17:13 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2060) [ 235.196664] ion_mmap: failure mapping buffer to userspace [ 235.219384] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x200000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa", 0x2d) 2018/05/15 19:17:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000200)="8e15576b305e9063aef0eb39fa5330d5427a96e9a81ae04921ec1494756ffc6c76d7e9c6120331ed0be9513909cf0923d222d0980a6f21498455d53ea2778d2f863447435de839e57b3697b6a8dd186449014336ac106642dbf1af2ea7a9039564ca070cdcae470b24be5176b8ca12d8a1e44973862008c973c293c685400536a84c280e8a3e", 0x86) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x240000, 0x0) 2018/05/15 19:17:14 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xefff, 0x1, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) open_by_handle_at(r2, &(0x7f0000000080)={0x5e, 0x6, "701d8d03b49b27b5648c1bf3ee1a2c1a907b5833f53d2a04ba4ec66e8a97f888ad960350b754fdbbc81241bedc91a26bfc837f5038fc350abbe5d195890a9ca3a20732497a887fbd7262452b852d9c4d2a9de75fc5f3"}, 0x151281) 2018/05/15 19:17:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:14 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2004) 2018/05/15 19:17:14 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 235.469442] x86/PAT: syz-executor4:13626 map pfn RAM range req write-combining for [mem 0x18ab50000-0x18ab53fff], got write-back 2018/05/15 19:17:14 executing program 0 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 235.598235] x86/PAT: syz-executor4:13626 map pfn RAM range req write-combining for [mem 0x18f130000-0x18f133fff], got write-back [ 235.617350] FAULT_INJECTION: forcing a failure. [ 235.617350] name failslab, interval 1, probability 0, space 0, times 0 [ 235.628923] CPU: 1 PID: 13643 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 235.636211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.645580] Call Trace: [ 235.648199] dump_stack+0x1b9/0x294 [ 235.651856] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.657070] ? kasan_check_write+0x14/0x20 [ 235.661335] ? __mutex_lock+0x7d9/0x17f0 [ 235.665422] should_fail.cold.4+0xa/0x1a [ 235.669490] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.674639] ? mutex_trylock+0x2a0/0x2a0 [ 235.678699] ? debug_object_free+0x5f0/0x5f0 [ 235.683120] ? lock_downgrade+0x8e0/0x8e0 [ 235.687273] ? rcu_is_watching+0x85/0x140 [ 235.691414] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 235.696591] ? blk_mq_update_queue_map+0x200/0x200 [ 235.701509] ? debug_check_no_locks_freed+0x310/0x310 [ 235.706691] ? blk_queue_exit+0x1a4/0x2f0 [ 235.710859] ? direct_make_request+0x550/0x550 [ 235.715430] ? perf_trace_lock+0x900/0x900 [ 235.719662] __should_failslab+0x124/0x180 [ 235.723902] should_failslab+0x9/0x14 [ 235.727691] __kmalloc+0x63/0x760 [ 235.731137] ? init_rcu_head+0x10/0x20 [ 235.735024] ? scsi_initialize_rq+0x27/0xc0 [ 235.739340] ? scsi_old_exit_rq+0x110/0x110 [ 235.743657] ? blk_get_request_flags+0x16b/0x7c0 [ 235.748401] ? sg_build_indirect.isra.15+0x9d/0x750 [ 235.753404] sg_build_indirect.isra.15+0x9d/0x750 [ 235.758237] sg_common_write.isra.16+0x9ed/0x1dd0 [ 235.763072] ? sg_open+0x1130/0x1130 [ 235.766774] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 235.772056] ? __check_object_size+0x95/0x5d9 [ 235.776543] ? usercopy_warn+0x120/0x120 [ 235.780599] ? __might_sleep+0x95/0x190 [ 235.784582] sg_write+0x8c3/0xd30 [ 235.788036] ? sg_ioctl+0x2f80/0x2f80 [ 235.791835] ? rcu_is_watching+0x85/0x140 [ 235.795969] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 235.801151] ? __fget+0x40c/0x650 [ 235.804594] ? expand_files.part.8+0x9a0/0x9a0 [ 235.809171] ? lock_downgrade+0x8e0/0x8e0 [ 235.813314] ? proc_fail_nth_write+0x96/0x1f0 [ 235.817803] __vfs_write+0x10b/0x960 [ 235.821501] ? __fget_light+0x2ef/0x430 [ 235.825460] ? sg_ioctl+0x2f80/0x2f80 [ 235.829244] ? kernel_read+0x120/0x120 [ 235.833119] ? wait_for_completion+0x870/0x870 [ 235.837698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.843221] ? security_file_permission+0x1c6/0x240 [ 235.848224] ? rw_verify_area+0x118/0x360 [ 235.852360] vfs_write+0x1f8/0x560 [ 235.855898] ksys_write+0xf9/0x250 [ 235.859436] ? __ia32_sys_read+0xb0/0xb0 [ 235.863509] __x64_sys_write+0x73/0xb0 [ 235.867418] do_syscall_64+0x1b1/0x800 [ 235.871300] ? syscall_return_slowpath+0x5c0/0x5c0 [ 235.876226] ? syscall_return_slowpath+0x30f/0x5c0 [ 235.881159] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 235.886520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.891352] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.896532] RIP: 0033:0x455a09 [ 235.899717] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.907420] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 235.914680] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 235.921936] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 235.929190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 235.936445] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000000 2018/05/15 19:17:15 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2006) 2018/05/15 19:17:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:15 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:15 executing program 0 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200)="8e15576b305e9063aef0eb39fa5330d5427a96e9a81ae04921ec1494756ffc6c76d7e9c6120331ed0be9513909cf0923d222d0980a6f21498455d53ea2778d2f863447435de839e57b3697b6a8dd186449014336ac106642dbf1af2ea7a9039564ca070cdcae470b24be5176b8ca12d8a1e44973862008c973c293c685400536a84c280e8a3e", 0x86) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x240000, 0x0) 2018/05/15 19:17:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:17:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) [ 236.628402] ion_mmap: failure mapping buffer to userspace [ 236.649515] FAULT_INJECTION: forcing a failure. [ 236.649515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.661524] CPU: 0 PID: 13660 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 236.668924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.678296] Call Trace: [ 236.680898] dump_stack+0x1b9/0x294 [ 236.684614] ? dump_stack_print_info.cold.2+0x52/0x52 [ 236.689814] ? lock_downgrade+0x8e0/0x8e0 [ 236.694033] should_fail.cold.4+0xa/0x1a [ 236.698102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 236.703217] ? is_bpf_text_address+0xd7/0x170 [ 236.707725] ? kernel_text_address+0x79/0xf0 [ 236.712128] ? __unwind_start+0x166/0x330 [ 236.716273] ? __kernel_text_address+0xd/0x40 [ 236.720765] ? unwind_get_return_address+0x61/0xa0 [ 236.725696] ? __save_stack_trace+0x7e/0xd0 [ 236.730055] ? save_stack+0xa9/0xd0 [ 236.733681] ? save_stack+0x43/0xd0 [ 236.737303] ? __kmalloc+0x14e/0x760 [ 236.741018] ? sg_build_indirect.isra.15+0x9d/0x750 [ 236.746043] ? sg_common_write.isra.16+0x9ed/0x1dd0 [ 236.751051] ? sg_write+0x8c3/0xd30 [ 236.754681] ? __vfs_write+0x10b/0x960 [ 236.758563] ? vfs_write+0x1f8/0x560 [ 236.762271] ? ksys_write+0xf9/0x250 [ 236.765978] ? __x64_sys_write+0x73/0xb0 [ 236.770046] ? do_syscall_64+0x1b1/0x800 [ 236.774118] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.779495] __alloc_pages_nodemask+0x34e/0xd70 [ 236.784162] ? print_usage_bug+0xc0/0xc0 [ 236.788238] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 236.793277] ? blk_queue_exit+0x1a4/0x2f0 [ 236.797434] ? __lock_is_held+0xb5/0x140 [ 236.801505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.807043] ? cap_capable+0x1f9/0x260 [ 236.810939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.816486] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.822044] alloc_pages_current+0x10c/0x210 [ 236.826466] sg_build_indirect.isra.15+0x32a/0x750 [ 236.831408] sg_common_write.isra.16+0x9ed/0x1dd0 [ 236.836263] ? sg_open+0x1130/0x1130 [ 236.839978] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 236.845177] ? __check_object_size+0x95/0x5d9 [ 236.849687] ? usercopy_warn+0x120/0x120 [ 236.853760] ? __might_sleep+0x95/0x190 [ 236.857748] sg_write+0x8c3/0xd30 [ 236.861220] ? sg_ioctl+0x2f80/0x2f80 [ 236.865031] ? rcu_is_watching+0x85/0x140 [ 236.869181] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 236.874386] ? __fget+0x40c/0x650 [ 236.877857] ? expand_files.part.8+0x9a0/0x9a0 [ 236.882447] ? lock_downgrade+0x8e0/0x8e0 [ 236.886598] ? proc_fail_nth_write+0x96/0x1f0 [ 236.891112] __vfs_write+0x10b/0x960 [ 236.894823] ? __fget_light+0x2ef/0x430 [ 236.898795] ? sg_ioctl+0x2f80/0x2f80 [ 236.902596] ? kernel_read+0x120/0x120 [ 236.906486] ? wait_for_completion+0x870/0x870 [ 236.911089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.916625] ? security_file_permission+0x1c6/0x240 [ 236.921644] ? rw_verify_area+0x118/0x360 [ 236.925793] vfs_write+0x1f8/0x560 [ 236.929338] ksys_write+0xf9/0x250 [ 236.932887] ? __ia32_sys_read+0xb0/0xb0 [ 236.936961] __x64_sys_write+0x73/0xb0 [ 236.940853] do_syscall_64+0x1b1/0x800 [ 236.944736] ? finish_task_switch+0x1ca/0x840 [ 236.949229] ? syscall_return_slowpath+0x5c0/0x5c0 [ 236.954168] ? syscall_return_slowpath+0x30f/0x5c0 [ 236.959102] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 236.964471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.969331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.974517] RIP: 0033:0x455a09 2018/05/15 19:17:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:15 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2002) [ 236.977702] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.985413] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 236.992677] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 236.999950] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 237.007226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 237.014491] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000001 2018/05/15 19:17:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:15 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x17, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000000c0), 0x4) 2018/05/15 19:17:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200)="8e15576b305e9063aef0eb39fa5330d5427a96e9a81ae04921ec1494756ffc6c76d7e9c6120331ed0be9513909cf0923d222d0980a6f21498455d53ea2778d2f863447435de839e57b3697b6a8dd186449014336ac106642dbf1af2ea7a9039564ca070cdcae470b24be5176b8ca12d8a1e44973862008c973c293c685400536a84c280e8a3e", 0x86) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x240000, 0x0) 2018/05/15 19:17:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x3f000000) 2018/05/15 19:17:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:15 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2003) 2018/05/15 19:17:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x2000) [ 237.181171] ion_mmap: failure mapping buffer to userspace [ 237.201737] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffca88, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x240000, 0x0) 2018/05/15 19:17:16 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000000) 2018/05/15 19:17:16 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) 2018/05/15 19:17:16 executing program 0 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:16 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0xffffffff00000000) 2018/05/15 19:17:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1400000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 238.035853] FAULT_INJECTION: forcing a failure. [ 238.035853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.047849] CPU: 1 PID: 13735 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 238.055137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.064500] Call Trace: [ 238.067150] dump_stack+0x1b9/0x294 [ 238.070789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.075977] ? lock_downgrade+0x8e0/0x8e0 [ 238.080129] should_fail.cold.4+0xa/0x1a [ 238.084185] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.089292] ? is_bpf_text_address+0xd7/0x170 [ 238.093783] ? kernel_text_address+0x79/0xf0 [ 238.098194] ? __unwind_start+0x166/0x330 [ 238.102336] ? __kernel_text_address+0xd/0x40 [ 238.106827] ? unwind_get_return_address+0x61/0xa0 [ 238.111752] ? __save_stack_trace+0x7e/0xd0 [ 238.116073] ? graph_lock+0x170/0x170 [ 238.119887] ? __lock_is_held+0xb5/0x140 [ 238.123946] ? sg_write+0x8c3/0xd30 [ 238.127587] __alloc_pages_nodemask+0x34e/0xd70 [ 238.132257] ? print_usage_bug+0xc0/0xc0 [ 238.136313] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 238.141338] ? blk_queue_exit+0x1a4/0x2f0 [ 238.145482] ? __lock_is_held+0xb5/0x140 [ 238.149540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.155071] ? cap_capable+0x1f9/0x260 [ 238.158959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.164490] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 238.170034] alloc_pages_current+0x10c/0x210 [ 238.174444] sg_build_indirect.isra.15+0x32a/0x750 [ 238.179379] sg_common_write.isra.16+0x9ed/0x1dd0 [ 238.184224] ? sg_open+0x1130/0x1130 [ 238.187934] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 238.193207] ? __check_object_size+0x95/0x5d9 [ 238.197702] ? usercopy_warn+0x120/0x120 [ 238.201765] ? __might_sleep+0x95/0x190 [ 238.205736] sg_write+0x8c3/0xd30 [ 238.209184] ? sg_ioctl+0x2f80/0x2f80 [ 238.212977] ? rcu_is_watching+0x85/0x140 [ 238.217116] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 238.222305] ? __fget+0x40c/0x650 [ 238.225759] ? expand_files.part.8+0x9a0/0x9a0 [ 238.230348] ? lock_downgrade+0x8e0/0x8e0 [ 238.234493] ? proc_fail_nth_write+0x96/0x1f0 [ 238.238992] __vfs_write+0x10b/0x960 [ 238.242700] ? __fget_light+0x2ef/0x430 [ 238.246665] ? sg_ioctl+0x2f80/0x2f80 [ 238.250456] ? kernel_read+0x120/0x120 [ 238.254338] ? wait_for_completion+0x870/0x870 [ 238.258923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.264451] ? security_file_permission+0x1c6/0x240 [ 238.269460] ? rw_verify_area+0x118/0x360 [ 238.273600] vfs_write+0x1f8/0x560 [ 238.277137] ksys_write+0xf9/0x250 [ 238.280668] ? __ia32_sys_read+0xb0/0xb0 [ 238.284729] __x64_sys_write+0x73/0xb0 [ 238.288609] do_syscall_64+0x1b1/0x800 [ 238.292485] ? finish_task_switch+0x1ca/0x840 [ 238.296980] ? syscall_return_slowpath+0x5c0/0x5c0 [ 238.301904] ? syscall_return_slowpath+0x30f/0x5c0 [ 238.306827] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 238.312196] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.317045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.322224] RIP: 0033:0x455a09 [ 238.325401] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/05/15 19:17:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88a8ffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x4000000000000000) [ 238.333103] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 238.340360] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 238.347623] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 238.354882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 238.362148] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000002 [ 238.373693] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:17 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2500) 2018/05/15 19:17:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x1000000) 2018/05/15 19:17:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x6000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:18 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x6000) 2018/05/15 19:17:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = getpgrp(0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000100)={&(0x7f0000000200)="b50565cee2b2e1ee46d3dc7dbc6b6f7695030e6bfb100d65d6cfc5d4d377c09abfe8d31e408bb838724023e39cf5166ba8c58b1579426b795e1ba42d8234a31eee39f27d915a33b0bd962bf66869305e62b1c73dd43f04f21a9b38a164075fd60911cd1d6c617ad6a21e2afbf0f2b13a4101d150ba9dab003932e2b9ee7901399a5ce4d229a8bd7e521ed0616dccd36998cb923d67323011696a4e745b3c364e70d7269fb8827ed01003f45e85e1f3c1378f709e70aa4c44cc2ecbf7f282cc528b4b07ab79dd8297cf2cb80d023b", 0xce}) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f73782e2f64658e89b8113ce4"], &(0x7f00000000c0)='\x00', 0x1, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) 2018/05/15 19:17:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:18 executing program 0 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:18 executing program 1 (fault-call:5 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x400000) 2018/05/15 19:17:18 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0x0) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x14000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 239.436112] ion_mmap: failure mapping buffer to userspace [ 239.438372] FAULT_INJECTION: forcing a failure. [ 239.438372] name failslab, interval 1, probability 0, space 0, times 0 [ 239.443073] ion_mmap: failure mapping buffer to userspace [ 239.453130] CPU: 1 PID: 13786 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 239.453147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.475316] Call Trace: [ 239.477913] dump_stack+0x1b9/0x294 [ 239.481543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.486739] should_fail.cold.4+0xa/0x1a [ 239.490798] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.495894] ? find_held_lock+0x36/0x1c0 [ 239.499956] ? find_held_lock+0x36/0x1c0 [ 239.504040] ? check_same_owner+0x320/0x320 [ 239.508358] ? rcu_note_context_switch+0x710/0x710 [ 239.513311] ? wait_for_completion+0x870/0x870 [ 239.517890] __should_failslab+0x124/0x180 [ 239.522125] should_failslab+0x9/0x14 [ 239.525923] kmem_cache_alloc+0x2af/0x760 [ 239.530073] getname_flags+0xd0/0x5a0 [ 239.533869] getname+0x19/0x20 [ 239.537053] do_sys_open+0x39a/0x740 [ 239.540764] ? filp_open+0x80/0x80 [ 239.544313] __x64_sys_open+0x7e/0xc0 [ 239.548106] do_syscall_64+0x1b1/0x800 [ 239.551984] ? finish_task_switch+0x1ca/0x840 [ 239.556475] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.561397] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.566325] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 239.571692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.576543] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.581720] RIP: 0033:0x40fc61 [ 239.584897] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 239.592605] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 239.599862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 239.607136] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 239.614394] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 239.621654] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000000 [ 239.635238] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) [ 239.686982] FAULT_INJECTION: forcing a failure. [ 239.686982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 239.699064] CPU: 0 PID: 13799 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 239.706365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.715746] Call Trace: [ 239.718382] dump_stack+0x1b9/0x294 [ 239.722052] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.727282] ? lock_downgrade+0x8e0/0x8e0 [ 239.731483] should_fail.cold.4+0xa/0x1a [ 239.735599] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.740754] ? is_bpf_text_address+0xd7/0x170 [ 239.745288] ? kernel_text_address+0x79/0xf0 [ 239.749731] ? __unwind_start+0x166/0x330 [ 239.753908] ? __kernel_text_address+0xd/0x40 [ 239.758438] ? unwind_get_return_address+0x61/0xa0 [ 239.763404] ? __save_stack_trace+0x7e/0xd0 [ 239.767759] ? graph_lock+0x170/0x170 [ 239.771722] ? __lock_is_held+0xb5/0x140 [ 239.775817] ? sg_write+0x8c3/0xd30 [ 239.779501] __alloc_pages_nodemask+0x34e/0xd70 [ 239.784205] ? print_usage_bug+0xc0/0xc0 [ 239.788298] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 239.793354] ? blk_queue_exit+0x1a4/0x2f0 [ 239.797569] ? __lock_is_held+0xb5/0x140 [ 239.801672] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.807238] ? cap_capable+0x1f9/0x260 [ 239.811166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.816734] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 239.822316] alloc_pages_current+0x10c/0x210 [ 239.826767] sg_build_indirect.isra.15+0x32a/0x750 [ 239.831760] sg_common_write.isra.16+0x9ed/0x1dd0 [ 239.836661] ? sg_open+0x1130/0x1130 [ 239.840409] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 239.845634] ? __check_object_size+0x95/0x5d9 [ 239.850168] ? usercopy_warn+0x120/0x120 [ 239.854279] ? __might_sleep+0x95/0x190 [ 239.858332] sg_write+0x8c3/0xd30 [ 239.861862] ? sg_ioctl+0x2f80/0x2f80 [ 239.864575] ion_mmap: failure mapping buffer to userspace [ 239.865680] ? rcu_is_watching+0x85/0x140 [ 239.865709] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 239.865751] ? __fget+0x40c/0x650 [ 239.865786] ? expand_files.part.8+0x9a0/0x9a0 [ 239.865811] ? lock_downgrade+0x8e0/0x8e0 [ 239.892878] ? proc_fail_nth_write+0x96/0x1f0 [ 239.897429] __vfs_write+0x10b/0x960 [ 239.901173] ? __fget_light+0x2ef/0x430 [ 239.905172] ? sg_ioctl+0x2f80/0x2f80 [ 239.909001] ? kernel_read+0x120/0x120 [ 239.912919] ? wait_for_completion+0x870/0x870 [ 239.917546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 239.923113] ? security_file_permission+0x1c6/0x240 [ 239.928180] ? rw_verify_area+0x118/0x360 [ 239.932359] vfs_write+0x1f8/0x560 2018/05/15 19:17:18 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2) 2018/05/15 19:17:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x40030000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x60100) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0xbb, 0x2000, 0x800]}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) 2018/05/15 19:17:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x4000) 2018/05/15 19:17:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x6012, r1, 0x0) [ 239.935931] ksys_write+0xf9/0x250 [ 239.939504] ? __ia32_sys_read+0xb0/0xb0 [ 239.943592] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 239.948472] __x64_sys_write+0x73/0xb0 [ 239.952392] do_syscall_64+0x1b1/0x800 [ 239.956307] ? finish_task_switch+0x1ca/0x840 [ 239.960842] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.965812] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.970787] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 239.976190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.981076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.986288] RIP: 0033:0x455a09 [ 239.989492] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.997230] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 240.004523] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 240.006285] ion_mmap: failure mapping buffer to userspace [ 240.011812] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 240.011824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/15 19:17:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) [ 240.011836] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000003 2018/05/15 19:17:18 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2007) 2018/05/15 19:17:18 executing program 1 (fault-call:5 fault-nth:1): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 240.183655] FAULT_INJECTION: forcing a failure. [ 240.183655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.195529] CPU: 1 PID: 13840 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 240.202822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.212183] Call Trace: [ 240.214804] dump_stack+0x1b9/0x294 [ 240.218455] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.223667] ? perf_trace_lock_acquire+0xe3/0x980 [ 240.228538] should_fail.cold.4+0xa/0x1a [ 240.232628] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.237767] ? debug_check_no_locks_freed+0x310/0x310 [ 240.242978] ? _parse_integer+0x13b/0x190 [ 240.247151] ? graph_lock+0x170/0x170 [ 240.250973] ? perf_trace_lock+0xd6/0x900 [ 240.255141] ? _kstrtoull+0x180/0x230 [ 240.258962] ? _parse_integer+0x190/0x190 [ 240.263138] ? zap_class+0x720/0x720 [ 240.266882] ? perf_trace_lock+0xd6/0x900 [ 240.271058] ? perf_trace_lock_acquire+0xe3/0x980 [ 240.275935] ? zap_class+0x720/0x720 [ 240.279654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.285184] ? should_fail+0x21b/0xbcd [ 240.289063] ? perf_trace_lock+0xd6/0x900 [ 240.293208] __alloc_pages_nodemask+0x34e/0xd70 [ 240.297880] ? find_held_lock+0x36/0x1c0 [ 240.301939] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 240.306963] ? find_held_lock+0x36/0x1c0 [ 240.311058] ? check_same_owner+0x320/0x320 [ 240.315389] cache_grow_begin+0x72/0x6c0 [ 240.319459] kmem_cache_alloc+0x689/0x760 [ 240.323615] getname_flags+0xd0/0x5a0 [ 240.327409] getname+0x19/0x20 [ 240.330592] do_sys_open+0x39a/0x740 [ 240.334303] ? filp_open+0x80/0x80 [ 240.337852] __x64_sys_open+0x7e/0xc0 [ 240.341650] do_syscall_64+0x1b1/0x800 [ 240.345530] ? finish_task_switch+0x1ca/0x840 [ 240.350035] ? syscall_return_slowpath+0x5c0/0x5c0 [ 240.354968] ? syscall_return_slowpath+0x30f/0x5c0 [ 240.359896] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 240.365263] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.370103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.375280] RIP: 0033:0x40fc61 [ 240.378456] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 240.386156] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 240.393414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 240.400674] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 240.407934] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 240.415189] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000001 2018/05/15 19:17:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x81000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:19 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2005) 2018/05/15 19:17:19 executing program 0 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='/dev/ion\x00', 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r2, 0x4, 0x1, r3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:17:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0x0) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:19 executing program 1 (fault-call:5 fault-nth:2): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x20000000000000) [ 240.971882] FAULT_INJECTION: forcing a failure. [ 240.971882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.973326] FAULT_INJECTION: forcing a failure. [ 240.973326] name failslab, interval 1, probability 0, space 0, times 0 [ 240.983878] CPU: 1 PID: 13858 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 241.002356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.011707] Call Trace: [ 241.014300] dump_stack+0x1b9/0x294 [ 241.017944] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.023132] ? lock_downgrade+0x8e0/0x8e0 [ 241.027287] should_fail.cold.4+0xa/0x1a [ 241.031397] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.036508] ? is_bpf_text_address+0xd7/0x170 [ 241.041004] ? kernel_text_address+0x79/0xf0 [ 241.045410] ? __unwind_start+0x166/0x330 [ 241.049556] ? __kernel_text_address+0xd/0x40 [ 241.054054] ? unwind_get_return_address+0x61/0xa0 [ 241.058984] ? __save_stack_trace+0x7e/0xd0 [ 241.064300] ? graph_lock+0x170/0x170 [ 241.068118] ? __lock_is_held+0xb5/0x140 [ 241.072346] ? sg_write+0x8c3/0xd30 [ 241.075992] __alloc_pages_nodemask+0x34e/0xd70 [ 241.080661] ? print_usage_bug+0xc0/0xc0 [ 241.084727] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 241.089747] ? blk_queue_exit+0x1a4/0x2f0 [ 241.093899] ? __lock_is_held+0xb5/0x140 [ 241.097967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.103501] ? cap_capable+0x1f9/0x260 [ 241.107415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.112952] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 241.118497] alloc_pages_current+0x10c/0x210 [ 241.122911] sg_build_indirect.isra.15+0x32a/0x750 [ 241.127850] sg_common_write.isra.16+0x9ed/0x1dd0 [ 241.132714] ? sg_open+0x1130/0x1130 [ 241.136433] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 241.141628] ? __check_object_size+0x95/0x5d9 [ 241.146138] ? usercopy_warn+0x120/0x120 [ 241.150209] ? __might_sleep+0x95/0x190 [ 241.154196] sg_write+0x8c3/0xd30 [ 241.157653] ? sg_ioctl+0x2f80/0x2f80 [ 241.161456] ? rcu_is_watching+0x85/0x140 [ 241.165607] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 241.170821] ? __fget+0x40c/0x650 [ 241.174281] ? expand_files.part.8+0x9a0/0x9a0 [ 241.178865] ? lock_downgrade+0x8e0/0x8e0 [ 241.183017] ? proc_fail_nth_write+0x96/0x1f0 [ 241.187536] __vfs_write+0x10b/0x960 [ 241.191250] ? __fget_light+0x2ef/0x430 [ 241.195227] ? sg_ioctl+0x2f80/0x2f80 [ 241.199033] ? kernel_read+0x120/0x120 [ 241.202926] ? wait_for_completion+0x870/0x870 [ 241.207525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.213082] ? security_file_permission+0x1c6/0x240 [ 241.218102] ? rw_verify_area+0x118/0x360 [ 241.222251] vfs_write+0x1f8/0x560 [ 241.225796] ksys_write+0xf9/0x250 [ 241.229337] ? __ia32_sys_read+0xb0/0xb0 [ 241.233435] __x64_sys_write+0x73/0xb0 [ 241.237324] do_syscall_64+0x1b1/0x800 [ 241.241213] ? finish_task_switch+0x1ca/0x840 [ 241.245712] ? syscall_return_slowpath+0x5c0/0x5c0 [ 241.250641] ? syscall_return_slowpath+0x30f/0x5c0 [ 241.255578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 241.260947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.265797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.270983] RIP: 0033:0x455a09 [ 241.274167] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.281882] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 241.289161] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 241.296434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 241.303708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 241.310974] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000004 2018/05/15 19:17:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x40000000000000) [ 241.318266] CPU: 0 PID: 13860 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 241.325563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.334932] Call Trace: [ 241.337541] dump_stack+0x1b9/0x294 [ 241.341189] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.346394] ? perf_trace_lock_acquire+0xe3/0x980 [ 241.351264] should_fail.cold.4+0xa/0x1a [ 241.355346] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.360468] ? debug_check_no_locks_freed+0x310/0x310 [ 241.365685] ? print_usage_bug+0xc0/0xc0 [ 241.369775] ? find_held_lock+0x36/0x1c0 [ 241.373884] ? check_same_owner+0x320/0x320 [ 241.378231] ? rcu_note_context_switch+0x710/0x710 [ 241.383167] __should_failslab+0x124/0x180 [ 241.387400] should_failslab+0x9/0x14 [ 241.391192] kmem_cache_alloc+0x2af/0x760 [ 241.395337] ? debug_check_no_locks_freed+0x310/0x310 [ 241.400536] get_empty_filp+0x125/0x520 [ 241.404505] ? proc_nr_files+0x60/0x60 [ 241.408386] ? lock_downgrade+0x8e0/0x8e0 [ 241.412526] ? perf_trace_lock+0xd6/0x900 [ 241.416679] ? perf_trace_lock_acquire+0xe3/0x980 [ 241.421514] ? rcu_is_watching+0x85/0x140 [ 241.425661] path_openat+0x116/0x4e20 [ 241.429473] ? unwind_get_return_address+0x61/0xa0 [ 241.434398] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 241.439410] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 241.444160] ? find_held_lock+0x36/0x1c0 [ 241.448227] ? lock_downgrade+0x8e0/0x8e0 [ 241.452384] ? kasan_check_read+0x11/0x20 [ 241.456535] ? do_raw_spin_unlock+0x9e/0x2e0 [ 241.460936] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 241.465513] ? __lock_is_held+0xb5/0x140 [ 241.469585] ? _raw_spin_unlock+0x22/0x30 [ 241.473728] ? __alloc_fd+0x346/0x700 [ 241.477532] ? usercopy_warn+0x120/0x120 [ 241.481605] do_filp_open+0x249/0x350 [ 241.485404] ? may_open_dev+0x100/0x100 [ 241.489371] ? strncpy_from_user+0x3b6/0x500 [ 241.493777] ? mpi_free.cold.1+0x19/0x19 [ 241.497835] ? get_unused_fd_flags+0x121/0x190 [ 241.502407] ? getname_flags+0xd0/0x5a0 [ 241.506381] ? getname_flags+0x26e/0x5a0 [ 241.510442] do_sys_open+0x56f/0x740 [ 241.514155] ? filp_open+0x80/0x80 [ 241.517697] __x64_sys_open+0x7e/0xc0 [ 241.521493] do_syscall_64+0x1b1/0x800 [ 241.525374] ? finish_task_switch+0x1ca/0x840 [ 241.529863] ? syscall_return_slowpath+0x5c0/0x5c0 [ 241.534786] ? syscall_return_slowpath+0x30f/0x5c0 [ 241.539710] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 241.545072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.549916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.555101] RIP: 0033:0x40fc61 [ 241.558281] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 241.565993] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 2018/05/15 19:17:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x43050000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 241.573263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 241.580523] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 241.587793] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 241.595051] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000002 2018/05/15 19:17:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x408c5333, &(0x7f000021af98)={0x0, 0xb6, 0x40}) 2018/05/15 19:17:20 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x3fffc, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000140)="9e994ea1fe456318bb37815cbd681b8d35afc69ba4c79662d8298bb20494302c1705165601fdf3d9a0e97b407bb8844abeb7995be0f3ad1255a5b0085327942eeff3530e14fd7e065ed50bc763c2d853ebdadc3ee9220b90384acbb14ae401dfbad8d536f89984fd0c5093a6fcaff33a4c67f8d992750eff") ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = accept4(r1, 0x0, &(0x7f0000000000), 0xf206a1d90f546453) setsockopt$inet6_tcp_int(r4, 0x6, 0xf, &(0x7f0000000040)=0x4, 0x4) [ 241.642385] ion_mmap: failure mapping buffer to userspace [ 241.661473] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x10000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000006000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001240)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000002280)={r3, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) socket$packet(0x11, 0x3, 0x300) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffe4a, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = msgget$private(0x0, 0x20000000000002) msgsnd(r5, &(0x7f0000000200)={0x3, "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"}, 0x1008, 0x800) [ 241.761429] ion_mmap: failure mapping buffer to userspace [ 241.797132] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x100000000000000) 2018/05/15 19:17:21 executing program 1 (fault-call:5 fault-nth:3): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:21 executing program 0 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:21 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:21 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0x0) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30f) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x8000, 0x6, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0xb7e3f8c13ecc0577, 0x5b, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000000000000000, 0x6012, r2, 0x0) 2018/05/15 19:17:21 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r0, 0x660c, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x125200, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000200000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8db482075da1", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x28, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000001c0)={0x1, 0x0, [0xfffffffffffffffd]}) getsockopt$packet_int(r0, 0x107, 0x1a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x40}) [ 242.971580] ion_mmap: failure mapping buffer to userspace [ 242.993131] FAULT_INJECTION: forcing a failure. [ 242.993131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.996797] FAULT_INJECTION: forcing a failure. [ 242.996797] name failslab, interval 1, probability 0, space 0, times 0 [ 243.005094] CPU: 0 PID: 13907 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 243.005108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.005116] Call Trace: [ 243.005141] dump_stack+0x1b9/0x294 [ 243.005170] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.044807] ? lock_downgrade+0x8e0/0x8e0 [ 243.048980] should_fail.cold.4+0xa/0x1a [ 243.053058] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.058180] ? is_bpf_text_address+0xd7/0x170 [ 243.062707] ? kernel_text_address+0x79/0xf0 [ 243.067128] ? __unwind_start+0x166/0x330 [ 243.071287] ? __kernel_text_address+0xd/0x40 [ 243.075822] ? unwind_get_return_address+0x61/0xa0 [ 243.080762] ? __save_stack_trace+0x7e/0xd0 [ 243.085089] ? graph_lock+0x170/0x170 [ 243.088927] ? __lock_is_held+0xb5/0x140 [ 243.092992] ? sg_write+0x8c3/0xd30 [ 243.096652] __alloc_pages_nodemask+0x34e/0xd70 [ 243.101326] ? print_usage_bug+0xc0/0xc0 [ 243.105421] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 243.110460] ? blk_queue_exit+0x1a4/0x2f0 [ 243.114630] ? __lock_is_held+0xb5/0x140 [ 243.118706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.124248] ? cap_capable+0x1f9/0x260 [ 243.128155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.133697] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 243.139251] alloc_pages_current+0x10c/0x210 [ 243.143675] sg_build_indirect.isra.15+0x32a/0x750 [ 243.148627] sg_common_write.isra.16+0x9ed/0x1dd0 [ 243.153495] ? sg_open+0x1130/0x1130 [ 243.157222] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 243.162424] ? __check_object_size+0x95/0x5d9 [ 243.167037] ? usercopy_warn+0x120/0x120 [ 243.171121] ? __might_sleep+0x95/0x190 [ 243.175113] sg_write+0x8c3/0xd30 [ 243.178587] ? sg_ioctl+0x2f80/0x2f80 [ 243.182400] ? rcu_is_watching+0x85/0x140 [ 243.186582] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 243.191801] ? __fget+0x40c/0x650 [ 243.195274] ? expand_files.part.8+0x9a0/0x9a0 [ 243.199866] ? lock_downgrade+0x8e0/0x8e0 [ 243.204029] ? proc_fail_nth_write+0x96/0x1f0 [ 243.208581] __vfs_write+0x10b/0x960 [ 243.212301] ? __fget_light+0x2ef/0x430 [ 243.216281] ? sg_ioctl+0x2f80/0x2f80 [ 243.220089] ? kernel_read+0x120/0x120 [ 243.223988] ? wait_for_completion+0x870/0x870 [ 243.228606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.234154] ? security_file_permission+0x1c6/0x240 [ 243.239184] ? rw_verify_area+0x118/0x360 [ 243.243345] vfs_write+0x1f8/0x560 [ 243.246903] ksys_write+0xf9/0x250 [ 243.250454] ? __ia32_sys_read+0xb0/0xb0 [ 243.254539] __x64_sys_write+0x73/0xb0 [ 243.258442] do_syscall_64+0x1b1/0x800 [ 243.262334] ? finish_task_switch+0x1ca/0x840 [ 243.266840] ? syscall_return_slowpath+0x5c0/0x5c0 [ 243.271780] ? syscall_return_slowpath+0x30f/0x5c0 [ 243.276726] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 243.282115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.286977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.292170] RIP: 0033:0x455a09 [ 243.295359] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.303078] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 243.310349] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 243.317621] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 243.324891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 243.332179] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000005 [ 243.339493] CPU: 1 PID: 13913 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 243.346786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.354756] EXT4-fs (loop7): can't read group descriptor 0 [ 243.356140] Call Trace: [ 243.356165] dump_stack+0x1b9/0x294 [ 243.356186] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.356207] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.378041] ? rcu_note_context_switch+0x710/0x710 [ 243.382992] should_fail.cold.4+0xa/0x1a [ 243.387069] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.392184] ? snd_seq_open+0x4f/0x5c0 [ 243.396084] ? __mutex_lock+0x7d9/0x17f0 [ 243.400159] ? graph_lock+0x170/0x170 [ 243.403979] ? mutex_trylock+0x2a0/0x2a0 [ 243.408071] ? __lock_acquire+0x7f5/0x5140 [ 243.412317] ? find_held_lock+0x36/0x1c0 [ 243.416394] ? __lock_is_held+0xb5/0x140 [ 243.420495] ? check_same_owner+0x320/0x320 [ 243.424825] ? perf_trace_lock+0x900/0x900 [ 243.429080] ? rcu_note_context_switch+0x710/0x710 [ 243.434032] __should_failslab+0x124/0x180 [ 243.438294] should_failslab+0x9/0x14 [ 243.442109] kmem_cache_alloc_trace+0x2cb/0x780 [ 243.446798] ? kasan_check_write+0x14/0x20 [ 243.451055] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 243.456008] seq_create_client1+0xb3/0x5c0 [ 243.460274] ? snd_seq_call_port_info_ioctl.isra.12+0x480/0x480 [ 243.466354] ? lock_downgrade+0x8e0/0x8e0 [ 243.470518] ? m_show+0x5d0/0x5d0 [ 243.473993] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 243.479372] snd_seq_open+0x78/0x5c0 [ 243.483116] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 243.488475] snd_open+0x21a/0x430 [ 243.491921] ? snd_request_card+0x80/0x80 [ 243.496060] chrdev_open+0x256/0x760 [ 243.499774] ? cdev_put.part.0+0x50/0x50 [ 243.503829] ? errseq_sample+0xe3/0x120 [ 243.507801] ? security_file_open+0x14f/0x1d0 [ 243.512305] do_dentry_open+0x7ef/0xf10 [ 243.516271] ? cdev_put.part.0+0x50/0x50 [ 243.520329] vfs_open+0x139/0x230 [ 243.523778] path_openat+0x1676/0x4e20 [ 243.527734] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 243.532494] ? find_held_lock+0x36/0x1c0 [ 243.536557] ? lock_downgrade+0x8e0/0x8e0 [ 243.540703] ? kasan_check_read+0x11/0x20 [ 243.544841] ? do_raw_spin_unlock+0x9e/0x2e0 [ 243.549248] ? __lock_is_held+0xb5/0x140 [ 243.553319] ? _raw_spin_unlock+0x22/0x30 [ 243.557459] ? __alloc_fd+0x346/0x700 [ 243.561250] ? usercopy_warn+0x120/0x120 [ 243.565325] do_filp_open+0x249/0x350 [ 243.569120] ? may_open_dev+0x100/0x100 [ 243.573086] ? strncpy_from_user+0x3b6/0x500 [ 243.577492] ? mpi_free.cold.1+0x19/0x19 [ 243.581551] ? get_unused_fd_flags+0x121/0x190 [ 243.586211] ? getname_flags+0xd0/0x5a0 [ 243.590179] ? getname_flags+0x26e/0x5a0 [ 243.594239] do_sys_open+0x56f/0x740 [ 243.597953] ? filp_open+0x80/0x80 [ 243.601505] __x64_sys_open+0x7e/0xc0 [ 243.605298] do_syscall_64+0x1b1/0x800 [ 243.609182] ? finish_task_switch+0x1ca/0x840 [ 243.613678] ? syscall_return_slowpath+0x5c0/0x5c0 [ 243.618600] ? syscall_return_slowpath+0x30f/0x5c0 [ 243.623527] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 243.628889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.633728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.638906] RIP: 0033:0x40fc61 [ 243.642085] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 243.649795] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 243.657054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 243.664313] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 2018/05/15 19:17:22 executing program 0 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:22 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xffffffff, 0x4001) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000800)={0xf}, 0x10}], 0x1}, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0x4e, &(0x7f0000000080)=""/78}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000200)=""/96) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) [ 243.671582] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 243.678842] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000003 2018/05/15 19:17:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x40000000) 2018/05/15 19:17:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 243.742089] FAULT_INJECTION: forcing a failure. [ 243.742089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.754244] CPU: 0 PID: 13926 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 243.761561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.770943] Call Trace: [ 243.773566] dump_stack+0x1b9/0x294 [ 243.777235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.782458] ? lock_downgrade+0x8e0/0x8e0 [ 243.786659] should_fail.cold.4+0xa/0x1a [ 243.790764] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.795912] ? is_bpf_text_address+0xd7/0x170 [ 243.800466] ? kernel_text_address+0x79/0xf0 [ 243.804926] ? __unwind_start+0x166/0x330 [ 243.809109] ? __kernel_text_address+0xd/0x40 [ 243.813637] ? unwind_get_return_address+0x61/0xa0 [ 243.818601] ? __save_stack_trace+0x7e/0xd0 [ 243.822946] ? graph_lock+0x170/0x170 [ 243.826807] ? __lock_is_held+0xb5/0x140 [ 243.830893] ? sg_write+0x8c3/0xd30 [ 243.834581] __alloc_pages_nodemask+0x34e/0xd70 [ 243.839275] ? print_usage_bug+0xc0/0xc0 [ 243.843369] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 243.848427] ? blk_queue_exit+0x1a4/0x2f0 [ 243.852619] ? __lock_is_held+0xb5/0x140 [ 243.856718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.862275] ? cap_capable+0x1f9/0x260 [ 243.866197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.871767] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 243.877346] alloc_pages_current+0x10c/0x210 [ 243.881797] sg_build_indirect.isra.15+0x32a/0x750 [ 243.886774] sg_common_write.isra.16+0x9ed/0x1dd0 [ 243.891670] ? sg_open+0x1130/0x1130 [ 243.895419] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 243.900648] ? __check_object_size+0x95/0x5d9 [ 243.905184] ? usercopy_warn+0x120/0x120 [ 243.909286] ? __might_sleep+0x95/0x190 [ 243.913299] sg_write+0x8c3/0xd30 [ 243.916778] ? sg_ioctl+0x2f80/0x2f80 [ 243.920610] ? rcu_is_watching+0x85/0x140 [ 243.924787] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 243.930025] ? __fget+0x40c/0x650 [ 243.933533] ? expand_files.part.8+0x9a0/0x9a0 [ 243.938152] ? lock_downgrade+0x8e0/0x8e0 [ 243.942330] ? proc_fail_nth_write+0x96/0x1f0 [ 243.946874] __vfs_write+0x10b/0x960 [ 243.950611] ? __fget_light+0x2ef/0x430 [ 243.954612] ? sg_ioctl+0x2f80/0x2f80 [ 243.958443] ? kernel_read+0x120/0x120 [ 243.962359] ? wait_for_completion+0x870/0x870 [ 243.966993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.972565] ? security_file_permission+0x1c6/0x240 [ 243.977611] ? rw_verify_area+0x118/0x360 [ 243.979233] ion_mmap: failure mapping buffer to userspace [ 243.981782] vfs_write+0x1f8/0x560 [ 243.981812] ksys_write+0xf9/0x250 [ 243.981837] ? __ia32_sys_read+0xb0/0xb0 [ 243.981872] __x64_sys_write+0x73/0xb0 [ 244.002448] do_syscall_64+0x1b1/0x800 [ 244.006359] ? finish_task_switch+0x1ca/0x840 [ 244.010888] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.015847] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.020809] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.026214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.031101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.036317] RIP: 0033:0x455a09 [ 244.039527] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.039937] ion_mmap: failure mapping buffer to userspace [ 244.047259] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 244.047270] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 244.047279] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.047288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 244.047298] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000006 2018/05/15 19:17:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x3f00) 2018/05/15 19:17:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffff000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:22 executing program 1 (fault-call:5 fault-nth:4): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:22 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000101000, 0x0) 2018/05/15 19:17:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0x0) dup3(r3, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:22 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(0xffffffffffffffff, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:22 executing program 0 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000c40)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000c00)={0xffffffff}, 0x13f, 0xb}}, 0x20) openat$rtc(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/rtc0\x00', 0x840, 0x0) write$rdma_cm(r0, &(0x7f0000000cc0)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0x4}, &(0x7f0000000140)=0x8) [ 244.332718] ion_mmap: failure mapping buffer to userspace [ 244.348375] ion_mmap: failure mapping buffer to userspace [ 244.366529] FAULT_INJECTION: forcing a failure. [ 244.366529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.370171] ion_mmap: failure mapping buffer to userspace [ 244.378476] CPU: 1 PID: 13962 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 244.391268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.400631] Call Trace: [ 244.403056] ion_mmap: failure mapping buffer to userspace [ 244.403288] dump_stack+0x1b9/0x294 [ 244.412442] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.417646] ? lock_downgrade+0x8e0/0x8e0 [ 244.421821] should_fail.cold.4+0xa/0x1a [ 244.425900] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.431026] ? is_bpf_text_address+0xd7/0x170 [ 244.435544] ? kernel_text_address+0x79/0xf0 [ 244.439979] ? __unwind_start+0x166/0x330 [ 244.444145] ? __kernel_text_address+0xd/0x40 [ 244.448665] ? unwind_get_return_address+0x61/0xa0 [ 244.453631] ? __save_stack_trace+0x7e/0xd0 [ 244.457975] ? graph_lock+0x170/0x170 [ 244.461815] ? __lock_is_held+0xb5/0x140 [ 244.465890] ? sg_write+0x8c3/0xd30 [ 244.469548] __alloc_pages_nodemask+0x34e/0xd70 [ 244.474233] ? print_usage_bug+0xc0/0xc0 [ 244.478311] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 244.483346] ? blk_queue_exit+0x1a4/0x2f0 [ 244.487519] ? __lock_is_held+0xb5/0x140 [ 244.491604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.497160] ? cap_capable+0x1f9/0x260 [ 244.501090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.506643] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 244.512205] alloc_pages_current+0x10c/0x210 [ 244.513577] FAULT_INJECTION: forcing a failure. [ 244.513577] name failslab, interval 1, probability 0, space 0, times 0 [ 244.516626] sg_build_indirect.isra.15+0x32a/0x750 [ 244.516652] sg_common_write.isra.16+0x9ed/0x1dd0 [ 244.516676] ? sg_open+0x1130/0x1130 [ 244.541339] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 244.546536] ? __check_object_size+0x95/0x5d9 [ 244.551036] ? usercopy_warn+0x120/0x120 [ 244.555103] ? __might_sleep+0x95/0x190 [ 244.559083] sg_write+0x8c3/0xd30 [ 244.562539] ? sg_ioctl+0x2f80/0x2f80 [ 244.566336] ? rcu_is_watching+0x85/0x140 [ 244.570483] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 244.575682] ? __fget+0x40c/0x650 [ 244.579143] ? expand_files.part.8+0x9a0/0x9a0 [ 244.583724] ? lock_downgrade+0x8e0/0x8e0 [ 244.587871] ? proc_fail_nth_write+0x96/0x1f0 [ 244.592380] __vfs_write+0x10b/0x960 [ 244.596093] ? __fget_light+0x2ef/0x430 [ 244.600064] ? sg_ioctl+0x2f80/0x2f80 [ 244.603863] ? kernel_read+0x120/0x120 [ 244.607750] ? wait_for_completion+0x870/0x870 [ 244.612344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.617884] ? security_file_permission+0x1c6/0x240 [ 244.622902] ? rw_verify_area+0x118/0x360 [ 244.627051] vfs_write+0x1f8/0x560 [ 244.630596] ksys_write+0xf9/0x250 [ 244.634139] ? __ia32_sys_read+0xb0/0xb0 [ 244.638212] __x64_sys_write+0x73/0xb0 [ 244.642097] do_syscall_64+0x1b1/0x800 [ 244.645979] ? finish_task_switch+0x1ca/0x840 [ 244.650477] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.655409] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.660342] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.665709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.670557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.675741] RIP: 0033:0x455a09 2018/05/15 19:17:23 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x2, 0x2012, r1, 0xfffffffffffffffb) sync_file_range(r2, 0x5, 0x5c4, 0x4) 2018/05/15 19:17:23 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80082, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000100)=0x8001, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x80000001, 0x44000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0x2, 0x6be29951, 0x3a9fd73c, {0x77359400}, 0x9e, 0xb70}) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000140)) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000240)) gettid() 2018/05/15 19:17:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x3f00000000000000) [ 244.678924] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.686635] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 244.693900] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 244.701263] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.708537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 244.715801] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000007 [ 244.723092] CPU: 0 PID: 13970 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 2018/05/15 19:17:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88caffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 244.730379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.739746] Call Trace: [ 244.742352] dump_stack+0x1b9/0x294 [ 244.745994] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.751200] ? perf_trace_lock_acquire+0xe3/0x980 [ 244.756066] should_fail.cold.4+0xa/0x1a [ 244.760149] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.765277] ? graph_lock+0x170/0x170 [ 244.769103] ? find_held_lock+0x36/0x1c0 [ 244.773188] ? __lock_is_held+0xb5/0x140 [ 244.777281] ? check_same_owner+0x320/0x320 [ 244.781613] ? __lock_is_held+0xb5/0x140 [ 244.785689] ? rcu_note_context_switch+0x710/0x710 [ 244.790640] __should_failslab+0x124/0x180 [ 244.794887] should_failslab+0x9/0x14 [ 244.798694] kmem_cache_alloc_trace+0x2cb/0x780 [ 244.803374] ? __lock_is_held+0xb5/0x140 [ 244.807469] snd_seq_pool_new+0x93/0x2f0 [ 244.811544] ? snd_seq_pool_done+0x380/0x380 [ 244.815965] ? kasan_check_write+0x14/0x20 [ 244.820210] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 244.825168] seq_create_client1+0xcc/0x5c0 [ 244.829418] ? snd_seq_call_port_info_ioctl.isra.12+0x480/0x480 [ 244.835474] ? lock_downgrade+0x8e0/0x8e0 [ 244.839611] ? m_show+0x5d0/0x5d0 [ 244.843067] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 244.848422] snd_seq_open+0x78/0x5c0 [ 244.852134] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 244.857487] snd_open+0x21a/0x430 [ 244.860936] ? snd_request_card+0x80/0x80 [ 244.865078] chrdev_open+0x256/0x760 [ 244.868799] ? cdev_put.part.0+0x50/0x50 [ 244.872858] ? errseq_sample+0xe3/0x120 [ 244.876828] ? security_file_open+0x14f/0x1d0 [ 244.881320] do_dentry_open+0x7ef/0xf10 [ 244.885290] ? cdev_put.part.0+0x50/0x50 [ 244.889350] vfs_open+0x139/0x230 [ 244.892798] path_openat+0x1676/0x4e20 [ 244.896694] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 244.901450] ? find_held_lock+0x36/0x1c0 [ 244.905511] ? lock_downgrade+0x8e0/0x8e0 [ 244.909668] ? kasan_check_read+0x11/0x20 [ 244.913804] ? do_raw_spin_unlock+0x9e/0x2e0 [ 244.918205] ? __lock_is_held+0xb5/0x140 [ 244.922269] ? _raw_spin_unlock+0x22/0x30 [ 244.926417] ? __alloc_fd+0x346/0x700 [ 244.930212] ? usercopy_warn+0x120/0x120 [ 244.934276] do_filp_open+0x249/0x350 [ 244.938069] ? may_open_dev+0x100/0x100 [ 244.942050] ? strncpy_from_user+0x3b6/0x500 [ 244.946457] ? mpi_free.cold.1+0x19/0x19 [ 244.950512] ? get_unused_fd_flags+0x121/0x190 [ 244.955090] ? getname_flags+0xd0/0x5a0 [ 244.959069] ? getname_flags+0x26e/0x5a0 [ 244.963134] do_sys_open+0x56f/0x740 [ 244.966853] ? filp_open+0x80/0x80 [ 244.970397] __x64_sys_open+0x7e/0xc0 [ 244.974199] do_syscall_64+0x1b1/0x800 [ 244.978077] ? finish_task_switch+0x1ca/0x840 [ 244.982565] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.987486] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.992429] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.997797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.002647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.007833] RIP: 0033:0x40fc61 [ 245.011021] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 245.018727] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 245.025988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 2018/05/15 19:17:23 executing program 0 (fault-call:2 fault-nth:8): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 245.033252] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 245.040518] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 245.047784] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000004 2018/05/15 19:17:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffc0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 245.080105] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:23 executing program 1 (fault-call:5 fault-nth:5): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 245.133685] FAULT_INJECTION: forcing a failure. [ 245.133685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.145635] CPU: 0 PID: 13994 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 245.152940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.162324] Call Trace: [ 245.164953] dump_stack+0x1b9/0x294 [ 245.168629] ? dump_stack_print_info.cold.2+0x52/0x52 [ 245.173857] ? lock_downgrade+0x8e0/0x8e0 [ 245.176405] FAULT_INJECTION: forcing a failure. [ 245.176405] name failslab, interval 1, probability 0, space 0, times 0 [ 245.178051] should_fail.cold.4+0xa/0x1a [ 245.178081] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 245.178115] ? is_bpf_text_address+0xd7/0x170 [ 245.202968] ? kernel_text_address+0x79/0xf0 [ 245.207386] ? __unwind_start+0x166/0x330 [ 245.211548] ? __kernel_text_address+0xd/0x40 [ 245.216058] ? unwind_get_return_address+0x61/0xa0 [ 245.221000] ? __save_stack_trace+0x7e/0xd0 [ 245.225332] ? graph_lock+0x170/0x170 [ 245.229170] ? __lock_is_held+0xb5/0x140 [ 245.233246] ? sg_write+0x8c3/0xd30 [ 245.236901] __alloc_pages_nodemask+0x34e/0xd70 [ 245.241579] ? print_usage_bug+0xc0/0xc0 [ 245.245655] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 245.250689] ? blk_queue_exit+0x1a4/0x2f0 [ 245.254860] ? __lock_is_held+0xb5/0x140 [ 245.258945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.264497] ? cap_capable+0x1f9/0x260 [ 245.268405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.273950] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 245.279505] alloc_pages_current+0x10c/0x210 [ 245.283928] sg_build_indirect.isra.15+0x32a/0x750 [ 245.288884] sg_common_write.isra.16+0x9ed/0x1dd0 [ 245.293750] ? sg_open+0x1130/0x1130 [ 245.297474] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 245.302676] ? __check_object_size+0x95/0x5d9 [ 245.307183] ? usercopy_warn+0x120/0x120 [ 245.311266] ? __might_sleep+0x95/0x190 [ 245.315262] sg_write+0x8c3/0xd30 [ 245.318732] ? sg_ioctl+0x2f80/0x2f80 [ 245.322545] ? rcu_is_watching+0x85/0x140 [ 245.326707] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 245.331924] ? __fget+0x40c/0x650 [ 245.335415] ? expand_files.part.8+0x9a0/0x9a0 [ 245.340007] ? lock_downgrade+0x8e0/0x8e0 [ 245.344168] ? proc_fail_nth_write+0x96/0x1f0 [ 245.348694] __vfs_write+0x10b/0x960 [ 245.352426] ? __fget_light+0x2ef/0x430 [ 245.356408] ? sg_ioctl+0x2f80/0x2f80 [ 245.360217] ? kernel_read+0x120/0x120 [ 245.364114] ? wait_for_completion+0x870/0x870 [ 245.368733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.374278] ? security_file_permission+0x1c6/0x240 [ 245.379310] ? rw_verify_area+0x118/0x360 [ 245.383470] vfs_write+0x1f8/0x560 [ 245.387026] ksys_write+0xf9/0x250 [ 245.390580] ? __ia32_sys_read+0xb0/0xb0 [ 245.394654] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 245.399510] __x64_sys_write+0x73/0xb0 [ 245.403410] do_syscall_64+0x1b1/0x800 [ 245.407304] ? finish_task_switch+0x1ca/0x840 [ 245.411805] ? syscall_return_slowpath+0x5c0/0x5c0 [ 245.416741] ? syscall_return_slowpath+0x30f/0x5c0 [ 245.421685] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 245.427074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.431935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.437129] RIP: 0033:0x455a09 [ 245.440321] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.448044] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 245.455322] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 245.462595] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 245.469871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 245.477141] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000008 [ 245.484456] CPU: 1 PID: 13998 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 245.491746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.501114] Call Trace: [ 245.503725] dump_stack+0x1b9/0x294 [ 245.507379] ? dump_stack_print_info.cold.2+0x52/0x52 [ 245.512586] ? perf_trace_lock_acquire+0xe3/0x980 [ 245.517449] ? save_stack+0x43/0xd0 [ 245.521085] ? kasan_kmalloc+0xc4/0xe0 [ 245.524973] ? kmem_cache_alloc_trace+0x152/0x780 [ 245.529830] should_fail.cold.4+0xa/0x1a [ 245.533915] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 245.539030] ? perf_trace_lock+0x900/0x900 [ 245.543277] ? print_usage_bug+0xc0/0xc0 [ 245.547353] ? graph_lock+0x170/0x170 [ 245.551165] ? graph_lock+0x170/0x170 [ 245.554992] ? find_held_lock+0x36/0x1c0 [ 245.559162] ? __lock_is_held+0xb5/0x140 [ 245.563257] ? check_same_owner+0x320/0x320 [ 245.567597] ? rcu_note_context_switch+0x710/0x710 [ 245.572548] __should_failslab+0x124/0x180 [ 245.576800] should_failslab+0x9/0x14 [ 245.580614] kmem_cache_alloc_trace+0x2cb/0x780 [ 245.585298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 245.590328] ? trace_hardirqs_on+0xd/0x10 [ 245.594499] snd_seq_fifo_new+0xac/0x360 [ 245.598576] ? snd_seq_info_queues_read+0x5a0/0x5a0 [ 245.603605] ? lock_downgrade+0x8e0/0x8e0 [ 245.607762] ? m_show+0x5d0/0x5d0 [ 245.611240] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 245.616447] snd_seq_open+0x1c4/0x5c0 [ 245.620259] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 245.625634] snd_open+0x21a/0x430 [ 245.629111] ? snd_request_card+0x80/0x80 [ 245.633267] chrdev_open+0x256/0x760 [ 245.636999] ? cdev_put.part.0+0x50/0x50 [ 245.641074] ? errseq_sample+0xe3/0x120 [ 245.645071] ? security_file_open+0x14f/0x1d0 [ 245.649583] do_dentry_open+0x7ef/0xf10 [ 245.653572] ? cdev_put.part.0+0x50/0x50 [ 245.657647] vfs_open+0x139/0x230 [ 245.661110] path_openat+0x1676/0x4e20 [ 245.665029] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 245.669803] ? find_held_lock+0x36/0x1c0 [ 245.673894] ? lock_downgrade+0x8e0/0x8e0 [ 245.678064] ? kasan_check_read+0x11/0x20 [ 245.682223] ? do_raw_spin_unlock+0x9e/0x2e0 [ 245.686646] ? __lock_is_held+0xb5/0x140 [ 245.690727] ? _raw_spin_unlock+0x22/0x30 [ 245.694895] ? __alloc_fd+0x346/0x700 [ 245.698704] ? usercopy_warn+0x120/0x120 [ 245.702792] do_filp_open+0x249/0x350 [ 245.706603] ? may_open_dev+0x100/0x100 [ 245.710587] ? strncpy_from_user+0x3b6/0x500 [ 245.715017] ? mpi_free.cold.1+0x19/0x19 [ 245.719096] ? get_unused_fd_flags+0x121/0x190 [ 245.723686] ? getname_flags+0xd0/0x5a0 [ 245.727678] ? getname_flags+0x26e/0x5a0 [ 245.731758] do_sys_open+0x56f/0x740 [ 245.735487] ? filp_open+0x80/0x80 [ 245.739042] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 245.743906] __x64_sys_open+0x7e/0xc0 [ 245.747721] do_syscall_64+0x1b1/0x800 [ 245.751612] ? finish_task_switch+0x1ca/0x840 [ 245.756118] ? syscall_return_slowpath+0x5c0/0x5c0 [ 245.761065] ? syscall_return_slowpath+0x30f/0x5c0 [ 245.766014] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 245.771397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.776264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.781464] RIP: 0033:0x40fc61 2018/05/15 19:17:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x200000) 2018/05/15 19:17:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1c, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, r2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) dup3(r3, r1, 0x80000) 2018/05/15 19:17:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88caffff00000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 245.784658] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 245.792378] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 245.799660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 245.806941] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 245.814220] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 245.821501] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000005 2018/05/15 19:17:24 executing program 2 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) [ 245.839630] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(0xffffffffffffffff, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:24 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x84000) getsockname$llc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x6, 0x9a, 0x1, r1}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r2, 0x3) fanotify_mark(r4, 0x40, 0x20, r1, &(0x7f0000000080)='./file0\x00') 2018/05/15 19:17:24 executing program 4: syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x8, &(0x7f0000000600)=[{&(0x7f00000000c0)="bd01f83b82187d41f2c3b5ec7d67bfcb41578a383d96d419b8f4d28b5d6522e0af42e6", 0x9, 0x4}, {&(0x7f0000000200)="f2de19e6f1e4c4d1dfcaca81c372757ebb7e48160b77a0517a35fc557605f164f7baca507ebc5ecd2d78578e7b395a5b7a181f8162d69bb011e263b7efdf84368002560cefafca9333bfca4965d3ff91e03b35cacc64ce9f62b3fda8ddc4ed9d5ce3e6cceff18c212f3b82ac7284e36342b441f3885329964b2a168818cf6a484ba36e603c5875474d7d78bddfdc1346f3ab54b8af99338a62462b14e92d464c136cca6146378cda8382aa50b474c75a17e8a2", 0xb3, 0xfaba}, {&(0x7f00000002c0)="c052028c1e6a2bf177f7ac8932f9f8a5acda164fbb67a2ff1d0a63e30ccebc85e07b9e114afd56aacf4194f699e5cbd3251eb3fe6f99a9f3d6abbc0e2f72ea9808f31707f1a6ba506734c5d8a597c047314dbb01ef798d6f900785ff79e051ee7d8826d8b837bdb27a54d27faee9414a48760c0c6d7ad09bf2cb3f6e3a1a3376943800a667aa013901b8fbbc2ece1af6cfd3dbca444a6946f2ff09fb8334aa131380716b46b2f06016dd655c0681de3d0d2a059d726507fbfe519e958834b94d12aef4", 0xc3, 0x5}, {&(0x7f00000003c0)="4253a99b6ae848190c488bd748ffcc2c7bd8f366ea2085da82dd3becf7b099606feeb0579a58206e9038c231b6ad70c8e7e7d15bce594963681294136698a53153a35e05c9e9a3047024bc20cc95584a80ad3348a360db58a8c881f51c1dd6c1dde728482fd7fd579a656c64c646d4e150e21eeca6cef605a470581c0f55adc83575c624f3a86685c9f1103aeadf17e5ff93", 0x92}, {&(0x7f0000000700)="98741bf37c7cf24ee8f0c8d9d4a688eb5cafc10ab28cfcd53756cbbb3002bf8c3b3ac2f8eae290673322c9a778b107904d2cd331c40f2419b0fbe15bcff6125482c5b9e32b3b4e0bc3dfd4c504f71d88923bf0b45cbe670167589b595cf8e32f7121c068c3e3c35acb7e17ed16aff3a76d290cc583d622934353360c5259c8cd508c4be2e438af96c0ae98beb050f3856c621970b7c31568ffd1a1ad00781d0d0bec1ba9fea59ffde91722530841dd2dc7abc7d607eeeccfc79fce748de2b80e4dbcc82b8008eecd91cd2aab05833def", 0xd0, 0x2}, {&(0x7f0000000100), 0x0, 0x8000}, {&(0x7f0000000140)="0543a4aed236c50d7d60bcd465c83d5b43bd5fbb58fbc3add6", 0x19, 0xbe}, {&(0x7f0000000580)="b88755107b66dc560f9189c5e6fef28a26e6e72f82957c9afdb1ccfd97955986048a6df9bf615d5b3e6a2defb1870427dd3f39aa5ba2deb83c2442523c9110bafba8541d7aeb147658df89a0791c1627601083b433719bcc5691c359b417f274a5af6bf427720e38bc", 0x69, 0x4}], 0x10, &(0x7f00000006c0)="8f2d00") ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6056, r0, 0x0) 2018/05/15 19:17:24 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="c02290b23cbc23a2a920806b8369961980dd1f952c6756e794e737179595a44b1f0bc6f114a8dc565ff4d6b3a60132c4a55b5bb67c06b2049badbc597fe9f8603cd365eba874663080f9e8927aed9df77a60b38426e25a87962b6cf61a8aebff0ad368075796380ca0b2df6b788e445311447df89c071d101730ffefbb64cb0d66ea0ecfe7fa4da29701b5362b83", 0x8e, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0xc57) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x10006) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x7fffffff, 0x479]) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) getsockname$ax25(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 2018/05/15 19:17:24 executing program 0 (fault-call:2 fault-nth:9): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 245.947184] ceph: device name is missing path (no : separator in /dev/loop4) [ 246.003221] ion_mmap: failure mapping buffer to userspace [ 246.013941] FAULT_INJECTION: forcing a failure. [ 246.013941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.025974] CPU: 0 PID: 14048 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 246.033272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.042641] Call Trace: [ 246.045259] dump_stack+0x1b9/0x294 [ 246.048929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 246.054154] ? lock_downgrade+0x8e0/0x8e0 [ 246.058362] should_fail.cold.4+0xa/0x1a [ 246.062472] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 246.067614] ? is_bpf_text_address+0xd7/0x170 [ 246.072130] ? kernel_text_address+0x79/0xf0 [ 246.076558] ? __unwind_start+0x166/0x330 [ 246.080727] ? __kernel_text_address+0xd/0x40 [ 246.085245] ? unwind_get_return_address+0x61/0xa0 [ 246.090201] ? __save_stack_trace+0x7e/0xd0 [ 246.094550] ? graph_lock+0x170/0x170 [ 246.098417] ? __lock_is_held+0xb5/0x140 [ 246.102496] ? sg_write+0x8c3/0xd30 [ 246.106177] __alloc_pages_nodemask+0x34e/0xd70 [ 246.110876] ? print_usage_bug+0xc0/0xc0 [ 246.114974] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 246.120032] ? blk_queue_exit+0x1a4/0x2f0 [ 246.124221] ? __lock_is_held+0xb5/0x140 [ 246.128319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.133882] ? cap_capable+0x1f9/0x260 [ 246.137812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.143398] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 246.148978] alloc_pages_current+0x10c/0x210 [ 246.153433] sg_build_indirect.isra.15+0x32a/0x750 [ 246.158416] sg_common_write.isra.16+0x9ed/0x1dd0 [ 246.163307] ? sg_open+0x1130/0x1130 [ 246.167056] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 246.172282] ? __check_object_size+0x95/0x5d9 [ 246.176809] ? usercopy_warn+0x120/0x120 [ 246.180906] ? __might_sleep+0x95/0x190 [ 246.184916] sg_write+0x8c3/0xd30 [ 246.188404] ? sg_ioctl+0x2f80/0x2f80 [ 246.192233] ? rcu_is_watching+0x85/0x140 [ 246.196403] ? rcu_bh_force_quiescent_state+0x20/0x20 2018/05/15 19:17:24 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r1, 0x0) 2018/05/15 19:17:24 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f000021af98)) [ 246.201638] ? __fget+0x40c/0x650 [ 246.205134] ? expand_files.part.8+0x9a0/0x9a0 [ 246.209744] ? lock_downgrade+0x8e0/0x8e0 [ 246.213917] ? proc_fail_nth_write+0x96/0x1f0 [ 246.218458] __vfs_write+0x10b/0x960 [ 246.222192] ? __fget_light+0x2ef/0x430 [ 246.226191] ? sg_ioctl+0x2f80/0x2f80 [ 246.230741] ? kernel_read+0x120/0x120 [ 246.234659] ? wait_for_completion+0x870/0x870 [ 246.239295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 246.244864] ? security_file_permission+0x1c6/0x240 [ 246.249913] ? rw_verify_area+0x118/0x360 [ 246.254096] vfs_write+0x1f8/0x560 [ 246.254634] ion_mmap: failure mapping buffer to userspace [ 246.257660] ksys_write+0xf9/0x250 [ 246.257688] ? __ia32_sys_read+0xb0/0xb0 [ 246.257726] __x64_sys_write+0x73/0xb0 [ 246.257756] do_syscall_64+0x1b1/0x800 [ 246.278629] ? finish_task_switch+0x1ca/0x840 [ 246.283153] ? syscall_return_slowpath+0x5c0/0x5c0 [ 246.288111] ? syscall_return_slowpath+0x30f/0x5c0 [ 246.293072] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 246.298470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.303355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.308562] RIP: 0033:0x455a09 [ 246.311760] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.319495] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 246.326880] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 246.334170] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 246.341461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 246.348750] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000009 [ 246.374421] ceph: device name is missing path (no : separator in /dev/loop4) 2018/05/15 19:17:25 executing program 1 (fault-call:5 fault-nth:6): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:25 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0xebb, 0xffffffff, 0x8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r3 = socket(0x8, 0x3, 0x6) connect$netrom(r3, &(0x7f0000000000)=@ax25={0x3, {"c7ecdf4c31c8d5"}, 0x7}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r4, 0x1f, &(0x7f0000000140)) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x4000000000, 0x6012, r2, 0x0) 2018/05/15 19:17:25 executing program 0 (fault-call:2 fault-nth:10): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:25 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(0xffffffffffffffff, r4, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x284400, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000140)=0x66) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) 2018/05/15 19:17:25 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10400, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000002c0)=0xf) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="10000008c85d89ffc4f28bae193caf912ce2b16c469e26437bb099afbb27c526c77eb61c380bef164b77f76ac30a18436ed0374b4ae3becf9336d6109258f68fc743df49414df918bbd6031efa74064196eebf37e5fa9f1b5d961e6edf81b8640b4d8138c2f83f486dc37dbaea281771a73ff8c864c43d3c10f74edb74ffcbf0b84095d91b118aff3c67404a28456551233c5a1aeea58223", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) getsockname$ax25(r2, &(0x7f0000000080), &(0x7f0000000100)=0x10) 2018/05/15 19:17:25 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8848, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:25 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4058534c, &(0x7f000021af98)) [ 247.357481] ion_mmap: failure mapping buffer to userspace [ 247.371908] QAT: Invalid ioctl [ 247.384221] FAULT_INJECTION: forcing a failure. [ 247.384221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.390147] QAT: Invalid ioctl [ 247.396184] CPU: 1 PID: 14094 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 247.406592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.407078] ion_mmap: failure mapping buffer to userspace [ 247.415948] Call Trace: [ 247.415977] dump_stack+0x1b9/0x294 [ 247.416000] ? dump_stack_print_info.cold.2+0x52/0x52 [ 247.416016] ? lock_downgrade+0x8e0/0x8e0 [ 247.416042] should_fail.cold.4+0xa/0x1a [ 247.416063] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 247.423368] QAT: Invalid ioctl [ 247.424182] ? is_bpf_text_address+0xd7/0x170 [ 247.424203] ? kernel_text_address+0x79/0xf0 [ 247.424220] ? __unwind_start+0x166/0x330 [ 247.424238] ? __kernel_text_address+0xd/0x40 [ 247.433611] QAT: Invalid ioctl [ 247.437173] ? unwind_get_return_address+0x61/0xa0 [ 247.437195] ? __save_stack_trace+0x7e/0xd0 [ 247.437212] ? graph_lock+0x170/0x170 [ 247.437248] ? __lock_is_held+0xb5/0x140 [ 247.437262] ? sg_write+0x8c3/0xd30 [ 247.437289] __alloc_pages_nodemask+0x34e/0xd70 [ 247.437307] ? print_usage_bug+0xc0/0xc0 [ 247.452340] ion_mmap: failure mapping buffer to userspace [ 247.454111] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 247.454137] ? blk_queue_exit+0x1a4/0x2f0 [ 247.454163] ? __lock_is_held+0xb5/0x140 [ 247.454189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.454202] ? cap_capable+0x1f9/0x260 [ 247.454223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.490882] ion_mmap: failure mapping buffer to userspace [ 247.491181] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 247.491206] alloc_pages_current+0x10c/0x210 [ 247.549046] sg_build_indirect.isra.15+0x32a/0x750 [ 247.554619] sg_common_write.isra.16+0x9ed/0x1dd0 [ 247.559490] ? sg_open+0x1130/0x1130 [ 247.563220] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 247.568427] ? __check_object_size+0x95/0x5d9 [ 247.572938] ? usercopy_warn+0x120/0x120 [ 247.577021] ? __might_sleep+0x95/0x190 [ 247.581013] sg_write+0x8c3/0xd30 [ 247.584483] ? sg_ioctl+0x2f80/0x2f80 [ 247.588299] ? rcu_is_watching+0x85/0x140 [ 247.592459] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 247.597674] ? __fget+0x40c/0x650 [ 247.601151] ? expand_files.part.8+0x9a0/0x9a0 [ 247.605755] ? lock_downgrade+0x8e0/0x8e0 [ 247.609921] ? proc_fail_nth_write+0x96/0x1f0 [ 247.614442] __vfs_write+0x10b/0x960 [ 247.618169] ? __fget_light+0x2ef/0x430 [ 247.622165] ? sg_ioctl+0x2f80/0x2f80 [ 247.625974] ? kernel_read+0x120/0x120 [ 247.626217] ion_mmap: failure mapping buffer to userspace [ 247.629868] ? wait_for_completion+0x870/0x870 [ 247.629903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.629923] ? security_file_permission+0x1c6/0x240 [ 247.629943] ? rw_verify_area+0x118/0x360 [ 247.629962] vfs_write+0x1f8/0x560 [ 247.629983] ksys_write+0xf9/0x250 [ 247.630004] ? __ia32_sys_read+0xb0/0xb0 [ 247.650691] ion_mmap: failure mapping buffer to userspace [ 247.654775] __x64_sys_write+0x73/0xb0 [ 247.654798] do_syscall_64+0x1b1/0x800 [ 247.654815] ? finish_task_switch+0x1ca/0x840 [ 247.654834] ? syscall_return_slowpath+0x5c0/0x5c0 [ 247.654853] ? syscall_return_slowpath+0x30f/0x5c0 [ 247.654878] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 247.666306] FAULT_INJECTION: forcing a failure. [ 247.666306] name failslab, interval 1, probability 0, space 0, times 0 [ 247.671512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.671538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.671555] RIP: 0033:0x455a09 [ 247.723312] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.731022] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 247.738284] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 247.745547] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/15 19:17:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:17:26 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffd, 0x10, 0x0, 0xffffffffffffffff}) r2 = dup(r0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000000)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:26 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x7fff, 0x60000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000280)={0x0, 0x1, 0x400, &(0x7f0000000240)=0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20080, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xc, "70399ff51d8be75e9d4223e3"}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x74e}, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x805, 0xffffffff) 2018/05/15 19:17:26 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x11003}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 247.752810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 247.760074] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000a [ 247.767362] CPU: 0 PID: 14092 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 247.774649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.784008] Call Trace: [ 247.786618] dump_stack+0x1b9/0x294 [ 247.790268] ? dump_stack_print_info.cold.2+0x52/0x52 [ 247.795471] ? perf_trace_lock_acquire+0xe3/0x980 [ 247.800338] should_fail.cold.4+0xa/0x1a [ 247.804414] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 247.809538] ? graph_lock+0x170/0x170 [ 247.813360] ? find_held_lock+0x36/0x1c0 [ 247.817438] ? __lock_is_held+0xb5/0x140 [ 247.821516] ? check_same_owner+0x320/0x320 [ 247.825840] ? __lock_is_held+0xb5/0x140 [ 247.829919] ? rcu_note_context_switch+0x710/0x710 [ 247.834870] __should_failslab+0x124/0x180 [ 247.839118] should_failslab+0x9/0x14 [ 247.842938] kmem_cache_alloc_trace+0x2cb/0x780 [ 247.847616] ? __lock_is_held+0xb5/0x140 [ 247.851704] snd_seq_pool_new+0x93/0x2f0 [ 247.855780] ? snd_seq_pool_done+0x380/0x380 [ 247.860202] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.865243] ? trace_hardirqs_on+0xd/0x10 [ 247.869413] snd_seq_fifo_new+0xc5/0x360 [ 247.873489] ? snd_seq_info_queues_read+0x5a0/0x5a0 [ 247.878523] ? lock_downgrade+0x8e0/0x8e0 [ 247.882679] ? m_show+0x5d0/0x5d0 [ 247.886153] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 247.891361] snd_seq_open+0x1c4/0x5c0 [ 247.895180] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 247.900561] snd_open+0x21a/0x430 [ 247.904027] ? snd_request_card+0x80/0x80 [ 247.908188] chrdev_open+0x256/0x760 [ 247.911922] ? cdev_put.part.0+0x50/0x50 [ 247.915999] ? errseq_sample+0xe3/0x120 [ 247.919988] ? security_file_open+0x14f/0x1d0 [ 247.924484] do_dentry_open+0x7ef/0xf10 [ 247.928450] ? cdev_put.part.0+0x50/0x50 [ 247.932507] vfs_open+0x139/0x230 [ 247.935955] path_openat+0x1676/0x4e20 [ 247.939848] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 247.944605] ? find_held_lock+0x36/0x1c0 [ 247.948664] ? lock_downgrade+0x8e0/0x8e0 [ 247.952811] ? kasan_check_read+0x11/0x20 [ 247.956955] ? do_raw_spin_unlock+0x9e/0x2e0 [ 247.961354] ? __lock_is_held+0xb5/0x140 [ 247.965415] ? _raw_spin_unlock+0x22/0x30 [ 247.969554] ? __alloc_fd+0x346/0x700 [ 247.973350] ? usercopy_warn+0x120/0x120 [ 247.977412] do_filp_open+0x249/0x350 [ 247.981205] ? may_open_dev+0x100/0x100 [ 247.985176] ? strncpy_from_user+0x3b6/0x500 [ 247.989582] ? mpi_free.cold.1+0x19/0x19 [ 247.993637] ? get_unused_fd_flags+0x121/0x190 [ 247.998206] ? getname_flags+0xd0/0x5a0 [ 248.002186] ? getname_flags+0x26e/0x5a0 [ 248.006249] do_sys_open+0x56f/0x740 [ 248.009961] ? filp_open+0x80/0x80 [ 248.013507] __x64_sys_open+0x7e/0xc0 [ 248.017298] do_syscall_64+0x1b1/0x800 [ 248.021176] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 248.026015] ? syscall_return_slowpath+0x5c0/0x5c0 [ 248.030943] ? syscall_return_slowpath+0x30f/0x5c0 [ 248.035875] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 248.041240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.046081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.051257] RIP: 0033:0x40fc61 2018/05/15 19:17:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) r2 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80800) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200)={r4, r5, 0x7}) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000040)="bfccda886c87472c26f7fc97c8ac7c88957c66e088e436d565478d30342287bfacd0f4cebf9469df2a08195c11ed21bbd9dd4476dc10be27d6bcc5d16947d94b33ef68dd4c9f6b3e77e4d9142d6f92b0216af7d2c005353fac21881a967f") 2018/05/15 19:17:26 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe80, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:26 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x200, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 248.054435] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 248.062136] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 248.069394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 248.076655] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 248.083915] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 248.091173] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000006 2018/05/15 19:17:26 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0189436, &(0x7f000021af98)) [ 248.148895] ion_mmap: failure mapping buffer to userspace [ 248.177513] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:27 executing program 1 (fault-call:5 fault-nth:7): r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:27 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, 0xffffffffffffffff, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:27 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f000021af98)) 2018/05/15 19:17:27 executing program 0 (fault-call:2 fault-nth:11): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:27 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:27 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x180, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/9) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:17:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) [ 248.728992] ion_mmap: failure mapping buffer to userspace [ 248.743732] ion_mmap: failure mapping buffer to userspace [ 248.757179] FAULT_INJECTION: forcing a failure. [ 248.757179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.769149] CPU: 1 PID: 14158 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 248.775414] ion_mmap: failure mapping buffer to userspace [ 248.776452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.776460] Call Trace: [ 248.776485] dump_stack+0x1b9/0x294 [ 248.776510] ? dump_stack_print_info.cold.2+0x52/0x52 [ 248.776525] ? lock_downgrade+0x8e0/0x8e0 [ 248.776549] should_fail.cold.4+0xa/0x1a [ 248.810994] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 248.816116] ? is_bpf_text_address+0xd7/0x170 [ 248.820629] ? kernel_text_address+0x79/0xf0 [ 248.825054] ? __unwind_start+0x166/0x330 [ 248.827583] FAULT_INJECTION: forcing a failure. [ 248.827583] name failslab, interval 1, probability 0, space 0, times 0 [ 248.829211] ? __kernel_text_address+0xd/0x40 [ 248.829235] ? unwind_get_return_address+0x61/0xa0 [ 248.829264] ? __save_stack_trace+0x7e/0xd0 [ 248.854148] ? graph_lock+0x170/0x170 [ 248.857967] ? __lock_is_held+0xb5/0x140 [ 248.862024] ? sg_write+0x8c3/0xd30 [ 248.865670] __alloc_pages_nodemask+0x34e/0xd70 [ 248.870338] ? print_usage_bug+0xc0/0xc0 [ 248.874400] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 248.879420] ? blk_queue_exit+0x1a4/0x2f0 [ 248.883572] ? __lock_is_held+0xb5/0x140 [ 248.887634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.893171] ? cap_capable+0x1f9/0x260 [ 248.897062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.902599] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 248.908141] alloc_pages_current+0x10c/0x210 [ 248.912552] sg_build_indirect.isra.15+0x32a/0x750 [ 248.917488] sg_common_write.isra.16+0x9ed/0x1dd0 [ 248.922335] ? sg_open+0x1130/0x1130 [ 248.926049] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 248.931240] ? __check_object_size+0x95/0x5d9 [ 248.935734] ? usercopy_warn+0x120/0x120 [ 248.939800] ? __might_sleep+0x95/0x190 [ 248.943777] sg_write+0x8c3/0xd30 [ 248.947231] ? sg_ioctl+0x2f80/0x2f80 [ 248.951033] ? rcu_is_watching+0x85/0x140 [ 248.955205] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 248.960406] ? __fget+0x40c/0x650 [ 248.963865] ? expand_files.part.8+0x9a0/0x9a0 [ 248.968443] ? lock_downgrade+0x8e0/0x8e0 [ 248.972593] ? proc_fail_nth_write+0x96/0x1f0 [ 248.977097] __vfs_write+0x10b/0x960 [ 248.980811] ? __fget_light+0x2ef/0x430 [ 248.984782] ? sg_ioctl+0x2f80/0x2f80 [ 248.988578] ? kernel_read+0x120/0x120 [ 248.992463] ? wait_for_completion+0x870/0x870 [ 248.997056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.002623] ? security_file_permission+0x1c6/0x240 [ 249.007650] ? rw_verify_area+0x118/0x360 [ 249.011799] vfs_write+0x1f8/0x560 [ 249.015341] ksys_write+0xf9/0x250 [ 249.018881] ? __ia32_sys_read+0xb0/0xb0 [ 249.022948] __x64_sys_write+0x73/0xb0 [ 249.026835] do_syscall_64+0x1b1/0x800 [ 249.030718] ? finish_task_switch+0x1ca/0x840 [ 249.035214] ? syscall_return_slowpath+0x5c0/0x5c0 [ 249.040141] ? syscall_return_slowpath+0x30f/0x5c0 [ 249.045072] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 249.050440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.055286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.061365] RIP: 0033:0x455a09 [ 249.064551] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.072260] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 249.079522] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 249.086786] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 249.094490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 249.101756] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000b [ 249.109053] CPU: 0 PID: 14157 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 249.116333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.125689] Call Trace: 2018/05/15 19:17:27 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x2800) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000300)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={r2, r3/1000+30000}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000140)=0xffff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000340)=@ethtool_modinfo={0x42, 0x3, 0x6, "c986b4b850603f9f"}}) 2018/05/15 19:17:27 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f000021af98)) [ 249.128289] dump_stack+0x1b9/0x294 [ 249.131934] ? dump_stack_print_info.cold.2+0x52/0x52 [ 249.137132] ? perf_trace_lock_acquire+0xe3/0x980 [ 249.141993] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 249.147202] should_fail.cold.4+0xa/0x1a [ 249.151281] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 249.156404] ? unwind_get_return_address+0x61/0xa0 [ 249.161698] ? __save_stack_trace+0x7e/0xd0 [ 249.166047] ? graph_lock+0x170/0x170 [ 249.169869] ? find_held_lock+0x36/0x1c0 [ 249.173953] ? __lock_is_held+0xb5/0x140 2018/05/15 19:17:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) [ 249.178045] ? check_same_owner+0x320/0x320 [ 249.182380] ? print_usage_bug+0xc0/0xc0 [ 249.186462] ? rcu_note_context_switch+0x710/0x710 [ 249.191403] ? graph_lock+0x170/0x170 [ 249.195211] ? __lock_is_held+0xb5/0x140 [ 249.199291] __should_failslab+0x124/0x180 [ 249.203539] should_failslab+0x9/0x14 [ 249.207353] kmem_cache_alloc_node_trace+0x26f/0x770 [ 249.212469] ? __raw_spin_lock_init+0x1c/0x100 [ 249.214052] ion_mmap: failure mapping buffer to userspace [ 249.217062] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.217089] __get_vm_area_node+0x12d/0x390 [ 249.217113] __vmalloc_node_range+0xc4/0x750 [ 249.217135] ? snd_seq_pool_init+0x5d/0x2f0 [ 249.217154] ? lockdep_init_map+0x9/0x10 [ 249.217173] ? snd_seq_pool_init+0x5d/0x2f0 [ 249.217191] vmalloc+0x6f/0x80 [ 249.217208] ? snd_seq_pool_init+0x5d/0x2f0 [ 249.256619] snd_seq_pool_init+0x5d/0x2f0 [ 249.260788] snd_seq_fifo_new+0xfc/0x360 [ 249.264862] ? snd_seq_info_queues_read+0x5a0/0x5a0 [ 249.269891] ? lock_downgrade+0x8e0/0x8e0 [ 249.274051] ? m_show+0x5d0/0x5d0 2018/05/15 19:17:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000040)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:17:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x8, 0x0, 0xffffffffffffff47, 0x4d52, 0x0, 0x31, 0x4000, 0x0, 0xfffffffffffffffd, 0xb61d, 0x9, 0x612c, 0x2, 0x4, 0x1, 0x1, 0x28, 0x1, 0x2, 0x4, 0x7, 0xe06d, 0x354f70f, 0x8, 0x3f, 0x2, 0x0, 0x1f, 0x1f, 0x401, 0x9, 0x2, 0x0, 0x7, 0x4, 0x3, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040)}, 0x28500, 0x0, 0x1, 0x6, 0x6, 0x7, 0x8}) dup3(r0, r1, 0x0) [ 249.277522] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 249.282728] snd_seq_open+0x1c4/0x5c0 [ 249.286558] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 249.291941] snd_open+0x21a/0x430 [ 249.295412] ? snd_request_card+0x80/0x80 [ 249.299572] chrdev_open+0x256/0x760 [ 249.303301] ? cdev_put.part.0+0x50/0x50 [ 249.307404] ? errseq_sample+0xe3/0x120 [ 249.311403] ? security_file_open+0x14f/0x1d0 [ 249.315913] do_dentry_open+0x7ef/0xf10 [ 249.319901] ? cdev_put.part.0+0x50/0x50 [ 249.323993] vfs_open+0x139/0x230 [ 249.327460] path_openat+0x1676/0x4e20 [ 249.331385] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 249.336144] ? find_held_lock+0x36/0x1c0 [ 249.340205] ? lock_downgrade+0x8e0/0x8e0 [ 249.344350] ? kasan_check_read+0x11/0x20 [ 249.348487] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.352889] ? __lock_is_held+0xb5/0x140 [ 249.356986] ? _raw_spin_unlock+0x22/0x30 [ 249.361141] ? __alloc_fd+0x346/0x700 [ 249.364939] ? usercopy_warn+0x120/0x120 [ 249.369019] do_filp_open+0x249/0x350 [ 249.372819] ? may_open_dev+0x100/0x100 [ 249.376784] ? strncpy_from_user+0x3b6/0x500 [ 249.381196] ? mpi_free.cold.1+0x19/0x19 [ 249.385259] ? get_unused_fd_flags+0x121/0x190 [ 249.389828] ? getname_flags+0xd0/0x5a0 [ 249.393794] ? getname_flags+0x26e/0x5a0 [ 249.397854] do_sys_open+0x56f/0x740 [ 249.401569] ? filp_open+0x80/0x80 [ 249.405110] __x64_sys_open+0x7e/0xc0 [ 249.408916] do_syscall_64+0x1b1/0x800 [ 249.412795] ? finish_task_switch+0x1ca/0x840 [ 249.417283] ? syscall_return_slowpath+0x5c0/0x5c0 [ 249.422216] ? syscall_return_slowpath+0x30f/0x5c0 [ 249.427142] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 249.432502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.437354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.442532] RIP: 0033:0x40fc61 [ 249.445706] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 249.453408] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 249.460673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 249.467928] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 249.475184] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 249.482441] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000007 [ 249.490274] syz-executor1: vmalloc: allocation failure: 9600 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 249.500546] syz-executor1 cpuset=syz1 mems_allowed=0 [ 249.506052] CPU: 0 PID: 14157 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #52 [ 249.513326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.522684] Call Trace: [ 249.525284] dump_stack+0x1b9/0x294 2018/05/15 19:17:28 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x2, 0x200) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000040)=""/177) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) r3 = memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0x2) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000f40)=ANY=[@ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYRES32=r3], @ANYPTR=&(0x7f0000000c80)=ANY=[@ANYRES64], @ANYRES16=r3, @ANYRES64=r0, @ANYBLOB="c956a80b5fa1017d7e2a9d54ebbbe5c0f541a84cc2aade357da80bc096dfcc29e2e83ecc5e97d066aa913a8ae5ad442e21", @ANYRES64=r2, @ANYRES64=r2, @ANYPTR64=&(0x7f0000000e80)=ANY=[@ANYBLOB="71df91225b30e482b3e664ce2f1784c32f658de9122e0e6ee2c68725a03729aab31c47a759fbcce537a66fa6dd2645c09e7312816b403093", @ANYPTR64=&(0x7f0000000d40)=ANY=[@ANYRES64, @ANYPTR, @ANYPTR64, @ANYPTR, @ANYBLOB="630ef1f93d07335f47ba4ed15cc81dd49474d7539dbe9092c2e3a179341e0cace7a1b4c535953acc327164e66878382ec006053fdbc5cea0a6e417f2714dce7e6e2df0f17db740c9f8774d588278711f06496ec144e8fb6d0fb4da60c47d19e8c19c34c840c08f39a08e96fd5a97f37afe7a7802e674082d10c7adf6901aa157ce3549032602f51d8e0e0b083fc3cb6fdca49867db541180563c96dcbd297d4663cb4b1d07efb31751b6aa7bf01bc70a715ef4"], @ANYPTR, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000e40)=ANY=[@ANYBLOB="796a9b1ea8947956ec49f4ccfaaba0eede5f5684fe75faa70bd5d1f6232ef649c49966414b8bb165d441a5c19a043265200b979f"], @ANYRES32=r3, @ANYRES16=r3, @ANYRES64=r0, @ANYRES64=r0], @ANYRES16=r0]) ioctl$int_out(r0, 0x5460, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000240)={0x40000000}) 2018/05/15 19:17:28 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1c00000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 249.528932] ? dump_stack_print_info.cold.2+0x52/0x52 [ 249.534162] warn_alloc.cold.118+0xb2/0x1b8 [ 249.538498] ? zone_watermark_ok_safe+0x3b0/0x3b0 [ 249.543355] ? __get_vm_area_node+0x12d/0x390 [ 249.547860] ? __get_vm_area_node+0x12d/0x390 [ 249.552361] ? rcu_read_lock_sched_held+0x108/0x120 [ 249.557394] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 249.562692] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.567733] ? __get_vm_area_node+0x2da/0x390 [ 249.572255] __vmalloc_node_range+0x45e/0x750 [ 249.576756] ? lockdep_init_map+0x9/0x10 [ 249.580807] ? snd_seq_pool_init+0x5d/0x2f0 [ 249.585121] vmalloc+0x6f/0x80 [ 249.588300] ? snd_seq_pool_init+0x5d/0x2f0 [ 249.592628] snd_seq_pool_init+0x5d/0x2f0 [ 249.596764] snd_seq_fifo_new+0xfc/0x360 [ 249.600821] ? snd_seq_info_queues_read+0x5a0/0x5a0 [ 249.605831] ? lock_downgrade+0x8e0/0x8e0 [ 249.609963] ? m_show+0x5d0/0x5d0 [ 249.613408] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 249.618584] snd_seq_open+0x1c4/0x5c0 [ 249.622371] ? snd_seq_create_kernel_client+0x3a0/0x3a0 [ 249.627739] snd_open+0x21a/0x430 [ 249.631181] ? snd_request_card+0x80/0x80 [ 249.635313] chrdev_open+0x256/0x760 [ 249.639020] ? cdev_put.part.0+0x50/0x50 [ 249.643074] ? errseq_sample+0xe3/0x120 [ 249.647043] ? security_file_open+0x14f/0x1d0 [ 249.651526] do_dentry_open+0x7ef/0xf10 [ 249.655485] ? cdev_put.part.0+0x50/0x50 [ 249.659536] vfs_open+0x139/0x230 [ 249.662980] path_openat+0x1676/0x4e20 [ 249.666865] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 249.671609] ? find_held_lock+0x36/0x1c0 [ 249.675670] ? lock_downgrade+0x8e0/0x8e0 [ 249.679807] ? kasan_check_read+0x11/0x20 [ 249.683939] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.688335] ? __lock_is_held+0xb5/0x140 [ 249.692391] ? _raw_spin_unlock+0x22/0x30 [ 249.696527] ? __alloc_fd+0x346/0x700 [ 249.700326] ? usercopy_warn+0x120/0x120 [ 249.704381] do_filp_open+0x249/0x350 [ 249.708167] ? may_open_dev+0x100/0x100 [ 249.712127] ? strncpy_from_user+0x3b6/0x500 [ 249.716523] ? mpi_free.cold.1+0x19/0x19 [ 249.720575] ? get_unused_fd_flags+0x121/0x190 [ 249.725151] ? getname_flags+0xd0/0x5a0 [ 249.729124] ? getname_flags+0x26e/0x5a0 [ 249.733178] do_sys_open+0x56f/0x740 [ 249.736879] ? filp_open+0x80/0x80 [ 249.740412] __x64_sys_open+0x7e/0xc0 [ 249.744200] do_syscall_64+0x1b1/0x800 [ 249.748077] ? finish_task_switch+0x1ca/0x840 [ 249.752925] ? syscall_return_slowpath+0x5c0/0x5c0 [ 249.757843] ? syscall_return_slowpath+0x30f/0x5c0 [ 249.762764] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 249.768122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.772955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.778136] RIP: 0033:0x40fc61 [ 249.781309] RSP: 002b:00007f47e4f1c7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 249.789004] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040fc61 [ 249.796264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f47e4f1c850 [ 249.803517] RBP: 000000000072bea0 R08: 000000000000000f R09: 0000000000000000 [ 249.810770] R10: 0000000020dcc000 R11: 0000000000000293 R12: 0000000000000014 [ 249.818028] R13: 0000000000000750 R14: 00000000006ff020 R15: 0000000000000007 [ 249.825560] Mem-Info: [ 249.828063] active_anon:116793 inactive_anon:78 isolated_anon:0 [ 249.828063] active_file:3702 inactive_file:9041 isolated_file:0 [ 249.828063] unevictable:0 dirty:125 writeback:0 unstable:0 [ 249.828063] slab_reclaimable:11393 slab_unreclaimable:104876 [ 249.828063] mapped:74300 shmem:85 pagetables:1158 bounce:0 [ 249.828063] free:240260 free_pcp:477 free_cma:0 [ 249.861685] Node 0 active_anon:467136kB inactive_anon:308kB active_file:14808kB inactive_file:36200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:296888kB dirty:556kB writeback:0kB shmem:340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 249.889834] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 249.893149] ion_mmap: failure mapping buffer to userspace [ 249.916067] lowmem_reserve[]: 0 2830 6335 6335 [ 249.916103] Node 0 DMA32 free:815428kB min:30116kB low:37644kB high:45172kB active_anon:59392kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2901148kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:856kB local_pcp:180kB free_cma:0kB [ 249.916141] lowmem_reserve[]: 0 0 3505 3505 [ 249.958643] Node 0 Normal free:125288kB min:37300kB low:46624kB high:55948kB active_anon:409752kB inactive_anon:308kB active_file:14808kB inactive_file:36200kB unevictable:0kB writepending:556kB present:4718592kB managed:3589432kB mlocked:0kB kernel_stack:5472kB pagetables:4636kB bounce:0kB free_pcp:1352kB local_pcp:644kB free_cma:0kB [ 249.965965] ion_mmap: failure mapping buffer to userspace [ 249.988524] lowmem_reserve[]: 0 0 0 0 [ 249.988558] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 250.011659] Node 0 DMA32: 3*4kB (UM) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 197*4096kB (M) = 817476kB 2018/05/15 19:17:28 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8035000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 250.027411] Node 0 Normal: 1191*4kB (UME) 1312*8kB (UME) 1070*16kB (UME) 908*32kB (UM) 541*64kB (UM) 48*128kB (UME) 44*256kB (UM) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 124732kB [ 250.043902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 250.052537] 12840 total pagecache pages [ 250.056556] 0 pages in swap cache [ 250.060065] Swap cache stats: add 0, delete 0, find 0/0 [ 250.065464] Free swap = 0kB [ 250.068526] Total swap = 0kB [ 250.071568] 1965969 pages RAM [ 250.074719] 0 pages HighMem/MovableOnly [ 250.078727] 339347 pages reserved [ 250.100904] ion_mmap: failure mapping buffer to userspace [ 250.128080] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:28 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10f, 0x80, 0x3, 0xf4, 0x364, 0xffffffff80000000, 0x37f, 0xfffffffffffffff7}, "5c6a59571c8beb95e9fcafadafdf9e4844b4094914ee93d3b0c1d8623bfade090e39955139d8423186720749b60ad77aa44f04c650cf25ed188b884291ea6540877ad0b9344323e9e2009d4983cc123e61f8f28a3104019d4aa5ee29b7f8abe6fd55b37c3d0cda8eb98541ad902a3dfeeaf32fd8082f7262e107df30c45368f0da980f1a8fae723cbe162649044c0c51ed74c2d96fb010ec441db737926ad2261a9662", [[], []]}, 0x2c3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) epoll_create1(0x80000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:28 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88480000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:28 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, 0xffffffffffffffff, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:28 executing program 0 (fault-call:2 fault-nth:12): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=0x2b) dup3(r0, r1, 0x0) 2018/05/15 19:17:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:17:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10001, 0x2c, 0x1}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x182) bind(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x2, 0x3, 0x4, 0x1}}, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'bcsh0\x00', 0x4000}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x5, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x6012, r3, 0x0) [ 250.381307] ion_mmap: failure mapping buffer to userspace [ 250.394983] FAULT_INJECTION: forcing a failure. [ 250.394983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.396086] ion_mmap: failure mapping buffer to userspace [ 250.406983] CPU: 1 PID: 14223 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 250.406997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.418499] ion_mmap: failure mapping buffer to userspace [ 250.419806] Call Trace: [ 250.419835] dump_stack+0x1b9/0x294 [ 250.419859] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.419875] ? lock_downgrade+0x8e0/0x8e0 [ 250.419898] should_fail.cold.4+0xa/0x1a [ 250.454356] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.459481] ? is_bpf_text_address+0xd7/0x170 [ 250.463992] ? kernel_text_address+0x79/0xf0 [ 250.468409] ? __unwind_start+0x166/0x330 [ 250.472571] ? __kernel_text_address+0xd/0x40 [ 250.477081] ? unwind_get_return_address+0x61/0xa0 [ 250.482021] ? __save_stack_trace+0x7e/0xd0 [ 250.486353] ? graph_lock+0x170/0x170 [ 250.490181] ? __lock_is_held+0xb5/0x140 [ 250.494248] ? sg_write+0x8c3/0xd30 [ 250.497898] __alloc_pages_nodemask+0x34e/0xd70 [ 250.502579] ? print_usage_bug+0xc0/0xc0 [ 250.506655] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 250.511693] ? blk_queue_exit+0x1a4/0x2f0 [ 250.515863] ? __lock_is_held+0xb5/0x140 [ 250.519957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.525506] ? cap_capable+0x1f9/0x260 [ 250.529418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.534968] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 250.540519] alloc_pages_current+0x10c/0x210 [ 250.544947] sg_build_indirect.isra.15+0x32a/0x750 [ 250.549902] sg_common_write.isra.16+0x9ed/0x1dd0 [ 250.554771] ? sg_open+0x1130/0x1130 [ 250.558506] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 250.563715] ? __check_object_size+0x95/0x5d9 [ 250.568232] ? usercopy_warn+0x120/0x120 [ 250.568993] ion_mmap: failure mapping buffer to userspace [ 250.572306] ? __might_sleep+0x95/0x190 [ 250.572332] sg_write+0x8c3/0xd30 [ 250.572354] ? sg_ioctl+0x2f80/0x2f80 [ 250.572373] ? rcu_is_watching+0x85/0x140 [ 250.572391] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 250.572418] ? __fget+0x40c/0x650 [ 250.601921] ? expand_files.part.8+0x9a0/0x9a0 [ 250.606524] ? lock_downgrade+0x8e0/0x8e0 [ 250.610702] ? proc_fail_nth_write+0x96/0x1f0 [ 250.615223] __vfs_write+0x10b/0x960 [ 250.618948] ? __fget_light+0x2ef/0x430 [ 250.622935] ? sg_ioctl+0x2f80/0x2f80 [ 250.626748] ? kernel_read+0x120/0x120 [ 250.630657] ? wait_for_completion+0x870/0x870 [ 250.633611] ion_mmap: failure mapping buffer to userspace [ 250.635265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.635284] ? security_file_permission+0x1c6/0x240 [ 250.635304] ? rw_verify_area+0x118/0x360 [ 250.635323] vfs_write+0x1f8/0x560 [ 250.649386] ion_mmap: failure mapping buffer to userspace [ 250.651391] ksys_write+0xf9/0x250 [ 250.651411] ? __ia32_sys_read+0xb0/0xb0 [ 250.651434] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 250.651455] __x64_sys_write+0x73/0xb0 [ 250.651477] do_syscall_64+0x1b1/0x800 [ 250.684839] ? finish_task_switch+0x1ca/0x840 [ 250.689350] ? syscall_return_slowpath+0x5c0/0x5c0 [ 250.694299] ? syscall_return_slowpath+0x30f/0x5c0 [ 250.699246] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 250.704630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.709491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.714684] RIP: 0033:0x455a09 [ 250.717875] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.725594] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 2018/05/15 19:17:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffd, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:17:29 executing program 7: modify_ldt$read(0x0, &(0x7f0000000000)=""/143, 0x8f) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xc0ffffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 250.732870] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 250.740149] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 250.747434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 250.754713] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000c 2018/05/15 19:17:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="c86465762f736e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5452, &(0x7f000021af98)) 2018/05/15 19:17:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffff00000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="3cae3772b53e5a1858d505eb4c059f73429e24c5e775f530693d43b51177ea7868239aad2e159570979d", 0xfffffffffffffff9, 0xfffffffffffffffa) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r4, 0x5, 0x70bd2b, 0x25dfdbfe, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff]}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x44851) r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, r5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) r6 = dup(r0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r1) 2018/05/15 19:17:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, 0xffffffffffffffff, 0x0) tkill(r2, 0x16) 2018/05/15 19:17:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3dea, 0x40800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200503, 0x0) tee(r0, r1, 0x74f1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0xfffffffffffffffd) 2018/05/15 19:17:30 executing program 0 (fault-call:2 fault-nth:13): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:30 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x1000000000002203, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='/dev/ion\x00') [ 251.815664] ion_mmap: failure mapping buffer to userspace [ 251.826766] FAULT_INJECTION: forcing a failure. [ 251.826766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.838756] CPU: 0 PID: 14261 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 251.846056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.847077] Unknown ioctl 1090549505 [ 251.855423] Call Trace: [ 251.855454] dump_stack+0x1b9/0x294 [ 251.855481] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.855502] ? lock_downgrade+0x8e0/0x8e0 [ 251.855537] should_fail.cold.4+0xa/0x1a [ 251.878859] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.884019] ? is_bpf_text_address+0xd7/0x170 [ 251.888552] ? kernel_text_address+0x79/0xf0 [ 251.892807] ion_mmap: failure mapping buffer to userspace [ 251.892984] ? __unwind_start+0x166/0x330 [ 251.902660] ? __kernel_text_address+0xd/0x40 [ 251.906242] Unknown ioctl 1090549505 [ 251.907174] ? unwind_get_return_address+0x61/0xa0 [ 251.907200] ? __save_stack_trace+0x7e/0xd0 [ 251.907222] ? graph_lock+0x170/0x170 [ 251.907267] ? __lock_is_held+0xb5/0x140 [ 251.928035] ? sg_write+0x8c3/0xd30 [ 251.931706] __alloc_pages_nodemask+0x34e/0xd70 [ 251.936837] ? print_usage_bug+0xc0/0xc0 [ 251.940932] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 251.941684] ion_mmap: failure mapping buffer to userspace [ 251.945986] ? blk_queue_exit+0x1a4/0x2f0 [ 251.946020] ? __lock_is_held+0xb5/0x140 [ 251.946053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.946073] ? cap_capable+0x1f9/0x260 [ 251.969519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.975090] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 251.980667] alloc_pages_current+0x10c/0x210 [ 251.985116] sg_build_indirect.isra.15+0x32a/0x750 [ 251.990087] sg_common_write.isra.16+0x9ed/0x1dd0 [ 251.994981] ? sg_open+0x1130/0x1130 [ 251.998731] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 252.003965] ? __check_object_size+0x95/0x5d9 [ 252.008498] ? usercopy_warn+0x120/0x120 [ 252.012592] ? __might_sleep+0x95/0x190 [ 252.016605] sg_write+0x8c3/0xd30 [ 252.020096] ? sg_ioctl+0x2f80/0x2f80 [ 252.023921] ? rcu_is_watching+0x85/0x140 [ 252.028095] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 252.033322] ? __fget+0x40c/0x650 [ 252.036814] ? expand_files.part.8+0x9a0/0x9a0 [ 252.039296] ion_mmap: failure mapping buffer to userspace [ 252.041413] ? lock_downgrade+0x8e0/0x8e0 [ 252.041442] ? proc_fail_nth_write+0x96/0x1f0 [ 252.041487] __vfs_write+0x10b/0x960 [ 252.041504] ? __fget_light+0x2ef/0x430 [ 252.041522] ? sg_ioctl+0x2f80/0x2f80 [ 252.067179] ? kernel_read+0x120/0x120 [ 252.071098] ? wait_for_completion+0x870/0x870 [ 252.075729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.081296] ? security_file_permission+0x1c6/0x240 [ 252.086345] ? rw_verify_area+0x118/0x360 [ 252.090518] vfs_write+0x1f8/0x560 [ 252.094088] ksys_write+0xf9/0x250 [ 252.097652] ? __ia32_sys_read+0xb0/0xb0 [ 252.101750] __x64_sys_write+0x73/0xb0 [ 252.105664] do_syscall_64+0x1b1/0x800 [ 252.109570] ? finish_task_switch+0x1ca/0x840 [ 252.114089] ? syscall_return_slowpath+0x5c0/0x5c0 [ 252.119041] ? syscall_return_slowpath+0x30f/0x5c0 [ 252.123999] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 252.129392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.134261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.139468] RIP: 0033:0x455a09 [ 252.142670] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.150411] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 252.157791] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 2018/05/15 19:17:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40bc5311, &(0x7f000021af98)) 2018/05/15 19:17:30 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100000001, 0x101280) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @rand_addr, @multicast2}, &(0x7f0000000100)=0xc) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x101000, 0x0) ioctl$sock_netrom_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xc003000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0xfffffffff7fffffd, 0x13, r1, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) r2 = dup2(r1, r1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000001000080060000000000000008000000000000000900000000000000f200000000000000010000800000000000000000010000008000000014a9bbed7b940b8cfe840000000000000000010000000200000000000000fffeffffffffffff01040000000000003500000000000000"]) 2018/05/15 19:17:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe000000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:17:30 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) socket$inet6(0xa, 0x1, 0x55) [ 252.165093] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 252.172404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 252.179706] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000d [ 252.200321] ion_mmap: failure mapping buffer to userspace [ 252.213994] x86/PAT: syz-executor4:14291 map pfn RAM range req write-combining for [mem 0x1ba00c000-0x1ba00cfff], got write-back [ 252.245935] x86/PAT: syz-executor4:14301 map pfn RAM range req write-combining for [mem 0x1d86ce000-0x1d86cefff], got write-back [ 252.258941] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:30 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) signalfd(r0, &(0x7f0000000000)={0x7fffffff}, 0x8) 2018/05/15 19:17:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/+ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8060000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:31 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045301, &(0x7f000021af98)) 2018/05/15 19:17:31 executing program 0 (fault-call:2 fault-nth:14): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x5b) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40040, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000007000/0x2000)=nil, 0x2000}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e21}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x800, @empty, 0x7}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0xac) [ 252.361901] ion_mmap: failure mapping buffer to userspace [ 252.393354] ion_mmap: failure mapping buffer to userspace [ 252.480927] FAULT_INJECTION: forcing a failure. [ 252.480927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.492948] CPU: 1 PID: 14329 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 252.500234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.509591] Call Trace: [ 252.510825] ion_mmap: failure mapping buffer to userspace [ 252.512190] dump_stack+0x1b9/0x294 [ 252.512214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 252.512233] ? lock_downgrade+0x8e0/0x8e0 [ 252.512259] should_fail.cold.4+0xa/0x1a [ 252.534790] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.539918] ? is_bpf_text_address+0xd7/0x170 [ 252.544435] ? kernel_text_address+0x79/0xf0 [ 252.548867] ? __unwind_start+0x166/0x330 [ 252.553037] ? __kernel_text_address+0xd/0x40 [ 252.557548] ? unwind_get_return_address+0x61/0xa0 [ 252.562207] ion_mmap: failure mapping buffer to userspace [ 252.562492] ? __save_stack_trace+0x7e/0xd0 [ 252.572346] ? graph_lock+0x170/0x170 [ 252.576182] ? __lock_is_held+0xb5/0x140 [ 252.580255] ? sg_write+0x8c3/0xd30 [ 252.583906] __alloc_pages_nodemask+0x34e/0xd70 [ 252.588588] ? print_usage_bug+0xc0/0xc0 [ 252.592670] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 252.597710] ? blk_queue_exit+0x1a4/0x2f0 [ 252.601884] ? __lock_is_held+0xb5/0x140 [ 252.605967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.611519] ? cap_capable+0x1f9/0x260 [ 252.615426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.620972] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 252.626524] alloc_pages_current+0x10c/0x210 [ 252.630954] sg_build_indirect.isra.15+0x32a/0x750 [ 252.635911] sg_common_write.isra.16+0x9ed/0x1dd0 [ 252.640781] ? sg_open+0x1130/0x1130 [ 252.644512] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 252.649721] ? __check_object_size+0x95/0x5d9 [ 252.654253] ? usercopy_warn+0x120/0x120 [ 252.658612] ? __might_sleep+0x95/0x190 [ 252.662618] sg_write+0x8c3/0xd30 [ 252.666102] ? sg_ioctl+0x2f80/0x2f80 [ 252.669918] ? rcu_is_watching+0x85/0x140 [ 252.674083] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 252.679283] ? __fget+0x40c/0x650 [ 252.682764] ? expand_files.part.8+0x9a0/0x9a0 [ 252.687353] ? lock_downgrade+0x8e0/0x8e0 [ 252.691508] ? proc_fail_nth_write+0x96/0x1f0 [ 252.696047] __vfs_write+0x10b/0x960 [ 252.699770] ? __fget_light+0x2ef/0x430 [ 252.703754] ? sg_ioctl+0x2f80/0x2f80 [ 252.707560] ? kernel_read+0x120/0x120 [ 252.711455] ? wait_for_completion+0x870/0x870 [ 252.716063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.721614] ? security_file_permission+0x1c6/0x240 [ 252.726648] ? rw_verify_area+0x118/0x360 [ 252.730814] vfs_write+0x1f8/0x560 [ 252.734365] ksys_write+0xf9/0x250 [ 252.737912] ? __ia32_sys_read+0xb0/0xb0 [ 252.741962] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 252.746791] __x64_sys_write+0x73/0xb0 [ 252.750668] do_syscall_64+0x1b1/0x800 [ 252.754553] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 252.759413] ? syscall_return_slowpath+0x5c0/0x5c0 [ 252.764333] ? syscall_return_slowpath+0x30f/0x5c0 [ 252.769264] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 252.774627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.779470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.785251] RIP: 0033:0x455a09 [ 252.788425] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.796118] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 252.803379] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 252.810638] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 252.817892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 252.825157] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000e 2018/05/15 19:17:31 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(0x0, 0x16) 2018/05/15 19:17:31 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:31 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5460, &(0x7f000021af98)) 2018/05/15 19:17:31 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x104, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) keyctl$session_to_parent(0x12) 2018/05/15 19:17:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/oev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:31 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x181) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:17:31 executing program 0 (fault-call:2 fault-nth:15): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 253.273896] FAULT_INJECTION: forcing a failure. [ 253.273896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.277291] ion_mmap: failure mapping buffer to userspace [ 253.285866] CPU: 1 PID: 14346 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 253.285879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.285885] Call Trace: [ 253.285912] dump_stack+0x1b9/0x294 [ 253.285936] ? dump_stack_print_info.cold.2+0x52/0x52 [ 253.319473] ? lock_downgrade+0x8e0/0x8e0 2018/05/15 19:17:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000000c0)={0x1, 0x80000001}) dup3(r0, r1, 0x0) 2018/05/15 19:17:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x20, 0x200040) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) [ 253.323651] should_fail.cold.4+0xa/0x1a [ 253.327731] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 253.332852] ? is_bpf_text_address+0xd7/0x170 [ 253.337395] ? kernel_text_address+0x79/0xf0 [ 253.341815] ? __unwind_start+0x166/0x330 [ 253.345977] ? __kernel_text_address+0xd/0x40 [ 253.350484] ? unwind_get_return_address+0x61/0xa0 [ 253.355434] ? __save_stack_trace+0x7e/0xd0 [ 253.359777] ? graph_lock+0x170/0x170 [ 253.363613] ? __lock_is_held+0xb5/0x140 [ 253.367696] ? sg_write+0x8c3/0xd30 [ 253.371367] __alloc_pages_nodemask+0x34e/0xd70 [ 253.376068] ? print_usage_bug+0xc0/0xc0 [ 253.380152] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 253.385199] ? blk_queue_exit+0x1a4/0x2f0 [ 253.389379] ? __lock_is_held+0xb5/0x140 [ 253.393467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.399020] ? cap_capable+0x1f9/0x260 [ 253.402938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.408492] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 253.414056] alloc_pages_current+0x10c/0x210 [ 253.418235] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 253.418481] sg_build_indirect.isra.15+0x32a/0x750 [ 253.418506] sg_common_write.isra.16+0x9ed/0x1dd0 [ 253.433814] ? sg_open+0x1130/0x1130 [ 253.437544] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 253.442751] ? __check_object_size+0x95/0x5d9 [ 253.447265] ? usercopy_warn+0x120/0x120 [ 253.451353] ? __might_sleep+0x95/0x190 [ 253.455359] sg_write+0x8c3/0xd30 [ 253.458830] ? sg_ioctl+0x2f80/0x2f80 [ 253.462651] ? rcu_is_watching+0x85/0x140 [ 253.464165] ion_mmap: failure mapping buffer to userspace [ 253.466809] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 253.466840] ? __fget+0x40c/0x650 [ 253.466867] ? expand_files.part.8+0x9a0/0x9a0 [ 253.466886] ? lock_downgrade+0x8e0/0x8e0 [ 253.466906] ? proc_fail_nth_write+0x96/0x1f0 [ 253.466934] __vfs_write+0x10b/0x960 [ 253.466951] ? __fget_light+0x2ef/0x430 [ 253.501960] ? sg_ioctl+0x2f80/0x2f80 [ 253.505779] ? kernel_read+0x120/0x120 [ 253.509689] ? wait_for_completion+0x870/0x870 [ 253.514304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.519865] ? security_file_permission+0x1c6/0x240 2018/05/15 19:17:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) socketpair(0x17, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r3, &(0x7f0000000200)=""/212, 0xd4, 0x1, &(0x7f0000000300)={0xa, 0x4e21, 0x8000, @loopback={0x0, 0x1}, 0x8}, 0x1c) tgkill(r1, r2, 0x24) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) [ 253.524900] ? rw_verify_area+0x118/0x360 [ 253.529063] vfs_write+0x1f8/0x560 [ 253.532621] ksys_write+0xf9/0x250 [ 253.536285] ? __ia32_sys_read+0xb0/0xb0 [ 253.540368] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 253.545232] __x64_sys_write+0x73/0xb0 [ 253.549135] do_syscall_64+0x1b1/0x800 [ 253.553038] ? finish_task_switch+0x1ca/0x840 [ 253.557558] ? syscall_return_slowpath+0x5c0/0x5c0 [ 253.562507] ? syscall_return_slowpath+0x30f/0x5c0 [ 253.568977] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe 2018/05/15 19:17:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8847000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x280000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) dup3(r0, r2, 0x0) [ 253.574374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.579246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.584451] RIP: 0033:0x455a09 [ 253.587648] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.595368] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 253.602648] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 253.609930] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 253.617210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/15 19:17:32 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f000021af98)) [ 253.617875] ion_mmap: failure mapping buffer to userspace [ 253.624487] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000000f [ 253.665276] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8848000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 253.700712] ion_mmap: failure mapping buffer to userspace [ 253.720149] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(0x0, 0x16) 2018/05/15 19:17:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x14b080, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0xffff, 0x10, 0x1, r2}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x2, 0x70, 0xb58e, 0x2000000000000, 0xc7, 0x800, 0x0, 0x5, 0x80008, 0x7, 0x3f, 0x1000, 0x22, 0x9, 0x0, 0x100000001, 0x2, 0x9, 0x81, 0x2, 0x6, 0x309dba5c, 0x3ff, 0xcccc, 0x6, 0x0, 0x9, 0x5, 0x100, 0x81, 0x20fd5181, 0x0, 0x40, 0xfffffffffffff000, 0xb1, 0x9, 0x3, 0x8, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x800, 0x4, 0x4, 0x2, 0x1f567d47, 0xad9, 0x9}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KDENABIO(r3, 0x4b36) 2018/05/15 19:17:32 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) 2018/05/15 19:17:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/sev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:32 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x40000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockname$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@mcast2, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000003c0)={@dev, @multicast2, 0x0}, &(0x7f0000000680)=0xfffffffffffffc26) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000cc0)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000e80)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000f80)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001080)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001340)=0x14) accept$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001400)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001440)={@empty, @dev, 0x0}, &(0x7f0000001480)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f0000001500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001780)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000001900)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001980)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000021c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="b4070000", @ANYRES16=r1, @ANYBLOB="02012dbd7000fcdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="a401020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008000000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400f8ffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="f400020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ef0a00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c000100240001000000000000000000ee22564336505bed380000000000000022145e564f22bba60000000000082003000600000004004b5d660ecd30", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004006d000000080007000000000008000100", @ANYRES32=r11, @ANYBLOB="780102003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400200003020300000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004008000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000010000080007000000000008000100", @ANYRES32=r14, @ANYBLOB="c000020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffffff08000600", @ANYRES32=r15, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r16, @ANYBLOB="f800020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="080007000000000008000100", @ANYRES32=r19, @ANYBLOB="a801020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004009d7bab3608000600", @ANYRES32=r22, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f616463617374000000"], 0x7b4}, 0x1, 0x0, 0x0, 0x40000}, 0x40880) r24 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r24, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r26 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x440000, 0x0) ioctl$IOC_PR_RELEASE(r26, 0x401070ca, &(0x7f0000000080)={0x4, 0x9, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r25, 0x0) 2018/05/15 19:17:32 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5332, &(0x7f000021af98)) 2018/05/15 19:17:32 executing program 0 (fault-call:2 fault-nth:16): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x40000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 254.241119] FAULT_INJECTION: forcing a failure. [ 254.241119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.253095] CPU: 0 PID: 14423 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 254.260392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.269764] Call Trace: [ 254.272398] dump_stack+0x1b9/0x294 [ 254.276069] ? dump_stack_print_info.cold.2+0x52/0x52 [ 254.281289] ? lock_downgrade+0x8e0/0x8e0 [ 254.285481] should_fail.cold.4+0xa/0x1a [ 254.289576] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.294722] ? is_bpf_text_address+0xd7/0x170 [ 254.299244] ? kernel_text_address+0x79/0xf0 [ 254.303676] ? __unwind_start+0x166/0x330 [ 254.307852] ? __kernel_text_address+0xd/0x40 [ 254.312378] ? unwind_get_return_address+0x61/0xa0 [ 254.317335] ? __save_stack_trace+0x7e/0xd0 [ 254.321689] ? graph_lock+0x170/0x170 [ 254.325553] ? __lock_is_held+0xb5/0x140 [ 254.329633] ? sg_write+0x8c3/0xd30 [ 254.333307] __alloc_pages_nodemask+0x34e/0xd70 [ 254.338001] ? print_usage_bug+0xc0/0xc0 [ 254.342093] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 254.347142] ? blk_queue_exit+0x1a4/0x2f0 [ 254.351414] ? __lock_is_held+0xb5/0x140 [ 254.356031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.361589] ? cap_capable+0x1f9/0x260 [ 254.365511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.371075] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 254.376645] alloc_pages_current+0x10c/0x210 [ 254.381090] sg_build_indirect.isra.15+0x32a/0x750 [ 254.386070] sg_common_write.isra.16+0x9ed/0x1dd0 [ 254.390964] ? sg_open+0x1130/0x1130 [ 254.394713] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 254.399933] ? __check_object_size+0x95/0x5d9 [ 254.404464] ? usercopy_warn+0x120/0x120 [ 254.408563] ? __might_sleep+0x95/0x190 [ 254.412571] sg_write+0x8c3/0xd30 [ 254.416053] ? sg_ioctl+0x2f80/0x2f80 [ 254.419880] ? rcu_is_watching+0x85/0x140 [ 254.424049] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 254.429276] ? __fget+0x40c/0x650 [ 254.432764] ? expand_files.part.8+0x9a0/0x9a0 [ 254.437377] ? lock_downgrade+0x8e0/0x8e0 [ 254.441555] ? proc_fail_nth_write+0x96/0x1f0 [ 254.446098] __vfs_write+0x10b/0x960 [ 254.449837] ? __fget_light+0x2ef/0x430 [ 254.453834] ? sg_ioctl+0x2f80/0x2f80 [ 254.456767] ion_mmap: failure mapping buffer to userspace [ 254.457652] ? kernel_read+0x120/0x120 [ 254.457678] ? wait_for_completion+0x870/0x870 [ 254.457724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.457743] ? security_file_permission+0x1c6/0x240 [ 254.457766] ? rw_verify_area+0x118/0x360 [ 254.486474] vfs_write+0x1f8/0x560 [ 254.490046] ksys_write+0xf9/0x250 [ 254.493610] ? __ia32_sys_read+0xb0/0xb0 [ 254.497711] __x64_sys_write+0x73/0xb0 [ 254.499676] ion_mmap: failure mapping buffer to userspace [ 254.501613] do_syscall_64+0x1b1/0x800 [ 254.501633] ? finish_task_switch+0x1ca/0x840 [ 254.501657] ? syscall_return_slowpath+0x5c0/0x5c0 [ 254.501680] ? syscall_return_slowpath+0x30f/0x5c0 [ 254.501712] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 254.530825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.535707] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/15 19:17:32 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/178, 0xb2}], 0x1, &(0x7f00000003c0)=""/156, 0x9c, 0x20}, 0xfffffffffffffeff}, {{&(0x7f0000000480)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/24, 0x18}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/195, 0xc3}], 0x5, 0x0, 0x0, 0x1}, 0x2}, {{&(0x7f0000000940)=@l2, 0x80, &(0x7f0000001f40)=[{&(0x7f00000009c0)=""/202, 0xca}, {&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/128, 0x80}, {&(0x7f0000000c00)=""/207, 0xcf}, {&(0x7f0000000d00)=""/181, 0xb5}, {&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/88, 0x58}], 0x8, &(0x7f0000001fc0)=""/218, 0xda, 0x8fcb}, 0x14a}], 0x3, 0x10040, &(0x7f0000002180)={0x77359400}) sendto$packet(r0, &(0x7f00000021c0)="e49f241c8fe734f0f8e9a173bf", 0xd, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xef, 0x200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="e00000001f89a66883c9fc95e96e4a196fece372473fad7628fbcdbd418c3451bf238bfb121b57b92e7914b0f823f19e6f383af5c7fedfc44122822ea0e4baae8eb3dafe3d530fb444df9882e9b3ba99e3f50b580b1feca244a191d674323e92e911f15b439d8d51e1337f46c49659c5e91646998d46697853e116c42d7486c7c88e70a13d1d70920954d9541d0c5647c9c8623d560f12198b147eb1eb46e41fc0950958edda90c6432090f1933b3dd6f92044590bc6853611cef916bc15751930c8c42def530abb23d8bce5dd3690aa1f5bae8e1ff92c73a57cd0d365b69df70d1a00aa"], &(0x7f0000000200)=0xe8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r4, 0xed}, &(0x7f0000000280)=0x8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002200)={@loopback, 0x0}, &(0x7f0000002240)=0x14) connect$packet(r3, &(0x7f0000002280)={0x11, 0x18, r5, 0x1, 0xf0b8, 0x6}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000022c0)=0x0) get_robust_list(r6, &(0x7f00000023c0)=&(0x7f0000002380)={&(0x7f0000002300), 0x0, &(0x7f0000002340)}, &(0x7f0000002400)=0x18) dup3(r1, r2, 0x0) 2018/05/15 19:17:33 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x117001, 0x110002, 0xb, 0x5, 0x1, 0x2, 0x9d, 0x0, 0x200, 0xda, 0x6, 0xe8}, {0x6000, 0x1f000, 0x10, 0x0, 0x4, 0x9d48, 0x7, 0xaa, 0x7f, 0x4, 0x599d, 0xffffffffa1dd7021}, {0x2000, 0x10000, 0xd, 0x9, 0x4, 0x4, 0x7, 0x54, 0xfffffffffffffeff, 0x7fff, 0x0, 0x8}, {0x4, 0xf002, 0xe, 0x100, 0xac, 0x7, 0x7ff, 0x7, 0x1988, 0x3f, 0x5aa94b2b, 0x4}, {0x2000, 0x103000, 0x9, 0xff, 0x3, 0x100, 0x9, 0x3b06, 0x8, 0x2, 0x10001, 0xf8}, {0x10000, 0x4, 0x1b, 0xee, 0xffff, 0x9, 0x9, 0x7c46, 0x7, 0x8, 0x22b000000000, 0x9}, {0x0, 0xd000, 0xc, 0x47699648, 0xa8f2, 0x0, 0x8, 0xffffffffffffffe0, 0x7ff, 0x8001, 0x2, 0x7}, {0x6000, 0x6000, 0xa, 0x1, 0x100, 0x4, 0x200, 0x2, 0x2, 0x3, 0x5}, {0x105004, 0xf000}, {0x4000}, 0x4, 0x0, 0x5005, 0x100, 0x3, 0x4000, 0x2, [0x200, 0x2, 0x6, 0x2]}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x1003b, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/xev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x20, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x7fffd) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) [ 254.540948] RIP: 0033:0x455a09 [ 254.544149] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.551885] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 254.559177] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 254.566478] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 254.573779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 254.581069] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000010 2018/05/15 19:17:33 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 2018/05/15 19:17:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc020660b, &(0x7f000021af98)) 2018/05/15 19:17:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/-ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 254.611701] ion_mmap: failure mapping buffer to userspace [ 254.675708] ion_mmap: failure mapping buffer to userspace [ 254.695856] ion_mmap: failure mapping buffer to userspace [ 254.728168] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:33 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(0x0, 0x16) 2018/05/15 19:17:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88470000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x2, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x7, 0x200000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0x6, 0xb, 0x8, 0x401, 0x3f, 0x7, 0xb641, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={r4, @in6={{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x8a}}, 0xd5, 0x7, 0x4, 0xd2, 0x40}, &(0x7f0000000500)=0x98) dup3(r0, r1, 0x0) r5 = semget$private(0x0, 0x0, 0x8) semctl$IPC_RMID(r5, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0xaf, 0x80, @buffer={0x0, 0xa8, &(0x7f0000000040)=""/168}, &(0x7f0000000200)="533033d68d4d91164d185ca5757c2c3a61974a23cfdfd851d85f3c91545df5d49b1872701567f75c4e95cd627fd90eae73aae5d035e158551dbc927ba40beb8988c578b7ce9050a20351bce0eedb75f74e2018340d86264497adb83af5c82d7fc53634ae4d4319f6d3116c93cb84f27cc8cdefccc9707c983075fe65239f7a9f50691495df9f5d6ee254438dc6bf7a2ab1b7e17a633c4401fb6d3294fbd8e173fadc385f59cad71ad5314578a4ee45", &(0x7f0000000100)=""/124, 0x5, 0x24, 0x2, &(0x7f00000002c0)}) 2018/05/15 19:17:33 executing program 0 (fault-call:2 fault-nth:17): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:33 executing program 4: socketpair(0x15, 0xa, 0xffffffff, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) 2018/05/15 19:17:33 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8) 2018/05/15 19:17:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/cev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505331, &(0x7f000021af98)) [ 255.232000] ion_mmap: failure mapping buffer to userspace [ 255.247157] ion_mmap: failure mapping buffer to userspace [ 255.248899] FAULT_INJECTION: forcing a failure. [ 255.248899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.264798] CPU: 1 PID: 14491 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 255.269957] ion_mmap: failure mapping buffer to userspace [ 255.272077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.272084] Call Trace: [ 255.272110] dump_stack+0x1b9/0x294 [ 255.272133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 255.272150] ? lock_downgrade+0x8e0/0x8e0 [ 255.272176] should_fail.cold.4+0xa/0x1a [ 255.272197] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 255.314345] ? is_bpf_text_address+0xd7/0x170 [ 255.318858] ? kernel_text_address+0x79/0xf0 [ 255.323285] ? __unwind_start+0x166/0x330 [ 255.327446] ? __kernel_text_address+0xd/0x40 [ 255.331955] ? unwind_get_return_address+0x61/0xa0 [ 255.336896] ? __save_stack_trace+0x7e/0xd0 [ 255.341233] ? graph_lock+0x170/0x170 [ 255.345062] ? __lock_is_held+0xb5/0x140 [ 255.349125] ? sg_write+0x8c3/0xd30 [ 255.352761] __alloc_pages_nodemask+0x34e/0xd70 [ 255.357424] ? print_usage_bug+0xc0/0xc0 [ 255.361488] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 255.366515] ? blk_queue_exit+0x1a4/0x2f0 [ 255.370749] ? __lock_is_held+0xb5/0x140 [ 255.374820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.380348] ? cap_capable+0x1f9/0x260 [ 255.384236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.389773] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 255.395315] alloc_pages_current+0x10c/0x210 [ 255.399729] sg_build_indirect.isra.15+0x32a/0x750 [ 255.404660] sg_common_write.isra.16+0x9ed/0x1dd0 [ 255.409504] ? sg_open+0x1130/0x1130 [ 255.413214] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 255.418399] ? __check_object_size+0x95/0x5d9 [ 255.422890] ? usercopy_warn+0x120/0x120 [ 255.426949] ? __might_sleep+0x95/0x190 [ 255.430920] sg_write+0x8c3/0xd30 [ 255.434371] ? sg_ioctl+0x2f80/0x2f80 [ 255.438165] ? rcu_is_watching+0x85/0x140 [ 255.442306] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 255.447500] ? __fget+0x40c/0x650 [ 255.450951] ? expand_files.part.8+0x9a0/0x9a0 [ 255.455529] ? lock_downgrade+0x8e0/0x8e0 [ 255.459675] ? proc_fail_nth_write+0x96/0x1f0 [ 255.464172] __vfs_write+0x10b/0x960 [ 255.467876] ? __fget_light+0x2ef/0x430 [ 255.471841] ? sg_ioctl+0x2f80/0x2f80 [ 255.475634] ? kernel_read+0x120/0x120 [ 255.479514] ? wait_for_completion+0x870/0x870 [ 255.484100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.489630] ? security_file_permission+0x1c6/0x240 [ 255.494727] ? rw_verify_area+0x118/0x360 [ 255.498877] vfs_write+0x1f8/0x560 [ 255.502410] ksys_write+0xf9/0x250 [ 255.505974] ? __ia32_sys_read+0xb0/0xb0 [ 255.510048] __x64_sys_write+0x73/0xb0 [ 255.513934] do_syscall_64+0x1b1/0x800 [ 255.517814] ? finish_task_switch+0x1ca/0x840 [ 255.522306] ? syscall_return_slowpath+0x5c0/0x5c0 [ 255.527234] ? syscall_return_slowpath+0x30f/0x5c0 [ 255.532159] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 255.537519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.542369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.547549] RIP: 0033:0x455a09 [ 255.550729] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.558443] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 255.565704] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 255.572986] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/15 19:17:34 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000040)=0x101) 2018/05/15 19:17:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:34 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f000021af98)) [ 255.580255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 255.587519] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000011 [ 255.648869] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:34 executing program 0 (fault-call:2 fault-nth:18): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f00000000c0)="f228942c9634793796bfea7a28ce1e19dd389bdad7d6b7525c738980b3d16a4319ba2655af4b7a943b38bf7c978d670aa0809afbe4314bfa99d99aac52aa574c67ff76835c1bea6872e059a70ea18ff40a56a966b38b3e36fe651a241799cfc298eb4d47fe42be14c0987a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000200)=""/143) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x2, 0x1, 0x0, 0x0, 0x10, 0x80, 0x4, 0x5, 0x4, 0x20, 0x7, 0x0, 0x2d3, 0x7, 0x205, 0x80, 0x4, 0x10000, 0xb7, 0x2, 0x7, 0x0, 0x9d, 0x7, 0x3ff, 0x7, 0x2, 0x2, 0xbfc0, 0x8000, 0x0, 0x101, 0xe30, 0x5c8d, 0x8, 0x0, 0x3, 0x7, @perf_config_ext={0x3000000}, 0x8, 0x8001, 0x9, 0x4, 0x0, 0xb97, 0x9}, r4, 0x0, r1, 0x1) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r4) [ 255.707260] ion_mmap: failure mapping buffer to userspace [ 255.764566] FAULT_INJECTION: forcing a failure. [ 255.764566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.776585] CPU: 1 PID: 14522 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 255.783901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.793291] Call Trace: [ 255.795899] dump_stack+0x1b9/0x294 [ 255.799551] ? dump_stack_print_info.cold.2+0x52/0x52 [ 255.804759] ? lock_downgrade+0x8e0/0x8e0 [ 255.808948] should_fail.cold.4+0xa/0x1a [ 255.813036] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 255.818168] ? is_bpf_text_address+0xd7/0x170 [ 255.822689] ? kernel_text_address+0x79/0xf0 [ 255.827114] ? __unwind_start+0x166/0x330 [ 255.831278] ? __kernel_text_address+0xd/0x40 [ 255.835795] ? unwind_get_return_address+0x61/0xa0 [ 255.840747] ? __save_stack_trace+0x7e/0xd0 [ 255.845086] ? graph_lock+0x170/0x170 [ 255.848921] ? __lock_is_held+0xb5/0x140 [ 255.853001] ? sg_write+0x8c3/0xd30 [ 255.856666] __alloc_pages_nodemask+0x34e/0xd70 [ 255.861350] ? print_usage_bug+0xc0/0xc0 [ 255.865434] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 255.870480] ? blk_queue_exit+0x1a4/0x2f0 [ 255.874653] ? __lock_is_held+0xb5/0x140 [ 255.878738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.884291] ? cap_capable+0x1f9/0x260 [ 255.888230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.893881] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 255.899452] alloc_pages_current+0x10c/0x210 [ 255.903888] sg_build_indirect.isra.15+0x32a/0x750 [ 255.908852] sg_common_write.isra.16+0x9ed/0x1dd0 2018/05/15 19:17:34 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8906000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:34 executing program 4: [ 255.913726] ? sg_open+0x1130/0x1130 [ 255.917470] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 255.922687] ? __check_object_size+0x95/0x5d9 [ 255.927217] ? usercopy_warn+0x120/0x120 [ 255.931316] ? __might_sleep+0x95/0x190 [ 255.935315] sg_write+0x8c3/0xd30 [ 255.938790] ? sg_ioctl+0x2f80/0x2f80 [ 255.942609] ? rcu_is_watching+0x85/0x140 [ 255.946785] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 255.952006] ? __fget+0x40c/0x650 [ 255.955486] ? expand_files.part.8+0x9a0/0x9a0 [ 255.960085] ? lock_downgrade+0x8e0/0x8e0 [ 255.964254] ? proc_fail_nth_write+0x96/0x1f0 [ 255.968778] __vfs_write+0x10b/0x960 [ 255.972507] ? __fget_light+0x2ef/0x430 [ 255.976502] ? sg_ioctl+0x2f80/0x2f80 [ 255.980325] ? kernel_read+0x120/0x120 [ 255.984232] ? wait_for_completion+0x870/0x870 [ 255.988846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.994407] ? security_file_permission+0x1c6/0x240 [ 255.999448] ? rw_verify_area+0x118/0x360 [ 256.003614] vfs_write+0x1f8/0x560 [ 256.007179] ksys_write+0xf9/0x250 [ 256.010739] ? __ia32_sys_read+0xb0/0xb0 [ 256.014826] __x64_sys_write+0x73/0xb0 [ 256.018739] do_syscall_64+0x1b1/0x800 [ 256.022642] ? finish_task_switch+0x1ca/0x840 [ 256.027151] ? syscall_return_slowpath+0x5c0/0x5c0 [ 256.032093] ? syscall_return_slowpath+0x30f/0x5c0 [ 256.037032] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 256.042394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.047237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.052415] RIP: 0033:0x455a09 [ 256.055594] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.063292] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 256.070556] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 256.077810] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 256.085065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 256.092328] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000012 2018/05/15 19:17:35 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x0) 2018/05/15 19:17:35 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/.ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:35 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85320, &(0x7f000021af98)) 2018/05/15 19:17:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$llc(r1, &(0x7f0000000080)="57860e17f91a8bf2b42a183dbec553fd", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 2018/05/15 19:17:35 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x8, 0x7, 0xffffffff, 0x0, "b98c0b945cc3ed9656d434324d28038698bff8334e78ca21ad9e9239e9dc8af4f570f4ed01d833deb8e2f00b", 0x66}, 0x0, 0x0, 0xa, r2, 0x7, 0x7, "15a6ac9fef2b12ff8bb1a732cfefd28506a059bc05ecdf2d5d450a96bd3d6fafd7875bb405f82b6c121ef45853fa6f0b208b63ff15c61ae4258821b84512d6ec", &(0x7f0000000080)='security{ppp0]-!\x00', 0x11, [], [0x1, 0xab, 0x21ef515a, 0x5]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) 2018/05/15 19:17:35 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x89060000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:35 executing program 0 (fault-call:2 fault-nth:19): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) get_robust_list(r2, &(0x7f0000000200)=&(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000240)=0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 256.625419] ion_mmap: failure mapping buffer to userspace [ 256.633384] FAULT_INJECTION: forcing a failure. [ 256.633384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.645381] CPU: 0 PID: 14553 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 256.652685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.662067] Call Trace: [ 256.664690] dump_stack+0x1b9/0x294 [ 256.668348] ? dump_stack_print_info.cold.2+0x52/0x52 [ 256.673561] ? lock_downgrade+0x8e0/0x8e0 [ 256.677753] should_fail.cold.4+0xa/0x1a [ 256.681844] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.686986] ? is_bpf_text_address+0xd7/0x170 [ 256.691509] ? kernel_text_address+0x79/0xf0 [ 256.695945] ? __unwind_start+0x166/0x330 [ 256.700121] ? __kernel_text_address+0xd/0x40 [ 256.704655] ? unwind_get_return_address+0x61/0xa0 [ 256.709621] ? __save_stack_trace+0x7e/0xd0 [ 256.713966] ? graph_lock+0x170/0x170 [ 256.717829] ? __lock_is_held+0xb5/0x140 [ 256.721910] ? sg_write+0x8c3/0xd30 [ 256.725587] __alloc_pages_nodemask+0x34e/0xd70 [ 256.730288] ? print_usage_bug+0xc0/0xc0 [ 256.734389] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 256.739444] ? blk_queue_exit+0x1a4/0x2f0 [ 256.743643] ? __lock_is_held+0xb5/0x140 [ 256.747750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.753326] ? cap_capable+0x1f9/0x260 [ 256.757341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.762909] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 256.768490] alloc_pages_current+0x10c/0x210 [ 256.772946] sg_build_indirect.isra.15+0x32a/0x750 [ 256.777925] sg_common_write.isra.16+0x9ed/0x1dd0 [ 256.782804] ? sg_open+0x1130/0x1130 [ 256.786548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 256.791774] ? __check_object_size+0x95/0x5d9 [ 256.796307] ? usercopy_warn+0x120/0x120 [ 256.800404] ? __might_sleep+0x95/0x190 [ 256.804413] sg_write+0x8c3/0xd30 [ 256.807897] ? sg_ioctl+0x2f80/0x2f80 [ 256.811721] ? rcu_is_watching+0x85/0x140 [ 256.815894] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 256.821123] ? __fget+0x40c/0x650 [ 256.824639] ? expand_files.part.8+0x9a0/0x9a0 [ 256.829248] ? lock_downgrade+0x8e0/0x8e0 [ 256.833424] ? proc_fail_nth_write+0x96/0x1f0 [ 256.837963] __vfs_write+0x10b/0x960 [ 256.841692] ? __fget_light+0x2ef/0x430 [ 256.845686] ? sg_ioctl+0x2f80/0x2f80 [ 256.849508] ? kernel_read+0x120/0x120 [ 256.853419] ? wait_for_completion+0x870/0x870 [ 256.858046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.863601] ? security_file_permission+0x1c6/0x240 [ 256.868661] ? rw_verify_area+0x118/0x360 [ 256.872835] vfs_write+0x1f8/0x560 [ 256.876401] ksys_write+0xf9/0x250 [ 256.879965] ? __ia32_sys_read+0xb0/0xb0 [ 256.884061] __x64_sys_write+0x73/0xb0 [ 256.887969] do_syscall_64+0x1b1/0x800 [ 256.891870] ? finish_task_switch+0x1ca/0x840 [ 256.896389] ? syscall_return_slowpath+0x5c0/0x5c0 [ 256.901339] ? syscall_return_slowpath+0x30f/0x5c0 [ 256.906301] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 256.911694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.916569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.921777] RIP: 0033:0x455a09 2018/05/15 19:17:35 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1c000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x1a, 0x0, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40b00) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0xffffffffffffffc1, 0x1, &(0x7f00000000c0)=0x40}) 2018/05/15 19:17:35 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:17:35 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3c0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:35 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5450, &(0x7f000021af98)) [ 256.924978] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.932709] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 256.939993] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 256.947280] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 256.954564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 256.961855] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000013 2018/05/15 19:17:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x1) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000140)={0xffff, 0x9d}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x802) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:17:35 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:35 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85323, &(0x7f000021af98)) 2018/05/15 19:17:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x0) 2018/05/15 19:17:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000000), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6tnl0\x00', 'lo\x00', 'yam0\x00', 'bcsh0\x00', @empty, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0x98}}, @common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'veth0_to_bond\x00', 'b/nd_slave_1\x00', 'eql\x00', 'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xe0, 0xe0, 0x150, [@ip6={'ip6\x00', 0x4c, {{@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @rand_addr}}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x0, "65df204637935621933eed1ec39d54ea6a1285a4d1ff2180f14623f2ab17e7c4c2491492f032d233f9b86e503a31a4e8b62191dfd4e85c4a85b7e6c43a8a5c1f"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x308) 2018/05/15 19:17:36 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000080)=@ioapic) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='//ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:36 executing program 0 (fault-call:2 fault-nth:20): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:36 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4020940d, &(0x7f000021af98)) 2018/05/15 19:17:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x7, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x1a, 0x2, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 257.609087] kernel msg: ebtables bug: please report to author: Wrong len argument [ 257.624918] ion_mmap: failure mapping buffer to userspace [ 257.637588] FAULT_INJECTION: forcing a failure. [ 257.637588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.644588] ion_mmap: failure mapping buffer to userspace [ 257.649547] CPU: 1 PID: 14629 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 257.662401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.671761] Call Trace: [ 257.674370] dump_stack+0x1b9/0x294 [ 257.678011] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.683213] ? lock_downgrade+0x8e0/0x8e0 [ 257.687386] should_fail.cold.4+0xa/0x1a [ 257.691467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.696592] ? is_bpf_text_address+0xd7/0x170 [ 257.701100] ? kernel_text_address+0x79/0xf0 [ 257.705522] ? __unwind_start+0x166/0x330 [ 257.709684] ? __kernel_text_address+0xd/0x40 [ 257.714197] ? unwind_get_return_address+0x61/0xa0 [ 257.719143] ? __save_stack_trace+0x7e/0xd0 [ 257.723475] ? graph_lock+0x170/0x170 [ 257.727302] ? __lock_is_held+0xb5/0x140 [ 257.731369] ? sg_write+0x8c3/0xd30 [ 257.735025] __alloc_pages_nodemask+0x34e/0xd70 [ 257.739716] ? print_usage_bug+0xc0/0xc0 [ 257.743792] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 257.748836] ? blk_queue_exit+0x1a4/0x2f0 [ 257.753008] ? __lock_is_held+0xb5/0x140 [ 257.757100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.762647] ? cap_capable+0x1f9/0x260 [ 257.766559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.772115] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 257.777673] alloc_pages_current+0x10c/0x210 [ 257.782100] sg_build_indirect.isra.15+0x32a/0x750 [ 257.787081] sg_common_write.isra.16+0x9ed/0x1dd0 [ 257.791942] ? sg_open+0x1130/0x1130 [ 257.795672] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 257.800877] ? __check_object_size+0x95/0x5d9 [ 257.805387] ? usercopy_warn+0x120/0x120 [ 257.809469] ? __might_sleep+0x95/0x190 [ 257.813456] sg_write+0x8c3/0xd30 [ 257.816924] ? sg_ioctl+0x2f80/0x2f80 [ 257.820738] ? rcu_is_watching+0x85/0x140 [ 257.824894] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 257.830103] ? __fget+0x40c/0x650 [ 257.833578] ? expand_files.part.8+0x9a0/0x9a0 [ 257.838174] ? lock_downgrade+0x8e0/0x8e0 [ 257.842342] ? proc_fail_nth_write+0x96/0x1f0 [ 257.846877] __vfs_write+0x10b/0x960 [ 257.850598] ? __fget_light+0x2ef/0x430 [ 257.854582] ? sg_ioctl+0x2f80/0x2f80 [ 257.858394] ? kernel_read+0x120/0x120 [ 257.862302] ? wait_for_completion+0x870/0x870 [ 257.866913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.872467] ? security_file_permission+0x1c6/0x240 [ 257.877503] ? rw_verify_area+0x118/0x360 [ 257.881664] vfs_write+0x1f8/0x560 [ 257.885219] ksys_write+0xf9/0x250 [ 257.888772] ? __ia32_sys_read+0xb0/0xb0 [ 257.892857] __x64_sys_write+0x73/0xb0 [ 257.896760] do_syscall_64+0x1b1/0x800 [ 257.900655] ? finish_task_switch+0x1ca/0x840 [ 257.905164] ? syscall_return_slowpath+0x5c0/0x5c0 2018/05/15 19:17:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045877, &(0x7f000021af98)) 2018/05/15 19:17:36 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x40012, r0, 0x2000) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x440200) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/39) 2018/05/15 19:17:36 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) 2018/05/15 19:17:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xf7, "ef21019643f313ae66c928d7fe32aeb1de318ed2dd6473cbab1b90df38320dfb973901da2c436de425a92c5444eed2244877a607630f1e965485cca944701c821f90e08b6358f21a18b16a3b05d547222f54f76731fa9610837fb5e130edce3940dddf2aada824a2db853402012b88b4ae0bd1379bbfafca166a563a451269d520917b7917e12056cbbc1439f6b22f2289374ad4d1d56a0ade90bbd77a1f3c037c2296557fe89317ef9608b4288b287cd76e7ff8fe5fb19613b9ee2317011030ee6d603a12da0c895359808e5124c929cedeeba4cf44ecbea499b3196a277277cd29c74bec85ab745e6bf16b732e4a7847c8f9a55ff2b4"}, &(0x7f0000000200)=0xff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x9}, &(0x7f0000000280)=0x8) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) 2018/05/15 19:17:36 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x400000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/uev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 257.910099] ? syscall_return_slowpath+0x30f/0x5c0 [ 257.915042] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 257.920424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.925302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.931115] RIP: 0033:0x455a09 [ 257.934308] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.942027] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 257.949307] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 257.956585] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 257.963866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 257.971143] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000014 2018/05/15 19:17:36 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x605e, r1, 0x0) io_setup(0xfffffffffffffffe, &(0x7f0000000000)=0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3ff, 0x400100) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000040), 0x0, 0xb41, 0x0, 0x0, r3}, &(0x7f0000000100)) 2018/05/15 19:17:36 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4c, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) [ 258.145635] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/15 19:17:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r3, 0x8, r0) read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b28fe0)=[{r4}], 0x1, 0xfffffffffffffff8) dup3(r3, r4, 0x0) tkill(r2, 0x0) 2018/05/15 19:17:37 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x2, &(0x7f000021af98)) 2018/05/15 19:17:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8864000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) fallocate(r1, 0x0, 0x10001, 0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @rand_addr=0x81}, 0x28c, 0x4, 0x81, 0xffffffff, 0x0, &(0x7f0000000040)='vcan0\x00', 0xdd10, 0x400, 0x100000001}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x8000000) 2018/05/15 19:17:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/0ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:37 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2090, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:37 executing program 0 (fault-call:2 fault-nth:21): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x2, 0x2b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x7fffffe, &(0x7f0000000040), &(0x7f0000000080)=[{}, {0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x0, 0x0, 0x0, 'tunl0\x00', 'gre0\x00', 'eql\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xa0, 0xd0, 0x100, [@cpu={'cpu\x00', 0x8}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ifb0\x00', 'erspan0\x00', 'ipddp0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x330) 2018/05/15 19:17:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) [ 258.702260] ion_mmap: failure mapping buffer to userspace [ 258.742297] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf0ffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 258.782140] FAULT_INJECTION: forcing a failure. [ 258.782140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.794147] CPU: 1 PID: 14704 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 258.801434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.810796] Call Trace: [ 258.813406] dump_stack+0x1b9/0x294 [ 258.817050] ? dump_stack_print_info.cold.2+0x52/0x52 [ 258.822256] ? lock_downgrade+0x8e0/0x8e0 [ 258.826428] should_fail.cold.4+0xa/0x1a [ 258.830506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 258.835629] ? is_bpf_text_address+0xd7/0x170 [ 258.840140] ? kernel_text_address+0x79/0xf0 [ 258.844566] ? __unwind_start+0x166/0x330 [ 258.848737] ? __kernel_text_address+0xd/0x40 [ 258.853248] ? unwind_get_return_address+0x61/0xa0 [ 258.858201] ? __save_stack_trace+0x7e/0xd0 [ 258.862539] ? graph_lock+0x170/0x170 [ 258.866370] ? __lock_is_held+0xb5/0x140 [ 258.870436] ? sg_write+0x8c3/0xd30 [ 258.874089] __alloc_pages_nodemask+0x34e/0xd70 [ 258.878773] ? print_usage_bug+0xc0/0xc0 2018/05/15 19:17:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8906, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 258.882850] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 258.887888] ? blk_queue_exit+0x1a4/0x2f0 [ 258.892166] ? __lock_is_held+0xb5/0x140 [ 258.896253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.901802] ? cap_capable+0x1f9/0x260 [ 258.905713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.911266] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 258.916827] alloc_pages_current+0x10c/0x210 [ 258.921259] sg_build_indirect.isra.15+0x32a/0x750 [ 258.926218] sg_common_write.isra.16+0x9ed/0x1dd0 2018/05/15 19:17:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x34000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 258.931089] ? sg_open+0x1130/0x1130 [ 258.934820] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 258.940029] ? __check_object_size+0x95/0x5d9 [ 258.944541] ? usercopy_warn+0x120/0x120 [ 258.948623] ? __might_sleep+0x95/0x190 [ 258.952615] sg_write+0x8c3/0xd30 [ 258.956087] ? sg_ioctl+0x2f80/0x2f80 [ 258.959901] ? rcu_is_watching+0x85/0x140 [ 258.964058] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 258.969269] ? __fget+0x40c/0x650 [ 258.972743] ? expand_files.part.8+0x9a0/0x9a0 [ 258.977338] ? lock_downgrade+0x8e0/0x8e0 [ 258.981498] ? proc_fail_nth_write+0x96/0x1f0 [ 258.986012] __vfs_write+0x10b/0x960 [ 258.989737] ? __fget_light+0x2ef/0x430 [ 258.993720] ? sg_ioctl+0x2f80/0x2f80 [ 258.997532] ? kernel_read+0x120/0x120 [ 259.001433] ? wait_for_completion+0x870/0x870 [ 259.006043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.011592] ? security_file_permission+0x1c6/0x240 [ 259.016622] ? rw_verify_area+0x118/0x360 [ 259.020779] vfs_write+0x1f8/0x560 [ 259.024333] ksys_write+0xf9/0x250 [ 259.027888] ? __ia32_sys_read+0xb0/0xb0 2018/05/15 19:17:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8100000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 259.031968] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 259.036830] __x64_sys_write+0x73/0xb0 [ 259.040728] do_syscall_64+0x1b1/0x800 [ 259.044626] ? syscall_return_slowpath+0x5c0/0x5c0 [ 259.049565] ? syscall_return_slowpath+0x30f/0x5c0 [ 259.054506] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 259.060759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.065624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.070822] RIP: 0033:0x455a09 [ 259.074020] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/05/15 19:17:37 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 259.081742] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 259.089024] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 259.096300] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 259.103579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 259.110858] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000015 2018/05/15 19:17:37 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:17:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/#ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 261.444506] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 261.934362] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/05/15 19:17:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001500192340834b80044e60560a067fffffff81004e2200000000009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000000fcff00000000000000000000000000000000000000000000", 0x58}], 0x1) 2018/05/15 19:17:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe0000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:42 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0xfffffffffffffffc, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/202, &(0x7f00000000c0)=0xca) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, r3}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x81ea}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r4, 0x2}, &(0x7f0000000400)=0x8) r5 = eventfd2(0xf1, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@remote={0xfe, 0x80, [], 0xbb}, 0x28, r6}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r5, r3, 0x80000) 2018/05/15 19:17:42 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5451, &(0x7f000021af98)) 2018/05/15 19:17:42 executing program 0 (fault-call:2 fault-nth:22): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/%ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 263.983523] ion_mmap: failure mapping buffer to userspace [ 263.994098] FAULT_INJECTION: forcing a failure. [ 263.994098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.006059] CPU: 1 PID: 14772 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 264.013351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.022717] Call Trace: [ 264.025341] dump_stack+0x1b9/0x294 2018/05/15 19:17:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 264.028986] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.034190] ? lock_downgrade+0x8e0/0x8e0 [ 264.038362] should_fail.cold.4+0xa/0x1a [ 264.042434] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.047554] ? is_bpf_text_address+0xd7/0x170 [ 264.052063] ? kernel_text_address+0x79/0xf0 [ 264.056483] ? __unwind_start+0x166/0x330 [ 264.060653] ? __kernel_text_address+0xd/0x40 [ 264.065165] ? unwind_get_return_address+0x61/0xa0 [ 264.070108] ? __save_stack_trace+0x7e/0xd0 [ 264.074440] ? graph_lock+0x170/0x170 [ 264.078270] ? __lock_is_held+0xb5/0x140 [ 264.082334] ? sg_write+0x8c3/0xd30 [ 264.085970] __alloc_pages_nodemask+0x34e/0xd70 [ 264.090637] ? print_usage_bug+0xc0/0xc0 [ 264.094693] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 264.099703] ? blk_queue_exit+0x1a4/0x2f0 [ 264.103849] ? __lock_is_held+0xb5/0x140 [ 264.107906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.113430] ? cap_capable+0x1f9/0x260 [ 264.117313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.122842] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 264.128373] alloc_pages_current+0x10c/0x210 [ 264.132778] sg_build_indirect.isra.15+0x32a/0x750 [ 264.137703] sg_common_write.isra.16+0x9ed/0x1dd0 [ 264.142542] ? sg_open+0x1130/0x1130 [ 264.146247] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 264.151431] ? __check_object_size+0x95/0x5d9 [ 264.155919] ? usercopy_warn+0x120/0x120 [ 264.159979] ? __might_sleep+0x95/0x190 [ 264.163950] sg_write+0x8c3/0xd30 [ 264.167399] ? sg_ioctl+0x2f80/0x2f80 [ 264.171191] ? rcu_is_watching+0x85/0x140 [ 264.175328] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 264.180518] ? __fget+0x40c/0x650 [ 264.184057] ? expand_files.part.8+0x9a0/0x9a0 [ 264.188632] ? lock_downgrade+0x8e0/0x8e0 [ 264.192779] ? proc_fail_nth_write+0x96/0x1f0 [ 264.197276] __vfs_write+0x10b/0x960 [ 264.200982] ? __fget_light+0x2ef/0x430 [ 264.204945] ? sg_ioctl+0x2f80/0x2f80 [ 264.208741] ? kernel_read+0x120/0x120 [ 264.212623] ? wait_for_completion+0x870/0x870 [ 264.217208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.222742] ? security_file_permission+0x1c6/0x240 [ 264.227759] ? rw_verify_area+0x118/0x360 [ 264.231898] vfs_write+0x1f8/0x560 [ 264.235438] ksys_write+0xf9/0x250 [ 264.238971] ? __ia32_sys_read+0xb0/0xb0 [ 264.243042] __x64_sys_write+0x73/0xb0 [ 264.246923] do_syscall_64+0x1b1/0x800 [ 264.250797] ? finish_task_switch+0x1ca/0x840 [ 264.255281] ? syscall_return_slowpath+0x5c0/0x5c0 [ 264.260210] ? syscall_return_slowpath+0x30f/0x5c0 [ 264.265141] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 264.270503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.275339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.280534] RIP: 0033:0x455a09 [ 264.283724] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.291426] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 264.298680] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 264.305941] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 264.313196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 264.320451] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000016 [ 264.338613] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x20, 0x3, 0x310, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c40], 0x0, &(0x7f0000000000), &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'tunl0\x00', 'team_slave_0\x00', 'ifb0\x00', 'veth1_to_bond\x00', @random="12daf6708d77", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xb8, 0xe8}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x1, 'syz1\x00', 0xca}}}]}, @common=@dnat={'dnat\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x10, 0x19, 'vcan0\x00', 'nr0\x00', 'bond_slave_0\x00', 'irlan0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xc8, 0x154, 0x198, [@pkttype={'pkttype\x00', 0x4, {{0x4, 0x520b3c12}}}, @realm={'realm\x00', 0xc, {{0x1f, 0x8967}}}]}, [@common=@LED={'LED\x00', 0x24, {{'syz0\x00', 0x0, 0x5cc1, 0x6}}}, @common=@ERROR={'ERROR\x00', 0x20, {"4c1d04458cd2fed7bc4d5282eed3d20ab76e983c732f92c1351bf72fb2ef"}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"1263119f66b6c58abe35a7f1b79e1b39e714f5b8b7214ea72dba3461ff7e"}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x3b8) 2018/05/15 19:17:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f000021af98)) 2018/05/15 19:17:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8000, 0x84200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x401, 0x3ff, 0x0, 0x100000000]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800e, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/Xev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:43 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x6012, r1, 0x2000) 2018/05/15 19:17:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:43 executing program 0 (fault-call:2 fault-nth:23): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 264.493767] kernel msg: ebtables bug: please report to author: Wrong len argument [ 264.502714] kernel msg: ebtables bug: please report to author: Wrong len argument [ 264.536469] FAULT_INJECTION: forcing a failure. [ 264.536469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.541559] ion_mmap: failure mapping buffer to userspace [ 264.548412] CPU: 1 PID: 14807 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 264.548426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.570579] Call Trace: [ 264.572583] ion_mmap: failure mapping buffer to userspace [ 264.573177] dump_stack+0x1b9/0x294 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:43 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x49, 0x80000001}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) [ 264.573200] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.587519] ? lock_downgrade+0x8e0/0x8e0 [ 264.591691] should_fail.cold.4+0xa/0x1a [ 264.595768] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.600890] ? is_bpf_text_address+0xd7/0x170 [ 264.605400] ? kernel_text_address+0x79/0xf0 [ 264.609823] ? __unwind_start+0x166/0x330 [ 264.613985] ? __kernel_text_address+0xd/0x40 [ 264.618498] ? unwind_get_return_address+0x61/0xa0 [ 264.623444] ? __save_stack_trace+0x7e/0xd0 [ 264.627775] ? graph_lock+0x170/0x170 [ 264.631607] ? __lock_is_held+0xb5/0x140 [ 264.635678] ? sg_write+0x8c3/0xd30 [ 264.639319] __alloc_pages_nodemask+0x34e/0xd70 [ 264.643995] ? print_usage_bug+0xc0/0xc0 [ 264.648070] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 264.653103] ? blk_queue_exit+0x1a4/0x2f0 [ 264.657271] ? __lock_is_held+0xb5/0x140 [ 264.661349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.666896] ? cap_capable+0x1f9/0x260 [ 264.670800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.676354] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xc0ffffff00000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 264.681149] ion_mmap: failure mapping buffer to userspace [ 264.681906] alloc_pages_current+0x10c/0x210 [ 264.681930] sg_build_indirect.isra.15+0x32a/0x750 [ 264.681953] sg_common_write.isra.16+0x9ed/0x1dd0 [ 264.701647] ? sg_open+0x1130/0x1130 [ 264.705378] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 264.710086] ion_mmap: failure mapping buffer to userspace [ 264.710584] ? __check_object_size+0x95/0x5d9 [ 264.710606] ? usercopy_warn+0x120/0x120 [ 264.710632] ? __might_sleep+0x95/0x190 [ 264.728668] sg_write+0x8c3/0xd30 [ 264.732144] ? sg_ioctl+0x2f80/0x2f80 2018/05/15 19:17:43 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r0, 0x2000) 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88640000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 264.735964] ? rcu_is_watching+0x85/0x140 [ 264.740130] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 264.745344] ? __fget+0x40c/0x650 [ 264.748817] ? expand_files.part.8+0x9a0/0x9a0 [ 264.753437] ? lock_downgrade+0x8e0/0x8e0 [ 264.757606] ? proc_fail_nth_write+0x96/0x1f0 [ 264.762123] __vfs_write+0x10b/0x960 [ 264.765849] ? __fget_light+0x2ef/0x430 [ 264.769831] ? sg_ioctl+0x2f80/0x2f80 [ 264.773644] ? kernel_read+0x120/0x120 [ 264.777547] ? wait_for_completion+0x870/0x870 [ 264.782167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.787715] ? security_file_permission+0x1c6/0x240 [ 264.792745] ? rw_verify_area+0x118/0x360 [ 264.796908] vfs_write+0x1f8/0x560 [ 264.800463] ksys_write+0xf9/0x250 [ 264.804011] ? __ia32_sys_read+0xb0/0xb0 [ 264.808091] __x64_sys_write+0x73/0xb0 [ 264.811997] do_syscall_64+0x1b1/0x800 [ 264.815898] ? finish_task_switch+0x1ca/0x840 [ 264.820402] ? syscall_return_slowpath+0x5c0/0x5c0 [ 264.825339] ? syscall_return_slowpath+0x30f/0x5c0 [ 264.830282] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe 2018/05/15 19:17:43 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 264.835673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.840532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.845726] RIP: 0033:0x455a09 [ 264.848918] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.856639] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 264.863913] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 264.871191] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 264.878468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xa00100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 264.885743] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000017 2018/05/15 19:17:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x440) dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x2, 0x8c3, 0x8001}) 2018/05/15 19:17:43 executing program 4: [ 264.926469] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045300, &(0x7f000021af98)) 2018/05/15 19:17:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:43 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x8000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)=0xffffffff, 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)=0x1) 2018/05/15 19:17:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/iev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 265.152719] ion_mmap: failure mapping buffer to userspace [ 265.191284] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:43 executing program 0 (fault-call:2 fault-nth:24): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffa888, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:43 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:17:43 executing program 4: 2018/05/15 19:17:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0xfdfdffff}) 2018/05/15 19:17:43 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x6, 0x1, 0x1ff, &(0x7f0000000080)=[0x0], 0x1}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0xffffffffffffffff, r1}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6012, r2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) 2018/05/15 19:17:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2fc865762f736e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 265.293127] FAULT_INJECTION: forcing a failure. [ 265.293127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.305074] CPU: 1 PID: 14889 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 265.312365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.321727] Call Trace: [ 265.324331] dump_stack+0x1b9/0x294 [ 265.327978] ? dump_stack_print_info.cold.2+0x52/0x52 [ 265.333193] should_fail.cold.4+0xa/0x1a [ 265.337268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.342391] ? is_bpf_text_address+0xd7/0x170 [ 265.348031] ? kernel_text_address+0x79/0xf0 [ 265.352458] ? __unwind_start+0x166/0x330 [ 265.356620] ? __kernel_text_address+0xd/0x40 [ 265.361149] ? unwind_get_return_address+0x61/0xa0 [ 265.366076] ? __save_stack_trace+0x7e/0xd0 [ 265.370402] ? graph_lock+0x170/0x170 [ 265.374218] ? __lock_is_held+0xb5/0x140 [ 265.378268] ? sg_write+0x8c3/0xd30 [ 265.381900] __alloc_pages_nodemask+0x34e/0xd70 [ 265.386570] ? print_usage_bug+0xc0/0xc0 [ 265.390623] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 265.395640] ? blk_queue_exit+0x1a4/0x2f0 [ 265.399783] ? __lock_is_held+0xb5/0x140 [ 265.403833] ? aes_s2v.constprop.2+0x448/0x930 [ 265.408419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.413944] ? cap_capable+0x1f9/0x260 [ 265.417825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.423353] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 265.428896] alloc_pages_current+0x10c/0x210 [ 265.433302] sg_build_indirect.isra.15+0x32a/0x750 [ 265.438234] sg_common_write.isra.16+0x9ed/0x1dd0 [ 265.443074] ? sg_open+0x1130/0x1130 [ 265.446782] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 265.451968] ? __check_object_size+0x95/0x5d9 [ 265.456465] ? usercopy_warn+0x120/0x120 [ 265.460531] ? __might_sleep+0x95/0x190 [ 265.464503] sg_write+0x8c3/0xd30 [ 265.467955] ? sg_ioctl+0x2f80/0x2f80 [ 265.471750] ? rcu_is_watching+0x85/0x140 [ 265.475890] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 265.481078] ? __fget+0x40c/0x650 [ 265.484531] ? expand_files.part.8+0x9a0/0x9a0 [ 265.489102] ? lock_downgrade+0x8e0/0x8e0 [ 265.493240] ? proc_fail_nth_write+0x96/0x1f0 [ 265.497734] __vfs_write+0x10b/0x960 [ 265.501437] ? __fget_light+0x2ef/0x430 [ 265.505402] ? sg_ioctl+0x2f80/0x2f80 [ 265.509191] ? kernel_read+0x120/0x120 [ 265.513072] ? wait_for_completion+0x870/0x870 [ 265.517656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.523185] ? security_file_permission+0x1c6/0x240 [ 265.528193] ? rw_verify_area+0x118/0x360 [ 265.532330] vfs_write+0x1f8/0x560 [ 265.535863] ksys_write+0xf9/0x250 [ 265.539396] ? __ia32_sys_read+0xb0/0xb0 [ 265.543459] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 265.548297] __x64_sys_write+0x73/0xb0 [ 265.552177] do_syscall_64+0x1b1/0x800 [ 265.556056] ? finish_task_switch+0x1ca/0x840 [ 265.560550] ? syscall_return_slowpath+0x5c0/0x5c0 [ 265.565472] ? syscall_return_slowpath+0x30f/0x5c0 [ 265.570397] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.575756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.580597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.585776] RIP: 0033:0x455a09 2018/05/15 19:17:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffff80, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:44 executing program 4: [ 265.588953] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.596653] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 265.603908] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 265.611163] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 265.618420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 265.625675] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000018 2018/05/15 19:17:44 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) munlock(&(0x7f0000005000/0x4000)=nil, 0x4000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x73, @empty, 0x100000001}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0x5, 0x9}, 0x2c) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x4}, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:44 executing program 4: 2018/05/15 19:17:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/*ev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x1f00}) 2018/05/15 19:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 265.745179] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xeffb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:44 executing program 4: 2018/05/15 19:17:44 executing program 0 (fault-call:2 fault-nth:25): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:44 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:44 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0xfffffdfd}) 2018/05/15 19:17:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/pev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 266.032876] FAULT_INJECTION: forcing a failure. [ 266.032876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.033326] ion_mmap: failure mapping buffer to userspace [ 266.044920] CPU: 0 PID: 14946 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 266.057677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.067489] Call Trace: [ 266.070101] dump_stack+0x1b9/0x294 [ 266.073753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 266.078962] ? lock_downgrade+0x8e0/0x8e0 [ 266.083155] should_fail.cold.4+0xa/0x1a [ 266.087243] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.092412] ? is_bpf_text_address+0xd7/0x170 [ 266.096933] ? kernel_text_address+0x79/0xf0 [ 266.098856] ion_mmap: failure mapping buffer to userspace [ 266.101363] ? __unwind_start+0x166/0x330 [ 266.101387] ? __kernel_text_address+0xd/0x40 [ 266.101407] ? unwind_get_return_address+0x61/0xa0 [ 266.101426] ? __save_stack_trace+0x7e/0xd0 [ 266.124856] ? graph_lock+0x170/0x170 [ 266.128703] ? __lock_is_held+0xb5/0x140 [ 266.132779] ? sg_write+0x8c3/0xd30 [ 266.136449] __alloc_pages_nodemask+0x34e/0xd70 [ 266.141135] ? print_usage_bug+0xc0/0xc0 [ 266.145220] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 266.150269] ? blk_queue_exit+0x1a4/0x2f0 [ 266.154538] ? __lock_is_held+0xb5/0x140 [ 266.158643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.164212] ? cap_capable+0x1f9/0x260 [ 266.168142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.173718] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 266.179261] alloc_pages_current+0x10c/0x210 [ 266.183681] sg_build_indirect.isra.15+0x32a/0x750 [ 266.188627] sg_common_write.isra.16+0x9ed/0x1dd0 [ 266.193479] ? sg_open+0x1130/0x1130 [ 266.197194] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 266.202385] ? __check_object_size+0x95/0x5d9 [ 266.206879] ? usercopy_warn+0x120/0x120 [ 266.210946] ? __might_sleep+0x95/0x190 [ 266.214928] sg_write+0x8c3/0xd30 [ 266.218382] ? sg_ioctl+0x2f80/0x2f80 [ 266.222181] ? rcu_is_watching+0x85/0x140 [ 266.227045] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 266.232247] ? __fget+0x40c/0x650 [ 266.235705] ? expand_files.part.8+0x9a0/0x9a0 [ 266.240283] ? lock_downgrade+0x8e0/0x8e0 [ 266.244428] ? proc_fail_nth_write+0x96/0x1f0 [ 266.249629] __vfs_write+0x10b/0x960 [ 266.253351] ? __fget_light+0x2ef/0x430 [ 266.257328] ? sg_ioctl+0x2f80/0x2f80 [ 266.261132] ? kernel_read+0x120/0x120 [ 266.265026] ? wait_for_completion+0x870/0x870 [ 266.269624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.275159] ? security_file_permission+0x1c6/0x240 [ 266.280177] ? rw_verify_area+0x118/0x360 [ 266.284324] vfs_write+0x1f8/0x560 [ 266.287866] ksys_write+0xf9/0x250 [ 266.291405] ? __ia32_sys_read+0xb0/0xb0 [ 266.295475] __x64_sys_write+0x73/0xb0 [ 266.299453] do_syscall_64+0x1b1/0x800 [ 266.303335] ? finish_task_switch+0x1ca/0x840 [ 266.307848] ? syscall_return_slowpath+0x5c0/0x5c0 [ 266.312774] ? syscall_return_slowpath+0x30f/0x5c0 [ 266.317706] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 266.323073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.327918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.333100] RIP: 0033:0x455a09 [ 266.336303] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.344023] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 266.351287] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 266.358550] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 266.365813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 266.373081] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000019 2018/05/15 19:17:45 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xd00000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:45 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:45 executing program 4: 2018/05/15 19:17:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:45 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 2018/05/15 19:17:45 executing program 0 (fault-call:2 fault-nth:26): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/lev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:45 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x100000000000000}) 2018/05/15 19:17:45 executing program 4: [ 266.540620] FAULT_INJECTION: forcing a failure. [ 266.540620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.552567] CPU: 1 PID: 14978 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 266.559853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.569220] Call Trace: [ 266.571830] dump_stack+0x1b9/0x294 [ 266.575483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 266.580695] ? lock_downgrade+0x8e0/0x8e0 [ 266.584872] should_fail.cold.4+0xa/0x1a 2018/05/15 19:17:45 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="80"]) 2018/05/15 19:17:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/d%v/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 266.588955] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.594087] ? is_bpf_text_address+0xd7/0x170 [ 266.598606] ? kernel_text_address+0x79/0xf0 [ 266.603032] ? __unwind_start+0x166/0x330 [ 266.607208] ? __kernel_text_address+0xd/0x40 [ 266.611724] ? unwind_get_return_address+0x61/0xa0 [ 266.616671] ? __save_stack_trace+0x7e/0xd0 [ 266.621010] ? graph_lock+0x170/0x170 [ 266.624842] ? __lock_is_held+0xb5/0x140 [ 266.628916] ? sg_write+0x8c3/0xd30 [ 266.632575] __alloc_pages_nodemask+0x34e/0xd70 [ 266.637258] ? print_usage_bug+0xc0/0xc0 [ 266.641338] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 266.646379] ? blk_queue_exit+0x1a4/0x2f0 [ 266.650556] ? __lock_is_held+0xb5/0x140 [ 266.654647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.660204] ? cap_capable+0x1f9/0x260 [ 266.664116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.669700] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 266.675264] alloc_pages_current+0x10c/0x210 [ 266.679702] sg_build_indirect.isra.15+0x32a/0x750 [ 266.684664] sg_common_write.isra.16+0x9ed/0x1dd0 2018/05/15 19:17:45 executing program 4: [ 266.689533] ? sg_open+0x1130/0x1130 [ 266.693271] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 266.698494] ? __check_object_size+0x95/0x5d9 [ 266.703013] ? usercopy_warn+0x120/0x120 [ 266.707099] ? __might_sleep+0x95/0x190 [ 266.708126] ion_mmap: failure mapping buffer to userspace [ 266.711107] sg_write+0x8c3/0xd30 [ 266.711129] ? sg_ioctl+0x2f80/0x2f80 [ 266.711146] ? rcu_is_watching+0x85/0x140 [ 266.711166] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 266.733269] ? __fget+0x40c/0x650 [ 266.736754] ? expand_files.part.8+0x9a0/0x9a0 2018/05/15 19:17:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) socketpair(0x9, 0xa, 0x8, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x100000000007}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x9}, &(0x7f0000000100)=0x8) [ 266.741358] ? lock_downgrade+0x8e0/0x8e0 [ 266.745532] ? proc_fail_nth_write+0x96/0x1f0 [ 266.746636] ion_mmap: failure mapping buffer to userspace [ 266.750046] __vfs_write+0x10b/0x960 [ 266.750064] ? __fget_light+0x2ef/0x430 [ 266.750080] ? sg_ioctl+0x2f80/0x2f80 [ 266.750095] ? kernel_read+0x120/0x120 [ 266.750115] ? wait_for_completion+0x870/0x870 [ 266.750142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.750163] ? security_file_permission+0x1c6/0x240 [ 266.786157] ? rw_verify_area+0x118/0x360 [ 266.790326] vfs_write+0x1f8/0x560 [ 266.793901] ksys_write+0xf9/0x250 [ 266.797465] ? __ia32_sys_read+0xb0/0xb0 [ 266.801549] __x64_sys_write+0x73/0xb0 [ 266.805453] do_syscall_64+0x1b1/0x800 [ 266.809353] ? finish_task_switch+0x1ca/0x840 [ 266.813867] ? syscall_return_slowpath+0x5c0/0x5c0 [ 266.818815] ? syscall_return_slowpath+0x30f/0x5c0 [ 266.823763] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 266.829154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.834020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.839223] RIP: 0033:0x455a09 [ 266.842437] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.850182] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 266.857467] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 266.864751] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 266.872034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 266.879316] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001a 2018/05/15 19:17:45 executing program 4: 2018/05/15 19:17:45 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x800) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00') mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f64c8762f736e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:45 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:45 executing program 0 (fault-call:2 fault-nth:27): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:45 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x1f00000000000000}) [ 267.085737] ion_mmap: failure mapping buffer to userspace [ 267.118723] FAULT_INJECTION: forcing a failure. [ 267.118723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 2018/05/15 19:17:45 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 267.130688] CPU: 1 PID: 15030 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 267.133364] ion_mmap: failure mapping buffer to userspace [ 267.137969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.137977] Call Trace: [ 267.138004] dump_stack+0x1b9/0x294 [ 267.138028] ? dump_stack_print_info.cold.2+0x52/0x52 [ 267.138047] ? lock_downgrade+0x8e0/0x8e0 [ 267.138071] should_fail.cold.4+0xa/0x1a [ 267.173217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.178357] ? is_bpf_text_address+0xd7/0x170 2018/05/15 19:17:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 267.182885] ? kernel_text_address+0x79/0xf0 [ 267.187315] ? __unwind_start+0x166/0x330 [ 267.191484] ? __kernel_text_address+0xd/0x40 [ 267.196021] ? unwind_get_return_address+0x61/0xa0 [ 267.200951] ? __save_stack_trace+0x7e/0xd0 [ 267.205282] ? graph_lock+0x170/0x170 [ 267.209100] ? __lock_is_held+0xb5/0x140 [ 267.213153] ? sg_write+0x8c3/0xd30 [ 267.216796] __alloc_pages_nodemask+0x34e/0xd70 [ 267.221469] ? print_usage_bug+0xc0/0xc0 [ 267.225530] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 267.230550] ? blk_queue_exit+0x1a4/0x2f0 [ 267.234697] ? __lock_is_held+0xb5/0x140 [ 267.238757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.244285] ? cap_capable+0x1f9/0x260 [ 267.248173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.253704] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 267.259241] alloc_pages_current+0x10c/0x210 [ 267.263648] sg_build_indirect.isra.15+0x32a/0x750 [ 267.268578] sg_common_write.isra.16+0x9ed/0x1dd0 [ 267.273425] ? sg_open+0x1130/0x1130 [ 267.277138] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 267.282335] ? __check_object_size+0x95/0x5d9 [ 267.286829] ? usercopy_warn+0x120/0x120 [ 267.290894] ? __might_sleep+0x95/0x190 [ 267.294865] sg_write+0x8c3/0xd30 [ 267.298314] ? sg_ioctl+0x2f80/0x2f80 [ 267.302106] ? rcu_is_watching+0x85/0x140 [ 267.306334] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 267.311535] ? __fget+0x40c/0x650 [ 267.314994] ? expand_files.part.8+0x9a0/0x9a0 [ 267.319573] ? lock_downgrade+0x8e0/0x8e0 [ 267.323723] ? proc_fail_nth_write+0x96/0x1f0 [ 267.328230] __vfs_write+0x10b/0x960 [ 267.331942] ? __fget_light+0x2ef/0x430 [ 267.335912] ? sg_ioctl+0x2f80/0x2f80 [ 267.339711] ? kernel_read+0x120/0x120 [ 267.343599] ? wait_for_completion+0x870/0x870 [ 267.348186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.353715] ? security_file_permission+0x1c6/0x240 [ 267.358724] ? rw_verify_area+0x118/0x360 [ 267.362866] vfs_write+0x1f8/0x560 [ 267.366419] ksys_write+0xf9/0x250 [ 267.369952] ? __ia32_sys_read+0xb0/0xb0 [ 267.374016] __x64_sys_write+0x73/0xb0 [ 267.377907] do_syscall_64+0x1b1/0x800 [ 267.381789] ? finish_task_switch+0x1ca/0x840 [ 267.386286] ? syscall_return_slowpath+0x5c0/0x5c0 [ 267.391208] ? syscall_return_slowpath+0x30f/0x5c0 [ 267.396133] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 267.401496] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.406333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.411511] RIP: 0033:0x455a09 [ 267.414700] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.422409] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 267.429668] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 2018/05/15 19:17:46 executing program 4: 2018/05/15 19:17:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0xfdfdffff00000000}) [ 267.436926] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 267.444186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 267.451454] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001b 2018/05/15 19:17:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffff8, 0x1a, 0x0, 0xffffffffffffffff}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x8000, 0x5, 0x3ff, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7fff, 0xffffffffffffff6e}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:46 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x20100) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, r1}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465c82f736e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:46 executing program 4: 2018/05/15 19:17:46 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8035, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:46 executing program 0 (fault-call:2 fault-nth:28): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 267.603726] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 267.689407] ion_mmap: failure mapping buffer to userspace [ 267.701997] FAULT_INJECTION: forcing a failure. [ 267.701997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.713981] CPU: 1 PID: 15069 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 267.721273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.730642] Call Trace: [ 267.733248] dump_stack+0x1b9/0x294 2018/05/15 19:17:46 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x2012, r1, 0x2000) ustat(0x6, &(0x7f0000000080)) 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 267.736887] ? dump_stack_print_info.cold.2+0x52/0x52 [ 267.742087] ? lock_downgrade+0x8e0/0x8e0 [ 267.746259] should_fail.cold.4+0xa/0x1a [ 267.750343] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.755480] ? is_bpf_text_address+0xd7/0x170 [ 267.759998] ? kernel_text_address+0x79/0xf0 [ 267.764422] ? __unwind_start+0x166/0x330 [ 267.768623] ? __kernel_text_address+0xd/0x40 [ 267.773140] ? unwind_get_return_address+0x61/0xa0 [ 267.778091] ? __save_stack_trace+0x7e/0xd0 [ 267.782433] ? graph_lock+0x170/0x170 2018/05/15 19:17:46 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) [ 267.786271] ? __lock_is_held+0xb5/0x140 [ 267.790342] ? sg_write+0x8c3/0xd30 [ 267.794018] __alloc_pages_nodemask+0x34e/0xd70 [ 267.798704] ? print_usage_bug+0xc0/0xc0 [ 267.802782] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 267.807819] ? blk_queue_exit+0x1a4/0x2f0 [ 267.811990] ? __lock_is_held+0xb5/0x140 [ 267.816075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.821630] ? cap_capable+0x1f9/0x260 [ 267.825547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.831103] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 267.836663] alloc_pages_current+0x10c/0x210 [ 267.841093] sg_build_indirect.isra.15+0x32a/0x750 [ 267.846064] sg_common_write.isra.16+0x9ed/0x1dd0 [ 267.850932] ? sg_open+0x1130/0x1130 [ 267.851381] ion_mmap: failure mapping buffer to userspace [ 267.854673] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 267.854697] ? __check_object_size+0x95/0x5d9 [ 267.854716] ? usercopy_warn+0x120/0x120 [ 267.854736] ? __might_sleep+0x95/0x190 [ 267.869729] ion_mmap: failure mapping buffer to userspace [ 267.869967] sg_write+0x8c3/0xd30 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:46 executing program 7: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r0, 0x2000) [ 267.886965] ? sg_ioctl+0x2f80/0x2f80 [ 267.890806] ? rcu_is_watching+0x85/0x140 [ 267.894964] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 267.900172] ? __fget+0x40c/0x650 [ 267.903642] ? expand_files.part.8+0x9a0/0x9a0 [ 267.908241] ? lock_downgrade+0x8e0/0x8e0 [ 267.912407] ? proc_fail_nth_write+0x96/0x1f0 [ 267.916928] __vfs_write+0x10b/0x960 [ 267.920658] ? __fget_light+0x2ef/0x430 [ 267.924644] ? sg_ioctl+0x2f80/0x2f80 [ 267.928456] ? kernel_read+0x120/0x120 [ 267.932363] ? wait_for_completion+0x870/0x870 2018/05/15 19:17:46 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 267.936974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.942527] ? security_file_permission+0x1c6/0x240 [ 267.947563] ? rw_verify_area+0x118/0x360 [ 267.951737] vfs_write+0x1f8/0x560 [ 267.955300] ksys_write+0xf9/0x250 [ 267.958858] ? __ia32_sys_read+0xb0/0xb0 [ 267.963196] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 267.968057] __x64_sys_write+0x73/0xb0 [ 267.971987] do_syscall_64+0x1b1/0x800 [ 267.975893] ? finish_task_switch+0x1ca/0x840 [ 267.980402] ? syscall_return_slowpath+0x5c0/0x5c0 [ 267.985351] ? syscall_return_slowpath+0x30f/0x5c0 [ 267.990299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 267.995692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.000557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.005757] RIP: 0033:0x455a09 [ 268.008948] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.011696] ion_mmap: failure mapping buffer to userspace [ 268.016674] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 268.016683] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 268.016691] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 268.016699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 268.016708] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001c [ 268.118820] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f646576c8736e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:46 executing program 0 (fault-call:2 fault-nth:29): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:46 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x1000000}) 2018/05/15 19:17:46 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:46 executing program 4: 2018/05/15 19:17:46 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x183000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:17:46 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3580, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) [ 268.232607] FAULT_INJECTION: forcing a failure. [ 268.232607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.244567] CPU: 1 PID: 15117 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 268.251854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.261220] Call Trace: [ 268.263824] dump_stack+0x1b9/0x294 [ 268.267479] ? dump_stack_print_info.cold.2+0x52/0x52 [ 268.272688] ? lock_downgrade+0x8e0/0x8e0 [ 268.276875] should_fail.cold.4+0xa/0x1a [ 268.280952] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.286075] ? is_bpf_text_address+0xd7/0x170 [ 268.290583] ? kernel_text_address+0x79/0xf0 [ 268.295000] ? __unwind_start+0x166/0x330 [ 268.299159] ? __kernel_text_address+0xd/0x40 [ 268.303660] ? unwind_get_return_address+0x61/0xa0 [ 268.308583] ? __save_stack_trace+0x7e/0xd0 [ 268.312894] ? graph_lock+0x170/0x170 [ 268.316704] ? __lock_is_held+0xb5/0x140 [ 268.320756] ? sg_write+0x8c3/0xd30 [ 268.324386] __alloc_pages_nodemask+0x34e/0xd70 [ 268.329050] ? print_usage_bug+0xc0/0xc0 [ 268.333110] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 268.338126] ? blk_queue_exit+0x1a4/0x2f0 [ 268.342276] ? __lock_is_held+0xb5/0x140 [ 268.346341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.351875] ? cap_capable+0x1f9/0x260 [ 268.355767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.361331] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 268.366867] alloc_pages_current+0x10c/0x210 [ 268.371275] sg_build_indirect.isra.15+0x32a/0x750 [ 268.376207] sg_common_write.isra.16+0x9ed/0x1dd0 [ 268.381054] ? sg_open+0x1130/0x1130 [ 268.384767] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 268.389965] ? __check_object_size+0x95/0x5d9 [ 268.394456] ? usercopy_warn+0x120/0x120 [ 268.398519] ? __might_sleep+0x95/0x190 [ 268.402494] sg_write+0x8c3/0xd30 [ 268.405944] ? sg_ioctl+0x2f80/0x2f80 [ 268.409738] ? rcu_is_watching+0x85/0x140 [ 268.413880] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 268.419068] ? __fget+0x40c/0x650 [ 268.422519] ? expand_files.part.8+0x9a0/0x9a0 [ 268.427092] ? lock_downgrade+0x8e0/0x8e0 [ 268.431231] ? proc_fail_nth_write+0x96/0x1f0 [ 268.435727] __vfs_write+0x10b/0x960 [ 268.439428] ? __fget_light+0x2ef/0x430 [ 268.443390] ? sg_ioctl+0x2f80/0x2f80 [ 268.447189] ? kernel_read+0x120/0x120 [ 268.451069] ? wait_for_completion+0x870/0x870 [ 268.455652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.461182] ? security_file_permission+0x1c6/0x240 [ 268.466189] ? rw_verify_area+0x118/0x360 [ 268.471108] vfs_write+0x1f8/0x560 [ 268.474642] ksys_write+0xf9/0x250 [ 268.478175] ? __ia32_sys_read+0xb0/0xb0 [ 268.482233] __x64_sys_write+0x73/0xb0 [ 268.486111] do_syscall_64+0x1b1/0x800 [ 268.489988] ? finish_task_switch+0x1ca/0x840 [ 268.494475] ? syscall_return_slowpath+0x5c0/0x5c0 [ 268.499396] ? syscall_return_slowpath+0x30f/0x5c0 [ 268.504324] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 268.509681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.514521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.519700] RIP: 0033:0x455a09 [ 268.522876] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/05/15 19:17:47 executing program 4: [ 268.530575] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 268.537830] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 268.545085] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 268.552339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 268.559594] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001d [ 268.576313] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x600000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x0, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:47 executing program 4: [ 268.620530] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:47 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x200001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x7f, @loopback={0x0, 0x1}}, {0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @rand_addr=0x81}, 0x71d9}, 0x9, [0xeedd, 0x6, 0x3, 0xffffffff00000000, 0x1, 0x56, 0x8, 0xd4]}, 0x5c) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r3, 0x4) 2018/05/15 19:17:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2002, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0xff}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) wait4(r3, 0x0, 0x4, &(0x7f0000000200)) socket$bt_hidp(0x1f, 0x3, 0x6) dup3(r0, r2, 0x0) 2018/05/15 19:17:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/.nd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:47 executing program 0 (fault-call:2 fault-nth:30): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x7f00000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x0, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x1f000000}) 2018/05/15 19:17:47 executing program 4: [ 268.835236] ion_mmap: failure mapping buffer to userspace [ 268.860129] FAULT_INJECTION: forcing a failure. [ 268.860129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.861655] ion_mmap: failure mapping buffer to userspace [ 268.872121] CPU: 0 PID: 15161 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 268.884921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.894288] Call Trace: [ 268.896886] dump_stack+0x1b9/0x294 [ 268.900522] ? dump_stack_print_info.cold.2+0x52/0x52 [ 268.905718] ? lock_downgrade+0x8e0/0x8e0 [ 268.909876] should_fail.cold.4+0xa/0x1a [ 268.913938] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.919056] ? is_bpf_text_address+0xd7/0x170 [ 268.923548] ? kernel_text_address+0x79/0xf0 [ 268.927952] ? __unwind_start+0x166/0x330 [ 268.932094] ? __kernel_text_address+0xd/0x40 [ 268.936585] ? unwind_get_return_address+0x61/0xa0 [ 268.941512] ? __save_stack_trace+0x7e/0xd0 [ 268.945833] ? graph_lock+0x170/0x170 [ 268.949653] ? __lock_is_held+0xb5/0x140 [ 268.953710] ? sg_write+0x8c3/0xd30 [ 268.957357] __alloc_pages_nodemask+0x34e/0xd70 [ 268.962031] ? print_usage_bug+0xc0/0xc0 [ 268.966098] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 268.971122] ? blk_queue_exit+0x1a4/0x2f0 [ 268.975279] ? __lock_is_held+0xb5/0x140 [ 268.979346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.984877] ? cap_capable+0x1f9/0x260 [ 268.988773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.994335] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 268.999876] alloc_pages_current+0x10c/0x210 [ 269.004287] sg_build_indirect.isra.15+0x32a/0x750 [ 269.009228] sg_common_write.isra.16+0x9ed/0x1dd0 [ 269.014082] ? sg_open+0x1130/0x1130 [ 269.017802] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 269.022994] ? __check_object_size+0x95/0x5d9 [ 269.027494] ? usercopy_warn+0x120/0x120 [ 269.031560] ? __might_sleep+0x95/0x190 [ 269.035542] sg_write+0x8c3/0xd30 [ 269.038996] ? sg_ioctl+0x2f80/0x2f80 [ 269.042799] ? rcu_is_watching+0x85/0x140 [ 269.046945] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 269.052159] ? __fget+0x40c/0x650 [ 269.055621] ? expand_files.part.8+0x9a0/0x9a0 [ 269.060214] ? lock_downgrade+0x8e0/0x8e0 [ 269.064371] ? proc_fail_nth_write+0x96/0x1f0 [ 269.068885] __vfs_write+0x10b/0x960 [ 269.072598] ? __fget_light+0x2ef/0x430 [ 269.076571] ? sg_ioctl+0x2f80/0x2f80 [ 269.080367] ? kernel_read+0x120/0x120 [ 269.084252] ? wait_for_completion+0x870/0x870 [ 269.088850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.094383] ? security_file_permission+0x1c6/0x240 [ 269.099398] ? rw_verify_area+0x118/0x360 [ 269.103545] vfs_write+0x1f8/0x560 [ 269.107087] ksys_write+0xf9/0x250 [ 269.110624] ? __ia32_sys_read+0xb0/0xb0 [ 269.114686] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 269.119533] __x64_sys_write+0x73/0xb0 [ 269.123419] do_syscall_64+0x1b1/0x800 [ 269.127304] ? finish_task_switch+0x1ca/0x840 [ 269.131799] ? syscall_return_slowpath+0x5c0/0x5c0 [ 269.136728] ? syscall_return_slowpath+0x30f/0x5c0 [ 269.141662] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 269.147041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.151891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.157073] RIP: 0033:0x455a09 [ 269.160258] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.167964] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 269.175228] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 269.182617] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 269.189878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 269.197142] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001e 2018/05/15 19:17:47 executing program 4: 2018/05/15 19:17:47 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x50000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80, 0x8, 0x1}) 2018/05/15 19:17:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1c00, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x0, 0x8, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:47 executing program 0 (fault-call:2 fault-nth:31): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x1000000}) 2018/05/15 19:17:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev//nd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 4: 2018/05/15 19:17:48 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/ion\x00', 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r2) keyctl$update(0x2, r3, &(0x7f0000000080)="fadf1a9b272cddbd519700048fc6f4d9ec0f9f18b0e817410a5789f56501e47dff487af33e95f6fcf4ec86c9c63e82cec49b1d985a45bddcc8c7bd7beb990535f681ecefda3bd452e9f7ec451fe664236bbb5355a066afd85fca4e9e7499ec2aafde4e13eaec111fa05d77f110d3ea00ed0532e67db892e65067338e61ab235258b6cf265410d5f6d34da06859d7775f62f45905635ade102f8f2d024be4e9c268b0de96fbc918b1bdad40e2c11d4b5a6bc442463bb2272f5c8317a8222d88839db31e7192f521a57a5f5d7c80c96eb13494be5e5a04315bb667b29c23cb2125a8", 0xe1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xa0010000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762fc86e642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 4: [ 269.468625] FAULT_INJECTION: forcing a failure. [ 269.468625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.480543] CPU: 1 PID: 15195 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 [ 269.487827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.497184] Call Trace: [ 269.499795] dump_stack+0x1b9/0x294 [ 269.503436] ? dump_stack_print_info.cold.2+0x52/0x52 [ 269.508639] ? lock_downgrade+0x8e0/0x8e0 [ 269.512806] should_fail.cold.4+0xa/0x1a 2018/05/15 19:17:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 269.516883] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.522002] ? is_bpf_text_address+0xd7/0x170 [ 269.526507] ? kernel_text_address+0x79/0xf0 [ 269.530927] ? __unwind_start+0x166/0x330 [ 269.535085] ? __kernel_text_address+0xd/0x40 [ 269.539591] ? unwind_get_return_address+0x61/0xa0 [ 269.544536] ? __save_stack_trace+0x7e/0xd0 [ 269.548870] ? graph_lock+0x170/0x170 [ 269.552697] ? __lock_is_held+0xb5/0x140 [ 269.556760] ? sg_write+0x8c3/0xd30 [ 269.560413] __alloc_pages_nodemask+0x34e/0xd70 [ 269.565092] ? print_usage_bug+0xc0/0xc0 2018/05/15 19:17:48 executing program 4: [ 269.569168] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 269.574316] ? blk_queue_exit+0x1a4/0x2f0 [ 269.578485] ? __lock_is_held+0xb5/0x140 [ 269.582563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.588108] ? cap_capable+0x1f9/0x260 [ 269.592022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.597571] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 269.603129] alloc_pages_current+0x10c/0x210 [ 269.607558] sg_build_indirect.isra.15+0x32a/0x750 [ 269.612506] sg_common_write.isra.16+0x9ed/0x1dd0 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/s%d/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x543, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:48 executing program 4: [ 269.617369] ? sg_open+0x1130/0x1130 [ 269.621097] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 269.626820] ? __check_object_size+0x95/0x5d9 [ 269.631330] ? usercopy_warn+0x120/0x120 [ 269.635405] ? __might_sleep+0x95/0x190 [ 269.639392] sg_write+0x8c3/0xd30 [ 269.642855] ? sg_ioctl+0x2f80/0x2f80 [ 269.646667] ? rcu_is_watching+0x85/0x140 [ 269.650824] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 269.656028] ? __fget+0x40c/0x650 [ 269.659502] ? expand_files.part.8+0x9a0/0x9a0 [ 269.664094] ? lock_downgrade+0x8e0/0x8e0 [ 269.668255] ? proc_fail_nth_write+0x96/0x1f0 [ 269.672774] __vfs_write+0x10b/0x960 [ 269.676495] ? __fget_light+0x2ef/0x430 [ 269.680481] ? sg_ioctl+0x2f80/0x2f80 [ 269.684296] ? kernel_read+0x120/0x120 [ 269.688193] ? wait_for_completion+0x870/0x870 [ 269.692801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.698366] ? security_file_permission+0x1c6/0x240 [ 269.703401] ? rw_verify_area+0x118/0x360 [ 269.707566] vfs_write+0x1f8/0x560 [ 269.711121] ksys_write+0xf9/0x250 [ 269.714673] ? __ia32_sys_read+0xb0/0xb0 [ 269.718750] __x64_sys_write+0x73/0xb0 [ 269.722654] do_syscall_64+0x1b1/0x800 [ 269.726615] ? syscall_return_slowpath+0x5c0/0x5c0 [ 269.731568] ? syscall_return_slowpath+0x30f/0x5c0 [ 269.736511] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 269.741891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.746749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.751941] RIP: 0033:0x455a09 [ 269.755130] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.762846] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 269.770136] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 269.777409] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 269.784686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 269.791954] R13: 000000000000077b R14: 00000000006ff428 R15: 000000000000001f [ 269.820804] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f73c8642f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x0, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:48 executing program 7: syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2765a6e474cd84b992b4cbf2fd83b9e5222297f612989e22076c217ef13176cb8183a1dd01fdc202bbe77c8aae6359da6c01f70729775e8a89b969b964abd24ab255db3cfe3ec749015ee39df4cde76366ce36d2d56728c317a5da312eb83e25eaf58cfc6b7a3e9528cf59d9a21b9b0a06f80163807049f0a394faf4976445bf8db54bcff2ff5fe2c83d59a6833f9cc3c73bf9291d66796f20c586d033ce561e823e1bf139f30dc6f1ffced4e85781ecd2402986a96b94c78506586da5e487c7b77b7d644dafec261a5f57de511ef58419884f6965f8e02cf24d6b7b579acbd7", 0xe0, 0x7}], 0x0, &(0x7f0000000200)='/dev/ion\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x46012, r0, 0x2000) 2018/05/15 19:17:48 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x1f000000}) 2018/05/15 19:17:48 executing program 4: 2018/05/15 19:17:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x400300, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:48 executing program 0 (fault-call:2 fault-nth:32): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 269.915769] ceph: device name is missing path (no : separator in /dev/loop7) [ 269.942568] FAULT_INJECTION: forcing a failure. [ 269.942568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.954523] CPU: 1 PID: 15246 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #52 2018/05/15 19:17:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x145000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 269.961894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.971254] Call Trace: [ 269.973860] dump_stack+0x1b9/0x294 [ 269.977509] ? dump_stack_print_info.cold.2+0x52/0x52 [ 269.982710] ? lock_downgrade+0x8e0/0x8e0 [ 269.986879] should_fail.cold.4+0xa/0x1a [ 269.990955] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.996075] ? is_bpf_text_address+0xd7/0x170 [ 270.000582] ? kernel_text_address+0x79/0xf0 [ 270.005004] ? __unwind_start+0x166/0x330 [ 270.009160] ? __kernel_text_address+0xd/0x40 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn#/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 270.013696] ? unwind_get_return_address+0x61/0xa0 [ 270.018640] ? __save_stack_trace+0x7e/0xd0 [ 270.022977] ? graph_lock+0x170/0x170 [ 270.026806] ? __lock_is_held+0xb5/0x140 [ 270.030874] ? sg_write+0x8c3/0xd30 [ 270.034524] __alloc_pages_nodemask+0x34e/0xd70 [ 270.039207] ? print_usage_bug+0xc0/0xc0 [ 270.043285] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 270.048321] ? blk_queue_exit+0x1a4/0x2f0 [ 270.052489] ? __lock_is_held+0xb5/0x140 [ 270.056573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.062121] ? cap_capable+0x1f9/0x260 2018/05/15 19:17:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x800000000000, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)=0x6844faca, 0x4) [ 270.066025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.071583] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 270.077138] alloc_pages_current+0x10c/0x210 [ 270.081565] sg_build_indirect.isra.15+0x32a/0x750 [ 270.086514] sg_common_write.isra.16+0x9ed/0x1dd0 [ 270.091378] ? sg_open+0x1130/0x1130 [ 270.095111] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 270.100314] ? __check_object_size+0x95/0x5d9 [ 270.104827] ? usercopy_warn+0x120/0x120 [ 270.108909] ? __might_sleep+0x95/0x190 [ 270.112903] sg_write+0x8c3/0xd30 [ 270.116371] ? sg_ioctl+0x2f80/0x2f80 [ 270.120184] ? rcu_is_watching+0x85/0x140 [ 270.124350] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 270.129559] ? __fget+0x40c/0x650 [ 270.133028] ? expand_files.part.8+0x9a0/0x9a0 [ 270.137621] ? lock_downgrade+0x8e0/0x8e0 [ 270.141778] ? proc_fail_nth_write+0x96/0x1f0 [ 270.146289] __vfs_write+0x10b/0x960 [ 270.150025] ? __fget_light+0x2ef/0x430 [ 270.154002] ? sg_ioctl+0x2f80/0x2f80 [ 270.157806] ? kernel_read+0x120/0x120 [ 270.161698] ? wait_for_completion+0x870/0x870 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn*/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) msgget$private(0x0, 0x104) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 270.166302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.171843] ? security_file_permission+0x1c6/0x240 [ 270.176867] ? rw_verify_area+0x118/0x360 [ 270.181021] vfs_write+0x1f8/0x560 [ 270.184567] ksys_write+0xf9/0x250 [ 270.188116] ? __ia32_sys_read+0xb0/0xb0 [ 270.192198] __x64_sys_write+0x73/0xb0 [ 270.196098] do_syscall_64+0x1b1/0x800 [ 270.199994] ? finish_task_switch+0x1ca/0x840 [ 270.204500] ? syscall_return_slowpath+0x5c0/0x5c0 [ 270.209444] ? syscall_return_slowpath+0x30f/0x5c0 [ 270.214387] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 270.219773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.224641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.229839] RIP: 0033:0x455a09 [ 270.233034] RSP: 002b:00007f267446bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.240755] RAX: ffffffffffffffda RBX: 00007f267446c6d4 RCX: 0000000000455a09 [ 270.248032] RDX: 000000000000002e RSI: 0000000020f4af9d RDI: 0000000000000014 [ 270.255304] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/15 19:17:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x0, 0x800000001}, 0x14}, 0x1}, 0x0) [ 270.262578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 270.269845] R13: 000000000000077b R14: 00000000006ff428 R15: 0000000000000020 2018/05/15 19:17:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn//seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:48 executing program 4: [ 270.310778] ceph: device name is missing path (no : separator in /dev/loop7) 2018/05/15 19:17:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xc003, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xfdfdffff}) 2018/05/15 19:17:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:17:49 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4, 0x8c2810, r1, 0x2000) dup3(r0, r1, 0x80000) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffe) pkey_mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001140)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001080)=""/114, &(0x7f0000001100)=0x72) 2018/05/15 19:17:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x0, 0x800000001}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:49 executing program 4: 2018/05/15 19:17:49 executing program 0 (fault-call:2 fault-nth:33): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x7f00, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snl/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x1f00}) 2018/05/15 19:17:49 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}) 2018/05/15 19:17:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) 2018/05/15 19:17:49 executing program 4: 2018/05/15 19:17:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xe0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xfffffdfd}) [ 270.707378] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snc/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000100)=0xf780, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff80000000}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000000c0)={0x6, r4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 270.787129] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:49 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x100000000000000}) 2018/05/15 19:17:49 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = dup3(r1, r1, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x40000000, 0x9, 0x1d}) r3 = memfd_create(&(0x7f0000000080)='/dev/ion\x00', 0x4102) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, r4}, 0x14) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 271.024912] ion_mmap: failure mapping buffer to userspace [ 271.084256] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xd, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sno/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8}, 0x14}, 0x1}, 0x0) 2018/05/15 19:17:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d002000000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = gettid() ptrace$pokeuser(0x6, r3, 0x8, 0x456) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x1, 0x3ff, 0x89}) 2018/05/15 19:17:49 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x10040, 0x0) r3 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001540)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000001640)=0xe8) r5 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001680)={0x0}, &(0x7f00000016c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000001800)=0xe8) r8 = getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001840)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001880)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001980)=0xe8) fstat(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001ac0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)="6e6b27cf596d1529b36183085b4dc179ae88b5fc8d3a2f3a6711c4ae43ba3c932a105c15a14aff87297fd67748d13b5939fd00ba17dcf0c4a6944c21272fdc8eb304e54453901eba3ce3d3a3310303f257d3d004a7d09d1297029e9f6ec88a", 0x5f}, {&(0x7f0000000140)="c497db3142b8a4795d7493e62e10", 0xe}, {&(0x7f0000000180)="5eee73b5c2d7141c014dc676824a7f28303f7def472b6cd7b17380a16f830710ab1a61fb6d3e2d4f0f261925db75fcf3d6a430f75cdb15c51970afc528169dcaf88ee2c8ce973bdfe8c815745363bedc3b0747ae8ba189fa2c2273048935ee72973a01d9a967b62f25c2ceb1318cc1be5f3962792c58e1cae4097ee3e1101a3346bc5aed4ce9845f205d1698fae439e22ab921a61a6dcea1d18b1f3c78e82cca1052d3f9cdbec550120b99c3509408ca2186d62c7e628569eb8f79ab1226ec49712d4934863daedf41b59b4a0c7b5848f8bc8dd9eb52458e97377ebbc36491a69dd51d4f48", 0xe5}, {&(0x7f0000000280)="05b36b84b6895cf5a1f4537edd8549f248", 0x11}, {&(0x7f00000002c0)="8d08129716cbbdc1f3aa1c8e5f276681c105cb0b835d737b8fd1f145fedddcb733503bbe4284b521631dda243f225057a14efa4dad1463caf569986d9c10238fd308e166101685e911ef2940f346cb50b999d6aa26b61de99143daefced51c7cf810aa7713c6d97f80447886d56262b6a419c14897002233f40efd33b4ec9b88dfb6b5024089e75c49dd964691a5187287453b2d5959149d8f5710cb141eaf025051402c17b7e4dc5354c382411e5fe06b1168d54efc711873a91fb0f3593c6d332f84cd1f98c352f6ed6993df72f86c", 0xd0}, {&(0x7f00000003c0)="c5662ea8dd5ee061920b0ebbe533714c6a096288e4242d6b8899ca1a2e609cd81722d3fcce6d2f8b6472ba7289bbc7d178020b7e56f0e1b90cbfb1030d1e144844a5c22728d3623ea9a3b7defeddc992412445805e2e", 0x56}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="787fd69b7d89c93ec81c7eb39c0025ef6a0e66dbb3adab11d7cf3bcef2955554819242a1c83ff64132e7d12e2d3313d1ca1a61bed1a0fdaf0ac49eb3846f76c8a50dda72e0141eb1e2c71e09f9423295fcf0", 0x52}], 0x8, &(0x7f0000001a40)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x60, 0x800}, 0x8881) 2018/05/15 19:17:49 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x1f00000000000000}) [ 271.194599] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4888, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xba3a7068ed2816f9, 0x40010, r2, 0x2b) dup3(r0, r1, 0x0) 2018/05/15 19:17:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000de9fe8)={0x14, 0x1, 0x8}, 0x14}, 0x1}, 0x0) [ 271.235567] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn%/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:50 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0xfdfdffff00000000}) 2018/05/15 19:17:50 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000240)='ppp1eth1!#(em0selinux\x00', 0x3) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000280)=0x0) recvfrom$ipx(r3, &(0x7f00000002c0)=""/68, 0x44, 0x20, &(0x7f0000000200)={0x4, 0x1000, 0x1ec, "9155aa4e655b", 0x27fa}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x4, 0xbded00e, 0xc8, 0x100000000, 0x0, 0x7f, 0x100, 0x4, 0x4a, 0x9, 0x1ff, 0x5, 0x5, 0xfffffffffffffffa, 0x6d, 0x1, 0xc4b, 0x2, 0x1, 0x7fffffff, 0x2, 0x6, 0xfffffffffffffc00, 0x8, 0x741, 0x8, 0x89b, 0x5, 0x8001, 0x6, 0x2, 0x841f, 0x7f, 0xffffffffffffff81, 0x8, 0x400, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x1010, 0xfffffffffffffffa, 0x6, 0x4, 0x8, 0x6, 0xffffffffffff8001}, r4, 0xa, r2, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) unshare(0x40020000) dup3(r0, r1, 0x0) 2018/05/15 19:17:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8847, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snX/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:50 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d9a0300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto(r0, &(0x7f0000000540)="96", 0x1, 0x0, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) close(r0) [ 271.507903] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x806, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 271.570875] IPVS: ftp: loaded support on port[0] = 21 [ 271.577779] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000800000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:50 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x1000000}) 2018/05/15 19:17:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000380)={0x23a, &(0x7f0000000300)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r1, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x8000) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000180)) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 2018/05/15 19:17:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sni/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:50 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xeffb, 0x1a, 0xfffffffffffffffc, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0xb000)=nil, 0xb000, 0x0, 0x6012, r1, 0x2000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge_slave_1\x00'}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r3) 2018/05/15 19:17:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x6488, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:50 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 271.805349] IPVS: ftp: loaded support on port[0] = 21 [ 271.823748] ion_mmap: failure mapping buffer to userspace [ 271.862155] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}}, &(0x7f0000000080)=0x20) 2018/05/15 19:17:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d0003009a0009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn./seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="28264ffc7ce1bd75ab2310df781ff958fc049fdca637a92449591bfd5039e94e3d9a8395e7ef7bda23b885b578d3a0a225b57c4e4d4fd45054a7dbf9ca01ea25c1b3b3946bf8133bce311f4031cfa4b830890079ec2ec45d442c76b987d2a64f96f8e788f628f68147f28a1dc12c4bd9875bc23f366ed77c43697d6a38300fd6d50d15b154743204b56ba108", 0x8c, 0xfffffffffffffffc) keyctl$invalidate(0x15, r2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x19980330, r3}, &(0x7f00000000c0)={0xbdb, 0x7, 0x9, 0x8, 0x8052, 0x8}) 2018/05/15 19:17:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x1f000000}) 2018/05/15 19:17:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:52 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x1a, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) [ 274.031466] ion_mmap: failure mapping buffer to userspace [ 274.054680] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 2018/05/15 19:17:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400002, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000000380)={0x23a, &(0x7f0000000300)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000140)={r2, 0x2}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x8000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/15 19:17:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0xfdfdffff}) 2018/05/15 19:17:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffffffffffff000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000020003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 274.095170] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0xa02) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x1a, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:17:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snx/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:52 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x1eb, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x5, 0xa90f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x5}}}, 0x84) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x2, 0xa0000) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={r5, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x9, 0x7ff, 0xffffffff, 0x7, 0xc1}, &(0x7f00000001c0)=0x98) 2018/05/15 19:17:52 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 274.266256] ion_mmap: failure mapping buffer to userspace [ 274.325889] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d00039a000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:53 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x1f00}) 2018/05/15 19:17:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf0ffffffffffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x26, 0x0, r0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/15 19:17:53 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn-/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:53 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 274.484700] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xd00, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d0003009a0009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 274.529578] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn+/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:53 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x6) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 2018/05/15 19:17:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0xfffffdfd}) 2018/05/15 19:17:53 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = dup2(r1, r0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x80000001}, {0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0xfffffffffffffff9, [0xdbdb, 0x1, 0x200, 0x7f, 0x0, 0x180000000000000, 0x6, 0x9]}, 0x5c) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x80350000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300009a09003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:53 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 274.783640] ion_mmap: failure mapping buffer to userspace [ 274.834883] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6b3, &(0x7f00000000c0)=0x2) 2018/05/15 19:17:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x86ddffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:53 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snp/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x100000000000000}) 2018/05/15 19:17:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000020003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:53 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:53 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10113, r1, 0x2000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4c0000, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x80000000) 2018/05/15 19:17:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x5, 0x30, 0x2, 0x9}, &(0x7f0000000140)=0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r2, 0x0) 2018/05/15 19:17:53 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800e0000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300009a09003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x1f00000000000000}) 2018/05/15 19:17:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736ec82f73657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 275.141794] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:53 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 275.186750] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffdd86, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x8, 0xfffffffffffff000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x40, 0x5, &(0x7f0000001440)=[{&(0x7f0000000140)="e631f01324496defe9b8c0172f67fff041cbb927513304537cc471c1ede9d9c60f4a467562b5398b8e1b8e3a0a81af57977aaa968e448eff57b4", 0x3a, 0x7}, {&(0x7f0000000200)="7dfd3cb172b325c3515cd0430abe25ccc4df54c8ea721fa8be735973c1bff1167d168b78882a10ca8b9a8af975631d8403282a0584ead85cee73349a73891e23b799b4e6937e9962b982baaaa6111b2cb70f8c1fedd7711b2212321724ff503f99e6f3622d8cc461c3a93094dfcd370cfd1bec476c82d7fadcbe4f05833209537ab71845045fb25d9010f5b2f1acdf5ba5537ce56c56ceec87158ec0b7879fa2055d9dca97f8b31ede28d4acd91f53b956efaf676f1a81b3fc21999c9702257176e30ec862b78c40ce4b4254e8908272e259f13aa9341d7cb9467fc941d21b6e56570e5e2337", 0xe6, 0x2}, {&(0x7f0000000300)="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", 0x1000, 0x7000000000}, {&(0x7f0000001300)="0e39d6a3d8a0172339cad9467550362e882cbd44615f2cd26e68539c84e66399b5d561c8d2f5c78813d58cfc6df54760babb103c63159a45f336c1c3756a908b09864c42c56f302f13204179fd7fba95cd0c78debcbe17a1d70541a11872775ebd2f733e70970b4ac543d24f5fc35cc9ffd9c457836a1c5d7df30c811f5fb088d4d714520c96ebf35156cb40ce9343064363b030d06507fc7091c636938e4074f86cab478e1685b1a02b6cbd7e72b0b453140a920b7042af51c527a9a2d97fed3e0f1a0c9e631c48809fb5832bfb2a79b4bbd4340618d9ab2cd72af1cd03c18839", 0xe1, 0x4}, {&(0x7f0000001400)="9b84d94e", 0x4, 0x3}], 0x1800004, &(0x7f00000014c0)={[{@lockproto_dlm='lockproto=dlm', 0x2c}, {@meta='meta', 0x2c}, {@nosuiddir='nosuiddir', 0x2c}]}) 2018/05/15 19:17:54 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d0003000000099a3e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:54 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x101001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x280, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8200) fanotify_mark(r1, 0x2, 0x8000000, r2, &(0x7f0000000080)='./file0\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) 2018/05/15 19:17:54 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snu/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0xfdfdffff00000000}) [ 275.441707] ion_mmap: failure mapping buffer to userspace [ 275.481542] gfs2: not a GFS2 filesystem 2018/05/15 19:17:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x608, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e25d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 275.537972] gfs2: not a GFS2 filesystem 2018/05/15 19:17:54 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x103000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x5001, 0x8000}) 2018/05/15 19:17:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sn0/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 275.663111] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x4, 0x9, 0x4, 0x2, 0x100, 0x40000000000000, 0xb, 0x4, 0x1, 0xa3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x24001, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) getdents64(r2, &(0x7f00000000c0)=""/148, 0x94) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{0x9, 0x5, 0x1ff, 0x5, "3b97ad4934a8f4fecc875940b90031149d4b54c82918978a3f51b63915e37cca049e499b71be34860ab4b2e1", 0xffffffff}, 0x0, 0x0, 0x8, r4, 0x7, 0x1, "b98188c6a8a9c6cf3b149b6812a5f1f4cfd021988e02d0c27a509159121569aa1cc20db4543d43077ee6bf8a716a1fdb6ec152b7c414c70cebcbc6089d6b6fd3", &(0x7f0000000540)='/dev/ion\x00', 0x9, [], [0x100000001, 0x1, 0xfffffffffffffffb, 0x36c]}) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, 0xa, 0x3, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x9}, [@generic="688cff059366282ff2d09de4778a4f066c24b3c6e73c405d0ca6542e8c15d6042263a7ce19b8bc8b316b13307355be033551e49006bde93a76bc777b748672d3721e7efbdde125c80faea7e66b76b9bf8bbd7271e1826ada3f35ab9dc0d75405cba603ba3c77198056f81335f58390185d5d98a116fc462e9968a8118f4a414bb1b794958418d612e3a903e872c9", @typed={0x8, 0x86, @fd=r0}, @generic="086cf8a8895266254fdc"]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r2, r3}) 2018/05/15 19:17:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x14, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 275.706952] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad169a96aa1f", 0x2e) 2018/05/15 19:17:54 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x422000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x4, 0x20, 0x1ff, 0x4, 0x9, 0x5, 0x8001}, 0x1c) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) [ 275.902836] ion_mmap: failure mapping buffer to userspace [ 275.957472] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:54 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) getsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/15 19:17:54 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r0}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x23) 2018/05/15 19:17:54 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/sns/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800e000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 276.090752] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x806000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 276.150339] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:54 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x29) 2018/05/15 19:17:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e64c873657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:54 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x3, 0x4, 0x9, 0x0, 0x4, 0x62b, 0x8, 0x9, 0x3ff, 0xb0c, 0x7, 0x2}, {0x5, 0x100, 0x5, 0x6, 0x0, 0x7fffffff, 0x6, 0x9, 0xffffffff00000000, 0xfff, 0x0, 0x6, 0x1ff}, {0x8, 0x80, 0x1, 0x80000000, 0x9, 0x2, 0x2, 0x7, 0x5, 0xfff, 0x9, 0x81, 0x3404}], 0x1}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0x4, 0x1}) dup3(r0, r1, 0x0) 2018/05/15 19:17:54 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getpgrp(0x0) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 276.322594] ion_mmap: failure mapping buffer to userspace [ 276.384349] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4788, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x20f4afcb) 2018/05/15 19:17:55 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0xef, @loopback=0x7f000001, 0x4e23, 0x0, 'sh\x00', 0x8, 0x400000000, 0xf}, 0x2c) r2 = dup2(r0, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x19, 0x0, r2}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) 2018/05/15 19:17:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:55 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642fc8657100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 276.570378] IPVS: set_ctl: invalid protocol: 239 127.0.0.1:20003 sh [ 276.579860] sg_write: data in/out 50367738/552906653 bytes for SCSI command 0x5a-- guessing data in; [ 276.579860] program syz-executor0 not setting count and/or reply_len properly 2018/05/15 19:17:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20401, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x71d, 0x200801) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x7fff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffa, 0x10, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x3) 2018/05/15 19:17:55 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 276.619465] x86/PAT: syz-executor7:15897 map pfn RAM range req write-combining for [mem 0x18d042000-0x18d045fff], got write-back [ 276.656190] IPVS: set_ctl: invalid protocol: 239 127.0.0.1:20003 sh 2018/05/15 19:17:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x4, 0x200) setsockopt(r1, 0xffff, 0x3, &(0x7f0000000180)="6d316b68efad80bbd49c96", 0xb) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x60002012}) r2 = socket$inet6(0xa, 0x3, 0x1f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f00000000c0)=0x84) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0xfffffffffffff724, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r3, 0x1}, 0x8) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4305000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/.eq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:55 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x9dc0000000000000, 0xa200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="75000000ca863662b0191a951ac1b819faf25f778c8422a7f7ce4e6c49e32e4978b670cf2a4796870f84cabfc3041b6b8a1c9e253b1680ee18fe0d1ef0d741a77fa267bb438e34566cb126eb0426d11d25a234575684109a70a827e80891b2d2dde79dcd5fb7b29169e52bbbbd087a5aae0547bbb785021d53"], &(0x7f0000000200)=0x7d) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x6, 0xfffffffffffeffff, 0xb4, 0x6, 0x1}, 0x14) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x114, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xb3a, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x100000001, @dev={0xfe, 0x80, [], 0x18}, 0x120000000}}, 0x3f, 0x8, 0x1ff, 0xbf, 0x10001}, &(0x7f0000000400)=0x98) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x5, 0x4) connect$ipx(r0, &(0x7f0000000300)={0x4, 0x9, 0x0, "3966b0b6cf1d", 0xffffffffffffffff}, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x2000) 2018/05/15 19:17:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 276.893943] ion_mmap: failure mapping buffer to userspace [ 276.947186] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0xc, 0x9769) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) flock(r1, 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x80000) 2018/05/15 19:17:55 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x86ddffff00000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd//eq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8202) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:55 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2a01, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x210002, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000040)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:55 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 277.083493] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x7f000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 277.146269] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = socket(0x3, 0x80807, 0x10000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0xaf, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73c87100", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) 2018/05/15 19:17:55 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:55 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x40c00) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 277.356995] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:56 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xd000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/s%q\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:56 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@loopback=0x7f000001, @rand_addr=0xfd, r2}, 0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mq_open(&(0x7f0000000000)='$nodev)\\userkeyringsystem\\\x00', 0x1, 0x82, &(0x7f0000000040)={0x1f, 0x20b, 0x9, 0x3, 0x8000, 0xd3, 0x7fff, 0x7c6a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) 2018/05/15 19:17:56 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)) [ 277.540188] QAT: Invalid ioctl [ 277.543914] ion_mmap: failure mapping buffer to userspace [ 277.560478] QAT: Invalid ioctl 2018/05/15 19:17:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 277.589672] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0xfffffdfd}) 2018/05/15 19:17:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:56 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r0 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r0}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/15 19:17:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f7365c800", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x689, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:56 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x5, 0x7bd74b192c946dff, 0x1, r1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) 2018/05/15 19:17:56 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x14d) 2018/05/15 19:17:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x9, &(0x7f0000001600)=[{&(0x7f0000000200)="8653b06bf85082b622c97bef68ae596908f9d1e6face562016ae8a3e6d2905c7d9840628336962dd275ca6ee4dfde7cb44367ef675aa1e2c7d344233baad752fc671f59a9ba34992bf8c95ed5bf2c1f02d65a977f946d1649e91be8d177474af491b5e01f36530c2a4588a5348a2147071355c63c0e699e35de801415b6efb07f47eb85883cd3fe79e", 0x89, 0x101}, {&(0x7f00000002c0)="b8c0362ed191047efd0154e65ca71ee987fac84cc0cf732fae20415ceb1aaaca9914615bb322ca5e51faba4e0e9dd7973bcffed095d846240de8460be53c941de984ca4806d4a54ae5d2a1c1e0c844b8affb4061cc3588889eeaf5290917cff473f3ba6e832dd438f4f89bb654e66357983f68cac6a10c372debada2de3f12db0a2738e1a919960eeacb69c8d02098e8846d3a476a58ee1ec2d81610e7db229d09bad1f9593797a050bd6f7e99c310", 0xaf, 0x200}, {&(0x7f0000000100)="5d697c59f75ba758383433a78c60bc0aa2b64cb9f35ed56be5ac295ed31cd75061eb29ca0be60641fb34fbf66c4b108b5f68998b58a1ee125da0d6dd66b5fa928ee2597b0e9636a07535d9a2a1e5792e31377d5d191a59b5917078f12315a51e23c1780409601fb9c8389a1891de67d9b0e26fbb0f44f8593392e27b", 0x7c, 0x81bb}, {&(0x7f0000000380)="1641d76d36d5960e6df39f7f3335c29fa4018583f5bdcc4ab40f2b4e3ad436ca61a522beee08bb96b9dc2ae33b4c9e68b4d576937cef18231a72e3287cfe9b227c4e5cb1fa9b0a2f19d8af6cc9c5ec2ed15dbaaff8d5018c05806b3d06d423493a4e13df1b61faa0ee187ba0fd1b0140fa2e54707e1d353428175daeba69e9c6781fbd5e93583df864564c583ed9ed43e42dace8a02bf70f17dfd41da5b4674cc7", 0xa1, 0x4}, {&(0x7f0000000440)="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", 0x1000, 0x10001}, {&(0x7f0000001440)="c94c82c12dbf68f1a3875f1a3d7d1bc40f43572a0ad7bc1e9e", 0x19, 0x3fd}, {&(0x7f0000001480)="1a446477e05e2665ba23bc4c32af95d355eecddc7a0dc4dadd30ac17e86749a6cd43ca4921080d30ed0be3f17134e8c1b74d963a26e4", 0x36}, {&(0x7f00000014c0)="c08f195a61b9b0d10d69bdc114d5317ae84ab25010639d75a33ddd2cd9e2dd9b123ec4f4f9e180e71f21c5b5c6ffdd67ab8c62a576396265185c28b60bbd2d3e68", 0x41, 0x3}, {&(0x7f0000001540)="4976ad880f44fe1cd56e99f879bb2b9beb1cc8badbbc4fb0559151c97dfe60672c7d858ac485d1c8a7f2440c8b109161c61b0dfa39758f8f541e597272b124d3118f53d60a80556d6e80d13a91a0d3b496814b23c4f9079f76500f629474bd64c375d14465b8da3cceae220408635f0a31ace0a5cbeb747f735131814bc8275ab8c9eaa1d70429cd97ec6beb8f4214950bc03c18d28b8a7c6349a19a45bbd5e9145ca2", 0xa3}], 0x2000000, &(0x7f0000001700)={[{@gid={'gid', 0x3d, [0x3f, 0x2d, 0x0, 0x0, 0x79, 0x31]}, 0x2c}]}) dup3(r0, r1, 0x0) 2018/05/15 19:17:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x100000000000000}) 2018/05/15 19:17:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:56 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 277.952261] sg_write: data in/out 50367738/287 bytes for SCSI command 0x5a-- guessing data in; [ 277.952261] program syz-executor0 not setting count and/or reply_len properly [ 277.984616] ion_mmap: failure mapping buffer to userspace [ 278.000823] hfsplus: unable to parse mount options 2018/05/15 19:17:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300000000000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x1f00000000000000}) 2018/05/15 19:17:56 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) socketpair(0x2, 0x2, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000005000/0x1000)=nil) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x100000001, {0x7, 0x9, 0x7, 0xffffffffffffffc1, 0x6, 0x7}, 0xb3, 0x8}, 0xe) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xc0, "8418804fc68063da0c7c925f8e4ad7bb942880aaa8db845e9e82663c1bb499b41ec4a8a493f09577fcf96dd5909575744b84620b86bf00a8d42750616a52c54f6726818cc3deae0de5435616cc246280bd1d4e7380f3fca02051fa17fa423205a19a397b36a2d315913e674f4bfd64bd7f67d4c86a61325782b110e4bfc7b5e735a0320c0cd4914fa37d0f811732ec71444ee1bf510dcb351d7b9a16a9b36d1a637de00b8331863f89399c9b3c558ee2f221015537cf49642832bae9567da78a"}, &(0x7f0000000280)=0xc8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x1, 0xa, 0x3}, 0x144) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r4, &(0x7f0000000080)=""/93}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 278.068988] hfsplus: unable to parse mount options [ 278.087729] sg_write: data in/out 50367738/287 bytes for SCSI command 0x5a-- guessing data in; [ 278.087729] program syz-executor0 not setting count and/or reply_len properly 2018/05/15 19:17:56 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:56 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x88a8ffff00000000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 278.216829] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0xfdfdffff00000000}) 2018/05/15 19:17:57 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0xffffffffffffffff) 2018/05/15 19:17:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x3c9) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 2018/05/15 19:17:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x1000000}) 2018/05/15 19:17:57 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x0, 0x694d, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x3) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x200, 0x1f, 0x7, 0x2}, {0x5, 0x7, 0x3cf4db7d, 0x7}, {0x0, 0x5, 0x401}, {0x6, 0x0, 0x9, 0x6ec7}, {0x8001, 0x9c9, 0x100, 0x5}, {0x1, 0x3da4, 0x0, 0x7}, {0x1, 0x20, 0xfff, 0x3}]}, 0x10) 2018/05/15 19:17:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:57 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 278.530785] ion_mmap: failure mapping buffer to userspace [ 278.563153] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = semget$private(0x0, 0x1, 0x0) semctl$SEM_INFO(r3, 0x1, 0x13, &(0x7f0000000080)=""/161) 2018/05/15 19:17:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1a000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:57 executing program 0: r0 = getuid() setuid(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) lseek(r1, 0x0, 0x3) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:57 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x6012, r1, 0x2000) 2018/05/15 19:17:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x1f000000}) 2018/05/15 19:17:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 278.787975] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x1) dup3(r0, r1, 0x0) [ 278.830982] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:57 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd86, 0x80) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x2) 2018/05/15 19:17:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657102", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xc0030000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0xfdfdffff}) 2018/05/15 19:17:57 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r0, 0x29) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r0, 0x3, 0x1, 0x8000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$ax25(0x3, 0x7, 0xcf, &(0x7f0000000000)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) 2018/05/15 19:17:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4305, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x7fffffff, 0x8001, 0x3, 0x2, 0x0, 0x1, 0x2, 0x2, 0xfffffffffffffffb, 0x8}, 0xb) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x400, 0x4) write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0x9) [ 279.102522] ion_mmap: failure mapping buffer to userspace [ 279.135789] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x1f00}) 2018/05/15 19:17:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:57 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:57 executing program 7: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r0, 0x2000) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) 2018/05/15 19:17:58 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x600, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x4bc0) dup3(r0, r2, 0x0) 2018/05/15 19:17:58 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) inotify_init1(0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x14, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, r3, {0xf, 0x2}, {0xc, 0xfff1}, {0x9, 0xc}}, [@TCA_RATE={0x8, 0x5, {0x3, 0x3ff}}, @TCA_RATE={0x8, 0x5, {0x7fff, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x5cc5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x121100, 0x0) llistxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/200, 0xc8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400)=0x40a, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x1, 0x9}) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000}) 2018/05/15 19:17:58 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:58 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="72c42ac6b9a91e8771a758b8202d855eb5b22ba83359cdac24350ee824634e6f9c29649be41d393b8dd8dc14c466389213605e4e389d35b1601a2ee483fa60856781b6efcd1f9456ddac2ea6c7c0040f971b19b577945733758bfa9a5d70ae0e31c2ad7652") ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x1, 0x7fff, 0x4, 0xff, 0xcb}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x6012, r2, 0x2000) 2018/05/15 19:17:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 279.508592] x86/PAT: syz-executor7:16336 map pfn RAM range req write-combining for [mem 0x1abab6000-0x1abab6fff], got write-back 2018/05/15 19:17:58 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000004c0)="1fb8bf942ea727872ccda8f04c4735ee14a139c07ccfcc4ef3951f3e84a6f4ccb6489fbe732e817105879f9dfa1c460f976d459bec3df3e0ba0b45d12b69ee6d3e940d9f22bfde12c2621cce897e9e767454bc0b41877e3e0eee851f9cc618388fbedca27709ff0ef759b9ac98704a3f4649304231872db355748b60fc697dd90aeab92f1b5fa4d32d3bc7935a7fe4388a9b04abc5f503e14cc1d8bb8e43c999f835be14fc1cabd53e2194a8fc3d1245f27d37545d49e72aace13e1fa87c86579572f7d675a5b71b0bff49f4bafd2fc13eef814c") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/251, 0xfb}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/139, 0x8b}], 0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000440)={{0x0, 0x1, 0x1, 0x3, 0x3}, 0x4, 0xc80}) 2018/05/15 19:17:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x1f00000000000000}) 2018/05/15 19:17:58 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x842, 0x20, 0x0, r1}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:17:58 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x80ffffff, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x2000000020000, 0x9, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:58 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:58 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0xfdfdffff00000000}) 2018/05/15 19:17:58 executing program 7: shmget(0x3, 0x4000, 0x101, &(0x7f0000001000/0x4000)=nil) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x100000effb, 0x19, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80002020}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x3c, 0x26, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, r3, {0xe, 0x7}, {0x0, 0xfffb}, {0xffe0, 0x8}}, [{0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x880) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x10000, 0x7f, 0x5, 0x8, 0xe65b, 0xff, 0x2, 0x1, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000140)={r5, 0x3, 0x20, 0x400, 0x100000001}, &(0x7f0000000180)=0x18) r6 = shmget(0x2, 0x1000, 0x102, &(0x7f0000005000/0x1000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000000)=""/85) 2018/05/15 19:17:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) 2018/05/15 19:17:58 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x8864, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seqz', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x1000000}) 2018/05/15 19:17:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000eff8, 0x4, 0xfffffffffffffffe}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80080) 2018/05/15 19:17:58 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000080)={{0x0, 0x3, 0x7, 0x2954000000, "e5902cebe457b0edd9449beecfefe12bbe3db2c0f3bd0952c0545c390313a6ee33860ce19e0ce1d95dc2fe31", 0x9}, 0x5, [0x0, 0xff, 0xe69, 0x100000001, 0x2, 0x8417, 0xb3, 0x6, 0x8, 0x4, 0x4, 0xd0, 0x3, 0x4649, 0xc901, 0x1000, 0xa2, 0x10000, 0x0, 0x5, 0xde, 0x2, 0x9, 0x80, 0x2, 0x7, 0x10001, 0xff, 0x80, 0x101, 0x2, 0x1, 0x5, 0x5ec, 0x1, 0x5, 0x1, 0x400, 0x48d, 0x3f, 0x200, 0x1000, 0x100, 0x5, 0x6, 0x6, 0x0, 0x2, 0x81, 0x9, 0x0, 0x3a, 0x3, 0x3, 0x101, 0x0, 0x1, 0x3ff, 0x7, 0xffff, 0x100, 0x1000, 0x2, 0x5, 0x3, 0xa82, 0xfd7, 0x3, 0x8, 0x9, 0x3f32, 0x1000, 0x7, 0x5, 0x400, 0xffff, 0x6, 0x8001, 0x9972, 0x4, 0xff, 0x2, 0x4, 0x3, 0x3f1, 0x1, 0x2, 0x9, 0x9, 0xbde1, 0x100000001, 0x2, 0x3f, 0x8, 0x20, 0x6, 0x7, 0x0, 0x10001, 0x8, 0x9, 0x6, 0x6, 0x4, 0x6, 0xa8c, 0x7, 0x7fffffff, 0x6, 0x4, 0x8, 0x1, 0x3, 0xfffffffffffffffa, 0x3, 0x2, 0x401, 0x2, 0x8001, 0x4, 0x8, 0x14, 0x2, 0x1, 0x1fffe00000000, 0x100000001, 0xffff, 0x3], {r3, r4+30000000}}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) [ 280.067758] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:59 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:59 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dsp\x00', 0x80000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/sequencer\x00', 0x10000, 0x0) r3 = accept4$ax25(r2, &(0x7f0000000200), &(0x7f00000004c0)=0xfffffffffffffe13, 0x800) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x88) init_module(&(0x7f00000000c0)='/dev/vcs\x00', 0x9, &(0x7f0000000100)='/dev/vcs\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200000) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000380)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000280)=0xffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000080)=0x9, 0x7) accept4$ax25(r3, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) dup3(r0, r1, 0x0) 2018/05/15 19:17:59 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20000000000000, 0xa201) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x12, 0x48000, 0x6, 0x4, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2a, 0x3502}]}, 0x20}, 0x1}, 0x80) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x1f000000}) 2018/05/15 19:17:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\a', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xd00, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 280.737387] ion_mmap: failure mapping buffer to userspace [ 280.760975] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:17:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = getpgrp(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x20c2) sendmmsg$nfc_llcp(r2, &(0x7f0000002b80)=[{&(0x7f0000000340)={0x27, 0x0, 0x0, 0x6, 0x6, 0x6, "954814d21ce4790de55a2253640b79f5cded9a797034f78d3ece88b8cd98096ca6a41e7740c58f05be1d1e2023db10f3d704f16a147bbb45c027e94b4bb200", 0x3d}, 0x60, &(0x7f0000001540)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000140)="dd9cd8e067d1fb43f5ea9993bcf2ff8c6fb839fba0db9044778acaf827f909102d7342", 0x23}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="de005eb719b3712e98ec89a746cae2a16d0842127f561ab6a47b0e7e51972f556b10322af6dc41a51d3b49fdfbf5bb4cf8b6fba8344d7060bc55b7331c255dab9dc592f6d9b9700abd9da7b99c0c9f958efecee896067fe57643f77d54abb89357b23aa885c16de471a1259d94db16df3c8d24da41266920930913cf00641cea8726800186795db33dc6c1fca072ee5a10bdb5f8587a7cdb395e1c41dd1eeab61a64abd799e4e8a87beade3a931b3b9f77ea929a0636ab13c5a1969d4c5d312878", 0xc1}, {&(0x7f0000001500)="bac71b009d155d2048dd034b84fc85b08bdaf3ccf247233475315440474f9c3800beb9f2624025d4", 0x28}], 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="20000000f0500000ff0100000100000070bde143bb8347a8f0939d1a00000000"], 0x20, 0x24008050}, {&(0x7f0000001600)={0x27, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x4, "8547f5bb7b1e92bc69a085ec307a839ed533d48e4f4fa3aa749d6cea198a6788cf28b2d4781476b86fe4b81190365e24a037df98bdbbb60bccad8f635b3063", 0x14}, 0x60, &(0x7f0000001800)=[{&(0x7f0000001680)="e47cc915e2561a1df9679f9ae42673825888798098f4582fc2474ded32ce78687a203b618d80e804dd306b4e259e3995c8792d03d7e87489a887d30033fb545b9dc9d1452e13cf51416c173453b60fb49e1230fb1b242ee604c887ab5687cfb75c76e70f37c69a346c698d6464d07c1ddc0aa695fa63718346637d8ad1a628748e55cbce0a34cb3d", 0x88}, {&(0x7f0000001740)="ae5c1281cf92d6e54833ee83ddd75ad757356db58e1fe04c780f3977473fa633f1fb4354a219e4586b56c53cbb95c336c65256217f643fb22ffb3b97d095e31edbb2ae7aab0274a39b26c7c0befb29a02cfc875960d11eb7d8ed65da6967e686416546a7ad6341172b83f431a36767b2b636b3736031194afe2693b09b743524d724d1", 0x83}], 0x2, &(0x7f0000001840)={0x60, 0x10d, 0x1, "d018a29cec0a45e2c8398ca59fdd43921ec2b920075e3c8c160f34bd4801230fe7d2c5c771ce0b147d8d46ced8bb6a3f27c4510d956d186df6803b5dad5c0e505c751bad3e9e734918c76e12951806"}, 0x60, 0x4000}, {&(0x7f00000018c0)={0x27, 0x1, 0x2, 0x3, 0x94, 0xf3e, "211253c8e8e709a9acb6cfc689e408264771297431a66516fb24ff149f72360acaeb4028297b5abe73ccf0320de4c8359bc54e5a89bf970c8b57cec4f47f44", 0x1a}, 0x60, &(0x7f0000002ac0)=[{&(0x7f0000001940)="54e117d1206920353607b50caf0ce4a904797f71491c9025745bf24a61fca0188cc998191fa26601b25132ccf2ee1d4c7d69db45269c9239173a80aeb499b433aa21bb2be0524364be087858cea83953ce2504ed30ec3badef5765a6", 0x5c}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="4d6bc2391e9d7bd147b5cc86d7cbd05c973cb318e11fbbf8699cfdfb7f9d16c880d5b81b8d52db7960b17406a755d63af55ea672a3a28292650f9f979b8589926ecbbeb1cc5ab1e77e38b7191eb32a19b27574698fa0fc16ef081cfe110076a3e6b1c7c2ccf3f37e15cf13b5bc150e5b775e9982b99cf1f196dd5c701635c7d4dc55d065fe621f8dcb4d03204e88fd0d7fa287fa326af5bf7c69c7c6cf57dda2c5035ebb2d3aa41e25f9bd593d432ed54e1c4afd659d2f1104c17b7480579d0bc127838bcaa44599944d46577db661c90ef672cef392bc7eea4272c2f91609d22f88612f571185", 0xe7}], 0x3, &(0x7f0000002b00)={0x80, 0x11b, 0x2, "e06a8180cc9bd602dafe964a22b28d5c3b7023c191b6b69d4211290476ddb606d4fceec63bab87d4c2fc3d5386e2e1f00dd29b7ff2a99110f995f37597c74f2f4be5e64114d72d882521660e422eace66861394c1432e1624e9b0b6b30c3afdd5e5ac93d69469b7770931a"}, 0x80, 0x4040081}], 0x3, 0x40800) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000002dc0)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000002d00)={0x400, 0x7}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x100002, 0x0, 0xf, 0x6, 0xedcc, 0x7628de07, 0xa3, 0x9, 0x1, 0x3, 0x1ff, 0x9}, {0xf000, 0xf000, 0xf, 0x3, 0x80, 0x68b4, 0x3, 0x6, 0x8001, 0x401, 0x5, 0x1}, {0x5000, 0x2000, 0xc, 0x1f, 0x7, 0x7, 0x20, 0x3c4, 0x9, 0x2, 0x3, 0x6a1}, {0x1000, 0x6, 0x1b, 0x2, 0x6, 0x6, 0x8, 0x53, 0x9, 0x5, 0x3, 0x100000000}, {0x1000, 0x0, 0xc, 0x3e82, 0x80000000, 0x1, 0x5, 0x800, 0x3, 0x0, 0x1, 0x400}, {0x0, 0x5001, 0x4, 0x80, 0x2, 0x6, 0x6, 0x7, 0x7f, 0x401, 0x8, 0x4}, {0x1, 0x10000, 0x10, 0x100, 0x8, 0x3, 0x4, 0x95, 0x7, 0xe6, 0x401, 0x2}, {0x4, 0x100000000004, 0xd, 0xffffffffffff1062, 0x7f, 0x10000, 0x2, 0x2, 0x1f, 0x2, 0x3, 0x100}, {0x106000, 0x6003}, {0x2, 0x1f000}, 0x40018, 0x0, 0x4, 0x0, 0xc, 0x0, 0x1000, [0x800, 0x7fff, 0x1, 0x8000]}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000100)={0x4000000, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r2, 0x50, &(0x7f0000002c40)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002cc0)=r3, 0x4) setsockopt$inet6_int(r2, 0x29, 0xd9, &(0x7f0000002d40)=0x6, 0x4) sched_rr_get_interval(r1, &(0x7f0000000040)) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000380)={'gretap0\x00'}) getsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x66}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x40, {0x2, 0x4e21, @multicast1=0xe0000001}, 'veth1_to_bond\x00'}) r4 = syz_open_dev$sndpcmp(&(0x7f0000001640)='/dev/snd/pcmC#D#p\x00', 0x2, 0x511003) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000001700), 0x4) dup3(r1, r1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) 2018/05/15 19:17:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0xfdfdffff}) 2018/05/15 19:17:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657106", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:59 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:59 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x1a, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:17:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf0ffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:59 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:17:59 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) clone(0x800, &(0x7f0000000080)="0b6cd375395e434660554174d583657693bbdabc9ac59c3862517deefc6596b3055e4cc104ed1888afe5a452b892b4ecac6d02f72b8d232221abf99e13af9eced68ae544689f8887bc505fc83192ef2c80c2eaf801afc8f7c451163bbf18a89bfa58051bcb6158dbb9a3330b872835316711a68f6faa005efdd9f28d6ba422a81bbff38ee0eacb20b213cf5f40faf216c07525846608f2c90fec9d5bcd3a9528861537afb77826693d934c57e3fedf8e15163239044e37e033b349a98d8d035f6794f999d6e1b17c1a4b64eda8eb32f94eaaaafc71d8", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="5d0246b0720cec07b2880ba8ac967d7c139a0811d49cf0ec6b1ff76ca8c99357ea64dde229cee44a4be50a3100e1dec0c8f9ca813b8d34196da23e8372553239ebdbd4e5c5df9940a542df201c3a7de5b5a4500ecf80df894b1192d00e551a51378945852c862f35c067b6d1aefeeff9f7b94a9aa9604a9f4128373d3bee76e547c648851c269caa9c298442d6cb3ca569a6b08c8e5fdb") r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='statm\x00') setsockopt$inet_int(r3, 0x0, 0x0, &(0x7f0000000940)=0x5, 0x4) openat$cgroup_procs(r2, &(0x7f0000000040)='croup.threads\x00\x00', 0x2, 0x0) 2018/05/15 19:17:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x800000000000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:17:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x1f00}) 2018/05/15 19:17:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:17:59 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146d677f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:17:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8060000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:17:59 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 281.141453] ion_mmap: failure mapping buffer to userspace [ 281.221571] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) write(r0, &(0x7f0000000000)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r2 = socket(0x800000000e, 0x80f, 0x8000008) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/05/15 19:18:00 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x80000) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000200)="9887ad9c6f1e332a8a502960ce2f5d255d4a019336ae14ea34e83c5ddf82b026099f024b0f30141b0b5f026324a7114942a58c75e74296d18135586fc2f23b143666d38acbdc061758465026e4d0c9e3fd6a40aae0a4d1c8aaba2f9a107a35a6c46ab2c3ce2dcc9f54a383f8a3a53e97d26faebf24c78076ecaabf3a97de3e4b96a5d43c2104af23130bb16c80670f4bad003a7a465452d20af62d5959d9caf6c005b65a6c0f6b37dd93691a66eb6926568f7762af5e49b35f39e6dc5867c9ca411cddd2ac0871d8853a8e014cd9d007f163e25bc6f15f1307") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x1a}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r2, 0x80000) 2018/05/15 19:18:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x40000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0xfffffdfd}) 2018/05/15 19:18:00 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\b', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:00 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xb0, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x400000000000000, @remote={0xfe, 0x80, [], 0xbb}, 0xea8}, @in6={0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0x4}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x2, 0x3, 0xffffffffffffffe0, 0x0, 0x8000}, 0x14) [ 281.430421] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) dup3(r0, r1, 0x0) 2018/05/15 19:18:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="6d61705f66696c65730092a732389414ed8c89211c8a47d7a9299e5d5b1649fac5138d8db25de28ebf90f1485f284b55ef4a5fb6eb3198f336a0b4e9bad6ac60f78766fd532c1f7cb7400faf94ee5909915a28d035cd14f510cab8c9cf89b69ab4eb1ff1e10780bc3c837fb03da5fe6a0183ab720180000000000000e77d157de5752416db2b2943721828eea7254c33baac23f9280a70b5ed45ac7aa6790111eaa5f471535338609f584d3750847b901abd57b75614704dd30737f064b620c9fd6ae419a7ee837324fe7e46") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@empty, @broadcast, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002b80)={@loopback={0x0, 0x1}, r1}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x4, 0xc002) mq_open(&(0x7f0000000080)='keyring]*+\x00', 0x43, 0x0, &(0x7f00000000c0)={0x3c, 0x9, 0x40, 0x4, 0x401, 0xfff, 0x3, 0x5}) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 281.479373] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0xfdfdffff00000000]}) 2018/05/15 19:18:00 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7ff, 0x8, 0x1, r1}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x6012, r1, 0x2000) socket$inet_dccp(0x2, 0x6, 0x0) 2018/05/15 19:18:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657103", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:00 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) [ 281.750013] ion_mmap: failure mapping buffer to userspace [ 281.808081] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair(0x11, 0x1, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x101, 0x7, 0x1, 0x5, 0x100000000}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r3, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x600000, 0x0) 2018/05/15 19:18:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x34000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:00 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x100000000000000]}) 2018/05/15 19:18:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:00 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 0: r0 = socket(0x13, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x8c, r1, 0x900, 0x70bd2b, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x30000, 0x0) write(r2, &(0x7f0000000080)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:00 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0xfffffffffffffffd, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x200) r3 = fcntl$getown(r2, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r3}) fchmod(r2, 0x110) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x3) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) 2018/05/15 19:18:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x9f, 0xb, 0x5, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_sec_ctx={0x2, 0x18, 0x0, 0x8, 0x2, '%D'}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x28}, 0x1}, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000002c0)={0xffff, 0x5, 0x0, 0x1, 0x15, 0x0, 0x5, 0x1, 0x1, 0x9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x4, r1}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x65, "fc5ef9d64f75bdb3f9a889c9b013185634a302916ccdec08c60218d85a46f4cf244fd75d668736bba8cffa1f49848938a8299ad501db22e8764c95fb6f8ed364a3a137f40bc3cd7df1f443520a2d11ca4200ae5c3c463da0eeb40e0e2a9407106498896b1e"}, &(0x7f0000000200)=0x6d) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xed) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:18:00 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) 2018/05/15 19:18:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0xfdfdffff]}) 2018/05/15 19:18:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) getcwd(&(0x7f0000000040)=""/54, 0x36) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3b1101, 0x0) getrlimit(0xf, &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x3, 0x3, 0x7, 0x3]}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6c, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/15 19:18:00 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:00 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 282.199389] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x80004, 0x3, 0xb869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3580, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 282.245272] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:00 executing program 7: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0xd0442, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000200)={0x0, r3}) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x408400) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000140)={0x6, 0x9}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) close(r0) arch_prctl(0x1001, &(0x7f0000000000)="01") mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x2000) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x114, 0x80) ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f00000000c0)={0x8, 0x4, 0x8000, 0x3, 0x10000}) 2018/05/15 19:18:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x1000000]}) 2018/05/15 19:18:01 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$KVM_NMI(r3, 0xae9a) 2018/05/15 19:18:01 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 282.425243] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x40) write(r0, &(0x7f0000000300)="6a39b81dcc43b6ed5ed2bc7018cefd1095944167d9797a96113e32b20adb6f000000000000000000000000000000000000000000", 0x2bb) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KDSKBLED(r1, 0x4b65, 0x200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=0xffffffffffffffe8) 2018/05/15 19:18:01 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x7f00000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 282.512507] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f736571f6", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) r3 = geteuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) dup3(r0, r1, 0x0) 2018/05/15 19:18:01 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYRES16=r1]) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r0, 0x0) 2018/05/15 19:18:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x1f000000]}) 2018/05/15 19:18:01 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 0: getsockname(0xffffffffffffff9c, &(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000200)=0x80) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000240)=""/141, &(0x7f0000000400)=0x8d) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x7, 0x551342) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000480)={@reserved=0x1}) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) syz_open_pts(r3, 0x400) write(r2, &(0x7f0000000300)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1ff4ad4e110f837c1ad318647cb11ef7517e407f474898f993129853eac8b68eeb0f358c7b58b14437062531c05f94410cfe6b5d6271f887ac48e0573cefdc9818d00ff770a42a9572291473ce98136d93554a5d10534a63b79548642d445cff9ce68ec80171c06f7c151b574bb760e307890a89343a8acd924245503df7391bfca91b212afbe2bf81f125658b5fac63d01a57ad98b6ccf08b89bca26bd011ab341918450095248fbdc06a587b86174182380a6e9e854883fa3a76ff0bbf2db3c6c37adcfe54a2d9", 0xf5) 2018/05/15 19:18:01 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657114", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:01 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8848, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x65f, 0x1, 0x10, &(0x7f0000ffc000/0x3000)=nil, 0x20}) dup3(r0, r1, 0x0) 2018/05/15 19:18:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xc5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket(0x0, 0x4, 0x3f) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x4f, 0x7, 0x8}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:01 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4305000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:01 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000022c0)=0x0) fstat(r3, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000002380)=[0x0, 0x0]) r7 = fcntl$getown(r0, 0x9) fstat(r2, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000002500)={0x8000, 0x7, 0x10001, 0x0, 0x3}) sendmsg$unix(r2, &(0x7f00000024c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000080)="5cd9f9de0925b757194c0af020adac068429fa2ea2cb3f881d878f8e5529169fc047e0619f9db364c0e2e62dc55d85006ea5298edc4d8030dd9bd30aca347a9fb012e062897f416c5b3140cd", 0x4c}, {&(0x7f0000000180)="c4d356ece1392329603c7acc3582a4cfce142fbefdb53512b7177854e2fb691ca33f06d2d922f705d001406943c5497a1902620b30e7a2d8aa89a55606eefded2acb2ab802f448fe", 0x48}, {&(0x7f0000000100)="e56e3f28336defa6a5d6714f346e39a9c5caf822ebbf", 0x16}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="92fbd9b1bd973602", 0x8}, {&(0x7f0000001240)="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", 0x1000}], 0x6, &(0x7f0000002440)=[@rights={0x28, 0x1, 0x1, [r0, r2, r3, r3, r2]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x68, 0x15}, 0x40) 2018/05/15 19:18:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x1f00]}) 2018/05/15 19:18:01 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seqt', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 282.951447] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:01 executing program 4: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xd00000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 283.004516] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x10000) 2018/05/15 19:18:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0xfffffdfd]}) 2018/05/15 19:18:01 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7b3e, 0x10400) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x80000000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffffffffff, 0x24800) write(r1, &(0x7f0000000280)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc70872c5a8c71e233ad160096aa00000000000000001fc4426c281d9a02e9dce769a48ce1cb7f71caf8", 0x41) 2018/05/15 19:18:01 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) 2018/05/15 19:18:01 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:01 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8035000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657104", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x100) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x1000, "55e5de0960b1c64fdd511bec6d01852d574ceda7869f6ef8a032744a61bdbfd50c627c53b8169e3061a6dd7c963fd5b79e11d1c46d0ae56623851332af2fddada2236669e46ac82b92aafaa446d4a5839ff522a7ef887ea78b059943094422adc6b4d70d4e180f059395048463710fff840a903a4a71542b7eb199176617c671b3295c7f2872ba0febdd1878e875a977084febbfdbb4d473a2e21d564c6a3826d894222df0cc8f47e3e9c151ed9a3b6d0f4677af140129bd4e63745f5a0aca3b825b176e48ce83e4b230a9400319d8dd31ea29a891dddedbac3e6f2138b95742d19406f65f8da5e9239f28924960b9946dd8531bbf6adf351e15c71b888790fbaaef953b578bddcec6c3995b17b0b261faee709b60e496eacc8ad064fb7b8304d2649c80a3337c96157421a80a3e6ab3f98789d0b2941cd41302807df33b8dfeda1ec5b1176f6d790cf6a320c2bf41da524ea3d84b4d6e0aac2f2e402b440a4c9d8665c42c17ea66bc51abb0bedfe86a8727114e85e788db7c13cc4a83cb9a621d4fce10570081c2e97bbdc763a7edfdcf560baf6ef9bd70396bd415c1048d68de0670791e39bc50d43dc2c7a3f855ca156e96a54086d250e7c4abfa6ce15b787f589ca5b13551c98c23caddc98e77b7f712cf7c192d2659ecc780957e5ca64942482746fb48c8b24d111b67fc30b6ea4220d9e99bac524fd05705d7f3e662ef1e9a53162a8a8879f2563b71c8c076c929f63896cecdccce7f8027790a7d13962d30d11215f1d886e15643f9945883ceab73e3aa23f7929f8b03be63b0b2d700b4f112df8297a0ab1ef241c0c3c47fd77ff2bc5dd38d001d5bb50aa3e954f497bf30580389119d4c5cc81b9c41b17162998a2dec649b108b99309c0c6e7eb5f4cd047aca642317ea815990628a58833974ee133b1b3d67a448fdae6df74054902036c0ef1936254f1b340f1ae967882c5d01ae60029ce147556e80cc0cc5a51b7fec7be5bd508b65e5eb490e6c7be0df830f92e6170660cf7b253b30f58f002ae05391f8eed33c1236053f690a27d4ae982d0803fbd0bb6b946a6768d134578e7f654dcab52af3363892a9f2722f537136964968175447d6dd67b6957b92fcf8244164816452b27fff29c12b92e25b448056d962f0f4cd85c551787bb2eb9a5562b1694238c9e1b53fb39608c46a4644d9070cd24a61ccbec0e60dca4853c02ac6142d13e8b05bc7e1f41021539bb5ee8530cbb9e820fc69d72c2d1717c5b544c7350bd120e1322600bad9a64bd832af7c56d42c5e81f82aec02d6839e18565d5739a02aab88b7749bec1d702c381ba6dec30e0b3d8841d17f4a743b5ff4b425b2c3c5da77ed039e99001e3fabf4302d43903b01cd462b0779b236ccda06defe2e5220eae798c94a4b38ed9ed7e28cd081eb0300f2ac44767d0a1b016e978fb2b508a7273db72090a857320b6027ff6cfc150a8e50887bdbfbe38d15d3cda7d2c9d23bfb9d691dd3faa7447f24f34af30bf4bd7eae8bab9e467fbe3f87392c9d8da89dd4aab9a61a96e1b874ac68d6dd753b9b05ee8b18b20d448b8aee275a64df2d1d375dd2dbbf15fb57d58abe1ce920ffabfce1b57fda48096d1a9f6732e21e5742e0aac0a7debf1a25c16f9a9361b8aae02fc9b281bd2abe1e8a5823d9e6a08e3657c4fe2c161c2dc399481eefd64f149673b7aca61229a58f07c420cfdbd736c7981ddad49d9a9be6b6ecd1564dafe0af297688789dcf350d8cbe60e9fd31be5ba025e430ad610914c1245d3f52ed428e3b274e3d1247f9a5e4df2c72ac0642db1c3617fc60aa8d250469f6c4edb36468a9c41fff76ff29233ed006437e5878fbc8dedbee61c645f2f991b4ac2be25cb95202fe3998f936d83a0f241e2a479decab52eb9de1a486e8c9675be8c4cb96ac99a566243a84fe498aa803f65542c3065130e2c15144b737fdb9429890fa2895358ba4a9b826cb91d26887b6412a8580104e93347e03093400fdfaacb339f7b932d577456c2f3795d8ad0aeff51322ed18f8aa68c071c0c7e2f49f68b2eead6180b990bdecfc2af70bed0948b6eb7d287f241273870639c6e3a27a0e550ba2efafb81944abc9c7b2fe7ca2151d83bbb1d00ba8ae7857a8dc5965f10f655306ebb9211d0f1caf378db3d97bbb978b8d6c39c4dec2d9fe6569d21cfbd35070144e18a578e97baa1fc885f81d1b76b1793fe096c8bd99771d69cf330133860f9379c80e0ae36713fd11cdff6fb2db7d0346a0ebcc4884d1e6d5af1c9bf49f164a9dde5897621becbf875761f70e9ecd72bdea50c6f7cd91b709aab2a76ff36b4d5256d9abbdbd34d1cd0acb611462623624329fa878a4606b4bb5c6b27ac235e7042f9bf9327afec249bb3a2a973a5bd7cc64ec7b91dc4de8ac424083e86531ae27dca3115c7604fd4bb6094e0347e00ce4be52944fd2e8540082c90af369b596790934a4edbb907454654bd45c2dac4e839a705ff804c5ef8922980f03cdc863ea7a828c65d8377532357c3ed7b0f48a5dafb84d342c4972d1d5d1c9510aab220024e56af0eb7e8e6c2ef2ecd6aa8737ad6bf37915831691d6b4564f6bcb5661a3b5690f658ccf84aa28301cfe65446a349fad3eb7447028be362a3fc29f1d0b3e6eef29de8f7e77cab4dc8f48fbe1f267d4f655f70ca811c4f04d25e5c202361c8209503cf6f7b5f6d9b0f526c86c66153032c70c840227ca5ebf788cf7bf1c882730d84172da38a55adae4ddc15f2293561a38dad700e78cb01722ee62d0087071cb10b616da9673544537d82a2938ff57be6562a12d3bfa04f8a2dffe7075416f63fc4d769e79266909804b1dee35a6c79d6922f1c5c475525ff787962466815811b6cb273c5bc7362c880516efb57be325eb4cd799fe5827d4e4f1c65d560a1740763a3157417ebede197f3c88d3a2253759f2f62545720fa80142e24c76e765853725df4ac98f52566b6cee870831ae5d1787bc35abdd0f194082526b2f2455bcbd5b677cfedb98b1e5d64e2d8a44034cb102ddf4e749e7afafdfb910300a0c4cdfd1a22c7097bd0e689c963b4117b24ac7e9b314618429dae47c355ce62f243b152e208213f4cace725309fa06bc74f3795c1359afe8c2f6cf84f40bfd01ecee7c54c797883eeea725c1bcd58ef3c038c2de48cde34025fcb52b43787b8ed8037c239772fa46c5650c05423495a8e018dca0aee1ea2fed1c83428005f26542c1d0e321b40e80af7cf732e36df1cb6dd4a3921910e89e08ba14ee37c516911ff4816150d4e4b56276d82cd1d241145dac8f48228558c347c9d28334d301ddd6c92514826b7aaabde4052fee31d01058c57d3beaced4eb28625a3834527183b33ac2f0bf3268e15a4ef0f076dcc8dfdca2f1e9a4da4dd3ad6103f081702eae2a6d3d9d806b60163cd3865966f1bd9bfe856263e8340225ed0c7a34f3f7dff680c2af54b838be89b446d949c1a09085dc62f35a9f48414a1f09901271143974ac9dd208da8a2464c4513fca66e673d1f741e689fcd95b788b148de7c3f2f110fc1174b9d5fdc3bdf11b237e97aa8dacc1a0100125be3d59053df204c45ebdbcd8b9594f7ae787440ad1f945a2a399497f7b9ba7e40841be97d26b5a02ecde63967e8ab96db0833de340923f186fc46e508556228e8ccfe8ad0455d79c4714b17859fa05e79cacc1cdc814f0716a79c97b3fec16da47e0cd0ab56c9c5355b328220f91a57746960a18b1687127eace55a89e869a89be8a8fb63f40b74ecce6e01f52dc2241e5580cb2c7e03f79541253e6835f34c3c5dd70be3d1569a6ddd9232135aa42aeb1c3547c587969bbfb288d53974a6c896416cea2f5c82bb4f0c4e5419abd5bd69e23d9fb05dfde3ffb593cc15e9faffcc2d40b137431f8da96f17f1ed71288b56c701887f4b02323050aa35ac4fa28cd3681ed98d69758da7dd9b2e8d6ce308339b307287891fcfecb1b31b051156da82acf493ad955ee519fa48637fccf623e6c472f66bd93282f91df9f9b595cd28750f1a939996bd6b794fe9d72cca8ed9589d2954eba09970b31eff4c954faa8e7d1cc99de500a95f564d0bc8a4b230dcbe8c78f4a02e75009452121fcc5a2aab55fe49ec42d9fa0363e7bee492a00d76f6d73ec068e6b12898fe1448cae9bffa799a9a0d5844a15127b32e91c0b98e29f3e709b54c46c049a76ee31e89e709510829debb7d691aebb2d7edcc81687099ef245701d93e53f077dd0a188328462352371d13bfef6604f6daa83aafffc201a5dd810df9ace97e99831ef04813afbbdb7915d250129a31b02fb8a660a18b3608bc03634712058f96a02b615db316e78c583d211b88a0311383fc7cf835af0f8cc8e949a7aa4bbd4c4719bc71d86cb3b9ae5d243f3a4571b20a1dcb00f1232cf4b0de2c45d1703814541bf3d83cecdacd2e3d8d241becef5c8eec8ae23a3758f6e16d66ad896ad388fae4f3726f307160ca65f61b65cea3ce8a8b79f877f0f5b399cc8de576db80ffbadcc739f4d8f633e5620f15b6508599d40599e86b4839c535a7668ea74bc808c44ad29092172297f0b7b50c060c05a4d9f10407a43e8dca78cb59c1f47b9988982277b4eb111c82981fbb05d4a330bee5eeff36555c5488e2f24981c3e6fb562c190070a33bfe5f8ce974ef5037475c3bb5224afc3e8ac800c0db59e6ae49e448f4f21b077a217775a622bfc9cd549bd504451d236070d9c9f7fd7f097c9ff6a7501256e3257b3ccd8a208cb727f51c5439072daa63b38abb26cc7f317c85c25c4fca0ab38df695138a5b95cb5f1805bf729960cb352075fda0b51643dbd9910fa9f1ac3904c9f5fb751b0c0c6e74ddc15e64c068932735d3b0d1cf5de8b7b1c874311fc59075f4ce3d662492e254c0e9820991b8de21836d3a5dbfbf3713948920aae982f9c5568ed38c773806a205049cff94c16ed5af10f567d38116a067b6f9bd6e225f947c04551e23cbf7ef71477cb517b26207e3b16888a1b70d3c3ed33ea9e8f64fc5ef22e05a9e23251eae84bde9b9fecd3fd5693225bbbfa9eeb63f4a4f19545d46a496cc4e4464c26111d205765a9ba16945de877f5113ca452195ed877d5356c2b7e6eda7ecd51e737a9ee1f00218e4db58bddb73cd7635c1783b54811add563f3ca09d76ef09732ca58af2a07b85e996b29886c17d9b4ae5c83120c05c77b2c178b31ebc4db674ef5d9d8c92374b488182df352cb547b9aabbe78dd03d2d2c5cc59307f01c14cf9ab1cf83753242e29526c2ea733794daf6a8dced6a367e939b5fc0fa6e699cae93a2811402d520ebe0a6b3e57105d20b9facfa080f5ec532cf90150710cd9224d52ae330e2356f18033e48923a850f4cf79a5e0eb6b9f0a895ed55c08e3f023c9710447d17153130050b96997f01e9fb3de2f9574e7bd11165309d1e4e3bb7c55ec8a74351f357d217bf7ff08e32cffe4b093459ca617ba823f165898d53f444893b108523dcd9a7efb5ba306f7bc3c0749f83af52a33e1744683232cad404bd91fd3d5d9f7d49582e400d8be76d9d435765aa7d1da7e5b7610c68bb469b3aefe6cadc863df3ccf88c9b60a08dc5ca566b96adbfe3855cb6755f1d0fc1e3ed3cd60ee4eebb7aa0e0a717fc6f7731889a81f701999e38b04977b8b12e804e96bcd0a62b664e256b9f1989008600a245763fa35c82b04bd9fad1dc2bdee18d7456e960fb5ed867f1ec78a350e6c66eb659d6ad9f2450a7c5d51cc16bbeb6dd67540de12c57906f88223c0327a3703d7615d12"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000001240)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r3, 0x0) 2018/05/15 19:18:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x1f00000000000000]}) 2018/05/15 19:18:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x1) dup3(r0, r1, 0x0) 2018/05/15 19:18:01 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffe, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xeffb, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:18:02 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xa3f5, 0x24000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, r2}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x5}]}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r8 = getgid() fchown(r3, r7, r8) [ 283.526407] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x9002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:02 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88480000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x1000000]}) 2018/05/15 19:18:02 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x1) dup3(r0, r1, 0x0) 2018/05/15 19:18:02 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x6010, r0, 0x2002) 2018/05/15 19:18:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) fsync(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 283.601117] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x200000000008004) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1) 2018/05/15 19:18:02 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x80) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/88, &(0x7f00000000c0)=0x58) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r3 = dup3(r0, r2, 0x80000) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:18:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3ff, 0x200280) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x11f000, 0x1d000, 0x2}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:18:02 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x80ffffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x1f000000]}) 2018/05/15 19:18:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x1) dup3(r0, r1, 0x0) 2018/05/15 19:18:02 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 283.839388] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) munlockall() write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:02 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0xff4062283b1572ad, 0x10) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000010207031dfffd946fa2830020200a0006000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x2000) open(&(0x7f00000000c0)='./file0\x00', 0x80080, 0x600000000002) 2018/05/15 19:18:02 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4788, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0xfdfdffff]}) [ 284.070885] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 284.118950] ion_mmap: failure mapping buffer to userspace [ 284.156769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/15 19:18:02 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth1\x00', 0x8}) dup3(r0, r1, 0x0) 2018/05/15 19:18:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:02 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:02 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x1f00]}) 2018/05/15 19:18:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x7fff, 0x4, 0x4, 0x9}, {0x8, 0x0, 0x0, 0x2}, {0xc1, 0x8, 0xff, 0x8}, {0x1, 0x6, 0x1ff, 0x74d9075a}]}, 0x10) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 284.179535] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:02 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x7f, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x1, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x6, 0x4, 0x0, 0xfff, 0xef3b, 0x3f}, 0xc) ioctl$void(r0, 0xc0045878) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, r1}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000041c0)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0x7fffffff, [0x3, 0x9, 0x4, 0x4c, 0x8, 0x401, 0x6, 0x7, 0x2, 0x3f, 0x2, 0x90, 0x8, 0xffffffff, 0x4, 0x9, 0x9, 0x81, 0xed, 0x4, 0x2, 0x400, 0x100000000, 0x19fb6042, 0x8, 0x7fffffff, 0x48f, 0x4, 0x7522, 0x1, 0xff, 0x100, 0x8dee, 0x101, 0x800, 0xfffffffffffffff7, 0x8, 0x9, 0x6d3, 0xfffffffffffffffe, 0x7ff, 0x1, 0x7, 0x9, 0x100000000, 0xef, 0x3ff, 0x101, 0x3, 0x0, 0x2, 0x2, 0x7fffffff, 0x5, 0x200, 0x2, 0x5, 0x8, 0x81, 0x1c, 0x7f, 0x0, 0x81, 0x8001, 0x0, 0x9, 0x1, 0x100, 0xf6, 0x7ff, 0x3, 0x2, 0x6, 0x1ff, 0x138, 0x9, 0xc5, 0x5, 0x9, 0x81, 0x36b, 0xb10a, 0x1, 0x5eb, 0xfffffffffffffffb, 0x800, 0x0, 0x9, 0x1, 0xa0b9, 0x2, 0x2, 0xac75, 0x1, 0xc35, 0x4, 0x50d, 0x746bfcb6, 0x5, 0x3, 0x5, 0x101, 0x101, 0x3, 0x5, 0x9, 0x9b7d, 0x7, 0x8, 0x1, 0x7ff, 0x5, 0x3, 0x0, 0x14800000000, 0x101, 0x3f, 0x8000000100000000, 0xfffffffffffffff7, 0xdcac, 0x7, 0xfffffffffffffff9, 0x7, 0x7, 0xfffffffffffffc00, 0x1, 0xfffffffffffffffd, 0x9, 0x3f, 0x2, 0x8001, 0xffffffff00000001, 0x7fff, 0x2, 0x5, 0x4, 0x8000, 0x7f, 0x2, 0xfffffffffffffffc, 0x2, 0x0, 0x1000, 0x5, 0x8, 0xcb76, 0xec, 0x400, 0x2, 0x2, 0x1, 0xfffffffffffffff9, 0xffffffffffffff7c, 0x8, 0x4, 0x80000000, 0x7fffffff, 0x2, 0x2, 0x4, 0x7fffffff, 0x2, 0x0, 0xffffffffffffffff, 0x6, 0x7, 0x0, 0xffffffffa1b550f6, 0x0, 0x2, 0x2, 0x1, 0x8, 0x100, 0x100, 0x5, 0x3, 0x8, 0x4, 0x1, 0x7fff, 0x2, 0xfffffffffffffff9, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1000, 0x0, 0x3ff, 0x3ff, 0x883, 0x1c0900000000, 0x1, 0x2, 0x7cd5, 0x401, 0x200, 0x5, 0x271, 0x1ff, 0x7, 0x6, 0x2, 0x1, 0x6, 0x101, 0x8dc, 0x81, 0x20, 0x100000000, 0x4708, 0x6f59ee48, 0x6, 0x200, 0x7, 0x6, 0x402fef4b, 0x7, 0xd0, 0x2, 0x101, 0x2d9, 0x1f, 0x3a33, 0x4, 0x10001, 0x0, 0x7f, 0x3, 0x49, 0x2, 0x1, 0x6, 0xff, 0x2, 0x5, 0xf2c, 0x2, 0x1, 0x1, 0xffff, 0x0, 0x2, 0x9, 0x1ff, 0xffffffffffff0000, 0x10000, 0x200c, 0x5, 0x400, 0x0, 0x4, 0x8, 0x7, 0x1, 0x6, 0x0, 0x8, 0xf1d0, 0x40, 0x1f, 0x2, 0x400, 0x5, 0x34, 0x8, 0x800, 0x1, 0x6, 0xfffffffffffffffb, 0x6, 0x8d, 0xfffffffffffff800, 0x4, 0x6, 0x3, 0x6, 0x7fff, 0x3f, 0x1, 0x75, 0x20, 0x5, 0xfffffffffffff50c, 0x3, 0x68, 0x3e, 0xff, 0x5, 0x6, 0x11, 0x9, 0xffffffffffffffff, 0x2, 0xffff, 0x40, 0x2, 0x100, 0x81, 0x7fffffff, 0x7fffffff, 0x0, 0xa5, 0x6, 0x0, 0x4, 0x2, 0x7, 0x1, 0x100000001, 0x2685, 0x5c92, 0x4, 0x9, 0xfffffffffffffc01, 0x4, 0x200, 0xfffffffffffffff8, 0x1000, 0x100000000, 0x6, 0x3cf8, 0x1000, 0x4, 0xa, 0x7ff, 0x100, 0x100000001, 0x5, 0x5183, 0x0, 0x3, 0x1, 0x7ff, 0x800, 0x4, 0xff, 0x9, 0x188, 0x200, 0xfffffffffffffffa, 0x8, 0xfffffffffffffffc, 0x1ff, 0x13, 0x1, 0x0, 0x8, 0x5, 0x6, 0x80000000, 0x9, 0x900000, 0x5, 0x54fe, 0x8001, 0x1, 0x93, 0x4, 0x101, 0x3, 0x0, 0xffffffff, 0x4, 0x3, 0x1ff, 0x9, 0x7fff, 0x1000, 0x1, 0x3, 0x9, 0x10000, 0x4, 0x1, 0x8, 0x16b8, 0x200, 0xfd, 0x8, 0x101, 0x5, 0x0, 0x80000000, 0x4a, 0xe9ef, 0x9a, 0x100, 0xffffffffffff8001, 0x3, 0x3ef, 0x3f, 0x40, 0x1b0, 0x3ee9d4b5, 0x7fff, 0x0, 0x3, 0x2, 0x0, 0x28d, 0x1, 0x7, 0x2, 0x1, 0x7f, 0x8, 0x9985, 0xffff, 0x0, 0x7, 0x8, 0x9, 0x174e890a, 0x81, 0x1, 0x2, 0x7, 0xf9, 0x4cab, 0x7, 0x3, 0x9, 0x8, 0x800, 0x1, 0x0, 0x6, 0x0, 0x8, 0x7, 0x2, 0x7, 0x0, 0x1000, 0x0, 0x4, 0x400, 0xcc29, 0xffffffffffffff7f, 0x3, 0x5, 0x6, 0x2, 0x6, 0x5, 0x8b37, 0x3ff, 0x2, 0x5, 0x9, 0x3, 0xd04, 0x3542, 0x0, 0x7f, 0xfffffffffffffffc, 0x40, 0x0, 0xffff, 0x3, 0x401, 0x2, 0x1, 0x0, 0x7, 0x0, 0x1, 0x20, 0x1488, 0xffff, 0xffffffffffffff80, 0x81, 0x1c00, 0x401, 0x1, 0x939, 0x7, 0x0, 0x3, 0x3, 0xfffffffffffffffd, 0xec, 0x8, 0x2, 0xe1, 0x300, 0x3, 0x8, 0x1ff, 0x7fffffff, 0x8, 0x100000001, 0x2, 0x0, 0x9, 0x401, 0x7ff, 0x8001, 0x4, 0x2, 0x80, 0xffffffff, 0x0, 0x800, 0x8, 0x6, 0x11f, 0x0, 0x0, 0x1000, 0x3, 0x5, 0x3ff, 0x20, 0x1f, 0x760eb382, 0x6, 0x6, 0x1, 0x67, 0x4, 0x8001, 0xffffffff, 0x7fffffff, 0x8, 0x7, 0x4, 0x8001, 0x8, 0x4, 0x6, 0x800, 0x4, 0x1, 0x80000000, 0x7f, 0x3, 0x2, 0x1a2, 0x1, 0x405c, 0x2, 0x7, 0x6, 0x401, 0x1000000000, 0x7, 0x60000000000, 0xffffffff, 0x100000001, 0x7, 0x5, 0x3, 0x400, 0xdd4c, 0x3f, 0x9, 0x68, 0x4, 0x1f, 0x3, 0xffff, 0x8001, 0x1, 0x5, 0xffff, 0x8, 0x6, 0xce, 0x2, 0x9, 0x10001, 0x0, 0x4, 0x87, 0x4e3, 0x326, 0x5, 0x8cb, 0x9, 0x80000001, 0x49c3804, 0x6, 0x2, 0x3ff, 0x0, 0x2, 0x2, 0x4, 0x9, 0x5, 0x19e, 0x1, 0x3, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x1f, 0x1, 0xd5eb, 0x10000, 0x3, 0x20, 0x31d, 0x56e, 0xfffffffffffffffe, 0x0, 0x6, 0x40, 0x81, 0x5, 0x1000, 0x4c, 0x0, 0x68f, 0x401, 0x100000000, 0x6, 0x8, 0x8, 0x55d5, 0xc9, 0x4, 0x8, 0x676c, 0xd34d, 0x1, 0x7f, 0x5, 0x3ff80, 0x132, 0xffffffffffffffc8, 0x933, 0xffffffffb3a72f2d, 0x7fffffff, 0xb83, 0x800, 0x7fffffff, 0x1f, 0x3, 0xffffffffffff0001, 0x5, 0x0, 0x8, 0xd90, 0x0, 0x45c, 0x5, 0x9, 0x5, 0xd7f5, 0xfffffffffffffffe, 0x0, 0x401, 0x24000, 0x5, 0x4, 0x101, 0x1, 0x9, 0xca, 0x9973, 0x2000, 0x3f, 0x8, 0x4, 0x200, 0x7f, 0x7, 0xc35, 0x6, 0xd35, 0x100000000, 0xffffffffffffffff, 0x2, 0x81, 0x29a7, 0x4, 0x3, 0x7fff, 0x145405b4, 0xd87, 0x7fffffff, 0x400, 0x3, 0x1, 0x400, 0x2, 0x8, 0x8, 0x100000000000, 0x1, 0x100, 0x5, 0xff, 0xfff, 0x7fff, 0x0, 0x20, 0x4, 0x6f0, 0xc134, 0x9, 0x7, 0x100, 0x9, 0x0, 0xfffffffffffffff7, 0x1, 0xa8b5, 0x9, 0x10001, 0x7, 0xffffffffffffffff, 0x6, 0x4, 0x1000, 0xaa, 0x7, 0x1, 0x314c405, 0x7, 0x8, 0x20, 0x1, 0x8, 0x9, 0x6, 0x400, 0x7f, 0x1f, 0x101, 0xe1a, 0xa12d, 0x401, 0xfff, 0x0, 0x37, 0x7, 0x9, 0x10000, 0x2, 0x5, 0x80000000, 0xb673, 0x0, 0x9, 0x2, 0xa00, 0x1ff, 0x6, 0x4, 0x8, 0x7e66, 0xffffffff, 0x742, 0x20, 0x1ff, 0x80000001, 0x2, 0x0, 0x1, 0x563f, 0x101, 0x0, 0x80000000, 0x2, 0x5072, 0x81, 0x4, 0x2, 0x4, 0x1, 0x0, 0xa4, 0x3, 0x101, 0x8, 0x7, 0x20, 0x7fff, 0x7, 0x2, 0x5, 0x10000, 0x3, 0x20, 0x8001, 0x4, 0x8, 0x3, 0xffffffffffffffff, 0x4, 0x64, 0xbce0, 0xfffffffffffffe00, 0x7, 0x4, 0x400, 0x6, 0x81, 0x1ff, 0xffffffffffffffb1, 0x3ff, 0xfffffffffffff547, 0x6, 0x0, 0xbc, 0x9dd, 0xfda, 0x401, 0x4, 0x30, 0x6, 0x8001, 0xffffffff, 0x5, 0x315, 0x401, 0x1, 0x2763, 0x2, 0x9, 0x7, 0x8000, 0x800, 0xff, 0x9, 0x4, 0x8, 0x401, 0x374, 0x1ff, 0x54, 0xfffffffffffffffc, 0x1ff, 0x2, 0x2, 0x1, 0x3ff, 0xffffffff, 0x8, 0xe7be, 0x5b47, 0x8000, 0x54, 0x4, 0xffffffffffff8001, 0x80, 0x9, 0x6, 0x3, 0xff, 0x200, 0xfff, 0x1, 0x1f, 0x40, 0x8, 0x0, 0x200, 0x80, 0x21a4, 0x7, 0x7998, 0x5, 0x9, 0x5, 0x8, 0x20, 0x0, 0x9, 0x401, 0xff, 0x20, 0xb949, 0x8, 0x9, 0x4, 0x0, 0x9, 0x0, 0x53, 0x8, 0x7, 0x8, 0x5, 0x1, 0x20, 0x7, 0xff6, 0x9, 0x3f, 0x4770, 0xffffffff, 0xfffffffffffffffb, 0x400, 0x0, 0x73, 0x10, 0x0, 0xffffffffffffffe0, 0x0, 0x247b, 0x6f, 0x6, 0x3, 0xffffffff, 0x401, 0x40, 0x600000000, 0x8, 0x9, 0x3ff, 0x7, 0x9, 0x8, 0x8, 0x8, 0x3f, 0x2, 0x2, 0x3, 0x0, 0x80, 0x1, 0xfffffffffffffff7, 0x0, 0x6e9, 0x81, 0x4, 0x1, 0x7fff, 0x1, 0x33f0000000000000, 0x200, 0x9, 0xfffffffffffffb89, 0x9, 0x17, 0x0, 0x2, 0x1000, 0x7, 0x5, 0xcdf, 0x28294c1c, 0x7, 0x31da, 0x63, 0xb9e6, 0x59, 0x3888, 0xfffffffffffffff8, 0x0, 0x3, 0x5, 0x1000, 0x3ff, 0x8, 0x7fffffff, 0x7a94, 0x0, 0x8, 0x80, 0x101, 0x2, 0x8000, 0x7fff, 0x10001, 0x5, 0x87, 0x7, 0x1, 0xc62, 0x80000001, 0x4, 0x9, 0x3ff, 0xfffffffffffffff8, 0xe92, 0x401, 0x3, 0x4, 0x18b, 0x3448, 0xffffffff, 0x6, 0x9, 0x9, 0x8f9, 0xfffffffffffffc27, 0x9a9a, 0x1f, 0x9, 0xffffffffffffff93, 0x4286, 0x278e, 0x9, 0xe4, 0x7fffffff, 0xfffffffffffffffa, 0x4, 0x2, 0x1f, 0x5, 0x3, 0x6, 0x158, 0x716, 0x5, 0xbd, 0x8, 0x5, 0xa236, 0x4, 0xfffffffffffffc01, 0x3, 0x2, 0x59f, 0x0, 0xfff, 0x5, 0x1ff, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x6, 0x7, 0xffffffffffffffe0, 0x3f, 0x7f, 0x4, 0x6, 0x9, 0xff, 0x1, 0x401, 0x80, 0x301, 0x5, 0x0, 0x100000000, 0x78f0, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff7, 0x8, 0x9, 0xfffffffffffffffd, 0x4, 0x80000001, 0xc276, 0xc7, 0x10000, 0x1, 0xe89, 0x0, 0x8000, 0x9, 0x8, 0x7fffffff, 0x80000001, 0x7, 0x1, 0x8ac0, 0xa6, 0x0, 0x7, 0x8, 0x5, 0x7, 0x6, 0xe3a, 0x2, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0xfffffffffffffe01, 0x40, 0x8, 0x9, 0x7f, 0x0, 0x3, 0x3, 0x3ff, 0xfffffffffffffffc, 0x0, 0xff, 0x1, 0xfffffffffffffc4b, 0x4, 0x7, 0x81, 0xffff, 0x4321, 0xb5b, 0x9, 0xfffffffffffffffb, 0x1ff, 0x42a, 0x7, 0x3, 0x39, 0x9, 0x8, 0x473, 0x2, 0x7fffffff, 0xfffffffffffffffb, 0x1f, 0x6, 0x3, 0x6, 0x6, 0xff, 0x8, 0x8, 0x81, 0x5, 0x8, 0xde6, 0x90f, 0x7, 0xfffffffffffffff7, 0x9, 0x0, 0xfffffffffffffff9, 0xe, 0x401, 0x80, 0xfffffffffffffff7, 0xffffffffffffff38, 0xfffffffffffffffd, 0x0, 0x821, 0xfffffffffffffffc, 0x0, 0x78, 0x3, 0x3, 0x13, 0x800, 0x1f, 0x7fff, 0x8, 0xffffffff, 0x1, 0x7fffffff, 0x2, 0xfffffffffffffffb, 0x7ff, 0x2, 0x6, 0x9, 0x7, 0x800, 0xd6c, 0x3f0, 0x3, 0x0, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x7202, 0xd346, 0x80000000, 0x20, 0x1, 0x4, 0xfffffffffffffe00, 0xb6c, 0x7, 0xfffffffffffffffb, 0x9, 0x10001, 0x5, 0xc88, 0x0, 0x101, 0xa61, 0x20000, 0x8000, 0x3, 0x0, 0x5, 0x4, 0x1, 0x8c, 0x6a, 0x1000, 0x1000, 0x7, 0x7, 0x0, 0x6, 0x80000000, 0x8001, 0x800, 0x0, 0xfffffffffffffffe, 0xffffffff00000000, 0x1, 0x6, 0x6, 0x11, 0x0, 0x101, 0x5, 0x2, 0x2, 0x2, 0x2, 0x6, 0x3, 0x6, 0x7fffffff, 0x48, 0x7, 0x3ff, 0x81, 0x7, 0x66, 0x78, 0x0, 0x9, 0x5, 0x100000001, 0x401, 0x7, 0x9, 0x7ff, 0x6, 0x81, 0x4, 0x80000000, 0x7f, 0x1eb86ab6, 0xfffffffffffff2ed, 0x6, 0xffffffffffffff3c, 0x1ff, 0x8, 0xfff, 0x3, 0x401, 0x0, 0x7, 0x100000000, 0x9, 0x80000000, 0x0, 0x1, 0x8000, 0x8, 0x3, 0x2da8, 0x6, 0x0, 0x7, 0x2000000, 0x2, 0x5, 0x100000000, 0x6, 0x9, 0x4, 0x9, 0xffffffff, 0x0, 0x9df, 0x8, 0x1, 0x2, 0x6, 0x9ab, 0x1000, 0x81, 0x9, 0x6, 0xffffffff80000001, 0x7, 0x4, 0x3, 0xe6, 0x9, 0x4, 0xff, 0xfffffffffffffffb, 0xeac, 0x6, 0xd0d, 0x800, 0x8, 0x0, 0x1, 0x0, 0x9, 0x7f, 0xea, 0xfc9, 0x1, 0x6, 0x4, 0x3, 0xf2, 0x0, 0x9, 0x9, 0x2, 0xfff, 0x3, 0x3, 0x1ff, 0x6, 0xcec, 0x6, 0x3, 0x8, 0x8, 0x7, 0x3ff, 0x9, 0x0, 0x0, 0x9, 0x0, 0x4, 0x11, 0x5, 0x9, 0x9, 0x20, 0x4, 0x4, 0xffffffffffffff01, 0x3, 0x1, 0xfffffffffffffffa, 0x3c8, 0x20, 0x6b5, 0x5, 0x100000001, 0x8, 0x1, 0x8, 0xfff, 0x3f, 0xffffffff, 0xbc30, 0x4, 0x6, 0x0, 0x0, 0x5, 0x8161, 0x18, 0x4, 0x80000001, 0x6, 0x401, 0x5, 0x9, 0x7, 0x4e6, 0x1ff, 0x3, 0xfffffffffffffff8, 0x5, 0x5, 0x8, 0x9, 0x7ff, 0xfffffffffffffffb, 0x4cdd, 0x9, 0x7f, 0x7, 0x0, 0x1, 0x200, 0x22, 0x1ff, 0x6, 0x8, 0x4, 0x7ff, 0x7, 0x3ff, 0x0, 0x8, 0x4, 0x1, 0x80, 0x6, 0xfe, 0x2b, 0x6, 0x80000000, 0x3ff, 0x2a, 0x1, 0x0, 0x1000, 0x9, 0x8, 0x1, 0x8, 0x9, 0x2, 0x7, 0x5, 0x3, 0x1, 0x2, 0x9, 0x8, 0x9, 0x8f, 0x2ef4, 0x9, 0x4, 0x1440cb07, 0x10000, 0x8, 0x7ff, 0x4, 0x4, 0x6, 0xfffffffffffffffe, 0x8000, 0x400, 0x1, 0x6, 0x10001, 0x943, 0x6, 0x1ff, 0x8000, 0x100000001, 0x5, 0x20, 0x9, 0xfffffffffffffffb, 0x8, 0x0, 0x401, 0x7, 0x6, 0x4, 0x100000001, 0x4, 0x1000, 0x100000, 0x4, 0x7fffffff, 0x9, 0x1000, 0x2, 0x4, 0x8, 0x7f, 0x8, 0x81, 0x8001, 0x80000001, 0x9, 0xbb94, 0x3485, 0x401, 0x429, 0x4, 0x6306, 0xfff, 0x1, 0x8000, 0x8, 0x0, 0x6, 0x1, 0xe162, 0x2, 0x3, 0x9, 0x3, 0x80000001, 0x0, 0xf8f9, 0x8, 0x0, 0x81, 0x4, 0x1ff, 0xc0, 0x2, 0xfffffffffffff800, 0xab8, 0x7fff, 0x4, 0xffff, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x8000, 0x7fffffff, 0x7, 0xff, 0xffffffff, 0x2, 0x3f, 0x8000, 0x5, 0x100000000, 0xd28, 0x401, 0x8000, 0x6, 0x5, 0x761, 0x1000000020000000, 0x8, 0x3, 0x7, 0x8cfe87, 0x8000, 0x9, 0x3, 0x5, 0x6ac, 0x0, 0x1f, 0x100, 0x2, 0x8000, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x100, 0x8, 0x800000, 0x3, 0x8, 0x6, 0x9, 0x2, 0x3, 0xaa, 0x0, 0x1000000000000, 0x7fff, 0x81, 0xfffffffffffffffc, 0x9, 0xffffffff80000000, 0x5, 0x80000000, 0x1, 0x3, 0x3, 0x4, 0xc2b, 0x2f, 0x6, 0x8, 0x7ff, 0xfff, 0x100000000, 0x1, 0x7, 0x5, 0x2, 0x9, 0x6e, 0x80000001, 0x4, 0x4, 0x5, 0x3ff, 0x2b, 0xe614, 0xee7, 0xfffffffffffffff9, 0x31, 0x100, 0x9, 0x7d6, 0x1, 0x2, 0xfffffffffffffc01, 0xcac, 0x3, 0x0, 0x400, 0x2, 0x0, 0x9, 0x8, 0x4, 0xfe4, 0x200, 0x4, 0x8, 0x9, 0xeb, 0x3, 0x9, 0x8, 0x1, 0x3, 0x9dab, 0x0, 0x800, 0x20, 0x200, 0x0, 0x3, 0x5, 0x200, 0x8001, 0x4, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000001, 0x5, 0x10001, 0x59, 0x5, 0x38, 0x200, 0x0, 0xa6, 0x100000000, 0x1, 0x80000001, 0x7fffffff, 0x1, 0x3, 0x3, 0x8, 0x81, 0x6, 0xc7d, 0xffffffffffff7407, 0x0, 0xfffffffffffff000, 0x0, 0x10001, 0x80, 0xffffffffffffffc1, 0x3, 0x1, 0x5, 0x7, 0x2000000000000, 0x200, 0xd7, 0x6, 0x4f54, 0x206, 0x100000001, 0x4, 0x3f99, 0xfff, 0x9, 0x2, 0x9, 0x0, 0x3ff, 0x400, 0x2, 0x4, 0x7, 0x100000001, 0x6, 0x8ab6, 0x1ba, 0x100000001, 0x4, 0x1, 0x0, 0x1, 0x400, 0x3, 0x2, 0x81, 0x6281, 0x80000001, 0xfff, 0x8001, 0xfdf2, 0xffffffff80000001, 0x7fffffff, 0x4, 0x9, 0x0, 0x3, 0x1f, 0x0, 0x30, 0x7, 0x0, 0xce41, 0xffffffff, 0x6, 0x7, 0x0, 0x7, 0x8, 0x1, 0x8, 0x10001, 0x1f, 0x40, 0x3, 0x3, 0xc49, 0xa015, 0x9, 0x7, 0x9, 0x0, 0x2, 0x3f, 0x1, 0xfffffffffffffe01, 0x1, 0x524c, 0x5, 0x7, 0xff, 0x7, 0x318aba98, 0x7, 0x8, 0x5, 0x1, 0x7f, 0x2, 0x3, 0x4, 0x4, 0x5, 0x800, 0xfffffffffffffff8, 0x400, 0x3, 0x4, 0xc1e, 0x5be, 0x6, 0xa814, 0xe63, 0x3616, 0x2, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x8000000000, 0xf3, 0x6, 0x1, 0x400, 0x3, 0x80, 0x10000, 0x7f, 0x9, 0x100, 0x5, 0x7, 0xc235, 0x5, 0x9, 0x8a, 0x5, 0x3f, 0x91, 0x0, 0x100, 0x4, 0x7, 0x9, 0x9, 0x100000000, 0x5, 0x1f, 0x4, 0x200, 0xff, 0x7fffffff8000000, 0x1da, 0x10001, 0x8, 0x9, 0x8, 0xff20, 0xcc, 0x1d, 0x3ff, 0x9, 0x4, 0xaf, 0x1, 0xdf, 0x20, 0x7, 0xdb, 0x1, 0x80, 0x2, 0x5, 0x5, 0x10000, 0x9, 0x1, 0x8000, 0x1, 0x3, 0x257, 0x8, 0x8, 0x0, 0x57e, 0x3f, 0x4, 0x0, 0x0, 0xff, 0xffff, 0x7, 0x2, 0x8, 0x100000000, 0x901f, 0xdf, 0x80, 0x4, 0x0, 0x0, 0x3, 0xffffffff, 0x800, 0x1, 0x863, 0x1, 0x9, 0x8f40, 0x61, 0xb8b7, 0x8000, 0x20000000000000, 0x3f, 0x80, 0x1, 0x54, 0x65, 0x8, 0x0, 0xffffffff, 0x2, 0x43c, 0x6, 0x3, 0x80000001, 0xfffffffffffffff7, 0x3, 0x7fff, 0x100000001, 0xfff, 0x3, 0x8, 0x8001, 0x7, 0x1, 0x7, 0x9, 0x10001, 0x200, 0x7, 0xefd9, 0xfb, 0x6, 0x9, 0x3, 0x0, 0x5b0, 0x0, 0x8000, 0x6, 0x8, 0x200, 0x7, 0xff, 0x1ff, 0x0, 0xff, 0x8, 0x6, 0x2, 0x7, 0x1, 0xab, 0x1b4, 0x7, 0x0, 0x2, 0x6, 0x8dd, 0x4, 0x2ea, 0x2, 0x3, 0x0, 0x7, 0x8, 0x2c80000000, 0x40, 0x3, 0x100, 0xb9, 0x7318, 0x2, 0x3, 0x84, 0x4424, 0x3, 0x52, 0x7, 0xa32, 0x1, 0x100000000, 0xac, 0x6f23, 0x0, 0x8, 0x6, 0xffff, 0x0, 0x7f, 0x9, 0x93, 0x2, 0x14, 0xf7, 0x7fffffff, 0x1f, 0x431a, 0x3, 0xffff, 0x6, 0x7, 0xffffffff, 0x6, 0x0, 0x8, 0x7, 0x0, 0x4, 0x20, 0x10001, 0x7821, 0x8001, 0x8, 0xffff, 0x2, 0xb72e, 0xffff, 0x0, 0x6, 0xa68c, 0x101, 0x8, 0x2, 0x1f, 0x1, 0xa30, 0x401, 0xbf56, 0x81, 0xd5, 0x1, 0xffff, 0xc49, 0x4, 0x7f, 0x3703, 0x7fffffff, 0x7, 0x0, 0xad8, 0x2, 0x6, 0xffffffffffffffe0, 0x100000001, 0x1, 0x5dca, 0x0, 0x5b, 0x100, 0xc6b, 0xc8, 0x1, 0x4ba7, 0x7fff, 0x0, 0x7cb8a229, 0x0, 0x9, 0x48, 0x80000001, 0x2, 0x7, 0x8, 0x7, 0x1000, 0x7, 0x2341, 0x1, 0x5, 0x3f, 0x7, 0x8baa, 0x8, 0x1, 0x80, 0x6, 0x5, 0x1, 0x8, 0xffffffff00000001, 0x200, 0x2, 0x325a, 0x24, 0x6, 0x401, 0x1, 0x10000, 0xff, 0x0, 0xb9, 0xf1d6, 0x5, 0x7, 0x80000001, 0x6, 0xf67, 0x2, 0x5, 0x4, 0x7, 0x839, 0xbdb, 0x7f0, 0x0, 0x8000, 0x1, 0x100, 0x2000000000, 0x40, 0x2, 0x8000, 0x9b52, 0x3, 0x2, 0xffda, 0x1f, 0x262, 0xffffffffffffff80, 0x6, 0x4, 0x8, 0x3, 0xffffffffffffffff, 0x6, 0x3ff, 0x9f, 0x100000000, 0x7, 0x7, 0x7, 0x9, 0xffffffff, 0x100, 0x1000, 0x1000, 0x8, 0x2, 0x9, 0x7, 0xffffffff, 0xeb9, 0x40, 0x0, 0x100000000, 0x3, 0x7, 0x7, 0x4, 0x4, 0x7, 0x1f, 0x101, 0x9, 0x1, 0x5, 0x2, 0x9, 0x7f, 0x9, 0x0, 0x7fff, 0x9, 0x6, 0x39, 0x6e9d, 0x7ff, 0x5, 0x8, 0x5, 0x25, 0x9, 0x4a, 0x8, 0x1, 0x3ff, 0x81, 0x6, 0x2, 0xfff, 0x100, 0x6, 0x100000001, 0xfffffffffffffffb, 0x3, 0xa4, 0x7, 0x9c1, 0x3, 0x0, 0x9, 0xfff, 0x3f, 0x100, 0x80000001, 0x1, 0x3, 0x4, 0x6dc9, 0x36, 0x0, 0x80000000, 0x0, 0xe168, 0x2, 0x6, 0x3, 0x5, 0xb9d, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4d7d355d, 0x100000000, 0x6, 0x2, 0x10001, 0x7, 0x1, 0x1, 0x6, 0x67, 0xffffffffffffffff, 0x1, 0x7, 0xab71, 0x2, 0x3f, 0x5, 0x8001, 0x77, 0x80000001, 0x6b, 0x1, 0xffffffffffff86d0, 0xffffffffffff7fff, 0x70070add, 0xffffffffffffff94, 0x4, 0x0, 0x7, 0x8, 0x3, 0x6, 0xa6c, 0x8001, 0x1, 0x400, 0x7, 0x0, 0x400, 0x1fc0000000000000, 0x100000001, 0xfffffffffffffffc, 0x5b9, 0x5, 0x3, 0x6, 0x1, 0x0, 0x1, 0x4, 0x101, 0x10000, 0x628, 0x8, 0x4, 0x6, 0x9, 0x6f, 0x6, 0x7ff, 0x8, 0x2, 0xfffffffffffff3b7, 0x8, 0x921d, 0x0, 0x56, 0x6, 0x7, 0x54f1, 0x1, 0x6, 0xffffffffffff7fff, 0x400, 0xd95a, 0x4, 0x7fffffff, 0xff, 0x2bc, 0x8, 0x4, 0x7608, 0x3f, 0x7, 0x0, 0xf25d, 0xe7, 0x7, 0x9, 0x7f, 0x5, 0x0, 0x3, 0x4, 0x30d800000000, 0x100, 0x2568, 0xe2, 0xfffffffffffffffd, 0x0, 0xbb7, 0xa1b1, 0x6, 0xe5, 0x6, 0x100, 0xfffffffffffffffa, 0x7f, 0xff, 0xef41, 0x9, 0x5, 0x5, 0x6, 0x6, 0x8, 0x1ff, 0x8001, 0x8, 0x5, 0x1, 0x5, 0x5, 0x106, 0x970a, 0x0, 0xfffffffffffffe01, 0x5, 0x1, 0x1, 0x10000, 0x5, 0x1ade, 0x100000000, 0x1dfd, 0xa9d, 0xffff, 0x2, 0x200, 0x3, 0x7f, 0x1, 0x8, 0x81, 0x6, 0x8000, 0x5, 0x6, 0x20, 0x2, 0xbd, 0x9, 0x0, 0x6, 0x2, 0x7c, 0x3, 0x10001, 0x1, 0x40, 0x20, 0x100, 0xfffffffffffffffd, 0x10000, 0x1671, 0x7, 0x10000, 0x800, 0x7, 0x100000000, 0x7, 0x3, 0x9, 0x6, 0x7, 0x0, 0xcb, 0x5, 0x401, 0x2, 0xfffffffffffff51a, 0x5, 0x7f, 0xffffffffffffff6b, 0xfffffffffffffff1, 0x80, 0x309e, 0xe9e6, 0x10000, 0x7, 0x4fcc8960, 0x80000000, 0xbc4, 0x5, 0x0, 0x5c, 0x5, 0x10001, 0xe22c, 0x80, 0xffffffffffffffc1, 0xfffffffffffffffc, 0x10000000000, 0x6, 0x0, 0xffffffffffffff5d, 0x3f, 0x9, 0x86, 0x2cb, 0x5, 0x8971, 0x9, 0xffff, 0x8, 0x4, 0x6, 0x4, 0x1, 0x3f, 0x4, 0x5b, 0xb, 0x6, 0x0, 0x5, 0x80000001, 0x3b4, 0xfff, 0x2, 0x76, 0x5, 0x1, 0xfffffffffffffffd, 0x5, 0x2, 0x5, 0x3, 0x606, 0x401, 0x3f, 0x1, 0x7f, 0xfffffffffffff2ba, 0x39c, 0x1, 0x8000, 0x80000000, 0x400, 0x1, 0x9, 0xdf12, 0x0, 0x6473, 0xffffffffffffe859, 0x1, 0x3ff, 0xc0000000, 0x6, 0x1, 0x80, 0x474d, 0x6, 0x1ff, 0x5, 0x0, 0x1, 0xaba, 0x1, 0x80000001, 0x5, 0x0, 0x11b, 0x95e, 0x4, 0x7, 0x81, 0xffffffff, 0x6, 0x0, 0x3, 0x6, 0x22b1d56c, 0x3436, 0x4, 0x6, 0x81, 0xc9, 0x80000001, 0x63, 0x2, 0x400, 0x1, 0x7, 0x8, 0xff, 0x1a, 0x10001, 0x5, 0xffff, 0x20, 0x4, 0x5f, 0x5, 0x5, 0x2, 0x9, 0xfac9, 0x20200000000, 0x7, 0x4, 0x2, 0x1ce5, 0x7970, 0x7, 0xc0000000000000, 0x8, 0x7, 0x9, 0x716, 0xffffffffffff2d58, 0x4, 0x0, 0x5, 0x7ff, 0x1, 0x8, 0xc1ea, 0xce, 0xfffffffffffffffb, 0x2, 0xffffffff00000000, 0x100, 0x9, 0x100, 0x1000, 0x4, 0x7, 0x9, 0x100000000, 0x2, 0x7000000000000, 0x101, 0xf133, 0x5, 0x0, 0xfffffffffffffff7, 0x80000000, 0x0, 0x5a3, 0x21, 0x8f, 0x64e, 0x7, 0x3ff, 0x7, 0x1, 0x6, 0xee, 0x400, 0x10000, 0x9, 0x5da0, 0xcea, 0x7fff, 0x68c, 0x2, 0x2, 0x4, 0x80, 0x100, 0x4, 0x2, 0x4, 0x1, 0x8, 0x4, 0x9, 0x200, 0x6, 0x1, 0x2, 0x10000, 0x4, 0x4, 0x66, 0x200, 0xc251, 0xa047, 0x5, 0x7, 0x6, 0x101, 0x7, 0x0, 0x15d70000000000, 0x1, 0x7, 0x7, 0x8, 0x1, 0x8, 0x5, 0x6, 0x100000001, 0x7fff, 0x8, 0xb8, 0x8000, 0x9, 0x4, 0x8001, 0x7, 0x5, 0x10000, 0x2, 0x9, 0x9, 0x9, 0x8001, 0x3, 0x3, 0x0, 0x2, 0x1, 0x8, 0x4, 0x3, 0x800, 0x4, 0x9b4, 0x0, 0xfffffffffffffffc, 0xffffffffffffff35, 0x8, 0x80000001, 0x9, 0x9, 0xe5, 0x7, 0xff3, 0xfffffffffffffffe, 0x1f, 0x2, 0xcee, 0x0, 0x80, 0x401, 0x5301, 0x3, 0x400, 0x9e, 0x9, 0x800, 0x101, 0x6, 0x6, 0xa964, 0x4, 0x400, 0x10001, 0x9a1, 0x1, 0x8, 0x101, 0x100000001, 0x4, 0x9, 0x5, 0x100, 0x100000000, 0x8, 0xfffffffffffffffd, 0x1, 0xff, 0x1, 0x8000, 0xfffffffffffffff9, 0x7f, 0x10000, 0x7, 0x8, 0x8afd, 0x80, 0x4000000000000000, 0x6, 0x5, 0x6, 0x3, 0x200, 0x6, 0x8, 0x9, 0x7, 0x6, 0x0, 0x5f000000000000, 0x3, 0xba7, 0x147, 0x3, 0x87, 0x3fc0000, 0xc104, 0x2, 0x1c3, 0x1800000000000, 0x1, 0x5, 0x1, 0xdc6, 0x80000000, 0xc733, 0x1f, 0x1, 0x0, 0x1000, 0x80000000, 0xe96, 0x8, 0x7ff, 0x3, 0x7, 0xfffffffffffffff8, 0x6, 0x4, 0x1d8, 0x852, 0x8, 0x2, 0x5, 0x2, 0x1, 0x9, 0x8, 0x1ff, 0x7, 0x200, 0x6, 0x10000, 0x884, 0xe67, 0xcf, 0x4d, 0x3, 0x2, 0x8, 0x1f, 0x2, 0xfffffffffffffffd, 0x8, 0x6, 0x7fff, 0x400, 0x5cd5, 0x3, 0x2, 0x5, 0x7, 0xb7, 0x6, 0x81, 0x4, 0xc14, 0x7, 0x7f4, 0xcdd, 0x5, 0xfffffffffffff753, 0x9, 0xd696, 0x5, 0xffffffffffffffff, 0x4, 0x0, 0x6, 0x2, 0x0, 0x200, 0x3, 0x200, 0x5, 0x1, 0xffffffffffffffc1, 0x9, 0x6, 0x52, 0x10001, 0xffff, 0x8, 0xb230, 0x2, 0x0, 0x2, 0xdc1, 0x9, 0x9214, 0xff, 0x6, 0x4, 0x29c7862c, 0x8af, 0xff, 0x3, 0x8, 0x2, 0x68ae, 0x8001, 0x7fffffff, 0xfffffffffffffffd, 0xff, 0xdff5, 0xfffffffffffff2a1, 0x1, 0x100, 0x2, 0x6, 0x9, 0x3, 0x4000000000000000, 0x6, 0x6, 0x401, 0x81, 0x42, 0x20, 0x5c, 0x4, 0x9, 0x7fffffff, 0x3, 0x7, 0x3, 0x6, 0x7, 0x84f9, 0x800, 0x9, 0x5, 0x8, 0x9, 0xff, 0x11e7c75d, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffff7, 0x7fffffff, 0x0, 0x1, 0x0, 0x4, 0x2, 0x9, 0x100000001, 0x4, 0x8, 0x1fb900000, 0x3f, 0x6, 0xcfd, 0x4, 0x7, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8000, 0x8000, 0x7ff, 0x1, 0x40, 0x3, 0x5, 0x9, 0x7, 0x0, 0x7f, 0xfff, 0x4, 0xe67, 0x2, 0x20, 0x40f, 0x4, 0x5, 0xd8b, 0xfff, 0x9, 0x6, 0x3, 0x9, 0x7ff, 0x1, 0xbe5, 0x6, 0x8, 0x400, 0x6, 0x8, 0xe44, 0x7, 0x7, 0x5, 0x8, 0x9, 0x20, 0x80000001, 0xfff, 0x0, 0x7, 0x5, 0x8, 0x0, 0x0, 0x5, 0x8, 0x5, 0x9, 0x2, 0x6, 0x4, 0x1ff, 0x80000001, 0x721fa6ef, 0x400, 0x8c, 0x6, 0x4, 0x3, 0x13, 0x0, 0x6, 0x1, 0x7fffffff, 0xb357, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x3d7, 0x10000, 0x5, 0xab1, 0xc5, 0xfffffffffffffe00, 0x80, 0x2, 0x167, 0x5, 0x3f, 0x8, 0x100000001, 0x1f, 0x6, 0x27647ace, 0x0, 0x7, 0xc1, 0x0, 0x4, 0x4, 0x1, 0x3ff, 0x3, 0x3, 0x8, 0x100, 0x3ff, 0x7fff, 0x0, 0x9, 0x80, 0x3, 0x7fff, 0x5, 0x0, 0x3ff, 0xfff, 0xfffffffffffffffc, 0x100, 0x8, 0x6, 0x83ac, 0x63, 0x8, 0x1, 0x7, 0x4, 0xf03, 0x144000000, 0x262dc4a5, 0x7, 0x7fffffff, 0x1, 0xff80000000000000, 0x1, 0x200, 0x7, 0x3, 0x1662, 0xff, 0x4, 0x7, 0x2, 0x7ff, 0x4, 0x7, 0x3, 0x3f, 0x3, 0xffffffffffffffe0, 0x7, 0x2, 0x401, 0x5, 0x1, 0x3, 0x7f, 0x19ec0000000000, 0x1, 0x1, 0x60, 0x40, 0x100, 0xed, 0xfffffffffffffffe, 0x3, 0xfff, 0xb06, 0x9, 0x4, 0x94, 0x6, 0x400, 0x6, 0x5, 0x200, 0x80, 0x8001, 0x8001, 0x7, 0x6, 0x5, 0x1ee9, 0x9, 0x8001, 0x3, 0x4, 0x200, 0x7ff, 0xffff, 0x0, 0x7, 0x6, 0x9, 0xfffffffffffffd9b, 0x1, 0xffffffff, 0xa4e6, 0x3, 0x4, 0x9, 0x0, 0xecd, 0x8, 0x80000001, 0x7, 0x2, 0xb7, 0x0, 0x8, 0x8001, 0x5, 0x7, 0x4, 0x3f, 0x100, 0x9, 0x7, 0x1, 0x3, 0x4f, 0x5, 0x9, 0x40, 0x1000, 0x8, 0x2, 0x6, 0x3, 0x0, 0x93, 0xffffffffffffe2d7, 0x3, 0x0, 0xc00, 0x100000001, 0x5, 0x401, 0x2c9f, 0x100, 0x5ad7, 0xa4a1, 0xa9f, 0x6, 0x5, 0xff, 0x4, 0x8, 0x79, 0xe184, 0x8, 0x401, 0x5, 0x5, 0x3f, 0x7, 0x101, 0xc00000, 0x800, 0x400, 0x2, 0x8, 0x10001, 0x1, 0xfffffffffffffff8, 0x9, 0x0, 0x8, 0x810000, 0x800, 0x5, 0x8, 0x7f, 0x2a96, 0xffffffff, 0x9, 0x3, 0x4, 0x3, 0xffffffff80000001, 0x20, 0xcd8d, 0x1000, 0x9, 0x2, 0x6, 0x7fff, 0x8000, 0x9a02, 0x8, 0x9, 0x8, 0x1, 0x6, 0x9, 0x7, 0x1, 0xfffffffffffffc8e, 0x5, 0x101, 0xff, 0x1, 0xfff, 0x6d8d, 0x3, 0x6, 0xa38, 0x9, 0x2, 0x7, 0xac, 0xbed5, 0x10001, 0x3, 0x0, 0x1, 0x0, 0xffff, 0x6, 0x8, 0x6a42, 0x8, 0x200, 0x1ff, 0x7, 0x3, 0x81, 0x9, 0x7fff, 0x8, 0xe68a609, 0x8000, 0x1, 0xffffffffffff0001, 0x9e05, 0xc91, 0x9, 0x3d2e, 0x800, 0x3ff, 0x80000001, 0x1, 0xffffffff, 0x9, 0xfffffffffffff342, 0x1, 0x9, 0x200, 0x10000, 0x7, 0x2, 0x7, 0x0, 0x40, 0x80000001, 0x40, 0x53, 0x2, 0x1, 0x5, 0x5, 0x6, 0xfffffffffffffc00, 0x80000000, 0x3ff, 0xfff, 0x1, 0x81, 0x4, 0x0, 0x8, 0x3, 0x3, 0x6b3, 0x3, 0xd5, 0x80000001, 0x3, 0x1, 0x7, 0x1f, 0x2ecd79dc00, 0xc390, 0xffffffffffffffff, 0x400, 0x77, 0x2, 0x1f, 0x9, 0xffffffff, 0x6, 0x8000, 0x0, 0x2, 0x20, 0x4e3, 0x40, 0x101, 0x5, 0xfff, 0x8, 0x2, 0x7a3, 0x2, 0x6834, 0x3, 0x0, 0x4, 0x7fff, 0xef3, 0xea2, 0x0, 0xae86, 0x28d9, 0xfffffffffffffffd, 0x3, 0x0, 0x3ed, 0x0, 0x7fffffff, 0x2, 0x5, 0x3ff, 0x3, 0x5, 0x1f, 0xffffffffffff579b, 0x3f, 0x7ff, 0x4, 0x4, 0x0, 0x400, 0x83, 0x3000000, 0x7fffffff, 0xfffffffffffffffc, 0x2, 0x9000000000000000, 0x8f, 0x8, 0x3, 0x5, 0x1, 0x800, 0x7, 0x80, 0x20, 0x3cd, 0x401, 0xc867, 0x80000001, 0x1f, 0x7, 0x800, 0xd3, 0x2f3, 0x5, 0x4, 0x7, 0x9, 0x9, 0xfff, 0xbc3, 0x3, 0x8, 0x7, 0x1, 0x7, 0x405, 0x3, 0x8, 0x0, 0x4, 0x7fffffff, 0x1, 0x8, 0xffffffffffff0001, 0x7d7, 0x5, 0x40, 0x2, 0xe5, 0x9, 0x1, 0x8, 0x4, 0x400, 0x0, 0x100000001, 0x4, 0x9, 0x10000, 0x4, 0x7, 0x20, 0x0, 0x6, 0x9, 0x8, 0xd3f9, 0x401, 0x1, 0x1000, 0x20, 0x9cc3, 0x1, 0x8, 0x6, 0x7, 0x8, 0x8, 0x0, 0x91f, 0xfffffffffffffffa, 0x101, 0x401, 0xc905, 0x80000000, 0xfffffffffffffffe, 0x5, 0x80, 0x40, 0x0, 0x3, 0xfff, 0x1ff, 0x4, 0xffff, 0x0, 0x5, 0x3ff, 0x3, 0x6, 0xc7e, 0x1, 0xe3, 0x5, 0x6, 0x5, 0x0, 0x2, 0x5, 0x6, 0x6, 0x4, 0x2, 0x0, 0x1f, 0x6, 0x5, 0xb6c1, 0xffffffffffffffff, 0xfffffffffffff800, 0x1, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x3, 0xffffffffffffffff, 0x3, 0x200, 0x1ff, 0x1f, 0x1, 0x5, 0x2, 0x0, 0x8001, 0x1, 0x20, 0x3, 0x7, 0x9, 0x9, 0x4, 0x7, 0x8001, 0x100, 0x2, 0xfff, 0x3, 0x3, 0x9, 0xff, 0x3, 0xfa, 0x7fff, 0x8000, 0x6, 0x800, 0x100, 0x3, 0xc0c, 0x7, 0x9, 0xffffffffffff7d00, 0x8001, 0x8000, 0x4b1, 0x7829, 0x94b1, 0xfff, 0x7, 0x7f, 0xfaa2, 0x8, 0x3, 0x2a0f, 0x3, 0x8, 0x3, 0x4, 0x56, 0x8, 0x1, 0x10001, 0x2, 0x8, 0x1000, 0x8, 0x40, 0x3ff, 0x0, 0xfffffffffffff96f, 0x9, 0x7fff, 0x5, 0x7813f051, 0x1, 0x3, 0xfffffffffffeffff, 0x6, 0x5, 0xde5, 0x4485, 0xfffffffffffffffa, 0x7, 0x4b70, 0x80000000, 0x100000000, 0xfff, 0xe40000000000, 0x8, 0x0, 0x0, 0x0, 0x185, 0x1433, 0x0, 0xb3c, 0x8, 0x0, 0x6, 0x4, 0x1f, 0x0, 0x1c, 0x6, 0x80, 0x25d, 0x3, 0x3, 0x1, 0x0, 0x7, 0x80, 0x1ff, 0x8, 0x1, 0x51, 0x0, 0x9, 0xb99, 0x0, 0x5, 0x4, 0x40, 0x3ff, 0x2, 0x100, 0x1, 0xfffffffffffffff8, 0x5, 0x1, 0x3, 0x5, 0xfffffffffffffffc, 0x6, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0xfffffffffffffffb, 0x4, 0x8, 0x0, 0x2, 0x7, 0x1, 0x3f800000000000, 0x8, 0x3, 0x401, 0x6, 0x7, 0x8, 0x800, 0xffffffff, 0x50000000, 0x1a5, 0x7fffffff, 0xc3d9, 0x4, 0x7fffffff, 0x7fffffff, 0x64de, 0x7, 0x0, 0x1, 0x100000001, 0x8, 0x5, 0x5, 0x1ff, 0x7ff, 0x0, 0x20, 0x4, 0xb1, 0x4, 0x7, 0x7, 0x80, 0x20, 0x0, 0x4, 0x0, 0x7f, 0x100000001, 0x80000001, 0xed3, 0xee7c, 0xffffffffffffffe0, 0x8, 0x2, 0x5, 0xf397, 0x0, 0x10000, 0x2, 0x9, 0xe484, 0x8, 0x6f5, 0x2, 0x1f, 0x5c8, 0xfff, 0xc93, 0x3, 0x5, 0x8, 0x2, 0x3cbd1fbf, 0x0, 0x9, 0xe73, 0x6, 0x40, 0x7fff, 0x3, 0x4, 0x8, 0x100000001, 0x10000000, 0x1, 0x9, 0xffff, 0x8, 0x4, 0x1a6, 0x5, 0x0, 0x2f2c546e, 0x5, 0x1f, 0x1, 0x5, 0x2, 0x400, 0x8, 0x7, 0xffffffffffffff01, 0x0, 0x85, 0x7, 0xfff, 0x8, 0x0, 0x0, 0x1, 0x7, 0x0, 0x1, 0x40, 0x3, 0xd6, 0x9, 0x6, 0x8, 0x9, 0x1, 0x5, 0xffffffff, 0x1d, 0xfffffffe0000000, 0x7fffffff, 0x0, 0x3, 0x0, 0xcd, 0x2, 0x0, 0x6, 0x10001, 0x8001, 0x1ff, 0x2, 0xfffffffffffffbff, 0x98, 0x5, 0x3d9, 0x1, 0x8, 0xffff, 0x7fff, 0x4, 0x0, 0x9, 0xcaf, 0x0, 0x68, 0x7, 0x200, 0x1, 0x9d4, 0x4, 0x0, 0x7fff, 0xef, 0x1, 0xffffffff, 0xa1, 0x3, 0xdf, 0xca9d, 0x80000001, 0x4, 0x3, 0x100000001, 0x1f, 0x7f, 0x1ff, 0x80000001, 0x70, 0xff9, 0x3, 0x2, 0x0, 0x8, 0x100, 0x80000000, 0x81, 0x353, 0x61a, 0x7, 0x3, 0x8, 0x81, 0x3, 0x2d7eb0db, 0x5, 0x3, 0x0, 0x1000, 0x9, 0x1, 0x7e90, 0xffffffff, 0x4, 0x8000, 0x0, 0x3, 0x9798, 0xfa05, 0x10001, 0x1, 0x2, 0x401, 0x40, 0x1, 0x3, 0xa2f, 0x9, 0xab, 0x101, 0x4, 0x3ff, 0x8001, 0x1ff, 0x3, 0x3, 0x4, 0xffffffffffffffc0, 0x80000001, 0x0, 0x4, 0x9, 0x2, 0x1, 0xfffffffffffffff7, 0x7, 0xfff, 0x6c1f, 0x8, 0x1000, 0xfffffffffffffffb, 0x2, 0x40, 0x10001, 0x1, 0x3, 0x8, 0x8, 0x2f39, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0x7, 0xa0cd, 0xfffffffeffffffff, 0x0, 0x805, 0x3, 0x1, 0xf6, 0x1ff, 0x1, 0x1, 0x1, 0x8, 0x9, 0x0, 0x10000, 0x0, 0x5, 0xa000000, 0x6, 0x10001, 0x8, 0x9, 0x2, 0xc267, 0x4, 0xffffffffffff9931, 0xfffffffffffff329, 0x100000000, 0x0, 0xffffffffffff8001, 0x7, 0x80000001, 0x3f, 0xffffffff, 0x1000, 0x8, 0x5, 0x2, 0xff, 0x100, 0x3, 0x7fffffff, 0xef, 0x4, 0x60000000000000, 0xffffffff, 0x8, 0xfffffffffffffff9, 0xfff, 0x0, 0x6, 0x4, 0xffffffffffffffc1, 0x7, 0x100000000, 0x1, 0x0, 0x65, 0x4, 0x4, 0x4, 0x8, 0x1, 0x0, 0x4, 0x10000, 0xffffffff, 0x4, 0xcc, 0x6, 0x9, 0x9, 0x40, 0x3, 0x8, 0x8c, 0xca19, 0x3f, 0x1ff, 0x3, 0x4, 0x2822, 0x2, 0x762, 0x3, 0x6, 0x0, 0x1, 0xbb43, 0x0, 0x3, 0xc00000000000, 0x3ff, 0xffffffff, 0x6, 0x8, 0x5, 0x6, 0x90b6, 0x1, 0x605, 0xc9, 0x7, 0x4ac, 0x3db, 0x800, 0x8f60, 0x4, 0x4, 0x2, 0x0, 0x42, 0x4, 0x2, 0x7f, 0x10000, 0x8, 0x0, 0x3, 0x8e76, 0xee0, 0x9, 0x9, 0x1, 0x581, 0x5, 0x80, 0x49b, 0x5, 0x2, 0x3, 0x7, 0x4, 0x4, 0x0, 0x5, 0x100000001, 0x9eb, 0x10001, 0x20, 0x99, 0x2f80, 0x5, 0xffffffff00000000, 0x7fff, 0x2, 0x1, 0x805, 0x1ff, 0x7, 0x8, 0x100, 0x401, 0xfffffffffffffffc, 0x5, 0x0, 0x1, 0x7, 0x9, 0x800, 0x3, 0x3, 0x1, 0x2, 0x0, 0xdcab, 0x9, 0xe0000, 0x7, 0x0, 0x7fff0000000, 0x9, 0x7fff, 0x1, 0x6, 0x8, 0x80000001, 0x3, 0xffffffffffffffe0, 0x800, 0x2, 0x200, 0x7, 0x3, 0x2, 0x2, 0x2, 0x1, 0x7, 0x81, 0xef4, 0x9, 0xd376, 0x4, 0xfffffffffffffff9, 0x7fffffff, 0x4, 0x3, 0x6, 0xfffffffffffffffb, 0x80000000, 0x4, 0x20, 0x1, 0x955e, 0x3c7, 0x80000001, 0x7, 0xb8f0, 0x9afa, 0x4, 0x4, 0x1, 0x3, 0xb6b, 0xac4, 0x0, 0xffffffffffffffc0, 0x8000, 0x2, 0x1, 0xfffffffffffffffc, 0x3f, 0x1, 0x1000, 0x7, 0x28f, 0x10001, 0x7b, 0x10001, 0x3, 0x400, 0xffff, 0xd60, 0x8, 0x6, 0x401, 0x0, 0x3ff, 0x7, 0x5361, 0x7, 0x4, 0x7, 0x101, 0x8, 0x8, 0x1, 0x3, 0x6, 0x3, 0x7, 0x8000, 0x3, 0x5, 0xfff, 0x20, 0x4, 0x3ff, 0x2, 0x4, 0x3f, 0x4, 0x2, 0x1, 0x1, 0x9, 0x1cc, 0x6, 0x1, 0x4414, 0x2, 0xd, 0x4, 0x2, 0x8d85, 0x9, 0x800000000, 0x965a, 0x10001, 0xff, 0x7, 0xffff, 0x3, 0x7f, 0x3, 0x8, 0x4, 0x4, 0x5, 0x458, 0x1f, 0x1, 0x564a, 0x4, 0x1, 0x74f, 0x1b, 0x8, 0xfffffffffffffffd, 0x3], "2c4a0cc38e117c9f81119c572d207ab288d5a6886c1a8ccb84982c641ac0dc959de076580c68948933b27af1e6af988f227bcae4aff349285fb746ed02569e7178f9612a1ae5abc6b76b6601beb31da16bd66512f26bc73dcb6e6dbbe449a7620923a584fd9e8e1d4361969d6f3986fe6c944bde4aa80b092d7d26e9df206b86420c481ff07c4e5fe2ecf9c3cbd0502965301a73c74ea2a6f232"}}) [ 284.281887] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:02 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0xfffffffffffffffc, 0xda, 0x2, @scatter={0x5, 0x0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/4096, 0x1000}]}, &(0x7f0000001400)="57be33dd251223bd1085a7a98e5bb8b940f3e8716ef3bc9ae479af8aa082dfa35946a9e4842b1aaa22db0ca9fd9ce4236f8f64188384db6b61b8783a10333d65a1ee4f5f1b1363dc430dfc3af4bda313e34576be1dc59983bcf1b2bdb2266317995941452d7aae9aadd14edbd5628ffba7111f08d2bc6ff9d68ebb5b4c391c224c249ce60aca7038c32d27da3c9a67064f364cff3600909fd8b7f426b10e5b2162893d3ca36e6a6c2b2efdbe6dd461b91eb52a2b0cd2b30f1da5f6f012f90741bf8756eca671545f99bc7a81258b7652fa5390736acba48dcf1e", &(0x7f0000001500)=""/247, 0x100000000, 0x1, 0x2, &(0x7f0000001600)}) r1 = syz_open_dev$admmidi(&(0x7f00000016c0)='/dev/admmidi#\x00', 0x1, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001700)={0x0, 0x1f, 0x0, 'queue0\x00', 0xa50}) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x800e000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x7ff) [ 284.336320] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0xfffffdfd]}) 2018/05/15 19:18:03 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:03 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getpeername$ipx(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x2000) 2018/05/15 19:18:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0xef, @loopback=0x7f000001, 0x4e23, 0x0, 'sh\x00', 0x8, 0x400000000, 0xf}, 0x2c) r2 = dup2(r0, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x19, 0x0, r2}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x2000) [ 284.541273] ion_mmap: failure mapping buffer to userspace [ 284.607362] IPVS: set_ctl: invalid protocol: 239 127.0.0.1:20003 sh [ 284.608689] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88470000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x94e, &(0x7f0000001440)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipx\x00') io_cancel(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000000140)="08f3eebf367386cb34f693711699a10aace960a6c21c223040e599bd56cdd0c9275595573454bc264a88da", 0x2b, 0x200, 0x0, 0x0, r4}, &(0x7f0000000380)) recvfrom$inet(r2, &(0x7f0000000200)=""/223, 0xdf, 0x40000040, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) readlinkat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000001480)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) write(r5, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001400)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x901, 0x4) 2018/05/15 19:18:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x1ffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:18:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x100000000000000]}) 2018/05/15 19:18:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seqh', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:03 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:03 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x4, 0x9, 0x4, 0x2, 0x100, 0x40000000000000, 0xb, 0x4, 0x1, 0xa3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x24001, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) getdents64(r2, &(0x7f00000000c0)=""/148, 0x94) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{0x9, 0x5, 0x1ff, 0x5, "3b97ad4934a8f4fecc875940b90031149d4b54c82918978a3f51b63915e37cca049e499b71be34860ab4b2e1", 0xffffffff}, 0x0, 0x0, 0x8, r4, 0x7, 0x1, "b98188c6a8a9c6cf3b149b6812a5f1f4cfd021988e02d0c27a509159121569aa1cc20db4543d43077ee6bf8a716a1fdb6ec152b7c414c70cebcbc6089d6b6fd3", &(0x7f0000000540)='/dev/ion\x00', 0x9, [], [0x100000001, 0x1, 0xfffffffffffffffb, 0x36c]}) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, 0xa, 0x3, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x9}, [@generic="688cff059366282ff2d09de4778a4f066c24b3c6e73c405d0ca6542e8c15d6042263a7ce19b8bc8b316b13307355be033551e49006bde93a76bc777b748672d3721e7efbdde125c80faea7e66b76b9bf8bbd7271e1826ada3f35ab9dc0d75405cba603ba3c77198056f81335f58390185d5d98a116fc462e9968a8118f4a414bb1b794958418d612e3a903e872c9", @typed={0x8, 0x86, @fd=r0}, @generic="086cf8a8895266254fdc"]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r2, r3}) 2018/05/15 19:18:03 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x43, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x190) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040)=0xc, 0x4) [ 284.651887] x86/PAT: syz-executor4:17011 map pfn RAM range req write-combining for [mem 0x18ef62000-0x18ef65fff], got write-back [ 284.756744] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x9, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 2018/05/15 19:18:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x1f00000000000000]}) 2018/05/15 19:18:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) syz_open_dev$urandom(&(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x800) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff48ea, 0x44000) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="5317d6546fa0c9db44a5c36b5459d1de3da9bd854c32f52f32e4582f62cb115269ee27eb55a8e80e46e3d5fdca7a7b04bf680dbcf564c15b90bc62d00b850188462cc0335e5978da48047a227f0020daf38fc66bc30e5a137962e17bd157ff7bbf971651baf3e7b4906e8cc06c3ffe3ce9e236a17a3c602e3fd91a339fb5759f85990d3822a6b5f67cc56cf1881db1283eb4af559dbb86fa13") 2018/05/15 19:18:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x89060000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 284.803869] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seql', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x94e, &(0x7f0000001440)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipx\x00') io_cancel(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000000140)="08f3eebf367386cb34f693711699a10aace960a6c21c223040e599bd56cdd0c9275595573454bc264a88da", 0x2b, 0x200, 0x0, 0x0, r4}, &(0x7f0000000380)) recvfrom$inet(r2, &(0x7f0000000200)=""/223, 0xdf, 0x40000040, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) readlinkat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000001480)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) write(r5, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001400)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x901, 0x4) 2018/05/15 19:18:03 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x2000) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000040)={0x6, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) [ 285.072806] ion_mmap: failure mapping buffer to userspace [ 285.104089] ion_mmap: failure mapping buffer to userspace 2018/05/15 19:18:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:03 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x8, 0xfffffffffffff000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x40, 0x5, &(0x7f0000001440)=[{&(0x7f0000000140)="e631f01324496defe9b8c0172f67fff041cbb927513304537cc471c1ede9d9c60f4a467562b5398b8e1b8e3a0a81af57977aaa968e448eff57b4", 0x3a, 0x7}, {&(0x7f0000000200)="7dfd3cb172b325c3515cd0430abe25ccc4df54c8ea721fa8be735973c1bff1167d168b78882a10ca8b9a8af975631d8403282a0584ead85cee73349a73891e23b799b4e6937e9962b982baaaa6111b2cb70f8c1fedd7711b2212321724ff503f99e6f3622d8cc461c3a93094dfcd370cfd1bec476c82d7fadcbe4f05833209537ab71845045fb25d9010f5b2f1acdf5ba5537ce56c56ceec87158ec0b7879fa2055d9dca97f8b31ede28d4acd91f53b956efaf676f1a81b3fc21999c9702257176e30ec862b78c40ce4b4254e8908272e259f13aa9341d7cb9467fc941d21b6e56570e5e2337", 0xe6, 0x2}, {&(0x7f0000000300)="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", 0x1000, 0x7000000000}, {&(0x7f0000001300)="0e39d6a3d8a0172339cad9467550362e882cbd44615f2cd26e68539c84e66399b5d561c8d2f5c78813d58cfc6df54760babb103c63159a45f336c1c3756a908b09864c42c56f302f13204179fd7fba95cd0c78debcbe17a1d70541a11872775ebd2f733e70970b4ac543d24f5fc35cc9ffd9c457836a1c5d7df30c811f5fb088d4d714520c96ebf35156cb40ce9343064363b030d06507fc7091c636938e4074f86cab478e1685b1a02b6cbd7e72b0b453140a920b7042af51c527a9a2d97fed3e0f1a0c9e631c48809fb5832bfb2a79b4bbd4340618d9ab2cd72af1cd03c18839", 0xe1, 0x4}, {&(0x7f0000001400)="9b84d94e", 0x4, 0x3}], 0x1800004, &(0x7f00000014c0)={[{@lockproto_dlm='lockproto=dlm', 0x2c}, {@meta='meta', 0x2c}, {@nosuiddir='nosuiddir', 0x2c}]}) 2018/05/15 19:18:03 executing program 0: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x69b71723}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300009a09003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:03 executing program 7: openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x2000) r0 = memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 2018/05/15 19:18:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 285.223169] gfs2: not a GFS2 filesystem 2018/05/15 19:18:03 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xc003, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0xfdfdffff}) 2018/05/15 19:18:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dccf0bcb6ffd2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0xa02) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x1a, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:18:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:04 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:18:04 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x608, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80, 0x8, 0x1}) 2018/05/15 19:18:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0xfdfdffff}) 2018/05/15 19:18:04 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:18:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xde, 0x10000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x81, 0x10000) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x543, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80, 0x8, 0x1}) 2018/05/15 19:18:04 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xc003000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:04 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x183000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x400000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20}}, 0x4, 0x2, 0x3f, 0x5, 0x12}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @rand_addr=0x9}}}, &(0x7f00000002c0)=0x84) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:04 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) 2018/05/15 19:18:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:04 executing program 5: clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r1}) sendto$inet(r0, &(0x7f00000001c0)="16", 0x1, 0x20000801, &(0x7f0000e68000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/15 19:18:04 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x183000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x3, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x6488, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:04 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x7, &(0x7f0000000500)=[{&(0x7f00000000c0)="02748301d6546dcaabc4596c84791d0ff2c911945e7b875c8cbc67b293f0be7dbcc9c37ae9d2d735c45448fe0bfa981ddee4e99e71ac6c5e8bab7e04887d0eb7af6dc901769b9e5803a3", 0x4a, 0x3}, {&(0x7f0000000200)="dd93af8210e44ce0d4c0e5f248f6085c26cccf6595084bdb87ffeb14ce6e7751095ee0c6790d355f08ea09cded083ac620c15bcd0daa0392d26e4dfd2e6f0e206b5c626e8fe5af6218770ccad398b9cdf8f3ce02dd2f4bb8f475927c3c29093a18f3babea7da37503a36de29f09140664989f1bebbec51af82efaf8f57ec", 0x7e, 0x91}, {&(0x7f0000000280)="53139d3c2dc2988fc660107c77f2a7b4f6f43730345b77354b7711cbbc6b13a54660bd6debced9c4a8cd88d35af91a31958c7da5a5c9e17cc357aec3cf13be3925794fad4ca09944ad7c686aa45a98d99d065cad965a425a5c818c17dc3ddcca4ea88cc3d00795214c5210c699790cfd6dd8", 0x72, 0x7}, {&(0x7f0000000300)="1e88f40f9b09db91ce3e0d794322daa6a69e2492892b477cd6d5fd85e923a6f84ba617adc7e2055746d4ef8e77759552ac528ebe6fe670bb76b19d27d9c985d7e6de69cca29f3711f180e58b2cc0bda886fab24414b810951544444bcd5148587e0148da8c314762a086d83ae52731ead8985a63a50d1376958174259b98bbbb1841877f4ec53dd095bde60ddd24d432a39a08f2794a24ff849cb62424483b3bdd6dc904d5c5a2191cef18b0cc0af6f48dca1b1e1246c56a231443c36657c7", 0xbf}, {&(0x7f00000003c0)="b1cd8db7d91be423c245ea42d3ae837cc90bf30dbf2e05128ab55f18166c95e538b7fb5c7a7b0e216c38320ec5452a54d9bcaa41f1ae6dc40d01379ec4fcf511ce009779a703576f480920fc7711725d495c790367e5c79cf8b698683626e8a6ced8639165387c146575076fdb27b0b5dc8c0a29378d83702e708a37775ce093dc1a025c1c2b6247938e964c33ce193ad66af52483ccc52e3927638e61c7249d5c76e9052a3e154751b5a5cd173f223a933d2786c34eb396a93ce2f63a291e1a49d59d6c7ef388a0f5823903e24c5c704062672b330b0c94e3530ef66b61082fd4619c14c2eef8e1f509d5619706", 0xee, 0x100000001}, {&(0x7f0000000140)="0833ff2fa6bed5dcb920fdba5d4b21ed57e908a4d6200792083f3f614f7c666873d17cd8600f66a56bf6cfdda9", 0x2d, 0x3}, {&(0x7f00000004c0), 0x0, 0x3}], 0x8000, &(0x7f00000005c0)={'nouuid,', {[{@prjquota='prjquota', 0x2c}, {@gqnoenforce='gqnoenforce', 0x2c}, {@inode32='inode32', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@logdev={'logdev', 0x3d, './file0'}, 0x2c}]}}) 2018/05/15 19:18:04 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) dup3(r0, r2, 0x0) 2018/05/15 19:18:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:04 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:04 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:04 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) dup3(r0, 0xffffffffffffffff, 0x0) [ 286.250676] XFS (loop0): Invalid device [./file0], error=-15 2018/05/15 19:18:04 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x86ddffff00000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2002, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x4, 0x6}, {0x3, 0x9}, 0xfffffffffffff801, 0x6, 0x5}) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 2018/05/15 19:18:05 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2500, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, r1}) dup3(r0, r2, 0x0) 2018/05/15 19:18:05 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:05 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x18100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r2, r3, 0x0) 2018/05/15 19:18:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8006) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8000, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x1f, 0xa1, 0x1ff, 0x40, 0x0, 0xa5, 0x0, 0x3, 0x5, 0x2d, 0x8, 0x7, 0xe3, 0x8, 0x6, 0x81, 0x9, 0x1, 0x6, 0x5, 0xf67, 0x5, 0xffff, 0x2, 0x8, 0x100000001, 0x8, 0x7f, 0x7fffffff, 0x3, 0xff, 0x4, 0x233, 0x1, 0xffffffff7fffffff, 0xba06, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x8010, 0x0, 0x7fffffff, 0x2, 0x7, 0x7fffffff, 0x9}, r2, 0x3, r0, 0x2) 2018/05/15 19:18:05 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:05 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair(0x2, 0x80e, 0x1, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000005c0)={r2, 0x3}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x5, &(0x7f0000000440)=[{&(0x7f00000000c0)="efa88f0cee1d211fd4bfbd5bd856e5ccbf1e2302db7e6c671b2fc1ce152f1fd026f75c880505c568ef1004e153bdf96d99fe6a082fee8fc33382fd3a0654ecac766e5a9d953b4e0ea2ca3c103b3d277a69662021f9820c4cb491e09fcc168056bb4c65b20c48a84dd1654a98ff7830f1cd00cecc1778f6d545ca31f37d4ffb9e2ad66d916b9623f7f0608beb2944b078", 0x90, 0x10001}, {&(0x7f0000000200)="31fd45d67661a50bec1debf3f587851b3e84ec5226696cc2857f7b4ecb59a0c0f8be450917b0c6f2cc0599700a31fe170365eca8925dd44dd1747126fae26ae48686081cb4b2aa68e8", 0x49, 0x1}, {&(0x7f0000000280)="4d14dcc278b3afe8ec992242d23185bab2c07dc0b3a7205989a466266592f81e04326625b62cac209d1501c9f52871c3095b7d69c67050c44c73678bf8db277484f42ad03500899e0e1e0c04ee80d2585a63348a85488073f7a67e04ac04f98ff5e5cd5c8e35791832f4eecde1728240f4", 0x71, 0xfffffffffffffffd}, {&(0x7f0000000300)="806f321b3bffffd61771263025b973ff626bf39dc5a95df897171f7be00ca9c37bc42cf3da64a0825ab836fae872abd2", 0x30, 0x8}, {&(0x7f0000000340)="97ec92c3c03a60e770a10a04fd72482660cdb5fafc67c042092ff98faa205e3aaa513770e9b2531e6c09645d52674d86cbc1b0d1ee8137ba94ee467754cc5873fa8f5663ae2ee0dca4b52d51651b8b43dc6efc348d1fc192851d00bd03ddfb369f77e1ef8ad53cb9e55f74247a0a5275274d1f282e5af7616d2bd6f1a797cd59b13d6dca349d054e5a0db13a095bf37c416d7a65f57070498830187bb606ae661baa918428084a0dc463467a81578889e67ad29f12569110d9e5b7784f907b7a383b8c3c9a4351228c0a08da84fabbfe93a114b34e8211f4b650f0", 0xdb, 0x4}], 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000004c0)) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1a000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) [ 286.987807] FAT-fs (loop0): Unrecognized mount option "uid!rkn›üÒ=" or missing value 2018/05/15 19:18:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:05 executing program 7: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x0) 2018/05/15 19:18:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8847, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:05 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 2018/05/15 19:18:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:05 executing program 0: r0 = memfd_create(&(0x7f0000000140)='vboxnet0ppp1]eth1vboxnet0trustedkeyringmime_type\x00', 0x2) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000110000022dbd7000fddb6e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000024000000040000000000000000000008000100000100000800010000020000080001000400000008000100000800000800010009000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r2 = memfd_create(&(0x7f0000000040)='/dev/sg#\x00', 0x5491939c229016aa) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:05 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8864, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000040)="6a3db85e1e8d00030000000900ed5ed2bc7018cebc9b97ae21aa1f00000000000000000000000000000000000000", 0x2e) 2018/05/15 19:18:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r2, 0x0) 2018/05/15 19:18:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:06 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) [ 287.449535] sg_write: data in/out 50367738/4 bytes for SCSI command 0x0-- guessing data in; [ 287.449535] program syz-executor0 not setting count and/or reply_len properly 2018/05/15 19:18:06 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x31, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) [ 287.573240] sg_write: data in/out 50367738/4 bytes for SCSI command 0x0-- guessing data in; [ 287.573240] program syz-executor0 not setting count and/or reply_len properly 2018/05/15 19:18:06 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x800e0000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") creat(&(0x7f0000001380)='./file0\x00', 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:06 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xdc1cf59e239f21ec, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x140, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x9, 0x6}, &(0x7f0000000300)=0x8) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000080)="5fad7339ec5d6e1f31a09c52a0566b74a945edeb1e9ef82d295f5a417cdd78c05c42ec47286e5fbceae61ce84e48f53f185fea46fd2ffed28db85389aca102e0dc0ed1595e3ce9dcb6bde0ae6e3c086786daba7196f08d874800563d54") r5 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r5, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:06 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r1, 0x0) 2018/05/15 19:18:06 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x6, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:06 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0xeffb, 0x31, 0x0, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 2018/05/15 19:18:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x18433210, 0x8, 0x46ce, 0x5, 0x3ff, 0x5, 0x6, 0x7b, 0x20, 0x2d2, 0x4, 0xce4f}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:06 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88a8ffff00000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:06 executing program 3: socket(0xa, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:06 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r2, r3, 0x0) 2018/05/15 19:18:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:06 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1400, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x3, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x40030000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) 2018/05/15 19:18:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf0ffffffffffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r2, r3, 0x0) 2018/05/15 19:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x40000) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x2000) 2018/05/15 19:18:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x80ffffff00000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:07 executing program 3: socket(0xa, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1ff, 0x84000) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) 2018/05/15 19:18:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8906, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r2, r3, 0x0) 2018/05/15 19:18:07 executing program 3: socket(0xa, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:07 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:07 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x6800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x9, 0x1, 0x9, 0x3, &(0x7f0000000080)=[{}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x80350000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 0: r0 = gettid() socketpair(0xb, 0x2, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x100000000, 0x3f73, 0x9, 0x0, 0x11, 0x800, 0x4, 0x1d, 0x9, 0x2, 0x100000000, 0x2, 0x9, 0xfffffffffffffff7, 0x5, 0x5, 0x7, 0x81, 0x2, 0x7f, 0x800, 0xffffffffffffffff, 0x6, 0x3f, 0x8001, 0x72d5, 0x2, 0xfffffffffffffff9, 0x1, 0x4, 0x79, 0x6, 0x7, 0x9, 0x4, 0x0, 0xc98, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x10000, 0x1, 0x4, 0x2, 0x80000000, 0x40}, r0, 0xb, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e24, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x7d}, {0xa, 0x4e21, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x100, [0x8, 0x100000000, 0x8000, 0x8, 0x3, 0x7, 0x800, 0x1ff]}, 0x5c) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24}, @in6={0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in={0x2, 0x4e24}], 0x3c) 2018/05/15 19:18:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f73657105", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:08 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1}) 2018/05/15 19:18:08 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:08 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3c0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seqL', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x89) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000600)={0x218, 0xfff, 0x1, 0x11, &(0x7f00000003c0)=""/17, 0xde, &(0x7f0000000400)=""/222, 0xfd, &(0x7f0000000500)=""/253}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x6c, &(0x7f00000002c0)=[@in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e24}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000380)=0x10) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000200)={0x9, 0xd, 0x8000, {0x0, 0x1c9c380}, 0x7, 0xe49c}) 2018/05/15 19:18:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x600000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, @dev}, &(0x7f0000000200)=0x10) r2 = accept(r1, 0x0, &(0x7f0000000240)=0xb0be11801e5d2666) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x400, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e22, @multicast2=0xe0000002}], 0x3c) r3 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r4 = dup2(r2, r0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000040)=""/9) write(r3, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) sync() 2018/05/15 19:18:08 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:08 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) 2018/05/15 19:18:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x5421, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:08 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xc0ffffff00000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000100), 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000140)=0x5) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0xf07, 0x0, 0xfffffffffffffffb}, {{0x0, 0x7530}, 0x9, 0x2, 0x8}, {{}, 0x3d8e6c33, 0x8001, 0x3}, {{}, 0xe5, 0x5, 0x8}, {{r3, r4/1000+10000}, 0x2, 0x9, 0xce45000000}, {{}, 0x3, 0xfff, 0x7}, {{}, 0x800, 0xdc21, 0x1f}, {{0x77359400}, 0x3, 0x9, 0x2}, {{r5, r6/1000+10000}, 0x1ff, 0x1, 0x5}], 0xd8) r7 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002280)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="f1ba0d5614b6bf5c", 0x8, 0x40000, &(0x7f00000022c0)={0x11, 0x17, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) write(r7, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', r8}) 2018/05/15 19:18:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:09 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0xfffffffff7fffffd, 0x13, r1, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) r2 = dup2(r1, r1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000001000080060000000000000008000000000000000900000000000000f200000000000000010000800000000000000000010000008000000014a9bbed7b940b8cfe840000000000000000010000000200000000000000fffeffffffffffff01040000000000003500000000000000"]) [ 290.557212] x86/PAT: syz-executor4:17768 map pfn RAM range req write-combining for [mem 0x19970f000-0x19970ffff], got write-back 2018/05/15 19:18:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffdd86, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x40000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x83, 0x5, @buffer={0x0, 0x3e, &(0x7f0000000040)=""/62}, &(0x7f0000000080)="49df3fb403b40b6f64645405e0bb89f8483b6794ca208e916cb2942ad2910bcd19fc7848627f2e388aed78f27854d6e6e695e4fac61b5f6208d3eed548a8c3526eba3a5a8198629abfb6152b14c2378873ef09cbd013f2ed87634c1d6a0551e9be678334efb4d4e259dc55b97d8732879e149e397e57189da45fce6ef63d0d1215f6c1", &(0x7f0000000200)=""/114, 0x80000001, 0x4, 0x2, &(0x7f0000000140)}) fadvise64(r0, 0x0, 0x2, 0x3) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:09 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:09 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f736571bf", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0xfffffffff7fffffd, 0x13, r1, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) r2 = dup2(r1, r1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000001000080060000000000000008000000000000000900000000000000f200000000000000010000800000000000000000010000008000000014a9bbed7b940b8cfe840000000000000000010000000200000000000000fffeffffffffffff01040000000000003500000000000000"]) [ 290.757801] x86/PAT: syz-executor4:17789 map pfn RAM range req write-combining for [mem 0x1ce169000-0x1ce169fff], got write-back 2018/05/15 19:18:09 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe80, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:09 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d733b5a8ce22cad160096aa1f", 0x20e) 2018/05/15 19:18:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1a, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0xfffffffff7fffffd, 0x13, r1, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10) r2 = dup2(r1, r1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000001000080060000000000000008000000000000000900000000000000f200000000000000010000800000000000000000010000008000000014a9bbed7b940b8cfe840000000000000000010000000200000000000000fffeffffffffffff01040000000000003500000000000000"]) 2018/05/15 19:18:09 executing program 7: socket(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) [ 290.984670] QAT: Invalid ioctl [ 291.034090] QAT: Invalid ioctl [ 291.099839] x86/PAT: syz-executor4:17835 map pfn RAM range req write-combining for [mem 0x198896000-0x198896fff], got write-back 2018/05/15 19:18:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88640000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x10000001, 0x107) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:09 executing program 7: socket(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:09 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:09 executing program 4: socket(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1400000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 7: socket(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x8002) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x80}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x2, 0x6}, 0x8) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seqH', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x100000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:10 executing program 3: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:10 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1c, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:10 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffff80, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x4f2a) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000000140)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r2 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x7, 0x9, 0x1f, "2bfba3b7ab69b2c61b4fd6a36b262679cd88819e30e0f9dabe419ad561d733c1cbb3d2da95fab8789cf2f972e6014e9ed39351342154d8e8955789babdbc9dd62b196c4829c4ee2bd25c92664daf6057"}, 0xd8) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x6) 2018/05/15 19:18:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffffc0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4, 0x412800) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:10 executing program 3: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:10 executing program 7: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x86ddffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x2000) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x40) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x7f00, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:11 executing program 7: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x6, 0x80, 0x8}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:11 executing program 3: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xd, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:11 executing program 7: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 0: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x918e2921eba783a9) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x111) 2018/05/15 19:18:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8, 0x9, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x1, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:11 executing program 7: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:11 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8848000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x0, 0x2, 0x7fffffff, 0x5, "879a5cefecc2480c9a3309981f843528595f3eda6ea3281110c6d2926ffd4d6cf2bdf40b0881104474d06bb2339c14b0f937a884ee0372f71ce99182f65505", 0xe}, 0x60) syz_read_part_table(0x81, 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)="4496f1f6a132c3d4996fd8c3835469079ca2ffe1f67298c5ef44a6b398d94b950b80c6ab7b9b206eefa963e9816c0e85a13e0a538537a52e0d2c0bd84b98df594103cd2a641327496adaf9a506c823cffb5d28ed1f29ab4508d3c257876c1391291682ab6110cca0f7fa169998640680d826d2f6db64864e039682e2069f0511fb5116c079280f13f5c128c8490d324d4795dc7b48cfc3d55f9655f593be06116b182da5de3fc3c981b62b36e7", 0xad, 0x4}, {&(0x7f00000002c0)="34830533f48bae27c2c5c58f54c3621269c7df85d1a12578ad04c4bde67b", 0x1e, 0x7}]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100)=0x100000000, &(0x7f0000000140)=0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88caffff00000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:12 executing program 7: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0xdfb0, 0x3, 0x8, 0xffff}, &(0x7f0000000100)=0x14) 2018/05/15 19:18:12 executing program 7: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:12 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe0000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:12 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x501000) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xb0, 0x1, @buffer={0x0, 0xf1, &(0x7f0000000200)=""/241}, &(0x7f0000000300)="430550686d6acb66714e34acf73d08e48bc9c471e900192737abdda1815b40ef744def427e71f9e9c27a848c3baac4f208a5f20abd938f76c15904063dfd18077a0eec5758065de4ba332c1c323f7a3fd7e47d6218501c9b70fa65de53eefa5c1e9040c9b5bf592af7ed4506fcb526b580545112abf738e42d596ae3f71192b953184b6ed9d265fcfe70bce80ac63bf1e91abec78fa6622bc32a5f857f275ea2a2ac67fd7d8fca507368c6fb1a95e199", &(0x7f0000000440)=""/3, 0xd, 0x10030, 0x3, &(0x7f0000000140)}) 2018/05/15 19:18:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:12 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)="2f6465762f736e642f736571ff", 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:12 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8100, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000080)=0x3) [ 294.238477] Unknown ioctl 21532 [ 294.262991] Unknown ioctl 21532 2018/05/15 19:18:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x689, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x2000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x7, 0x4) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000200)=""/232, &(0x7f00000000c0)=0xe8) 2018/05/15 19:18:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffa, 0x141400) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x3, 0x4, 0x9, 0x9, "241119f088b6348e7d3b499d7f972d5585654c63c1b7b10d3c6d5fa51fdadcc785669304b64daecbc1451b7e", 0x1}, 0x0, 0x0, 0x3, r1, 0x3, 0x0, "56a75c51a94258a75fd857202e21e0c8e4310d38dd0d19cd1989d532d78966a75d775b2efa225dfd7ab05e37d447e68421fe415a9e879866febf239dd9feb933", &(0x7f00000000c0)='/dev/sg#\x00', 0x9, [], [0x4, 0x9, 0x4, 0x4]}) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4040, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x26000000000000, {{0xa, 0x4e24, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x88) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0bc5310, &(0x7f000021af98)) 2018/05/15 19:18:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8906000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x18040, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80000000000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x4, [{0x9, 0x8, 0x4, 0x4}, {0xf1, 0x7ff, 0xfffffffffffff661, 0x5d75}, {0xa0000000, 0x39, 0xfffffffffffffffc, 0x3f}, {0x5, 0xffff, 0x101}]}}) write(r2, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x9, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000540)=r3, 0x4) r4 = gettid() kcmp(r4, r4, 0x1, r1, r1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r4) 2018/05/15 19:18:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0xf6ffffff00000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xa0010000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 4: socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:14 executing program 0: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x20}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x294000, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000200)={0x9}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x5, 0x8, 0xff, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x8}, 0x90) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x7a00, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x300000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) sendmmsg$unix(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="01a3407af4527db42c4395a178bc2e3698ac80399a8fedf21c1a5b684d15f7d9e2acb720116dbbd1f1642a7a962aac625b02623d4c8581fd68d77291074e0ae48894e75006da3530972ece932b1315fa5f6b729ca1e861a1b63e0a9637da818813640b47e90319e78400cea68eda1f0cd59a15229ce6208a36f7e135cae60118fb15ed1428f4aaeb7fcb9fc54514c5bddb897c5e9faba48edaf2e6590b54aa7907788ec3f7f70a6844eed9ad4b3fd1c6bbf4c641fc4823248d3a0b774c793742d00d925d005acd4805d690d86644b9f38a87df5403e8b1ae94eb30f6725b1abb455839b002ac2e42825234376db0018e51ac224f89a3b64a005f195acf4045c47085f91ad8372519ae3eeabd56a054164aef8276ed9e01fe38ecc592cab3d094f339d92489c72bc9af5099b9e6dc67e09344638338caba52deeb1ebbc1852a6e68256ec8e02202478887d3b1f329f17650bba2b5acbcc51f27b10e23c4a28923a19a4ccd75d2eb93803b47d103226aee7421686802648f2f4a0c73e948fa5c17e31d1b14bdf2ee702b64bdf7f9b77a32240dcd8a56e963895281d9015edc0deefe2a99d0852438e8e504f3e535c0d55fbaef91de2c8bd7620e08aa4f2049c8a3a5f482372abeaad2a5b21d0b53436d01dd644e213ca9c82875d34282d2b2c2e3c8566656cf08e287dbd39e88c03afc03be1fdeb80c57e6a527cd2bd335ba0e638b9f71f1679ced45f8ba843da65e3393bc6ceb4c06295d834e8d039bc31cd7977ba299adedcacda45ff857a4d59c0f2b047d75ca162f9b24f615c670bec34310e97dc6f91734b51521c9f4f21a20fe0062467940d5df70db3d0fca2cedd0fcf319913597082a71f162bc5386e0f3d922d021d4e65c63c507aedca495e6fafb4c9b2b427ad6be35809474860a13f55cb71a455b68993eef57489df5c545039c03c70b5ed3648c1afab72015041573d66c5a71c73ab9e7c5ee27ef9b2bbfb749e8c3c6367ae246725b63dcae392a40569e3ebb171e1e4a49e1c986e8e8f1545c6816ca787615e79447f41498879698709d6c45b405027396bd7ac22ca9dc6bb3037b4ce3d6b017c02a94017b77120681ca5852e16d3a8ac17b800431d0b7dea003a04fcaeba7d471635ade656adf7c10611f5af79d959f7962908fefc900f05855833d2d787645711d762a4c3421c05194bd0bcc4f9ccd7fb6753a24c3325fe56e865c615277fbf81e1927cc21cc41e747e29b0822350928a9de284e1d3ab087cc5ba9455dad882c755747958a714dda8f90feae7b449110146cb33047903e63c5dc880e3b8a9c8678df1b4fe9ef3779edbe69c10a9029ab42acc544d9a79e977707a63e3d0da47a462a6ec19e4e29a6bd0a2c2f39de7176bd67d7c6f733865739bb59cfd4110cba7445877ee19f6b878076e355cf607870e7c9cd15f763a4876fc806163a293a5c7bc16ea7626ab1ca6ef30d2b0f61877ace323e509cc1dba926beda8a0b2ce55c662e9d0f851424e07e68ee7006946ffce6369c61381ca160d8b785b1c6a5782755352e17b004fcf3167562f539cf5ceb98eba2fe81ef2f23dd342efd34ec8a137870fa78cb2165f3a1db71a8677bd57f47ab1dc28f3da4d962ea7c49f6ed03ae87a235cc24ba4adb8c49d0735c8d49ac228a1eb8534eb45ec40c57f8c6affaa631de60a54a688e3fc60b56c8e31afa78c388a9483dbaeb2a937ef401ca35011b0effff4c24cc80c06799db8d9ba0d3ab2822cf03a799497641e84ca605f714f20a31eee1d9ec903e717f16c16912016403123b4dc4e43c6e4e8cd4b7b95c7b732807ded22a6a3a11e1e08f40cf21ef29846b5d9a6719b39a8e3429870e56d4e3ddabe1787bdd1879e8e1d5f9a85676c626ed168500da708df649e06586ed29b7f1facf23f7d18d3fcd1e6c8bb33a3c35a21762d8f41bb8ff6f635838a6518f867f99661a118770f97c2f169c38bfad05937ca2ca2fa9c26993f1a55c4f3bed38d9251187a20c4d05f9bde119de9566653f1791ffcc14139f5fc97749e9a2fe66234dd753d913a0491cd0d9a794942eb01c6c0224d7aa4dfdc5226da83fde131991eb54ca147fa2320d2e861637d45dabfa364e1d87d5544c1c10de393b23cd480370b75975f573d9074097c7eb9607295ebd623572184f561af98d514c06997a431f61243cfb5e292db84edf48e308bd20ee4cb879c901b118881fcc4e739c3554f22cfce891bf71a4bb6362657fcd914ab471d8ac0235513441b1a90bb511ea0bae6bf7256c62f103da9eb0c6ff5e1080be10c6879c58fd07d334a6b5ee96b7f710bfc443a6e626f27c8f689a2dcb5eb9beea03dbec3196b856b922c81d1b1433308c28df538940d28261acf1bf38d36e75864aa4446d26bd7f6ea7be57bdbb9b6d2f4103c9072914c1bfb118468d9751c54b594209377d7e4acd0d941ea7a72116e4cd463d9defd836cbd423145e5ac5aeaee407b859051d89787d043a82e54d300372d8d1b1e096ed833bc684cff0d322280ba8295438e55f385d77e63d3807bf63ad9e0057166170c2716c467e5d02ec679edf2726f1a821b918144afe16bd203b7185fa8a684af416bb6d221fc55723f6d4953208015af162695a7a72d8c339964bc43c40a6d14a031abc0c1914fd47fb2fdc61dab07ed792570c427287185f913b30c1ad39de971403c8a4181a2354aa27ddf641755b1c039dbe6e10a8099a3766e0f3651a788d5062783fe4420149b68d0350e1808ab2e8e89a1a7629ce3e997e1b31833a44290a21e1fa8c5fd3fd46235dbbc8778d6dfa6502a8cd0d31b8e05de1b203b3ac94e706cc41243a23c4e1147708a731e07e921b10104c3780d63650f155be52c2fea256136aa0c2fcde2fd086eb7110aa0d366dddc5ebf33eaa75021f48737008bf07cdf2a69759a50ae33b57ebfe1c39ce1901508060104857b67b1e815a33202f38f0ed72f5f94d0b3ec246d946a678292e51de3a6a23350f7d6bca090b1042f2b94eff61a3d096256f086314925ba05f9c4f2056875d335e6b372a3a8a0868cdb6da3a14ff927564180b043173c5c2fd63627764d96c0d505193b89d68e630bf7f691d8cff5b5d7a73e36915459a5b29375b188929f0f06c41dbf96542e45a2862aee7f92bf7e8de04211a732f8b0d78d0c01078b2847092c289ca44e2bbf31cd59493cd0786cc1bbbbc491349bb0a66b6af23e856576bafecc068014979b3422b84da49e4bbac0721da945e7b7bd130a561aed0263b302b2033998e1586d269be4eb46b5c3db88a03b70c56c5f1bbd6cc9bec994db86f89d72979f5dad75205a33d15aeda25bff63bbe34778677bc98ac3c2b6f574229517d1693f7badd93fc65f5d6ae2b3d455e1a25951e41f16f7b4f30343c9aaa90f9d20d09ba2bf4cc62d008969fb489499afd4a5f512b332922e6cb25392abdb2b0d59d058e9abebad8b8d084972a31900425e6c5c19fc2d79328d9e38f65c294f3c5371faabc17e45f43f468329d2637ec9c1e3dd415c0bbed806ef059804457791935e2c7ad0d22227c98642893d6d91bbaa0800bb93dd8f7ba9403a375102103829cb0af2dc1495ac92fef072b57a1213def114981d32c9b2ac69f5173b2f946853c0c1799bfa5dc52875c3b30fa39764f7eef6206a3f3cccfc0f781788df698e7e46a0f097286a2dc99dd10d4707c509d4f322027bb56e520b44d62e55bfcf5472d13f3c948765fefbfa7cb32542158210402040865eac96a42bac2a169e8bb61396e098f49b0764842d7cb953fb573342af807d664c3e5642088f6affce100161bccba844b626213d33d1a3378c8f1721c774c3413e8e82a970befba60410e70efefd0d1e1b491e1273b8760fbe803fc284bb2065c7681af644bef8fd185a324c759c8dc7e8d72c8bb83f0ecf5a86f851e67568d6f0a8584f3fd3e95a1262aae723de8f2eafc5761d72002ffd38b94e6ebb2f54988eb81b5e1b818f71cc4e3fd3654532ddcfc8f4a11bfca485b91fd679faf3ba3a638759c62ff0fbfa08cfbff1ac3d11ef9bfc861628efe0844a9b25430f7b4cb14d93d52008233683f20681106507b9adafd8169fafd321e92621dd0db8b8f6e9b781cc19d8fce066280428cba93188bdbcea9181eae16ff5af3eb736d9033fa4a1f7d1234db248405c98c9cae20d3df2969662379ce631c6ef31cbf4a93523241e40e9f3f42955d5cc9460806143129c80f4ddd0046372d00bf5b33050e30c2405c04c21564d532f0f5bb1006e376a6d2bf468a4503ff79d96b83ee831885fb06a1733dedf5aead9fa67e0c8aad01154747c356098b276f26a54b107334dcabc97d2431456685c594c651cb05966e0c2ee82e761d14563f2f0860023a0b6a14e9c97cfe3a6b3f0e9fd5aa324a675c48c5c8b40e018b93e598bb469b80257d0ff6f1795c6406030f29482b4e04e02475146ea26c4108ae8b0a615e58234fd14fc6762847084b70e517d8e759dcf3244f1478cba31dd8c0c840d8d0c17b1d99bb7ea89d6a0fa027a4f6f3dad0dd7d9aa681edfc17ef45af95005667dbcfce478f350e891b70dcb3be18643b4ad33d5c9aa8a1d3cd460a75ea7fb5ea4a0a0b1d961391799097c3e7a015bb2095a20f9d7a72b7a54699e1f915e7632ae6090db9db69b82366123cb3fc5ada819eba3e9cd15d68b5467b0828267590199b84d6e214fd30715b62f94587b134153b004305be5f5b5e4c6cccc781ae97c37917b79ccb82af9793c10ca327c5d22d275b02e7e8a15b9137812b5835b70f5ac999a0f5cc534b4da80b3f21340cc269b9d96818670b4e52517d6705d69abe2e1700fa29ad61962384255affca50ed5e94ac767cad4b56c03a06d394cc76154087091796cb878a152da32c9860553bd8ea844c3b937b470900f80ea86c4da8480bc89148ae7fbe3ffc9a23adefb669676d2c4a69228db6788418a3fa4620363416d562acf813c462705d1511d76bc141a5de2396f865bca9983eaec34294012e8e26d509e899f0cada21bd65fede7300d807ddede345d0db9d35765822ef7799cc310c70deb56b07f489106584f0bc981fb0b6ffaa244b0d72a19a2646470c681b493105461a641d74b042feb77669a8c95d8e5e6e8bc939dc97c0867d9248c0b140e1fdee8a15997e2c2fd8f7db361ce5769bb53c1317a2573432af47da57d3ddedb613e1e4308097b8032d999deb8a33ad6f075795900c41987b992fd3b1f0999f178a6577c754fba645e234a221488aef66605c943c9816b83612301c9cd75810015b3284f4a36e06fc1ed2b479f64debed075d1c222a810448afb85014c18bbcfd9a3098b5fe80d08988121f0890100afab1c171de6880491ddd51af3b82bcc377de15a00326b9386552b9356fd20c0bc07b8ad59508b91fd1536555464fcfa74e6c22f1cfeb4c7ae93471862bc16d0a8ea7187f88394efffefbe439db07a32acd4d133c9edba535893a3c0167a20a2be6ab78fdbfaab655aa57e51ba050b2d7176ac727ae304c194abce05714e77aefdcb25a573f5c148754554e88f4d2a0bb58afb36d8572055079ba607bf093d420f374733d437cec637f84db316165a2eb493a8a072c23cd4e3ca25e0100d94b9b87ff2cc108ffd526fe7b9a43fdeae22be432b3a7e2e5a355d96b1ef38656b0c128696781d64621d60bd3b890e290f747159a68f340a750db0412ffa5afa96e0139abe58659f004546456fe275f909928a1c6394b860c0bace17e338d88260709ff0b595caa031fc8e1d29f617d7a9a9d536efb4915", 0x1000}], 0x1, 0x0, 0x0, 0x44040}, {&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000001280)="bb4197cfb787badde2f9966310d666a67b81e5c6c1c5b2d0e5361a54f9cbce3d30f5c8e034cf4469c79acc74baa836591c79578fc4faaf98034c65c2726dac57f1e0198660ba67c65e33e625ecd9460a20148256bb02d4fe7af7149f77c0016de40cdc0526398fd75ab72d2f6237fa45d92ac23049b8c5534009ba8ed4b935a7c1b1192c99768a425a872b04fff656d15fe2607de02145cb4a3a19d605214576c7634467d50a4e97", 0xa8}, {&(0x7f0000001340)="fe2403a471a41b163e664f6c30f8ff813fcb7533e5b1954849858c9f22adda54964a3798f81f6fea7fff88fd5b76e39dc442be129acf65e0370865318f4e0018091be6b3861958cb6687a5b08b1d749796ea8d85111e90487079b44109afd7ea238d78864e5e38cb4c918178f899", 0x6e}], 0x2, 0x0, 0x0, 0x5}], 0x2, 0x8000) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x4c00000000000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xc0ffffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) recvmmsg(0xffffffffffffff9c, &(0x7f00000045c0)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/247, 0xf7}], 0x6, &(0x7f0000000780)=""/215, 0xd7}, 0x5}, {{&(0x7f0000000880)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/18, 0x12}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/163, 0xa3}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/45, 0x2d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x3}, 0x9}, {{&(0x7f0000002cc0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/83, 0x53}, {&(0x7f0000002dc0)=""/149, 0x95}], 0x2, &(0x7f0000002ec0)=""/218, 0xda, 0x7}, 0x8000}, {{&(0x7f0000002fc0)=@ax25, 0x80, &(0x7f0000003140)=[{&(0x7f0000003040)=""/244, 0xf4}], 0x1, &(0x7f0000003180)=""/158, 0x9e, 0x6}, 0xa4}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2, &(0x7f0000005040)=""/4096, 0x1000, 0x8001}, 0x1ff}, {{&(0x7f0000004340)=@alg, 0x80, &(0x7f00000044c0)=[{&(0x7f00000043c0)=""/213, 0xd5}], 0x1, &(0x7f0000004500)=""/189, 0xbd, 0x2}, 0x5}], 0x6, 0x2, &(0x7f0000004740)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0x0) getsockname$netrom(r1, &(0x7f0000004780), &(0x7f00000047c0)=0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/88, &(0x7f00000000c0)=0x58) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f66000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x48, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20}, {0x306, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x50, {0x2, 0x4e22, @loopback=0x7f000001}, 'syzkaller0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xc0ffffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) recvmmsg(0xffffffffffffff9c, &(0x7f00000045c0)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/247, 0xf7}], 0x6, &(0x7f0000000780)=""/215, 0xd7}, 0x5}, {{&(0x7f0000000880)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/18, 0x12}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/163, 0xa3}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/45, 0x2d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x3}, 0x9}, {{&(0x7f0000002cc0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/83, 0x53}, {&(0x7f0000002dc0)=""/149, 0x95}], 0x2, &(0x7f0000002ec0)=""/218, 0xda, 0x7}, 0x8000}, {{&(0x7f0000002fc0)=@ax25, 0x80, &(0x7f0000003140)=[{&(0x7f0000003040)=""/244, 0xf4}], 0x1, &(0x7f0000003180)=""/158, 0x9e, 0x6}, 0xa4}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2, &(0x7f0000005040)=""/4096, 0x1000, 0x8001}, 0x1ff}, {{&(0x7f0000004340)=@alg, 0x80, &(0x7f00000044c0)=[{&(0x7f00000043c0)=""/213, 0xd5}], 0x1, &(0x7f0000004500)=""/189, 0xbd, 0x2}, 0x5}], 0x6, 0x2, &(0x7f0000004740)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0x0) getsockname$netrom(r1, &(0x7f0000004780), &(0x7f00000047c0)=0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/88, &(0x7f00000000c0)=0x58) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f66000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:14 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x800000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x1400, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:14 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() socket$inet(0x2, 0x7, 0x100000000) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x405) 2018/05/15 19:18:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:15 executing program 4: socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 2018/05/15 19:18:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1c000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 296.556395] sg_write: data in/out 50367738/983 bytes for SCSI command 0x5a-- guessing data in; [ 296.556395] program syz-executor0 not setting count and/or reply_len properly [ 296.667507] sg_write: data in/out 50367738/983 bytes for SCSI command 0x5a-- guessing data in; [ 296.667507] program syz-executor0 not setting count and/or reply_len properly 2018/05/15 19:18:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) recvmmsg(0xffffffffffffff9c, &(0x7f00000045c0)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/247, 0xf7}], 0x6, &(0x7f0000000780)=""/215, 0xd7}, 0x5}, {{&(0x7f0000000880)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/18, 0x12}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/163, 0xa3}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000bc0)=""/45, 0x2d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x3}, 0x9}, {{&(0x7f0000002cc0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/83, 0x53}, {&(0x7f0000002dc0)=""/149, 0x95}], 0x2, &(0x7f0000002ec0)=""/218, 0xda, 0x7}, 0x8000}, {{&(0x7f0000002fc0)=@ax25, 0x80, &(0x7f0000003140)=[{&(0x7f0000003040)=""/244, 0xf4}], 0x1, &(0x7f0000003180)=""/158, 0x9e, 0x6}, 0xa4}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x2, &(0x7f0000005040)=""/4096, 0x1000, 0x8001}, 0x1ff}, {{&(0x7f0000004340)=@alg, 0x80, &(0x7f00000044c0)=[{&(0x7f00000043c0)=""/213, 0xd5}], 0x1, &(0x7f0000004500)=""/189, 0xbd, 0x2}, 0x5}], 0x6, 0x2, &(0x7f0000004740)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r1, 0x0) getsockname$netrom(r1, &(0x7f0000004780), &(0x7f00000047c0)=0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/88, &(0x7f00000000c0)=0x58) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f66000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x6c00, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400300, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:15 executing program 0: r0 = shmget(0x0, 0x6000, 0x400, &(0x7f0000ff8000/0x6000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000000100)="6a3db85e1e8d000300000009003e151400000000000000bc7018cebc9b97ae21b14d872c5a8ce22cad160081aa1f", 0x38d) 2018/05/15 19:18:15 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x806000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:15 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x8002) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x80}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x2, 0x6}, 0x8) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x7400, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0xfffffffffffffffc, 0x5, 0x10000, 'queue0\x00', 0x5}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:15 executing program 4 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:15 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x81000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x8, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xfffffffffffff5da, 0x400100) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4aaa, 0x20000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x3, 0x2, {0x2, 0x3, 0x1ff, 0x3, 0xcba}}) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) 2018/05/15 19:18:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:16 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x88a8ffff, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0a85322, &(0x7f000021af98)) 2018/05/15 19:18:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket(0xb, 0x803, 0x1) getsockname$netrom(r1, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x3, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:16 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffa888, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f000021af98)) 2018/05/15 19:18:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:16 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xd000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x5a5900, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x79, 0x8, @scatter={0x3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000200)=""/178, 0xb2}]}, &(0x7f00000002c0)="a2a610eed090314e1d8070573c5caf23711c81fdbd02c8c8a3eee10b8fa972f35332cbed48fcd2a170add104ba91f18e2e0f0942aa3ced6a6b9160ab73275ee25517d820ef484109bb5d9a538ea84e3a41c59df9793931b67f4c48c3553a8344737f7df930707b9a956f549a6bdfa728ec8d507cc8964ff1d0", &(0x7f0000000340)=""/42, 0x6, 0x2, 0x2, &(0x7f0000000380)}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f000021af98)) 2018/05/15 19:18:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x2, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:17 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 2018/05/15 19:18:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x600, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x74, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000040)="6a3db85e1e8d000300000009003e15d61dcc43a6ed5ed2bc7018cebc9b97ad160096aa1f000000000000000000000516e8d48fb97edad0072150eb74263c43fc6463ef9f8a50c9201d609e165971a7085abb3ee53b4553a7a3ef391d98601e7753a558c47bd406049a9a921e509e644a18b1f5394a352c40d71fc0bcb3af22aac76b93d1e0fe1c1c05982d045d8031de6b4209b211c3df559abbbfdbc592f33f2e1b0bcbb1bd691016facdc0b7a139f85f6bb16c281b8b6424cc07ad560aeb", 0xbf) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000300)={r3, &(0x7f0000000240)=""/157}) 2018/05/15 19:18:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045878, &(0x7f000021af98)) 2018/05/15 19:18:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 5: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x14000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r0, 0x0, &(0x7f0000000100)={0x80, 0xbb7f}, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8004) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5450, &(0x7f000021af98)) 2018/05/15 19:18:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x500000000000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:17 executing program 5: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 7 (fault-call:3 fault-nth:0): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x806, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:17 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x7, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x10000, 0x100b0, 0x4, 0x10000000000, 0x0, 0xfff, 0x9, 0x9, 0x7, 0x3, 0x2, 0x7ff, 0x80, 0x7, 0x81, 0x7f, 0x2, 0x0, 0x3, 0x92a6, 0x5, 0x8, 0x72db6dab, 0x5, 0x7, 0x2, 0x1, 0x2, 0x5, 0x4f, 0x100000000, 0x0, 0x26, 0x3, @perf_config_ext={0xff, 0xffff}, 0x400, 0x3ff, 0xa8, 0x7, 0xb76, 0x8, 0x6}, 0xffffffffffffff9c, 0x2, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5452, &(0x7f000021af98)) 2018/05/15 19:18:17 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x700, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:17 executing program 5: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) [ 298.922077] FAULT_INJECTION: forcing a failure. [ 298.922077] name failslab, interval 1, probability 0, space 0, times 0 [ 298.933666] CPU: 0 PID: 18749 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #52 [ 298.940951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.950313] Call Trace: [ 298.952917] dump_stack+0x1b9/0x294 [ 298.956562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.961770] ? __lock_acquire+0x7f5/0x5140 [ 298.966022] should_fail.cold.4+0xa/0x1a 2018/05/15 19:18:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xfffffffffffff000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 298.970098] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.975213] ? debug_check_no_locks_freed+0x310/0x310 [ 298.980412] ? perf_trace_lock_acquire+0xe3/0x980 [ 298.985272] ? graph_lock+0x170/0x170 [ 298.989087] ? perf_trace_lock+0x900/0x900 [ 298.993339] ? perf_trace_lock+0x900/0x900 [ 298.997617] ? graph_lock+0x170/0x170 [ 299.001427] ? graph_lock+0x170/0x170 [ 299.005239] ? __lock_is_held+0xb5/0x140 [ 299.009324] ? check_same_owner+0x320/0x320 [ 299.013674] ? rcu_note_context_switch+0x710/0x710 [ 299.018628] __should_failslab+0x124/0x180 [ 299.022879] should_failslab+0x9/0x14 [ 299.026690] kmem_cache_alloc+0x2af/0x760 [ 299.030858] ? rcu_is_watching+0x85/0x140 [ 299.035042] jbd2__journal_start+0x1d3/0xa70 [ 299.039485] ? jbd2_write_access_granted.part.8+0x420/0x420 [ 299.045210] ? rcu_note_context_switch+0x710/0x710 [ 299.050159] ? __might_sleep+0x95/0x190 [ 299.054153] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.059715] __ext4_journal_start_sb+0x17a/0x5e0 [ 299.064482] ? ext4_ioctl+0x1d21/0x4210 [ 299.068452] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 299.074152] ? lock_two_nondirectories+0xdd/0x120 [ 299.078988] ? _down_write_nest_lock+0x120/0x120 [ 299.083750] ext4_ioctl+0x1d21/0x4210 [ 299.087547] ? _parse_integer+0x13b/0x190 [ 299.091687] ? ext4_ioctl_group_add+0x560/0x560 [ 299.096347] ? _parse_integer+0x190/0x190 [ 299.100485] ? graph_lock+0x170/0x170 [ 299.104275] ? lock_release+0xa10/0xa10 [ 299.108242] ? find_held_lock+0x36/0x1c0 [ 299.112292] ? graph_lock+0x170/0x170 [ 299.116083] ? find_held_lock+0x36/0x1c0 [ 299.120148] ? lock_downgrade+0x8e0/0x8e0 [ 299.124292] ? kasan_check_read+0x11/0x20 [ 299.128429] ? rcu_is_watching+0x85/0x140 [ 299.132567] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 299.137755] ? __fget+0x40c/0x650 [ 299.141222] ? match_held_lock+0x841/0x8b0 [ 299.145448] ? expand_files.part.8+0x9a0/0x9a0 [ 299.150026] ? kasan_check_write+0x14/0x20 [ 299.154265] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 299.159187] ? wait_for_completion+0x870/0x870 [ 299.163763] ? ext4_ioctl_group_add+0x560/0x560 [ 299.168421] do_vfs_ioctl+0x1cf/0x16a0 [ 299.172307] ? ioctl_preallocate+0x2e0/0x2e0 [ 299.176712] ? fget_raw+0x20/0x20 [ 299.180168] ? __sb_end_write+0xac/0xe0 [ 299.184137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 299.189663] ? fput+0x130/0x1a0 [ 299.192939] ? ksys_write+0x1a6/0x250 [ 299.196735] ? security_file_ioctl+0x94/0xc0 [ 299.201138] ksys_ioctl+0xa9/0xd0 [ 299.204581] __x64_sys_ioctl+0x73/0xb0 [ 299.208458] do_syscall_64+0x1b1/0x800 [ 299.212342] ? finish_task_switch+0x1ca/0x840 [ 299.224122] ? syscall_return_slowpath+0x5c0/0x5c0 [ 299.229046] ? syscall_return_slowpath+0x30f/0x5c0 [ 299.233970] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.239350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.244198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.249384] RIP: 0033:0x455a09 [ 299.252561] RSP: 002b:00007f85d07cbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.260271] RAX: ffffffffffffffda RBX: 00007f85d07cc6d4 RCX: 0000000000455a09 [ 299.267550] RDX: 0000000020000080 RSI: 0000000000006611 RDI: 0000000000000014 [ 299.274809] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 299.282067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 299.289323] R13: 0000000000000406 R14: 00000000006fa130 R15: 0000000000000000 2018/05/15 19:18:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x14, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x4020940d, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 2018/05/15 19:18:18 executing program 7 (fault-call:3 fault-nth:1): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x300, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x4000) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x100, 0x4) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff60be, 0x20440) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x2, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8864000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0xfffffff6, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x5460, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bond_slave_1\x00', 0x600}) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40049409, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x0) getpeername$netrom(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x4, 0x2000000008002) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) 2018/05/15 19:18:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0xbf00000000000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 2018/05/15 19:18:18 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x5452, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x8847000000000000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x43050000, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc020660b, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x400c6615, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 2018/05/15 19:18:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x600000000000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0105303, &(0x7f000021af98)) 2018/05/15 19:18:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1c00, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 2018/05/15 19:18:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40286608, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x6c, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x2000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x660, 0x9a, 0x4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4888, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 2018/05/15 19:18:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045301, &(0x7f000021af98)) 2018/05/15 19:18:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0045877, &(0x7f000021af98)) [ 300.839704] EXT4-fs warning (device sda1): ext4_group_add:1634: No reserved GDT blocks, can't resize 2018/05/15 19:18:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x6611, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc0185879, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 2018/05/15 19:18:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffca88, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x3000000, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) 2018/05/15 19:18:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000040)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) 2018/05/15 19:18:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc0185879, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40a85321, &(0x7f000021af98)) 2018/05/15 19:18:19 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x1000effb, 0x1a, 0x1, 0xffffffffffffffff}) dup3(r1, r2, 0x0) 2018/05/15 19:18:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x8004587d, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f000021af98)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 2018/05/15 19:18:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xa00100, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/05/15 19:18:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4500, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000001200)={0xf399, 0x0, 0x4, 0x9c, &(0x7f0000000080)=""/156, 0x1000, &(0x7f0000000200)=""/4096, 0xe, &(0x7f0000000140)=""/14}) 2018/05/15 19:18:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x6800, 0x0) socket(0xb, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000200), 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) [ 301.329725] EXT4-fs (sda1): shut down requested (0) 2018/05/15 19:18:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc0185879, &(0x7f0000000080)=ANY=[]) 2018/05/15 19:18:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000f4af9d)="6a3db85e1e8d000300000009003e15d61dcc43b6ed5ed2bc7018cebc9b97ae21b14d872c5a8ce22cad160096aa1f", 0x2e) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x109002) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0x87) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in6=@dev={0xfe, 0x80, [], 0x870c}, 0x4e21, 0x3, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x3b, r2, r3}, {0x60d, 0x27, 0xffffffff, 0x2, 0x1da7, 0x0, 0x603, 0x2}, {0x4, 0x100, 0x6, 0x5}, 0xfffffffffffffffd, 0x6e6bc0, 0x0, 0x1, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d2, 0x7e}, 0xa, @in6, 0x3501, 0x4, 0x3, 0x1, 0x3ff, 0x9, 0x4614}}, 0xe8) [ 301.421153] ------------[ cut here ]------------ [ 301.426010] DEBUG_LOCKS_WARN_ON(sem->owner != get_current()) [ 301.426144] WARNING: CPU: 0 PID: 18998 at kernel/locking/rwsem.c:133 up_write+0x1c6/0x210 [ 301.440257] Kernel panic - not syncing: panic_on_warn set ... [ 301.440257] [ 301.447614] CPU: 0 PID: 18998 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #52 [ 301.454880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.464215] Call Trace: [ 301.466793] dump_stack+0x1b9/0x294 [ 301.470408] ? dump_stack_print_info.cold.2+0x52/0x52 [ 301.475590] ? up_write+0x1a0/0x210 [ 301.479203] panic+0x22f/0x4de [ 301.482379] ? add_taint.cold.5+0x16/0x16 [ 301.486512] ? __warn.cold.8+0x148/0x1b3 [ 301.490559] ? up_write+0x1c6/0x210 [ 301.494178] __warn.cold.8+0x163/0x1b3 [ 301.498048] ? up_write+0x1c6/0x210 [ 301.501677] report_bug+0x252/0x2d0 [ 301.505293] do_error_trap+0x1de/0x490 [ 301.509173] ? math_error+0x420/0x420 [ 301.512960] ? vprintk_default+0x28/0x30 [ 301.517011] ? vprintk_func+0x81/0xe7 [ 301.520800] ? printk+0x9e/0xba [ 301.524069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.528895] do_invalid_op+0x1b/0x20 [ 301.532598] invalid_op+0x14/0x20 [ 301.536035] RIP: 0010:up_write+0x1c6/0x210 [ 301.540251] RSP: 0018:ffff88018dc7f680 EFLAGS: 00010286 [ 301.545600] RAX: 0000000000000030 RBX: ffff8801cc538b00 RCX: ffffc90003ee0000 [ 301.552853] RDX: 0000000000012f52 RSI: ffffffff81610711 RDI: 0000000000000001 [ 301.560113] RBP: ffff88018dc7f708 R08: ffff8801d82cc240 R09: fffffbfff11b0994 [ 301.567366] R10: fffffbfff11b0994 R11: ffffffff88d84ca3 R12: 1ffff10031b8fed0 [ 301.574620] R13: dffffc0000000000 R14: ffff88018dc7f6e0 R15: ffff8801cc538b58 [ 301.581882] ? vprintk_func+0x81/0xe7 [ 301.585679] ? up_read+0x110/0x110 [ 301.589204] ? lock_release+0xa10/0xa10 [ 301.593164] ? thaw_super_locked+0x109/0x260 [ 301.597555] percpu_up_write+0xcd/0x110 [ 301.601510] ? __percpu_up_read+0x50/0x50 [ 301.605657] ? down_write+0x87/0x120 [ 301.609364] ? thaw_super+0x16/0x30 [ 301.612979] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 301.618503] thaw_super_locked+0x1f5/0x260 [ 301.622724] thaw_super+0x1e/0x30 [ 301.626163] thaw_bdev+0x162/0x1a0 [ 301.629691] ext4_ioctl+0x180e/0x4210 [ 301.633478] ? ext4_ioctl_group_add+0x560/0x560 [ 301.638134] ? do_futex+0x249/0x27d0 [ 301.641834] ? kasan_check_read+0x11/0x20 [ 301.645965] ? graph_lock+0x170/0x170 [ 301.649760] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 301.654935] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 301.660110] ? exit_robust_list+0x290/0x290 [ 301.664418] ? find_held_lock+0x36/0x1c0 [ 301.668469] ? lock_downgrade+0x8e0/0x8e0 [ 301.672602] ? kasan_check_read+0x11/0x20 [ 301.676744] ? rcu_is_watching+0x85/0x140 [ 301.680879] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 301.686059] ? __fget+0x40c/0x650 [ 301.689499] ? expand_files.part.8+0x9a0/0x9a0 [ 301.694067] ? trace_hardirqs_off+0xd/0x10 [ 301.698289] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 301.703377] ? debug_check_no_obj_freed+0x2ff/0x584 [ 301.708378] ? ext4_ioctl_group_add+0x560/0x560 [ 301.713034] do_vfs_ioctl+0x1cf/0x16a0 [ 301.716907] ? ioctl_preallocate+0x2e0/0x2e0 [ 301.721327] ? fget_raw+0x20/0x20 [ 301.724765] ? rcu_read_lock_sched_held+0x108/0x120 [ 301.729766] ? __x64_sys_futex+0x477/0x680 [ 301.733989] ? do_futex+0x27d0/0x27d0 [ 301.737776] ? security_file_ioctl+0x94/0xc0 [ 301.742173] ksys_ioctl+0xa9/0xd0 [ 301.745615] __x64_sys_ioctl+0x73/0xb0 [ 301.749488] do_syscall_64+0x1b1/0x800 [ 301.753365] ? finish_task_switch+0x1ca/0x840 [ 301.757844] ? syscall_return_slowpath+0x5c0/0x5c0 [ 301.762766] ? syscall_return_slowpath+0x30f/0x5c0 [ 301.767691] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 301.773041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.777883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.783065] RIP: 0033:0x455a09 [ 301.786238] RSP: 002b:00007f85d07cbc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.793939] RAX: ffffffffffffffda RBX: 00007f85d07cc6d4 RCX: 0000000000455a09 [ 301.801193] RDX: 0000000020000080 RSI: 000000008004587d RDI: 0000000000000014 [ 301.808447] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 301.815709] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 301.822960] R13: 0000000000000406 R14: 00000000006fa130 R15: 0000000000000000 [ 301.830694] Dumping ftrace buffer: [ 301.834219] (ftrace buffer empty) [ 301.837908] Kernel Offset: disabled [ 301.841531] Rebooting in 86400 seconds..