369877fd75e328367a76d57d491be2185148c8ea85da9c552c7d286ffd796cd180d05918499edebe6dfd87d00debb8e426939ac1797c084a60b6db863118d538811c11e97b3db6211b6d36486d0f22ec78d3d76274df0298a1441d3da176c15a2d08fb3ccebfa269d1714ea85f77f9c458b75780ff561321b725500411b853373367a58836f5e5a4ad7fcfe00000000000000000000", 0xc1, 0x2, &(0x7f000066cff0)) [ 362.872888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.880134] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.887385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:33:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000011ff0)=[{&(0x7f00000001c0)="390000001300090665000000000000007f0080401300000046000104000000141900040004870000004000f50000000000074405eded6baeb6", 0x39}], 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x8001, 0x5569, 0x3, 0x4, 0xff, 0x7e6}) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180), &(0x7f0000000200)) 2018/04/05 15:33:00 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000374000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, 0x19, 0x2ff, 0x0, 0x0, {0x1d}}, 0x14}, 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)="6e76abaf1f50a9e18d76da2c52e547520003f9f0d7eeffa97e6413195aa8be67bd9ceb370100d179f5142086edd5de05f9febac3643859ce440359d2f384d4045fa6c1d8aaffb5e80112f32bef86b71bbf4b4980e2f5656724136a73b1d2b9716553f8131835baa85a0e5492b754872d3530ab3d8c35f296cd29ec8a42b5c297232f93f32969435e9ab925ba55ed559709d4791e557fefc5e7bd65cc", 0x9c) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000ae7000), &(0x7f000034dffc)=0x4) 2018/04/05 15:33:00 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) io_setup(0x7fff, &(0x7f0000000100)=0x0) io_getevents(r1, 0xfffffffffffffe00, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f0000000040)) 2018/04/05 15:33:00 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x3c19) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa}}, 0x4, 0x0, 0x283, 0x40000000006, 0x10}, 0x98) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/05 15:33:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x0) close(r0) 2018/04/05 15:33:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0) openat(r0, &(0x7f0000000200)='./file0\x00', 0x200000, 0x21) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000a98000/0x3000)=nil, 0x3000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a98000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000)) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="0a07f5b005e381000100200000000000e6e6000000000000000000edffffff0000", 0x21) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x300, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) renameat(r5, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00') 2018/04/05 15:33:00 executing program 2 (fault-call:0 fault-nth:36): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:33:00 executing program 1: r0 = socket(0x400020000000012, 0x2, 0x0) write(r0, &(0x7f0000000040)="1f00000054000d0000000000fc07ff1b070004000200000007001100010009", 0x1f) [ 363.014621] FAULT_INJECTION: forcing a failure. [ 363.014621] name failslab, interval 1, probability 0, space 0, times 0 [ 363.014861] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 363.025928] CPU: 1 PID: 24914 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 363.043196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.046538] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 363.052537] Call Trace: [ 363.052554] dump_stack+0x1a7/0x27d [ 363.052568] ? arch_local_irq_restore+0x53/0x53 [ 363.052580] ? __save_stack_trace+0x7e/0xd0 [ 363.052597] should_fail+0x914/0xae0 [ 363.052608] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.052620] ? kasan_kmalloc+0xad/0xe0 [ 363.087665] ? kmem_cache_alloc_trace+0x136/0x740 [ 363.087677] ? __memcg_init_list_lru_node+0x169/0x270 [ 363.095867] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 363.097672] ? __list_lru_init+0x544/0x750 [ 363.097682] ? sget_userns+0x6c2/0xe60 [ 363.097693] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.097700] ? kern_mount_data+0x50/0xb0 [ 363.097709] ? pid_ns_prepare_proc+0x1e/0x80 [ 363.097719] ? alloc_pid+0x88e/0xa10 [ 363.129921] ? copy_process.part.38+0x274c/0x6140 [ 363.129929] ? _do_fork+0x1f7/0xfa0 [ 363.129941] ? compat_SyS_x86_clone+0x3b/0x50 [ 363.129954] ? find_held_lock+0x35/0x1d0 [ 363.129968] ? __lock_is_held+0xb6/0x140 [ 363.129988] ? check_same_owner+0x320/0x320 [ 363.130001] ? rcu_note_context_switch+0x710/0x710 [ 363.130018] should_failslab+0xec/0x120 [ 363.130030] kmem_cache_alloc_trace+0x4b/0x740 [ 363.130039] ? __kmalloc_node+0x33/0x70 [ 363.130046] ? __kmalloc_node+0x33/0x70 [ 363.130056] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.130069] __memcg_init_list_lru_node+0x169/0x270 [ 363.130079] ? list_lru_add+0x7c0/0x7c0 [ 363.130088] ? __kmalloc_node+0x47/0x70 [ 363.130101] __list_lru_init+0x544/0x750 [ 363.130114] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 363.130125] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 363.130138] ? lockdep_init_map+0x9/0x10 [ 363.130150] sget_userns+0x6c2/0xe60 [ 363.130157] ? set_anon_super+0x20/0x20 [ 363.130169] ? put_filp+0xa0/0xa0 [ 363.130180] ? destroy_unused_super.part.7+0xf0/0xf0 [ 363.130193] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 363.130205] ? save_stack+0xa3/0xd0 [ 363.130214] ? save_stack+0x43/0xd0 [ 363.130223] ? kasan_slab_alloc+0x12/0x20 [ 363.130235] ? kmem_cache_alloc+0x12e/0x760 [ 363.130242] ? alloc_pid+0xc1/0xa10 [ 363.130255] ? __radix_tree_replace+0x1af/0x310 [ 363.130267] ? radix_tree_delete+0x30/0x30 [ 363.130276] ? node_tag_clear+0xf2/0x180 [ 363.130293] ? proc_get_inode+0x620/0x620 [ 363.130301] mount_ns+0x6d/0x190 [ 363.130312] proc_mount+0x7a/0x90 [ 363.130323] mount_fs+0x66/0x2d0 [ 363.130335] vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.130345] ? may_umount+0xa0/0xa0 [ 363.130352] ? kasan_check_read+0x11/0x20 [ 363.130362] ? do_raw_spin_unlock+0x9e/0x310 [ 363.130369] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 363.130377] ? idr_alloc+0x180/0x180 [ 363.130387] kern_mount_data+0x50/0xb0 [ 363.130396] pid_ns_prepare_proc+0x1e/0x80 [ 363.130404] alloc_pid+0x88e/0xa10 [ 363.130415] ? __change_pid+0x400/0x400 [ 363.130423] ? ns_capable_common+0xcf/0x160 [ 363.130438] ? memset+0x31/0x40 [ 363.130448] ? copy_thread_tls+0x268/0x8f0 [ 363.130455] ? do_raw_spin_lock+0xc1/0x230 [ 363.130468] copy_process.part.38+0x274c/0x6140 [ 363.130477] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.130487] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 363.130498] ? print_irqtrace_events+0x270/0x270 [ 363.130510] ? lock_acquire+0x1d5/0x580 [ 363.130517] ? lock_acquire+0x1d5/0x580 [ 363.130526] ? alloc_set_pte+0xf74/0x1780 [ 363.130544] ? __cleanup_sighand+0x50/0x50 [ 363.130556] ? print_irqtrace_events+0x270/0x270 [ 363.130577] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.130586] ? lock_downgrade+0x980/0x980 [ 363.130599] ? print_irqtrace_events+0x270/0x270 [ 363.130607] ? kasan_check_read+0x11/0x20 [ 363.130615] ? rcu_is_watching+0x85/0x130 [ 363.130635] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.130648] ? __lock_acquire+0x638/0x3c30 [ 363.130658] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.130680] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.130692] ? print_irqtrace_events+0x270/0x270 [ 363.130702] ? __pagevec_lru_add+0x30/0x30 [ 363.130715] ? lock_acquire+0x1d5/0x580 [ 363.130725] ? trace_hardirqs_off+0x10/0x10 [ 363.130739] ? __lock_acquire+0x638/0x3c30 [ 363.130747] ? check_same_owner+0x320/0x320 [ 363.130760] ? find_held_lock+0x35/0x1d0 [ 363.130774] ? trace_hardirqs_off+0x10/0x10 [ 363.130782] ? _parse_integer+0xe9/0x140 [ 363.130795] ? trace_hardirqs_off+0x10/0x10 [ 363.130804] ? _parse_integer+0x140/0x140 [ 363.130811] ? check_same_owner+0x320/0x320 [ 363.130824] ? find_held_lock+0x35/0x1d0 [ 363.130834] ? trace_hardirqs_off+0x10/0x10 [ 363.130844] ? get_pid_task+0xa5/0x150 [ 363.130854] ? lock_downgrade+0x980/0x980 [ 363.130869] ? find_held_lock+0x35/0x1d0 [ 363.130885] ? __f_unlock_pos+0x19/0x20 [ 363.130895] ? lock_downgrade+0x980/0x980 [ 363.130905] ? kasan_check_write+0x14/0x20 [ 363.130914] ? proc_fail_nth_write+0x9b/0x1e0 [ 363.130924] ? map_files_get_link+0x3b0/0x3b0 [ 363.130933] ? trace_hardirqs_off+0x10/0x10 [ 363.130945] ? find_held_lock+0x35/0x1d0 [ 363.130956] _do_fork+0x1f7/0xfa0 [ 363.130968] ? fork_idle+0x2d0/0x2d0 [ 363.130981] ? __lock_is_held+0xb6/0x140 [ 363.131000] ? __sb_end_write+0xa0/0xd0 [ 363.131011] ? kasan_check_write+0x14/0x20 [ 363.131018] ? fput+0xe0/0x150 [ 363.131027] ? ksys_write+0x184/0x220 [ 363.131037] ? SyS_read+0x30/0x30 [ 363.131045] ? kasan_check_write+0x14/0x20 [ 363.131061] compat_SyS_x86_clone+0x3b/0x50 [ 363.131071] ? compat_SyS_x86_fallocate+0x60/0x60 [ 363.131082] do_fast_syscall_32+0x3ec/0xf9f [ 363.131096] ? do_int80_syscall_32+0x9c0/0x9c0 [ 363.131105] ? finish_task_switch+0x1b9/0x970 [ 363.131112] ? finish_task_switch+0x17a/0x970 [ 363.131124] ? syscall_return_slowpath+0x2ac/0x550 [ 363.131132] ? prepare_exit_to_usermode+0x350/0x350 [ 363.131145] ? sysret32_from_system_call+0x5/0x3c [ 363.596499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.601321] entry_SYSENTER_compat+0x70/0x7f [ 363.606329] RIP: 0023:0xf7fc0c99 [ 363.609669] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 363.617353] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 363.624599] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 363.631844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.639092] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.646337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/04/05 15:33:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000280)={{0x80}, "00207274310000004000003700000000000000d60002000000040000000000000000eda40000af00000000070008000000000000004000"}) fsync(r0) 2018/04/05 15:33:01 executing program 6: r0 = syz_open_dev$evdev(&(0x7f00000e4fee)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x9, 0x3}, {0x2643e162, 0x8001}, 0x3a8000000000, 0x0, 0x101}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8200, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x9e7, 0x1, 0x2, 0x200, 0x9, 0x1d, 0x4, 0x1, 0x9, 0x7f}) writev(r1, &(0x7f0000002480)=[{&(0x7f0000000180)="706dc5cf6fc073ea5be98aa36aeb2312040bc6e0c98f0adbbb108939b3d8bc7b691253985bd4bcd6b17b1fb0e133ffb60f08e08a80e1c4cbab5d268a682a81a79f944251844a6865f6f8e8175c9b1ba3a9955528efa3af0156df6d23e330b217e0f8916d59301d26f9a0eac10ec3e9f2ab068b73c4ce2907b8615af3b67e4771c570f3a625d8da36d2bb121a88627af75ea018892c2e75a45998f029e226c09f2663febf5c0e297126b970232ea3a292c7b7f4fafdfb0bd1a5ca8e4458cc4e517fb22371019395d5b70268c7f342b9417b5d2986df7de37e", 0xd8}, {&(0x7f0000000280)="966b4b51fffaa031e9d8777e038c1a7beb81423f654f273598944d4350a6e4b62ba5703f52afe4f0e2c40fce383b8fe8aafe4041ea20db6d5e", 0x39}, {&(0x7f00000002c0)="6f69f14f6e03e44c2853e1afef42321d9bf0fff0db97760e91deb57923d6b7d1b4a301d90a4d1335b5385f5dd1e08a8936c9c6dd9f8815101f4540f3e9142546eab28d79606b9ae9150d80f6a1a96d5ea94c0910ab7124776a5ee7478c361da24cc6ea50e62a2c76d05a0c213f13f135d715741a5340820ff4599da1b89a5de98372935c8d10006f206c4f707df59878f21533092644be10182aee704d42d93ff53046be4a26c807472a190fa77b63a862ae6e5fdc96dc36c6fbfafab7", 0xbd}, {&(0x7f0000000380)="f5b40c775d07b6f5", 0x8}, {&(0x7f00000003c0)="d6916b17dc9b808e35ef052a9d1e390c599116b471fdb194034cac4f4561f2db10f8cdc7948f9b229eedfadb96c0b8ca1418ba4e9f4a1e0cb0995dd4acf48e161c03005137b794bef72e8a310f4ecddaa5097b667c9bbfadd3476340cdd77bc8fc14923cf9c91d38c255b3247dd4bb357ad898405339e89972cc298af45f8680f7b6aeb8b984e6bad50d770303d6850d28118bbc8273fd6885071a99e424fd33e5c7fa9b2491f25f22776570960b607687691402c994d3faa2c0d141dda8ac919cf932e4091fa852e9698c45a46d9c8ac315e5c5a6e53b27f36b12764927efc2300be601ba9c095c1b29e6a90c358bf13ad6209b1b4032d16a66d0bad04c5b7d38c16aee5daee0cfebde3270223e58dc79353284a009c9f5328f88f6547f44faac80f41574ce0bda052a051c727304956dd7afc2c1928aa6f344b7891fef8d071b93cbddc0a1ddb3e2689cc59ba0374758976029d71635783dd267219d5a9fccd4453b653ef419c33aeec24fc20f17e118244a2bd1460d6edfa70bdfcaed130de45ec97b05630820d502b5d38835a171a0d3230c5577f44fab247c7be74ffed8eed701ceef9f0eed6876e2b20ff2b6dce95fead053f5469560fc82b384cbc198d5e43af58c53ca9dc0805f5956edc7f2d28fe3470a50095adf63c9f8df8e82a90bb9b78f33048e87310416839bc1924daa78971c1f5de8d0476c0f11d68206e5fd5c15338d5117474585ba103ce041b51bd97a054b47315363476c4371925ec52ce9b2281c19fbdf293cb5ccb564986fe81ccd36efb3c33b21c4742ce57abb2fae7d7f2b256af4391552214e6655b58901164b54e6b555e92a3f7052bbfd220ed9c4af3cc557a56a6743fd043fd666f85eebf9ac62f0881d0fe63d07b1b5ea27d9e5ebdeba6c68ac5bda82a29f82b728269fad68c52370b8ba32d661c8164cbd74a1245bc4e935ec7d36558bc9b52aa4e26a3e7d69ae4de235ccb6af898bbbb3f07b9ce39a712e09ea1420ff883f003c716e248e2f75ec3d69e90a54b9dd6dbfa880489cccf00ade685666cdce659cabba97763a02306d148f4b9efaa899f57814a514bcae11bc0b48addca51d36f98d4f125edec8614bba0717c697b9e971deae4ebe8324f4991bbcf08d10b00d1c21da12af590d5841ef4a3bb3fff4a427c87acf1e88d3f80fdf64086e8061706bf505ce199b6b573c5ea0e50df19bc1d3ed4a6c04a902c68541c85cb0929014da9b430b4950458e4dd8f9f039528384d0127952016d7a6eca8e471403b07bb54a58ff89a8ad7144135cf01263a2912d89d3bcf27d6e0aa3d7522156f87101005ea555d4cafc72f96173bee457f2e56882ffe91dcf7c71837187d0f71b78bfa16dd3d73ba76d2aa8df0db0f6f3eaed9c4de59b3ae92af23795c23f1ebd92895a4e0e92cc8d9d13c040b602e5d14e1dcd3e8a83bc6565d9111ed58a71fdaded5e75ded8ff7667b1f4a71c08cb606071dfcfcf718907eb3292fe0b3a67711d8581db436d9295c8d42e4e787e86e86c9f33b728db92a1e25e9ce072f361bf4fc187f2d14111eb3de5bcc9564b74194403685669511b02a7ec839e82e35af649d1dc76efc7c4724ff0341ae98935a02224efd90685f6336569416d7614afbceeb61bf3b92e4689f0203eaaec52bc40e82a36e5f8d57fb4cd18657e28af1161c9f847b68be908466323608d029291a8b46e240f376905118f541764c9b6bce996c94c61e0ebe2c9316cfaa0816e0dffcc2daac947b8c31a61da93553be83299936da4c5748549a3ae4e62f050f4158086a9d518c2b0b727518649acbded58709b03487120f5c139cf1426f354a240208739a812665a74e310d8e0fd913129cae9a0721b403d961737601fd068f544bb2afaf34184c4b52e61b9df0cb7cfe554b7d13bde71bf51cca413cbb06fbe915c68e8b7ff077755ce994fa2c711032819377afdf5a57baff9cb08373da699a9f2b03343ba253d864896438a4fd6d91645502f4111b418345040beab30b8b2c8afb093dee36e884cce5ce9301d0ff4c03ca259962bebc7ee1a1f2554c41e0ebc03fc8bcc3500f8edb1482aa9a1565f432339c948c05242b255571ea1ef5eb9ef0e6c1b9a5eda32ed5044a03788e89571bd7a827802c9d060718ba6edf0454e4bd52bc0f778816602b7ad5225b511a6ed878287077b6e967ab49a4be8bc6ba2444b560485475a3dc43eab5285aec34cbdb9e029a77be9a101e10eb9b7eeae882414b886ed58b77a26c1096ef6e10f86b3d744854802d45051524222f9960f9ca13372840fc6612d24b6a6b532a13ae0bb3f4ac65d96d706edbc7f8ef6bfd0dc64888b1649cc672e839a2c5d0642770d0ac677310f8728b7d34e1dc59203cd5cc283e583e669ec47ba17aedd9e1d241a7217703785b02580738ab418b38769830e04400aafff7d06ca9506a2c4d6a7780406d4d801bbfcc56a3da27c44922b8bff654828a24f45497618bf988c18040d76dec5870e538d20bcde71824a24dba4d65ae8b16770d748842e89f124159f57af15cd7377836189ac66db0ddf2747a34ea2f5a6963ee473a80a08b2afb273288bdb15a26566333d07f6aba6f3071cd14b8ae78af2ee34adbc63bba10ef3d6e122b8815d4b61dd001dd50f6c5f46d6250739801a9d0ab28b78a3d98ccfb783680d3c37baf630bb2367f4cacda986437b014379f2d8c3f04beafe955f8c88f0f9a74e29fd328a09fe46bafb4b2d6e38bcc835c06b72934bdde53507fcd149d2b3b17954216258293d145e2a7a8d0edbb576daff28378c277a4e0dda56e0c58b919d457f3d00547b2c00959e3de06a70516ab539189326f9830d01812ccc1a6c41d14f95893957687a99b7d76ac845cbccbc2771a36b7cdbdaef19c7a1a059189ce079b37edc5338c662a454deb542235c5aaba099a8787b4f3bf59084ae35868ac7886b3e66e98197c8ff29aaa10d6c6236f8f6af014099208e4c96e32edb9d8e8ec60c5f8cbbbf951e4709a992544121b64d7979d5ccc7e0b7ca28352170ecc3ac89c087950ba12d4013efc2493b5ac8b36340bd02516e80611347507c6cd20134e16c206ec265f22df9b74c4e3a11150d60d41656e90530bf5029f12c3df5eb930dba096e46e49d3028570192e1e674e623fe64e7c4864ef3ba135d1bc8ee97f5c0a05dbe0f931436cd9cd015b0a2f01a285cc9096883fec72cf3a48057787a17e2e6489fbbddccd12ac6132f99772ec4b6d37cf3259e229248947588ed5f3de32d5ff65390fc4f65a3317b2909dc27a12184627e5959035c684718b55cbb28622f83a254a53de58cdd72d417d9c185f00fb00d8dac33f7b08898b5c3a61be240fb8005028e6055feffcfe0070a8073e8777774cf640344c4a8382ebe31acf03783c0f0fc3756744693d8075c68133b65a23057c67a7f493848c59e74bc63e5a4c905a623358e75760db93a57983d1e8b1b6c5f0fa36f2155e89ac640241b33cd8fbd1f7733e92206cfbc88380263fd251328581320d25d400ab526b81649f3b11edef494a3e8ee42be88bde35f43f0db6fb37921ae5a7e12cb2d285906aa4a3e43268e531366c9b9c2772113b91440afd84d59dcea99c301d927975d024c28a719d736d51c63b280bcc2218364a2d617e35596837a0b4a5d3ff91240b49a796c205e85b7f9865998faa6278225ad25de9c4817c84e284be60d0a3eee831b92d58599e964f527ccae87f361fb8e73d80ab29feb82de68506ec6a16f391fa661ed9bf654c7082b66e81886ee71e28d069bd81d686877869169d617863de3f3dac3d0e196404712484961f367ace01f99de9b7806e6bc561cc20cf0e816f427cce4977af81bce388e695f912c1a8146d180460993ec3f14a1ed2e04ddf924c61086e69bbe64b54e127030ccfe6112defd56f1dbe04502234902890e042ab66077d24790223c86a18777ca187b626a1bb8aa13597c775844261ae2b4a35f09a4a74e6ae1bb9fc088c9ec58dbba794376334ca67ebffa5b6a566d9419ddea72fb9897b84013a5178f4118f90f0fc3e3a4b4a1c9ea68ed3af84e858c9f277ffb9fc507c4e4e7d2a51afa75ac213ad866b1e048a9028c0f0318b91442fd7b4e5acc570669a8f27c7f2ecef3a041ca781547488272fe74ae200b88ce2f303b4a2c0bf0361f7a720ea65c136fdbaa2f60fe69e4ea74de6f43733ec2d0e117b60dc8c360955ea07b954712541c91edf7f396680f435c0c4a5d1f12fd36a28e505ec7717d55403705ca43b35a34c53661460d602bb2b63d6238e3ff865b35cf40bac5f883c65c98ff16d4789a56bbc4669c68d4eb933ea79fc5aba8f7701290589f7e9de8476832d1b0607b4bf5d66beca6c206c9bb76c2f5dc721ec9d3a17f93d0c23727512a9a1263e24aad15f551fd3d2d63d6084a3261c20095a10d462168156d2de2f8c7573e7b5304b211fcadb2e0933b4f9e551dc1d26b691bd49d447f3d258f59fa20dfd7a972b59875d76481dff131e33a5b002c6d87ca8b0dedb2827e138eb468e0f7b66e357aa4827557b360f851e98c7e3642c036f143207a1a99b27c903f69835e43656a40ed4ac342124580a0ce12354a235afe97811abd0126179af856ab39b1d3538885fb15bc90ff33ecce0d5572a9a07d50d51d304c4c73453ae824fc944d7ea94a2b48e74e9c7b21d95fd61e3f637ebc6cf13ba647a4db5ac334b9830e37c26dfe391157023fabdae64f1d2f50fb1f10c4026879f9b464116cd28caf573426aa2a848ef99f9fe1a5afc08d192d0ae015862c4c3624f97bb39da5361e986d6ee864880c6b26c284d23125d8f55144ce97bf791e95c5a00cbc843b8aba7f11bd825a355574af57bdc2b458db0078e0da3214c9222c8fb44ef4db89c89c7b6fa543fcc9e3851cfd766623c8307d5349e4f16783ff31229cd6ae00be59ae716609e8da3067ef42b5f2ff645dd9e86b106d467d23552f483f906d11d7a637bb27c6a288cc8b215c877a3c5ee27ac8aaae5ff45f10542b45f8db2b3fdc042dd0e4b746da6444f8db7bad72ae1ed299da0390f1e80dfc29ff05aa44e539f435bfbaf8c6cec00dcc933e9872c3d378168f5894e180fb6fb4e5539d724b63a55e6656c562c41e362eb05bfb7272988543edb96d0aa9b0e0c4c8e05aa69e3287eab22c21b48e218308fb8a96e388893874c637321a915bf91ffb7f6202701a6d402823f42f120a6ff500b247cfc24ef6017c75ed30a02309f7f3422780fadcaa059b8b43bd7dc1de177d8df27c58b29112cedd32a6d89ed729a68513e39305c0f8d491c438f61995fcded57c6aea505cafcc32387552f6040434c1f2178ebd57fac843b9e0fc15992c94ca1f819ff5120237e7954e6d13d978d4df068dca124b5bbf601d946e0393c982f958d37d2868836312a5ed381d85bf13752e2903ee8856f71e68fb32d658bf6c124a2be4b34c297fe214f65d4fdbcacdba56326a197fb2c763ab1d667b102c44e4868a4059b9180807d31637e14f827a24a0355a969419916b63b835f2982e61440234057451c64d31e98da5c9c8caacd6e55a17410c47ac88a53153a2b2fb5ea75948528d49be3b4834b8327b8468a965c3b3a14ffe4d35a32018b42f1ca996d5e8d74088f6d8107ba0caeac9f80211f9418f218ed12a803cc5962ee509feeb2b5844096cfb123ca32884b215ae5b9deb9101a5750adcc089b492aaa76ab35bf284a6706abecfdba375cda91f4229e1e3bffa0b67918d72dd2a92185098f6764a452956fb8f9ea4a45284176e", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="151180df98baaf7199e3ba096850b8acd06741a2e8b5633e848f5c03272eaf376b2572c36a99ae043268062d90092c28aac594f397d3a715a02e7f283a657c7b561408d7372372d4692900ecfca973ad89558eb78d257f42e63011f69a0c0654b81ad5da82c51a00afdc59d2a0563c5ecd2aaafb39580ecea12bbd0df9b07083dfad0833216932a52c6f1274b1b40bfa74e121d84b8bfcc5995123640bed", 0x9e}], 0x7) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000024c0)=0x0) prlimit64(r3, 0xf, &(0x7f0000002500)={0x8, 0x10000}, &(0x7f0000002540)) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000c000)) signalfd4(r0, &(0x7f0000000000)={0x8}, 0x8, 0x80800) 2018/04/05 15:33:01 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000003740)='/dev/dsp#\x00', 0x1, 0x40020002) mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x0, 0x1c, r0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x8001, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64, @ANYBLOB="44e06dc1024fc95465df0ead055bb84915c5f5200b6bfe6a0000000200"], &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x7, 0x8001, 0xfffffffffffffff8, 0xfffffffffffffeff}, &(0x7f00000003c0)=0x10) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x34, 0x100001) bind$netrom(r0, &(0x7f0000000200)=@ax25={0x3, {"8a4563c6c3630d"}, 0x7}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400000, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40001, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) 2018/04/05 15:33:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(0xffffffffffffffff) 2018/04/05 15:33:01 executing program 5: r0 = socket$inet(0x2, 0x5, 0x3) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r1, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r1, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:33:01 executing program 2 (fault-call:0 fault-nth:37): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:33:01 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x39bb71cd9d42c22d, 0xb, 0x19, "037ccd9faf9d32cb4a99e09245cc0e9fef506e238bfd8023c4ef1462de2c5bf0befb189bae341fc6a0bfdf0eed32d7c6013d00e9ba8ddc74dc0c221aa7d893e9", "b8e98a0224993b5d511d7188d77c269b505465520bbbcb0fec5becd7fb7bb0bc", [0x3, 0x6]}) r1 = signalfd4(r0, &(0x7f00000000c0)={0x100}, 0x8, 0x80800) r2 = accept4$netrom(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) getsockname$inet(r0, &(0x7f00000001c0)={0x0, 0x0, @remote}, &(0x7f0000000200)=0x10) ioctl$LOOP_CLR_FD(r3, 0x4c01) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f00000002c0)=0x50) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000340)='net/netfilter\x00') statx(r0, &(0x7f0000000380)='./file0\x00', 0x100, 0x2, &(0x7f00000003c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000004c0)={0x80000001, 0x5, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x1}, 0xc) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000500)={0x3, 0x2, 0x4, 0x5, 0xff, 0xb28}) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='com.apple.system.Security\x00') ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f00000005c0)=0x2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000600)={0x7ff, 0x13, 0x13380000000, 0x401, "5aa7757392ced9bd07a1604d4003d0fade0d92414795901334dbba76ed379b8f"}) fcntl$setpipe(r1, 0x407, 0x5e) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000640)="2a14834ee33b1c6955cc6e43ab7c28595a4b2ddc23d6f1421b424125b9e6f0198c42512bc045a2b9703288") bind$vsock_stream(r0, &(0x7f0000000680)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r6) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000740)={0x2, [0x80, 0x20]}, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000780)={0x4, 0x5, 0xb4, 0xec, 0x2, 0xc0000000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000007c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000840)={r7, 0xffff, 0x20, 0x7, 0x9b}, &(0x7f0000000880)=0x18) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f00000008c0)) syz_open_dev$sndmidi(&(0x7f0000000900)='/dev/snd/midiC#D#\x00', 0x4, 0x200000) 2018/04/05 15:33:01 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$inet6(0xa, 0xa, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x80005, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt(r2, 0x114, 0x0, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x3e3) [ 363.762320] FAULT_INJECTION: forcing a failure. [ 363.762320] name failslab, interval 1, probability 0, space 0, times 0 [ 363.773632] CPU: 1 PID: 24934 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 363.776477] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 363.780633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.780638] Call Trace: [ 363.780654] dump_stack+0x1a7/0x27d [ 363.780667] ? arch_local_irq_restore+0x53/0x53 2018/04/05 15:33:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @multicast2=0xe0000002}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x66, {0x2, 0x4e22, @rand_addr=0x2}, 'syz_tun\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='irlan0\x00') perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000100)="5d0b2d7f07ec0277a680") r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000040), 0x2aa) 2018/04/05 15:33:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) socketpair$inet(0x2, 0x6, 0x848, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000140)="4c0000001200ff09fffefd956fa283b724a600ff3f000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) [ 363.780678] ? __save_stack_trace+0x7e/0xd0 [ 363.780695] should_fail+0x914/0xae0 [ 363.819630] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.819643] ? kasan_kmalloc+0xad/0xe0 [ 363.819653] ? kmem_cache_alloc_trace+0x136/0x740 [ 363.819663] ? __memcg_init_list_lru_node+0x169/0x270 [ 363.819670] ? __list_lru_init+0x544/0x750 [ 363.819679] ? sget_userns+0x6c2/0xe60 2018/04/05 15:33:01 executing program 2 (fault-call:0 fault-nth:38): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) [ 363.819688] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.819694] ? kern_mount_data+0x50/0xb0 [ 363.819701] ? pid_ns_prepare_proc+0x1e/0x80 [ 363.819708] ? alloc_pid+0x88e/0xa10 [ 363.819715] ? copy_process.part.38+0x274c/0x6140 [ 363.819720] ? _do_fork+0x1f7/0xfa0 [ 363.819728] ? compat_SyS_x86_clone+0x3b/0x50 [ 363.819739] ? find_held_lock+0x35/0x1d0 [ 363.819751] ? __lock_is_held+0xb6/0x140 [ 363.819771] ? check_same_owner+0x320/0x320 [ 363.819782] ? rcu_note_context_switch+0x710/0x710 [ 363.819796] should_failslab+0xec/0x120 [ 363.819804] kmem_cache_alloc_trace+0x4b/0x740 [ 363.819812] ? __kmalloc_node+0x33/0x70 [ 363.819818] ? __kmalloc_node+0x33/0x70 [ 363.819827] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.819838] __memcg_init_list_lru_node+0x169/0x270 [ 363.819849] ? list_lru_add+0x7c0/0x7c0 [ 363.819857] ? __kmalloc_node+0x47/0x70 [ 363.819870] __list_lru_init+0x544/0x750 [ 363.819882] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 363.819893] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 363.819906] ? lockdep_init_map+0x9/0x10 [ 363.819916] sget_userns+0x6c2/0xe60 [ 363.819922] ? set_anon_super+0x20/0x20 [ 363.819933] ? put_filp+0xa0/0xa0 [ 363.819943] ? destroy_unused_super.part.7+0xf0/0xf0 [ 363.819954] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 363.819964] ? save_stack+0xa3/0xd0 [ 363.819973] ? save_stack+0x43/0xd0 [ 363.819980] ? kasan_slab_alloc+0x12/0x20 [ 363.819986] ? kmem_cache_alloc+0x12e/0x760 [ 363.819992] ? alloc_pid+0xc1/0xa10 [ 363.820006] ? __radix_tree_replace+0x1af/0x310 [ 363.820020] ? radix_tree_delete+0x30/0x30 [ 363.820031] ? node_tag_clear+0xf2/0x180 [ 363.820050] ? proc_get_inode+0x620/0x620 [ 363.820057] mount_ns+0x6d/0x190 [ 363.820067] proc_mount+0x7a/0x90 [ 363.820076] mount_fs+0x66/0x2d0 [ 363.820087] vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.820096] ? may_umount+0xa0/0xa0 [ 363.820102] ? kasan_check_read+0x11/0x20 [ 363.820109] ? do_raw_spin_unlock+0x9e/0x310 [ 363.820116] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 363.820123] ? idr_alloc+0x180/0x180 [ 363.820132] kern_mount_data+0x50/0xb0 [ 363.820141] pid_ns_prepare_proc+0x1e/0x80 [ 363.820148] alloc_pid+0x88e/0xa10 [ 363.820160] ? __change_pid+0x400/0x400 [ 363.820166] ? ns_capable_common+0xcf/0x160 [ 363.820185] ? memset+0x31/0x40 [ 363.820194] ? copy_thread_tls+0x268/0x8f0 [ 363.820199] ? do_raw_spin_lock+0xc1/0x230 [ 363.820211] copy_process.part.38+0x274c/0x6140 [ 363.820223] ? print_irqtrace_events+0x270/0x270 [ 363.820233] ? lock_acquire+0x1d5/0x580 [ 363.820239] ? lock_acquire+0x1d5/0x580 [ 363.820247] ? alloc_set_pte+0xf74/0x1780 [ 363.820265] ? __cleanup_sighand+0x50/0x50 [ 363.820274] ? print_irqtrace_events+0x270/0x270 [ 363.820293] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.820302] ? lock_downgrade+0x980/0x980 [ 363.820314] ? print_irqtrace_events+0x270/0x270 [ 363.820320] ? kasan_check_read+0x11/0x20 [ 363.820326] ? rcu_is_watching+0x85/0x130 [ 363.820345] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.820356] ? __lock_acquire+0x638/0x3c30 [ 363.820364] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.820384] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.820394] ? print_irqtrace_events+0x270/0x270 [ 363.820403] ? __pagevec_lru_add+0x30/0x30 [ 363.820415] ? lock_acquire+0x1d5/0x580 [ 363.820423] ? trace_hardirqs_off+0x10/0x10 [ 363.820437] ? __lock_acquire+0x638/0x3c30 [ 363.820443] ? check_same_owner+0x320/0x320 [ 363.820455] ? find_held_lock+0x35/0x1d0 [ 363.820466] ? trace_hardirqs_off+0x10/0x10 [ 363.820473] ? _parse_integer+0xe9/0x140 [ 363.820485] ? trace_hardirqs_off+0x10/0x10 [ 363.820492] ? _parse_integer+0x140/0x140 [ 363.820498] ? check_same_owner+0x320/0x320 [ 363.820508] ? find_held_lock+0x35/0x1d0 [ 363.820517] ? trace_hardirqs_off+0x10/0x10 [ 363.820526] ? get_pid_task+0xa5/0x150 [ 363.820534] ? lock_downgrade+0x980/0x980 [ 363.820548] ? find_held_lock+0x35/0x1d0 [ 363.820563] ? __f_unlock_pos+0x19/0x20 [ 363.820571] ? lock_downgrade+0x980/0x980 [ 363.820580] ? kasan_check_write+0x14/0x20 [ 363.820587] ? proc_fail_nth_write+0x9b/0x1e0 [ 363.820595] ? map_files_get_link+0x3b0/0x3b0 [ 363.820603] ? trace_hardirqs_off+0x10/0x10 [ 363.820614] ? find_held_lock+0x35/0x1d0 [ 363.820624] _do_fork+0x1f7/0xfa0 [ 363.820635] ? fork_idle+0x2d0/0x2d0 [ 363.820646] ? __lock_is_held+0xb6/0x140 [ 363.820665] ? __sb_end_write+0xa0/0xd0 [ 363.820676] ? kasan_check_write+0x14/0x20 [ 363.820683] ? fput+0xe0/0x150 [ 363.820691] ? ksys_write+0x184/0x220 [ 363.820700] ? SyS_read+0x30/0x30 [ 363.820706] ? kasan_check_write+0x14/0x20 [ 363.820721] compat_SyS_x86_clone+0x3b/0x50 [ 363.820729] ? compat_SyS_x86_fallocate+0x60/0x60 [ 363.820739] do_fast_syscall_32+0x3ec/0xf9f [ 363.820751] ? do_int80_syscall_32+0x9c0/0x9c0 [ 363.820760] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 363.820771] ? syscall_return_slowpath+0x2ac/0x550 [ 363.820784] ? sysret32_from_system_call+0x5/0x3c [ 363.820795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.820808] entry_SYSENTER_compat+0x70/0x7f [ 363.820814] RIP: 0023:0xf7fc0c99 [ 363.820819] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 363.820827] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 363.820832] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 363.820836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.820840] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.820844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.926762] FAULT_INJECTION: forcing a failure. [ 363.926762] name failslab, interval 1, probability 0, space 0, times 0 [ 363.926776] CPU: 1 PID: 24959 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 363.926782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.926786] Call Trace: [ 363.926803] dump_stack+0x1a7/0x27d [ 363.926817] ? arch_local_irq_restore+0x53/0x53 [ 363.926831] ? __save_stack_trace+0x7e/0xd0 [ 363.926849] should_fail+0x914/0xae0 [ 363.926862] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.926872] ? kasan_kmalloc+0xad/0xe0 [ 363.926879] ? kmem_cache_alloc_trace+0x136/0x740 [ 363.926888] ? __memcg_init_list_lru_node+0x169/0x270 [ 363.926895] ? __list_lru_init+0x544/0x750 [ 363.926903] ? sget_userns+0x6c2/0xe60 [ 363.926913] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.926919] ? kern_mount_data+0x50/0xb0 [ 363.926927] ? pid_ns_prepare_proc+0x1e/0x80 [ 363.926935] ? alloc_pid+0x88e/0xa10 [ 363.926943] ? copy_process.part.38+0x274c/0x6140 [ 363.926949] ? _do_fork+0x1f7/0xfa0 [ 363.926958] ? compat_SyS_x86_clone+0x3b/0x50 [ 363.926970] ? find_held_lock+0x35/0x1d0 [ 363.926983] ? __lock_is_held+0xb6/0x140 [ 363.927007] ? check_same_owner+0x320/0x320 [ 363.927023] ? rcu_note_context_switch+0x710/0x710 [ 363.927040] should_failslab+0xec/0x120 [ 363.927050] kmem_cache_alloc_trace+0x4b/0x740 [ 363.927060] ? __kmalloc_node+0x33/0x70 [ 363.927069] ? __kmalloc_node+0x33/0x70 [ 363.927079] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.927092] __memcg_init_list_lru_node+0x169/0x270 [ 363.927104] ? list_lru_add+0x7c0/0x7c0 [ 363.927113] ? __kmalloc_node+0x47/0x70 [ 363.927127] __list_lru_init+0x544/0x750 [ 363.927141] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 363.927152] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 363.927175] ? lockdep_init_map+0x9/0x10 [ 363.927187] sget_userns+0x6c2/0xe60 [ 363.927196] ? set_anon_super+0x20/0x20 [ 363.927208] ? put_filp+0xa0/0xa0 [ 363.927218] ? destroy_unused_super.part.7+0xf0/0xf0 [ 363.927230] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 363.927238] ? perf_trace_lock+0xd6/0x900 [ 363.927249] ? save_stack+0xa3/0xd0 [ 363.927260] ? kasan_slab_alloc+0x12/0x20 [ 363.927267] ? alloc_pid+0xc1/0xa10 [ 363.927279] ? __radix_tree_replace+0x1af/0x310 [ 363.927290] ? radix_tree_delete+0x30/0x30 [ 363.927299] ? node_tag_clear+0xf2/0x180 [ 363.927316] ? proc_get_inode+0x620/0x620 [ 363.927324] mount_ns+0x6d/0x190 [ 363.927335] proc_mount+0x7a/0x90 [ 363.927346] mount_fs+0x66/0x2d0 [ 363.927358] vfs_kern_mount.part.26+0xc6/0x4a0 [ 363.927368] ? may_umount+0xa0/0xa0 [ 363.927380] ? kasan_check_read+0x11/0x20 [ 363.927392] ? do_raw_spin_unlock+0x9e/0x310 [ 363.927402] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 363.927411] ? idr_alloc+0x180/0x180 [ 363.927422] kern_mount_data+0x50/0xb0 [ 363.927435] pid_ns_prepare_proc+0x1e/0x80 [ 363.927445] alloc_pid+0x88e/0xa10 [ 363.927458] ? __change_pid+0x400/0x400 [ 363.927465] ? ns_capable_common+0xcf/0x160 [ 363.927482] ? memset+0x31/0x40 [ 363.927492] ? copy_thread_tls+0x268/0x8f0 [ 363.927499] ? do_raw_spin_lock+0xc1/0x230 [ 363.927512] copy_process.part.38+0x274c/0x6140 [ 363.927522] ? perf_trace_lock+0xd6/0x900 [ 363.927534] ? print_irqtrace_events+0x270/0x270 [ 363.927546] ? trace_event_raw_event_lock+0x340/0x340 [ 363.927556] ? lock_acquire+0x1d5/0x580 [ 363.927564] ? lock_acquire+0x1d5/0x580 [ 363.927574] ? alloc_set_pte+0xf74/0x1780 [ 363.927592] ? __cleanup_sighand+0x50/0x50 [ 363.927604] ? print_irqtrace_events+0x270/0x270 [ 363.927625] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.927635] ? lock_downgrade+0x980/0x980 [ 363.927647] ? print_irqtrace_events+0x270/0x270 [ 363.927655] ? rcu_is_watching+0x85/0x130 [ 363.927675] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.927688] ? __lock_acquire+0x638/0x3c30 [ 363.927697] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.927716] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 363.927729] ? trace_event_raw_event_lock+0x340/0x340 [ 363.927736] ? perf_trace_lock+0xd6/0x900 [ 363.927749] ? lock_acquire+0x1d5/0x580 [ 363.927758] ? trace_hardirqs_off+0x10/0x10 [ 363.927772] ? __lock_acquire+0x638/0x3c30 [ 363.927782] ? trace_event_raw_event_lock+0x340/0x340 [ 363.927792] ? find_held_lock+0x35/0x1d0 [ 363.927805] ? perf_trace_lock+0xd6/0x900 [ 363.927818] ? trace_event_raw_event_lock+0x340/0x340 [ 363.927826] ? check_same_owner+0x320/0x320 [ 363.927837] ? find_held_lock+0x35/0x1d0 [ 363.927848] ? trace_hardirqs_off+0x10/0x10 [ 363.927857] ? get_pid_task+0xa5/0x150 [ 363.927867] ? perf_trace_lock+0xd6/0x900 [ 363.927882] ? find_held_lock+0x35/0x1d0 [ 363.927899] ? __f_unlock_pos+0x19/0x20 [ 363.927910] ? lock_downgrade+0x980/0x980 [ 363.927921] ? kasan_check_write+0x14/0x20 [ 363.927931] ? proc_fail_nth_write+0x9b/0x1e0 [ 363.927942] ? map_files_get_link+0x3b0/0x3b0 [ 363.927953] ? trace_hardirqs_off+0x10/0x10 [ 363.927966] ? find_held_lock+0x35/0x1d0 [ 363.927978] _do_fork+0x1f7/0xfa0 [ 363.927993] ? fork_idle+0x2d0/0x2d0 [ 363.928020] ? __sb_end_write+0xa0/0xd0 [ 363.928033] ? kasan_check_write+0x14/0x20 [ 363.928040] ? fput+0xe0/0x150 [ 363.928050] ? ksys_write+0x184/0x220 [ 363.928061] ? SyS_read+0x30/0x30 [ 363.928070] ? kasan_check_write+0x14/0x20 [ 363.928088] compat_SyS_x86_clone+0x3b/0x50 [ 363.928099] ? compat_SyS_x86_fallocate+0x60/0x60 [ 363.928110] do_fast_syscall_32+0x3ec/0xf9f [ 363.928126] ? do_int80_syscall_32+0x9c0/0x9c0 [ 363.928135] ? finish_task_switch+0x1b9/0x970 [ 363.928143] ? finish_task_switch+0x17a/0x970 [ 363.928157] ? syscall_return_slowpath+0x2ac/0x550 [ 363.928176] ? prepare_exit_to_usermode+0x350/0x350 [ 363.928191] ? sysret32_from_system_call+0x5/0x3c [ 363.928207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.928225] entry_SYSENTER_compat+0x70/0x7f [ 363.928233] RIP: 0023:0xf7fc0c99 [ 363.928238] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 363.928251] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 2018/04/05 15:33:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) r1 = gettid() sched_setaffinity(r1, 0x1, &(0x7f0000000000)=0x4) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x7, 0x7f) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x400, 0x7, &(0x7f0000000080)="b59598d2cc229ff17965aa716423d96c795d108e305766b7df1e8f20f8281f3e9edef17cc7f07372f25a95b2dc86dfa6d3f38dd4ceb1e09a294e9d3d386bede3fc1fa63589ec46e5829e5d548f5cce4974fbf8a40ad83e5ab6113353a9d075553c8d13cc825e80aa", 0xfff, 0xffffffffffffff7f, 0x5, 0x80000000, 0x0, 0x7, 0x1, "59250127baaca15c3316b139cd100030d2c189b42df9b2132577404e76dc25ec4632f558876ee8c7aedc0321b59d0c823f3cf188d379a996c8e329cada66ab2e7feeef46820bc3bafb0a59299064ff46c856fefba94e7832ba74b05e3955b6c2bfe28784c446de994047af8da3f824ee9543f5ffc0f963abdfe742b5555aa24c111ca9af64323a48a5b169f6f8f0d94ea55c9cb3179aa1e52a14e0d9a434fe5edd7057fd57f78962ec37c5bd337bba0d48adbc0a3d5f68380f3cef9b923b9adbf00d7586f990c7fe8bf375674948cd45cc130a841d2cf4576dbc3d2e7ea2ec276a574b79d6"}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000006ffc), 0xffffffffffffffdb) 2018/04/05 15:33:02 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080)=0x6, 0x4) ioctl$TTUNGETFILTER(r0, 0x800854db, &(0x7f0000000100)=""/166) 2018/04/05 15:33:02 executing program 2 (fault-call:0 fault-nth:39): clone(0x400201043f9, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000000180), &(0x7f0000000080)) 2018/04/05 15:33:02 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedreceive(r0, &(0x7f0000f6df20)=""/224, 0xe0, 0x0, &(0x7f0000acf000)={0x77359400}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8927, &(0x7f00000001c0)={'eql\x00', @ifru_addrs=@rc={0x1f, {0x2, 0xffffffff00000001, 0x8f0000000000000, 0x9, 0x80, 0x4}, 0x6}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x100, 0x0) unshare(0x40000000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) 2018/04/05 15:33:02 executing program 0 (fault-call:7 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:33:02 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x200080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000100)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}, r2}, 0x14) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r3}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x7ff, 0x1, 0x1f, 0x800000, 0x1, 0x6, 0x5, 0x45a78276, 0xffffffffffff8000, 0x648a}, 0xb) 2018/04/05 15:33:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x1) write$fuse(r0, &(0x7f0000000140)={0x20, 0x0, 0x7, @fuse_notify_inval_entry_out={0x2}}, 0x20) 2018/04/05 15:33:02 executing program 7: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f0000000580)="e6912986d6da3ec457883f57842b89934d29d5a0efc8330f429b656be6b831bdb04569bbc36b6b5cf77bc680d4fdeae24f640e064077587ca3d4a563968dca833a985c7ebde5788c10c656eea7905a345a71284687c2ff06827243cfdd10961ecddf5c808cdc601d27be6a1dffd58315a85ee7f3face36eb38fbca4c1cd1c35b476483962ec0bbc8335004ce7f98b28d0ce13d97752598508754bb1e90d3e3ad976478767f1561b801fa706cd3416d5eb90785f7ba0d4ba1") read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000280)=[0x0]) r6 = getgid() getgroups(0x7, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getgroups(0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$ipx(r0, &(0x7f00000006c0)=""/64, 0x40, 0x100, &(0x7f0000000700)={0x4, 0x9, 0x7f, "1277bcd8caa0", 0x729}, 0x10) getgroups(0x8, &(0x7f0000000540)=[r1, r3, r4, r5, r6, r7, r8, r9]) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) syz_fuseblk_mount(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0\x00', 0x6000, r2, r10, 0x8000, 0x2, 0x2000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000180)={r11, 0x31}) [ 363.928258] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 363.928265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.928271] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.928277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.095047] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 365.107011] FAULT_INJECTION: forcing a failure. [ 365.107011] name failslab, interval 1, probability 0, space 0, times 0 [ 365.118618] CPU: 1 PID: 24980 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 365.125624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.134963] Call Trace: [ 365.137538] dump_stack+0x1a7/0x27d [ 365.141147] ? arch_local_irq_restore+0x53/0x53 [ 365.145803] should_fail+0x914/0xae0 [ 365.149499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.154584] ? trace_hardirqs_off+0x10/0x10 [ 365.158885] ? find_first_zero_bit+0x93/0xe0 [ 365.163274] ? trace_hardirqs_off+0x10/0x10 [ 365.167585] ? find_held_lock+0x35/0x1d0 [ 365.171629] ? __lock_is_held+0xb6/0x140 [ 365.175679] ? check_same_owner+0x320/0x320 [ 365.179980] ? lock_downgrade+0x980/0x980 [ 365.184109] ? rcu_note_context_switch+0x710/0x710 [ 365.189021] ? find_held_lock+0x35/0x1d0 [ 365.193071] should_failslab+0xec/0x120 [ 365.197031] __kmalloc+0x63/0x760 [ 365.200464] ? lock_downgrade+0x980/0x980 [ 365.204597] ? register_shrinker+0x10e/0x2d0 [ 365.209071] ? trace_event_raw_event_module_request+0x320/0x320 [ 365.215115] register_shrinker+0x10e/0x2d0 [ 365.219329] ? prepare_kswapd_sleep+0x1f0/0x1f0 [ 365.223979] ? memcpy+0x45/0x50 [ 365.227245] sget_userns+0xbdd/0xe60 [ 365.230942] ? set_anon_super+0x20/0x20 [ 365.234898] ? put_filp+0xa0/0xa0 [ 365.238331] ? destroy_unused_super.part.7+0xf0/0xf0 [ 365.243413] ? __alloc_pages_slowpath+0x2d30/0x2d30 [ 365.248410] ? save_stack+0xa3/0xd0 [ 365.252022] ? save_stack+0x43/0xd0 [ 365.255633] ? kasan_slab_alloc+0x12/0x20 [ 365.259760] ? kmem_cache_alloc+0x12e/0x760 [ 365.264068] ? alloc_pid+0xc1/0xa10 [ 365.267679] ? __radix_tree_replace+0x1af/0x310 [ 365.272328] ? radix_tree_delete+0x30/0x30 [ 365.276542] ? node_tag_clear+0xf2/0x180 [ 365.280593] ? proc_get_inode+0x620/0x620 [ 365.284717] mount_ns+0x6d/0x190 [ 365.288069] proc_mount+0x7a/0x90 [ 365.291505] mount_fs+0x66/0x2d0 [ 365.294854] vfs_kern_mount.part.26+0xc6/0x4a0 [ 365.299415] ? may_umount+0xa0/0xa0 [ 365.303022] ? kasan_check_read+0x11/0x20 [ 365.307151] ? do_raw_spin_unlock+0x9e/0x310 [ 365.311538] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 365.316098] ? idr_alloc+0x180/0x180 [ 365.319798] kern_mount_data+0x50/0xb0 [ 365.323664] pid_ns_prepare_proc+0x1e/0x80 [ 365.327876] alloc_pid+0x88e/0xa10 [ 365.331398] ? __change_pid+0x400/0x400 [ 365.335350] ? ns_capable_common+0xcf/0x160 [ 365.339660] ? memset+0x31/0x40 [ 365.342919] ? copy_thread_tls+0x268/0x8f0 [ 365.347131] ? do_raw_spin_lock+0xc1/0x230 [ 365.351351] copy_process.part.38+0x274c/0x6140 [ 365.355998] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 365.361173] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 365.366255] ? print_irqtrace_events+0x270/0x270 [ 365.370994] ? lock_acquire+0x1d5/0x580 [ 365.374948] ? lock_acquire+0x1d5/0x580 [ 365.378903] ? alloc_set_pte+0xf74/0x1780 [ 365.383048] ? __cleanup_sighand+0x50/0x50 [ 365.387262] ? print_irqtrace_events+0x270/0x270 [ 365.392025] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 365.397198] ? lock_downgrade+0x980/0x980 [ 365.401328] ? print_irqtrace_events+0x270/0x270 [ 365.406064] ? kasan_check_read+0x11/0x20 [ 365.410190] ? rcu_is_watching+0x85/0x130 [ 365.414328] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 365.419499] ? __lock_acquire+0x638/0x3c30 [ 365.423713] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 365.428893] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 365.434066] ? print_irqtrace_events+0x270/0x270 [ 365.438800] ? __pagevec_lru_add+0x30/0x30 [ 365.443024] ? lock_acquire+0x1d5/0x580 [ 365.446982] ? trace_hardirqs_off+0x10/0x10 [ 365.451289] ? __lock_acquire+0x638/0x3c30 [ 365.455501] ? check_same_owner+0x320/0x320 [ 365.459806] ? find_held_lock+0x35/0x1d0 [ 365.463850] ? trace_hardirqs_off+0x10/0x10 [ 365.468149] ? _parse_integer+0xe9/0x140 [ 365.472192] ? trace_hardirqs_off+0x10/0x10 [ 365.476491] ? _parse_integer+0x140/0x140 [ 365.480615] ? check_same_owner+0x320/0x320 [ 365.484917] ? find_held_lock+0x35/0x1d0 [ 365.488961] ? trace_hardirqs_off+0x10/0x10 [ 365.493264] ? get_pid_task+0xa5/0x150 [ 365.497128] ? lock_downgrade+0x980/0x980 [ 365.501260] ? find_held_lock+0x35/0x1d0 [ 365.505306] ? __f_unlock_pos+0x19/0x20 [ 365.509257] ? lock_downgrade+0x980/0x980 [ 365.513386] ? kasan_check_write+0x14/0x20 [ 365.517598] ? proc_fail_nth_write+0x9b/0x1e0 [ 365.522074] ? map_files_get_link+0x3b0/0x3b0 [ 365.526549] ? trace_hardirqs_off+0x10/0x10 [ 365.530855] ? find_held_lock+0x35/0x1d0 [ 365.534900] _do_fork+0x1f7/0xfa0 [ 365.538338] ? fork_idle+0x2d0/0x2d0 [ 365.542039] ? __lock_is_held+0xb6/0x140 [ 365.546093] ? __sb_end_write+0xa0/0xd0 [ 365.550049] ? kasan_check_write+0x14/0x20 [ 365.554262] ? fput+0xe0/0x150 [ 365.557436] ? ksys_write+0x184/0x220 [ 365.561217] ? SyS_read+0x30/0x30 [ 365.564647] ? kasan_check_write+0x14/0x20 [ 365.568868] compat_SyS_x86_clone+0x3b/0x50 [ 365.573167] ? compat_SyS_x86_fallocate+0x60/0x60 [ 365.577988] do_fast_syscall_32+0x3ec/0xf9f [ 365.582295] ? do_int80_syscall_32+0x9c0/0x9c0 [ 365.586858] ? finish_task_switch+0x1b9/0x970 [ 365.591330] ? finish_task_switch+0x17a/0x970 [ 365.595806] ? syscall_return_slowpath+0x2ac/0x550 [ 365.600716] ? prepare_exit_to_usermode+0x350/0x350 [ 365.606173] ? sysret32_from_system_call+0x5/0x3c [ 365.610999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.615831] entry_SYSENTER_compat+0x70/0x7f [ 365.620217] RIP: 0023:0xf7fc0c99 [ 365.623559] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 365.631248] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 365.638497] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 365.645745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.652992] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.660244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.673355] FAULT_INJECTION: forcing a failure. [ 365.673355] name failslab, interval 1, probability 0, space 0, times 0 [ 365.682367] IPVS: ftp: loaded support on port[0] = 21 [ 365.684624] CPU: 0 PID: 24976 Comm: syz-executor0 Not tainted 4.16.0+ #288 [ 365.696788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.706137] Call Trace: [ 365.708722] dump_stack+0x1a7/0x27d [ 365.712355] ? arch_local_irq_restore+0x53/0x53 [ 365.717030] should_fail+0x914/0xae0 [ 365.720750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.725854] ? print_irqtrace_events+0x270/0x270 [ 365.730615] ? rcu_is_watching+0x85/0x130 [ 365.734769] ? __lock_acquire+0x638/0x3c30 [ 365.738999] ? find_held_lock+0x35/0x1d0 [ 365.743046] ? __lock_is_held+0xb6/0x140 [ 365.747092] ? check_same_owner+0x320/0x320 [ 365.751393] ? rcu_note_context_switch+0x710/0x710 [ 365.756308] should_failslab+0xec/0x120 [ 365.760264] kmem_cache_alloc_node+0x56/0x760 [ 365.764780] __alloc_skb+0xf4/0x760 [ 365.768387] ? skb_scrub_packet+0x510/0x510 [ 365.772687] ? rcu_read_lock_sched_held+0x108/0x120 [ 365.778204] ? inet_sk_state_store+0xf2/0x530 [ 365.782680] ? inet_sendpage+0x660/0x660 [ 365.786719] ? mark_held_locks+0xaf/0x100 [ 365.790848] ? refill_stock+0x11e/0x1a0 [ 365.794802] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.799882] ? trace_hardirqs_on+0xd/0x10 [ 365.804027] tcp_send_fin+0x27f/0xd40 [ 365.807809] ? sk_forced_mem_schedule+0x160/0x160 [ 365.812678] ? tcp_alloc_md5sig_pool+0x460/0x460 [ 365.817410] ? mark_held_locks+0xaf/0x100 [ 365.821534] ? do_raw_spin_trylock+0x1a0/0x1a0 [ 365.826094] ? __local_bh_enable_ip+0x121/0x230 [ 365.830740] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.835732] ? lock_sock_nested+0x91/0x110 [ 365.839942] ? trace_hardirqs_on+0xd/0x10 [ 365.844071] tcp_close+0xd6b/0x11b0 [ 365.847678] ? __f_unlock_pos+0x19/0x20 [ 365.851629] ? tcp_check_oom+0x590/0x590 [ 365.855716] ? ipv6_sock_mc_close+0x148/0x1a0 [ 365.860191] ? ip_mc_drop_socket+0x1e7/0x240 [ 365.864578] inet_release+0xed/0x1c0 [ 365.868289] inet6_release+0x50/0x70 [ 365.871979] sock_release+0x8d/0x1e0 [ 365.875670] ? sock_alloc_file+0x560/0x560 [ 365.879880] sock_close+0x16/0x20 [ 365.883309] __fput+0x327/0x7f0 [ 365.886570] ? fput+0x150/0x150 [ 365.889828] ? _raw_spin_unlock_irq+0x27/0x70 [ 365.894303] ____fput+0x15/0x20 [ 365.897562] task_work_run+0x1ab/0x280 [ 365.901428] ? task_work_cancel+0x240/0x240 [ 365.905724] ? __close_fd+0x222/0x360 [ 365.909505] ? exit_to_usermode_loop+0x8c/0x2f0 [ 365.914154] exit_to_usermode_loop+0x275/0x2f0 [ 365.918709] ? SyS_read+0x30/0x30 [ 365.922142] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 365.927657] ? do_fast_syscall_32+0x156/0xf9f [ 365.932129] ? SyS_creat+0x30/0x30 [ 365.935648] do_fast_syscall_32+0xbe6/0xf9f [ 365.939949] ? do_int80_syscall_32+0x9c0/0x9c0 [ 365.944509] ? finish_task_switch+0x1b9/0x970 [ 365.948978] ? finish_task_switch+0x17a/0x970 [ 365.953451] ? syscall_return_slowpath+0x2ac/0x550 [ 365.958356] ? prepare_exit_to_usermode+0x350/0x350 [ 365.963348] ? sysret32_from_system_call+0x5/0x3c [ 365.968171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.972994] entry_SYSENTER_compat+0x70/0x7f [ 365.977383] RIP: 0023:0xf7fb2c99 [ 365.980725] RSP: 002b:00000000f5fae0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000006 [ 365.988408] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 2018/04/05 15:33:03 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000ff0)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f00000000c0)) fremovexattr(r0, &(0x7f0000000100)=@random={'system.', 'cpuset.memory_pressure\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffb, 0x0, 0xff, 0x2, 0x5, 0x100, 0x1}, &(0x7f0000000080)=0x20) 2018/04/05 15:33:03 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffff9c, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101402) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={r1, 0x80000, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000640)) fchdir(r3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000267fe4)={0x0, 0x0, &(0x7f0000938ff8), 0x0, &(0x7f00005c7ff0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000580), &(0x7f00000005c0)=0x4) recvmmsg(r4, &(0x7f0000007200)=[{{&(0x7f0000000180)=@l2, 0xe, &(0x7f0000000440)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, &(0x7f0000000480)=""/144, 0x90}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x5}, &(0x7f0000000240)=0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x4000, 0x0) syz_open_dev$amidi(&(0x7f0000000540)='/dev/amidi#\x00', 0xfffffffffffffffe, 0x101000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x8, 0xb4, "a3f888416dc6701ad3bdaba0135026953a7566fc9fb13868562564bbfebc06633e0238e7783d8c5558bd336799a463fd281dc6c13d1765a7b1c50f1c751b265196a2967181777ccf52aa8432177a0001bc252a34b32d938078fbdf4b3c6b654aa5d40cb04cd5d972a71b0270a916820b556bcd0fcbf4a8a9e88440f6d57e3d11e3859d214e93bb4a50a7390ad832cc523b6a655176ec07565a545289212b9540cf9aefd12f2beb7ae265ad98fb87c0125996c732"}, 0xbc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) 2018/04/05 15:33:03 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdcff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) r1 = syz_open_pts(r0, 0x20201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='maps\x00') ioctl$TIOCSBRK(r2, 0x5427) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc00c6419, &(0x7f0000001600)={0x7, &(0x7f0000000100)=""/132, &(0x7f0000001580)=[{0x7fff, 0x17, 0x4, &(0x7f00000001c0)=""/23}, {0x3, 0x2c, 0x1f, &(0x7f0000000200)=""/44}, {0x9, 0x1000, 0xffffffffffff3887, &(0x7f0000000240)=""/4096}, {0xe, 0xe9, 0x6, &(0x7f0000001240)=""/233}, {0xf0, 0xc0, 0x3, &(0x7f0000001340)=""/192}, {0x200, 0x32, 0x8001, &(0x7f0000001400)=""/50}, {0x3, 0x55, 0x3, &(0x7f0000001500)=""/85}]}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3}) setsockopt$inet6_dccp_int(r2, 0x21, 0xf, &(0x7f0000001440)=0xb3c2, 0x4) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x4, 0x299a3fb92b93c799, &(0x7f0000000080)={r3, r4+10000000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001700)={0x0, 0x7c, "67b11a2cafd3aa05caf649595d59a360d754757dd40b5497bf8f91f19b7bd818130e6e6990277538b5826be1895a6a86dcbdd35a0f60929eedd9c49264ca2cddb6a3570c7d374516e5e5e45ba296aaf33b06fd62052b648679d9477766919397128a21643c275e49fdf49d1adcb917008bbd0d85431bfb4c430c2b4d"}, &(0x7f00000017c0)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001800)={r5, 0x80, "0389899ce278fbc070031f15e708567569b64f96a1f3ef9fd5d326f343caf31a355657bae83eb07fef508154a50c21395566844b976b1be6da9e40893696e6670968c491c536b2c373c3b01a446d772e4ccd2a81a7aef7c963a0e93166f9d3eb76cb9e6798ec5a7f9b60ee27eb530862e80a615d63fb7dd26e45fa6286bf88f4"}, &(0x7f00000018c0)=0x88) splice(r1, &(0x7f0000001480), r2, &(0x7f00000014c0), 0x8, 0x4) writev(r1, &(0x7f0000fe7f90)=[{&(0x7f00005e8f7e)="ae3b156f6594a2ec4aff8690e29b5acfed0a", 0x12}], 0x1) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000001640)="59f99e7800b0a9c6b92fe703a4fe5595d6889456d495e5ad42b6f1d432d01012ad7fd48e0bd845542329260ae24a1b67cea5b2a624bc194139bceb0c8c70873678afcc1a970716fa183361fbd600a8a21d47d84f97beb9061e8ef6b4123c7599caddb7db432b5d030795779a56fb74c9322ea1d85fc740213e89801a073601572cd61a8a74e40f144741df31e62a25bb250605b4b740f83db21b47686fa3e75dd511ff9fd8e029b03ad56cef0fd58a6173a92284c539ffd9ee", 0xb9) [ 365.995653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.002898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.010141] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.017385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.028999] IPVS: ftp: loaded support on port[0] = 21 2018/04/05 15:33:03 executing program 0 (fault-call:7 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, &(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='%'], 0x1}, 0x1}, 0x8000) close(r0) 2018/04/05 15:33:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/sequencer2\x00', 0x8400, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000c40)={0x6, 0x0, [{0x40000000, 0x80000000, 0x6, 0xfffffffffffffff7, 0x5, 0x800, 0x9}, {0x40000001, 0xf9, 0x2, 0x3, 0x80, 0x52eb, 0x800}, {0x80000001, 0x9, 0x4, 0x1, 0x5, 0x1, 0x80000001}, {0x1, 0xfffffffffffffffc, 0x1, 0x5, 0xa00000000000, 0x81, 0x1}, {0xc000000f, 0xffffffffffffffff, 0x3, 0x4, 0x946f, 0x3, 0x2}, {0x4000000b, 0x100000001, 0x1, 0x7, 0x10001, 0x3f, 0x200}]}) r2 = dup(r1) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000391000)}]) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000400)=0x0) ioctl$TTUNGETFILTER(r2, 0x800854db, &(0x7f0000000440)=""/227) getpgid(r5) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000d40)=0x0) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_bp, 0xfffffffffffffffe}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000f80)=0x0) fcntl$setown(r7, 0x8, r6) r9 = syz_open_procfs(r8, &(0x7f00000001c0)='ns/pid\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getresuid(&(0x7f0000000a80)=0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) r15 = getegid() sendmsg$netlink(r9, &(0x7f0000000bc0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000280)={0x168, 0x38, 0x100, 0x70bd2d, 0x4000025dfdbfe, "", [@generic="e95b59c30b1fcb5de99d7d6ddb11bbacf11f398d6895ab5d4bbe249c5cbe9e9b1546a9f5296a53a37bed5a5872da36a4a9e78c4718", @generic="f2711ff76be998967dd7298ef6846b49da3b4fc6a11efe13ce52e49a6611809da9cfd43f417818c4ead3913bcfa46cb2cfd93eee554bde8bbd0857a73f651a37bfe2420b132163a308c96c86ed86cb5e8d57f16a1bd2cd14d8ad9b3d4f14ac81fa02e5d2156ce6828a36700a4f3a985ce0c5", @generic="a8c001d4af3113e49029288e13529e77cc3d53ab2f8df96dbff8933efc2051c51dca97163e06e53ad01c4de6fdd0388b903b144ffe2493f789e461f61b91e6b2ecc18c320abf8b50f5ef8e1d2dd0a426afd5a51c14d7f83cb482c25a3b0e8c645c004f46050509273d5914029b067465ccea09514dbbeca402369188609efd4091bcfd79869ea64d20f4b590b3b3188ced9544ec57a3978477b9d4822f60ba89a78374868b4caf88874c69d5ceb0b6"]}, 0x168}, {&(0x7f0000000dc0)=ANY=[@ANYBLOB="800100001c00000328bd7000fcdbdf2508003300", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08004f00018000000000003fec273c8e0b32878f57dae0c6827fa8b6af3d345929a0d8ab43ea77782b0209bef46d731ec1b884bb64fcd617e65e8c34cc336cdeb9b5"], 0x5}, {&(0x7f0000000580)={0x264, 0x10, 0x0, 0x70bd25, 0x25dfdbfc, "", [@generic="0a8e6ccaf99a7f080f495c4a22c2ec48a390547c92813d3634f904f68a21ca9737eef40c6243a6cf1c08a74c5c199fe99279fdde0f12395f4d48aee5a4bf18dc2373d4e976952868e7d10cc7a158b2d4e82a1f0613c934f578b2342b42fb7d59f9ff2480", @nested={0x1f0, 0x70, [@generic="af6e7295fcbd24ded7c87d950e14fb728d3d71c1b21e1c8fcc1eaccfa7e6bc5694f403fc5210cb7188f61bd2815907ef26b43659d7f3d4ffcbb2beb30d828532d672065bf9fc8a02482c430669ce8e3d750aca9ae400c2de7efc0a78ee39c637b7741881830368dbdc173e92e98d21491c5d606e5cef4b048ed107dfbedc8811b232c9793ea052560f5c8466c75032722d685d95da727a98a1d7168a4ae07ec8963661dabb5833888a8f8f8969ff0b9d454ab2b9f6d3c670d0b14d6176519b0a602655d5d91318cdacb7f7a8215335682b20281a26483cd5192f6f739071b3684308319e4c31bf74f3f9683f78d5", @generic="d2c516", @typed={0x54, 0x1a, @binary="00628f7a117237c66743f28894f3d75fc858149542d04d99b0317f3007e0ac9bf168426d8cc99006035296205a3897717d9abaae63c9fab6001d07b6f88592ddd98176ffeb7ecf3d437fd5c041"}, @typed={0x8, 0x75, @pid=r8}, @typed={0x8, 0x63, @ipv4}, @generic="93074900edd8dd4a0e96461d82f8e9abdab235998393606c22a7137421c7d0be6b6cf70a40caebf3bce25d952ef19a8760e2c0b8dca19b7d90b0e2f828a44867b1b00c2ee9f4c963a1835d5839c693f2e1eb226e5dde84b2fb22590971ed67e3035166b81aebf95a28a047cfee7b06dbf25e74349efb5ffaa844f86614a56ef4625c5606d6bdf7afd22a39cb39cebe50438a01641e50d5"]}]}, 0x264}], 0x3, &(0x7f0000000b40)=[@rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r8, r10, r11}, @cred={0x18, 0x1, 0x2, r8, r12, r13}, @cred={0x18, 0x1, 0x2, r8, r14, r15}], 0x58}, 0x8000) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r16 = syz_open_dev$sndseq(&(0x7f0000c53000)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r16, 0xc0605345, &(0x7f00005aafa4)) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000d80)=0x2, 0x4) 2018/04/05 15:33:03 executing program 5: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) mq_timedsend(r0, &(0x7f0000726fff)="cb", 0x1, 0x0, &(0x7f000066cff0)) 2018/04/05 15:33:03 executing program 3: socket(0x15, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x8b, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/139}, &(0x7f00000003c0)=0x78) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080)=0x10, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000002800)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x7ff}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002b00)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0x1b3, &(0x7f00000000c0)={&(0x7f0000002c80)=ANY=[@ANYBLOB="28000000f0ff0000000002000000000800000000251db50025124451449a5136947f000000000000001a77833fc13da0d812cb33061f8672f08c3bd585124e383df423da92301c0bb697704758af6f2327abdd7522bffd9f845ed33416e6080a1afce82932982c64114a1a47f1e3eb604383731faa9ebe2bde7a153291f2b1981c2987c01b226654bf504e50562eb0f4827666c3d10f138c408efda2ebcc0a219b13ec468e043a3b0c0c933b20b3ed26819d35e8a3c02d4d3046adbd90d4f86d0c3197a95c"], 0x1}, 0x1}, 0x40) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/248, 0xf8}, {&(0x7f0000002600)=""/217, 0xd9}], 0x5, &(0x7f0000002700)=ANY=[@ANYBLOB="58000000825ca14a6f00000000000300014b80"], 0x13, 0x8000}, 0x5) pipe(&(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) mq_unlink(&(0x7f0000002bc0)='sit0\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000002b40)={&(0x7f0000000140)=[0x3f, 0x3f, 0x1, 0x8000], 0x4, 0x0, 0x1, 0x8, 0x9, 0xfffffffffffffffd, {0x7fffffff, 0xff, 0x93, 0x7, 0x7ff, 0x0, 0x7c, 0x5, 0xffffffff, 0x8, 0xffffffff, 0x8, 0x9, 0x2, "3960d9b2981d5338419e5eae2069fa00cec38f0b1abb299c9fddd938925120d6"}}) openat$audio(0xffffffffffffff9c, &(0x7f0000002c40)='/dev/audio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000028c0)={&(0x7f0000002880)=[0x708, 0x2], 0x2, 0x5, 0x401, 0x8e1b, 0xffffffffffffffff, 0x480, {0xf999, 0x6, 0xff, 0x800, 0x81, 0x40, 0x6, 0x1, 0x800, 0x9, 0x2, 0x40000000000000, 0x8001, 0x40, "24b28889379fe175ae901e4ba355fa20f8bfdd26285da1b7d92c2c3a964b1caa"}}) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000027c0)={0x9, 0xfffffffffffffe01, 0x401}, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002980)={0x3, {{0xa, 0x4e22, 0x4000000000, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, {{0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x108) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002940)={'sit0\x00', 0x9001}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002ac0)=""/62, &(0x7f0000002c00)=0x1a2) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000002740)={'syzkaller0\x00', 0x81}) sysfs$3(0x3) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)={0xfffffffffffff876, 0x5}) [ 366.136309] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 366.198965] device bond0 entered promiscuous mode [ 366.205055] ================================================================== [ 366.212746] BUG: KASAN: use-after-free in alloc_pid+0x9b6/0xa10 [ 366.218782] Read of size 4 at addr ffff8801b6067418 by task syz-executor2/24980 [ 366.226199] [ 366.227809] CPU: 1 PID: 24980 Comm: syz-executor2 Not tainted 4.16.0+ #288 [ 366.234794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.244125] Call Trace: [ 366.246692] dump_stack+0x1a7/0x27d [ 366.250301] ? arch_local_irq_restore+0x53/0x53 [ 366.254948] ? show_regs_print_info+0x18/0x18 [ 366.259427] ? kasan_check_write+0x14/0x20 [ 366.263638] ? alloc_pid+0x9b6/0xa10 [ 366.267332] print_address_description+0x73/0x250 [ 366.272152] ? alloc_pid+0x9b6/0xa10 [ 366.275845] kasan_report+0x23c/0x360 [ 366.279629] __asan_report_load4_noabort+0x14/0x20 [ 366.284532] alloc_pid+0x9b6/0xa10 [ 366.288055] ? __change_pid+0x400/0x400 [ 366.292008] ? ns_capable_common+0xcf/0x160 [ 366.296312] ? memset+0x31/0x40 [ 366.299571] ? copy_thread_tls+0x268/0x8f0 [ 366.303781] ? do_raw_spin_lock+0xc1/0x230 [ 366.307997] copy_process.part.38+0x274c/0x6140 [ 366.312644] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.317809] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 366.322891] ? print_irqtrace_events+0x270/0x270 [ 366.327628] ? lock_acquire+0x1d5/0x580 [ 366.331577] ? lock_acquire+0x1d5/0x580 [ 366.335531] ? alloc_set_pte+0xf74/0x1780 [ 366.339680] ? __cleanup_sighand+0x50/0x50 [ 366.343898] ? print_irqtrace_events+0x270/0x270 [ 366.348641] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.353810] ? lock_downgrade+0x980/0x980 [ 366.357940] ? print_irqtrace_events+0x270/0x270 [ 366.362676] ? kasan_check_read+0x11/0x20 [ 366.366802] ? rcu_is_watching+0x85/0x130 [ 366.370935] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.376104] ? __lock_acquire+0x638/0x3c30 [ 366.380315] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.385493] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.390663] ? print_irqtrace_events+0x270/0x270 [ 366.395397] ? __pagevec_lru_add+0x30/0x30 [ 366.399613] ? lock_acquire+0x1d5/0x580 [ 366.403568] ? trace_hardirqs_off+0x10/0x10 [ 366.407873] ? __lock_acquire+0x638/0x3c30 [ 366.412087] ? check_same_owner+0x320/0x320 [ 366.416390] ? find_held_lock+0x35/0x1d0 [ 366.420432] ? trace_hardirqs_off+0x10/0x10 [ 366.424731] ? _parse_integer+0xe9/0x140 [ 366.428774] ? trace_hardirqs_off+0x10/0x10 [ 366.433074] ? _parse_integer+0x140/0x140 [ 366.437197] ? check_same_owner+0x320/0x320 [ 366.441497] ? find_held_lock+0x35/0x1d0 [ 366.445537] ? trace_hardirqs_off+0x10/0x10 [ 366.449836] ? get_pid_task+0xa5/0x150 [ 366.453702] ? lock_downgrade+0x980/0x980 [ 366.457835] ? find_held_lock+0x35/0x1d0 [ 366.461879] ? __f_unlock_pos+0x19/0x20 [ 366.465831] ? lock_downgrade+0x980/0x980 [ 366.469961] ? kasan_check_write+0x14/0x20 [ 366.474177] ? proc_fail_nth_write+0x9b/0x1e0 [ 366.478654] ? map_files_get_link+0x3b0/0x3b0 [ 366.483128] ? trace_hardirqs_off+0x10/0x10 [ 366.487431] ? find_held_lock+0x35/0x1d0 [ 366.491473] _do_fork+0x1f7/0xfa0 [ 366.494906] ? fork_idle+0x2d0/0x2d0 [ 366.498599] ? __lock_is_held+0xb6/0x140 [ 366.502650] ? __sb_end_write+0xa0/0xd0 [ 366.506606] ? kasan_check_write+0x14/0x20 [ 366.510816] ? fput+0xe0/0x150 [ 366.513988] ? ksys_write+0x184/0x220 [ 366.517767] ? SyS_read+0x30/0x30 [ 366.521196] ? kasan_check_write+0x14/0x20 [ 366.525415] compat_SyS_x86_clone+0x3b/0x50 [ 366.529714] ? compat_SyS_x86_fallocate+0x60/0x60 [ 366.534887] do_fast_syscall_32+0x3ec/0xf9f [ 366.539193] ? do_int80_syscall_32+0x9c0/0x9c0 [ 366.543753] ? finish_task_switch+0x1b9/0x970 [ 366.548222] ? finish_task_switch+0x17a/0x970 [ 366.552697] ? syscall_return_slowpath+0x2ac/0x550 [ 366.557604] ? prepare_exit_to_usermode+0x350/0x350 [ 366.562600] ? sysret32_from_system_call+0x5/0x3c [ 366.567423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.572250] entry_SYSENTER_compat+0x70/0x7f [ 366.576637] RIP: 0023:0xf7fc0c99 [ 366.579977] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 366.587668] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 366.594915] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 366.602163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.609411] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.616659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.623916] [ 366.625524] Allocated by task 24980: [ 366.629219] save_stack+0x43/0xd0 [ 366.632650] kasan_kmalloc+0xad/0xe0 [ 366.636342] kasan_slab_alloc+0x12/0x20 [ 366.640292] kmem_cache_alloc+0x12e/0x760 [ 366.644417] copy_pid_ns+0x257/0xca0 [ 366.648106] create_new_namespaces+0x314/0x890 [ 366.652663] copy_namespaces+0x34d/0x400 [ 366.656700] copy_process.part.38+0x23c1/0x6140 [ 366.661344] _do_fork+0x1f7/0xfa0 [ 366.664774] compat_SyS_x86_clone+0x3b/0x50 [ 366.669072] do_fast_syscall_32+0x3ec/0xf9f [ 366.673381] entry_SYSENTER_compat+0x70/0x7f [ 366.677761] [ 366.679365] Freed by task 24977: [ 366.682707] save_stack+0x43/0xd0 [ 366.686143] __kasan_slab_free+0x11a/0x170 [ 366.690353] kasan_slab_free+0xe/0x10 [ 366.694129] kmem_cache_free+0x83/0x2a0 [ 366.698080] delayed_free_pidns+0x97/0xc0 [ 366.702206] rcu_process_callbacks+0xd6c/0x17b0 [ 366.706849] __do_softirq+0x2d7/0xb85 [ 366.710620] [ 366.712227] The buggy address belongs to the object at ffff8801b60673d0 [ 366.712227] which belongs to the cache pid_namespace of size 240 [ 366.725031] The buggy address is located 72 bytes inside of [ 366.725031] 240-byte region [ffff8801b60673d0, ffff8801b60674c0) [ 366.736790] The buggy address belongs to the page: [ 366.741696] page:ffffea0006d819c0 count:1 mapcount:0 mapping:ffff8801b6067040 index:0x0 [ 366.749814] flags: 0x2fffc0000000100(slab) [ 366.754026] raw: 02fffc0000000100 ffff8801b6067040 0000000000000000 000000010000000d [ 366.761882] raw: ffffea00066304a0 ffff8801d4000748 ffff8801d4e69780 0000000000000000 [ 366.769736] page dumped because: kasan: bad access detected [ 366.775418] [ 366.777024] Memory state around the buggy address: [ 366.781931] ffff8801b6067300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 366.789266] ffff8801b6067380: fc fc fc fc fc fc fc fc fc fc fb fb fb fb fb fb [ 366.796600] >ffff8801b6067400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 366.803934] ^ [ 366.808059] ffff8801b6067480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.815393] ffff8801b6067500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 366.822726] ================================================================== [ 366.830057] Disabling lock debugging due to kernel taint [ 366.835480] Kernel panic - not syncing: panic_on_warn set ... [ 366.835480] [ 366.842817] CPU: 1 PID: 24980 Comm: syz-executor2 Tainted: G B 4.16.0+ #288 [ 366.851102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.860429] Call Trace: [ 366.862989] dump_stack+0x1a7/0x27d [ 366.866595] ? arch_local_irq_restore+0x53/0x53 [ 366.871240] ? kasan_end_report+0x32/0x50 [ 366.875363] ? lock_downgrade+0x980/0x980 [ 366.879487] ? vsnprintf+0x1ed/0x1900 [ 366.883262] ? alloc_pid+0x9b0/0xa10 [ 366.886950] panic+0x1f8/0x42c [ 366.890118] ? refcount_error_report+0x214/0x214 [ 366.894851] ? add_taint+0x40/0x50 [ 366.898365] ? do_raw_spin_unlock+0x9e/0x310 [ 366.902747] ? alloc_pid+0x9b6/0xa10 [ 366.906436] kasan_end_report+0x50/0x50 [ 366.910387] kasan_report+0x149/0x360 [ 366.914162] __asan_report_load4_noabort+0x14/0x20 [ 366.919064] alloc_pid+0x9b6/0xa10 [ 366.922582] ? __change_pid+0x400/0x400 [ 366.926531] ? ns_capable_common+0xcf/0x160 [ 366.930833] ? memset+0x31/0x40 [ 366.934090] ? copy_thread_tls+0x268/0x8f0 [ 366.938296] ? do_raw_spin_lock+0xc1/0x230 [ 366.942507] copy_process.part.38+0x274c/0x6140 [ 366.947149] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.952312] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 366.957392] ? print_irqtrace_events+0x270/0x270 [ 366.962122] ? lock_acquire+0x1d5/0x580 [ 366.966072] ? lock_acquire+0x1d5/0x580 [ 366.970022] ? alloc_set_pte+0xf74/0x1780 [ 366.974150] ? __cleanup_sighand+0x50/0x50 [ 366.978361] ? print_irqtrace_events+0x270/0x270 [ 366.983100] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 366.988263] ? lock_downgrade+0x980/0x980 [ 366.992388] ? print_irqtrace_events+0x270/0x270 [ 366.997118] ? kasan_check_read+0x11/0x20 [ 367.001242] ? rcu_is_watching+0x85/0x130 [ 367.005369] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 367.010534] ? __lock_acquire+0x638/0x3c30 [ 367.014746] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 367.019922] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 367.025089] ? print_irqtrace_events+0x270/0x270 [ 367.029821] ? __pagevec_lru_add+0x30/0x30 [ 367.034033] ? lock_acquire+0x1d5/0x580 [ 367.037982] ? trace_hardirqs_off+0x10/0x10 [ 367.042282] ? __lock_acquire+0x638/0x3c30 [ 367.046491] ? check_same_owner+0x320/0x320 [ 367.050789] ? find_held_lock+0x35/0x1d0 [ 367.054828] ? trace_hardirqs_off+0x10/0x10 [ 367.059122] ? _parse_integer+0xe9/0x140 [ 367.063160] ? trace_hardirqs_off+0x10/0x10 [ 367.067454] ? _parse_integer+0x140/0x140 [ 367.071576] ? check_same_owner+0x320/0x320 [ 367.075873] ? find_held_lock+0x35/0x1d0 [ 367.079912] ? trace_hardirqs_off+0x10/0x10 [ 367.084208] ? get_pid_task+0xa5/0x150 [ 367.088072] ? lock_downgrade+0x980/0x980 [ 367.092198] ? find_held_lock+0x35/0x1d0 [ 367.096238] ? __f_unlock_pos+0x19/0x20 [ 367.100186] ? lock_downgrade+0x980/0x980 [ 367.104309] ? kasan_check_write+0x14/0x20 [ 367.108519] ? proc_fail_nth_write+0x9b/0x1e0 [ 367.112989] ? map_files_get_link+0x3b0/0x3b0 [ 367.117462] ? trace_hardirqs_off+0x10/0x10 [ 367.121760] ? find_held_lock+0x35/0x1d0 [ 367.125796] _do_fork+0x1f7/0xfa0 [ 367.129226] ? fork_idle+0x2d0/0x2d0 [ 367.132920] ? __lock_is_held+0xb6/0x140 [ 367.136961] ? __sb_end_write+0xa0/0xd0 [ 367.140912] ? kasan_check_write+0x14/0x20 [ 367.145117] ? fput+0xe0/0x150 [ 367.148285] ? ksys_write+0x184/0x220 [ 367.152059] ? SyS_read+0x30/0x30 [ 367.155487] ? kasan_check_write+0x14/0x20 [ 367.159702] compat_SyS_x86_clone+0x3b/0x50 [ 367.164001] ? compat_SyS_x86_fallocate+0x60/0x60 [ 367.168818] do_fast_syscall_32+0x3ec/0xf9f [ 367.173117] ? do_int80_syscall_32+0x9c0/0x9c0 [ 367.177673] ? finish_task_switch+0x1b9/0x970 [ 367.182139] ? finish_task_switch+0x17a/0x970 [ 367.186610] ? syscall_return_slowpath+0x2ac/0x550 [ 367.191514] ? prepare_exit_to_usermode+0x350/0x350 [ 367.196506] ? sysret32_from_system_call+0x5/0x3c [ 367.201325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.206144] entry_SYSENTER_compat+0x70/0x7f [ 367.210525] RIP: 0023:0xf7fc0c99 [ 367.213862] RSP: 002b:00000000f5fbc0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 367.221543] RAX: ffffffffffffffda RBX: 00000000201043f9 RCX: 0000000020e02000 [ 367.228792] RDX: 000000002006fffc RSI: 0000000020000180 RDI: 0000000020000080 [ 367.236037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.243280] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 367.250526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.331565] Shutting down cpus with NMI [ 368.336002] Dumping ftrace buffer: [ 368.339516] (ftrace buffer empty) [ 368.343195] Kernel Offset: disabled [ 368.346797] Rebooting in 86400 seconds..