@multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff01806700000000001d090000000000000011907800000000e000000100004e210401097800d7050200f53475"], 0x0) 2018/02/26 20:09:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x3ff, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0xc9) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$tun(&(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={"643071300000000000000020001600", @ifru_ivalue=0x9}) r3 = epoll_create(0x40000000000985) r4 = dup3(r2, r3, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xfffffffffffffc86) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={r6, 0x2435}, &(0x7f0000000380)=0x8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r5, r7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000280)=0x80000001, 0x8) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000040601000000000000000000000000000000000000000000", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0xa042) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x80000) 2018/02/26 20:09:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns/cgroup\x00') bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x800, @empty, 0x7ff}, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket(0xa, 0x2000000001, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x81) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x401, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="54000000f8843c34976b90c2aaab1d714a08619389980a3c5c963fd5b8f28c6a9312f627a95900fe7d1a0c2f1dc3ab5be110359119907fb9cff80b703954c6ba19190f5adb613ea715d29c340ff8bc4113f24cd87c66b4fd"], &(0x7f0000000100)=0x5c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x3, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x2}, &(0x7f0000000300)=0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x0, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x3, 0x8000, 0xec, 0x9f, r3}, 0x10) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000000)=0x7fffffff, 0x4) getsockopt(r1, 0x5, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x8) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="af18e662d3c5e63ccffe32cac1de42f7841dcefb6c76da7de7d3bcd3c0ca5d23ce279a62004f984a20a8ae693382129a2ec5d6fdb3fa4f9061"}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000004060100000000007317f822000000000c00010000000000", @ANYRES32], 0x20}, 0x1}, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x300) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000100)="f1a02e608f978b1079c74ccc882afc13c42864c5997810e3b50d4a6ea00c4385e2ccebb9ffd51701355e299a6b2f49452515d6760526e4d5199eb8bc0a915c5e14d71f19926aa05a608c03fcdfd3") 2018/02/26 20:09:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 20:09:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x4, 0x1, 0x70bd2a, 0x0, {0x1}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x80) r1 = socket(0x10, 0x4, 0x100000000) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000100)={@remote, @local}, &(0x7f0000000180)=0x8) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x1000, 0x7}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x2, &(0x7f0000000200)=[{}, {}], &(0x7f0000000240)) 2018/02/26 20:09:09 executing program 5: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x0, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x8, 0x9, 0x21c, 0x80, 0x8001, @random="e5a89431647b"}, 0x10) 2018/02/26 20:09:09 executing program 7: semget(0x3, 0xfffffffffffffffe, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = dup2(r0, 0xffffffffffffff9c) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000200)={[{0x0, 0x3, 0x2, 0x4, 0xffff, 0x1, 0x1, 0x3ff, 0x774afefd, 0x3, 0x6, 0xff5, 0x3}, {0x89, 0x4, 0xf7, 0x80000000, 0x100000000, 0x1e1b, 0x5, 0x0, 0x401, 0xbc, 0x40, 0x1, 0x24e}, {0x6, 0x1, 0x8000, 0xfffffffffffffff9, 0x400, 0x9, 0x6066, 0x8, 0x0, 0xffffffff, 0x3, 0x1, 0xffff}], 0xfffffffffffffffc}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x101000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = epoll_create(0x40000000000985) ftruncate(r1, 0x9) dup3(r2, r0, 0x0) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f0000000140)) 2018/02/26 20:09:09 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB="000000000000b800000000000000002000000000000000000000009f0b2ddd98050000008c863104ba3bac4636ef830000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x480, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002600)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002640)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002680)={r2, 0x4, 0x3, [0x7f, 0x4, 0xffffffffffff8000]}, &(0x7f00000026c0)=0xe) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000003780)={r3, 0x7, 0x30, 0xc5, 0x5}, &(0x7f00000037c0)=0x18) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) r4 = dup(r0) shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000002580)={0x7, &(0x7f00000001c0)=""/80, &(0x7f00000024c0)=[{0x8419, 0x1000, 0x7, &(0x7f0000000240)=""/4096}, {0x5, 0xf4, 0x3f, &(0x7f0000001240)=""/244}, {0x7, 0x73, 0x3, &(0x7f0000001340)=""/115}, {0x10001, 0x53, 0x3, &(0x7f00000013c0)=""/83}, {0x577, 0x1, 0x400, &(0x7f0000001440)=""/1}, {0x6, 0x3c, 0x5, &(0x7f0000001480)=""/60}, {0x81, 0x1000, 0x20, &(0x7f00000014c0)=""/4096}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000025c0)='net/wireless\x00') accept$unix(r5, &(0x7f0000002700)=@file={0x0, ""/4096}, &(0x7f0000003740)=0x1002) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100)=0x401, 0x4) 2018/02/26 20:09:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x6080, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000100fc953ea309400000000000d514a7e784d2eb62ba00000000000000677fbe2f49bdfc26a547c4a9c2fb9652678e590fd25edb6f39b3c66556b3dc0a"]) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:09 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) get_thread_area(&(0x7f0000000040)={0x80000001, 0x100000, 0x2000, 0x5, 0x8, 0x8, 0x5, 0xff, 0x9}) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffff2e, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}, 0x9, 0x7, 0x3, 0x9, 0x4}, &(0x7f0000000140)=0xa0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2, 0xc, "c0c6144c9cbc71bcdedae5b9"}, &(0x7f00000001c0)=0x14) eventfd2(0x4, 0x800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) sendmmsg$inet_sctp(r3, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:09 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x321000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000100)=0x3ff) r1 = epoll_create(0x40000000000985) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) 2018/02/26 20:09:09 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) epoll_create(0x40000000000985) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000200)=0x1c) 2018/02/26 20:09:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x86) sendto$unix(r2, &(0x7f00000000c0)="9c216736a79fd8c1b88daabbde43f3d6e036149fb18938b3f4eade637030792ac661a3efd6b86ab575b7f00cadc5e9a899069bb4f328eb779009e061d1e404c44207192a6baab77d2aa44e8edaeeaaead899df98d6c3a4cf48b73cbe21f12925830b7178aa5b507ca16f8bde447f9f3dd0f1ce5d4dec3f499f2d599de6f7cbbe8fa7361a8b76def782687352142c6251b2cf2e7294c1db3dca4958610fef8746233af40e72471d9644e2411d314b36f5d2321368c738310884c68a9cf841c3a81ea64852f89d97c8da77d3ef7a6264d453d877cf43f4fecc", 0xd8, 0x44801, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) 2018/02/26 20:09:09 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x8001, 0x23, 0x4, 0x2, 0xfffffffffffffffe, 0x80, 0x20, 0x800, 0x6, 0x8, 0xf3, 0x1, 0x60f115f0, 0xfffffffffffffff9, 0x4]}, &(0x7f0000000140)=0x108) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x8c) r3 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x0, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r3, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000002c0)={0x1bf9e74c, 0x8, 0xffffffff00000001}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'ip6gre0\x00', 0x100}) 2018/02/26 20:09:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000000c0)={{0xcc17, 0x6, 0x77, 0x5, "710ab806272d9a19a83a43e1fe6ac65dcb8a6c33fa984f6e2ea8b8c1adc0d388aa3c477ce0f69a3a5d65a17f", 0x2}, 0x0, 0x0, 0x4, r2, 0x7fff, 0x7b3c, "ca84e30c790cbce6c09e8fc49220075deb221c275c8f96897e7052ec7009ac168df226f1b88f68b947149ac3db29a924fa1c2794a662d7963827e85ea62e7924", &(0x7f0000000080)='\'posix_acl_access\x00', 0x12, [], [0x2, 0x9, 0x3, 0x9]}) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xfffffffffffffeab, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, []}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x0, 0xffff, 0x9, 0x631, 0x1ba41c59, 0x7}) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xb, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200008000c00010000000000", @ANYRES32], 0x20}, 0x1}, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000100), 0x800) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071ff0f0000000000003d001600", @ifru_addrs=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e20, 0xd5ea, @mcast2={0xff, 0x2, [], 0x1}, 0xe7}}}}) epoll_create(0x40000000000985) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) dup3(r0, r0, 0x0) 2018/02/26 20:09:09 executing program 5: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x0, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x9, 0x4, 0x1a, 0x80, 0x1, 0x20000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x8, 0x5, 0x10000, 0x0, 0x2}}, &(0x7f00000000c0)=0xb8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) 2018/02/26 20:09:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000000495a17bc5acb7c576db1b2b4ee010000000000000000000000000004000000000000e2ac34bd479522b26366fa43cbdea908edeb27634610f8995f2919f7e1e7e5a5232acbce41ef7ed0cf710caddf9833bf3d171a9279ffb8549e8cd0645d86eb816729f45b7b4cdff7e077f47c6ffc2be19d3f5164810b282c2feca42f673f7f4125ec49016b30deb6a1052ca5534a6d3f3e77115ed84d8d675d4fb1dbb294fa061df3ed1f0e1dbddec6ba4bc2ff77b71042c1f168eba9217cbb8a165002376f05ad75c3a3bd698188db8b52c050cd3edcbf59588d63bc6983", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x8, {{0x2, 0x4e22, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x118) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB="000055264d0000000000000000000000000000000000000000000000000000ab0000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4522540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c00000000000000000000000000000000000000575b0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045ae0352cd981b210000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x3d, &(0x7f0000000200)=0x80000001, 0x4) init_module(&(0x7f0000000240)='\x00', 0x1, &(0x7f0000000280)='/dev/cuse\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000040)) r3 = dup2(r1, r1) sendmmsg$inet_sctp(r3, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001f40)='/dev/input/mouse#\x00', 0x7, 0x101000) getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback=0x7f000001}, 0xffffffffffffffed) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/229, 0xe5}, {&(0x7f0000001200)=""/250, 0xfa}, {&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/59, 0x3b}], 0x6, &(0x7f0000001440)=""/172, 0xac, 0x5e0}, 0x9}, {{&(0x7f0000001500)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x26, &(0x7f0000001bc0)=[{&(0x7f0000001540)=""/193, 0xc1}, {&(0x7f0000001640)=""/167, 0xa7}, {&(0x7f0000001700)=""/205, 0xcd}, {&(0x7f0000001800)=""/152, 0x98}, {&(0x7f00000018c0)=""/234, 0xea}, {&(0x7f00000019c0)=""/4, 0x4}, {&(0x7f0000001a00)=""/199, 0xc7}, {&(0x7f0000001b00)=""/62, 0x3e}, {&(0x7f0000001b40)=""/96, 0x60}], 0x9, &(0x7f0000001c80)=""/142, 0x8e, 0x40}, 0xcb}], 0x2, 0x2, &(0x7f0000001e00)={r3, r4+30000000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001e40)={0x0, 0x8, 0x8, 0x0, 0x0}, &(0x7f0000001e80)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001ec0)={0x7fff, 0x1f, 0x8000, 0x17, 0x80, 0x8bd5, 0x1200000000000, 0x1, r6}, &(0x7f0000001f00)=0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002000)='bic\x00', 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450008000001907800000000e000000100004e210401907800d7050200f5347500000000"], 0x0) 2018/02/26 20:09:09 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x38, 0x200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, 0xfffffffffffffbff}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x970, @local={0xfe, 0x80, [], 0xaa}, 0x7ff}}}, 0x8c) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0x40000000000985) dup3(r3, r2, 0x0) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x3, 0x0, [0x0, 0x0, 0x0]}) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x6}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) ioctl$KVM_SMI(r2, 0xaeb7) 2018/02/26 20:09:09 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = accept(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000040)=0x3a) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) recvmsg$netrom(r0, &(0x7f0000000ac0)={&(0x7f0000000100)=@full={{0x3, {"648c27313d2638"}, 0x1}, [{"ab8abc996de687"}, {"909d92c1d1129d"}, {"f7d66243180c73"}, {"281340211bbca7"}, {"5009372667c34b"}, {"78a9dca1458460"}, {"8bfe7e2cf34b51"}, {"7f4d5f73c340ab"}]}, 0x48, &(0x7f0000000680)=[{&(0x7f00000005c0)="1081b18c", 0x4}, {&(0x7f0000000600)="5ed2cda9d147a3c4eae8aaad23a779daaa526143d5ad1da0e163512e25fe666ba58e1abe7fe45395f043f81282320c203f9ad7a7d2095c69d7f728dbfd4f81839ce75e20de164513931d004629b3ddb85c64c90128f509a23810ae58bcac3ba50fdf", 0x62}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3e8, 0x8040}, 0x40) tee(r1, r0, 0x400, 0x0) r3 = epoll_create(0x40000000000985) r4 = dup3(r3, r2, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000001c0)={"e08d3bbdc90bf81302dab8140ba59bcf09f07b6677a6c8c80a8c9a2a045a3f48e095882f095dc48b6dc108fd4377ed7a17ca4b5a12a850e7a3ffae851705df61d9f0a99bda523e57d551286c1a054182a11c8c420e643df415735f4e47dad686bb52f59f116fbacca2c55b0887dac3b73db79755cf442f128eb4f90c59de54b466cc175f6b3f20d2d6516ac8335ce929e34e1d66dc47fe6cf062088fe167167fcd5ccfc0777ee5aaa2c08729d1876aa2bac1f3833682040ae2c0b2ba749c1ce555a87d9064b28f123f314d7c8187c46074aac969a262bcdb0ed6f29227ecf1f2bb209dc8c98ce2a0670a398928922c57aeb80edd2e3d79c6284c1df63d2d7a159c7d40616763a3bf0a58a1aeddae9b9442b48b31d995b6f2108d5fcbe289ece97f279073df52a2a681c9faad59886cb5768c0fd70ccf409ac4bd764dcdee5de297be0ea225dcbe0c73cb6d9a58ce28c5bbf333e0cf5aa570bd28e5b49003fb42c5345e352f021171b757df5fc79e2de4fa2797aff6757153c88c8fbb93a19f9ab18ceada0635693f2307e50f319f5f97e53125622e6acf7b00e7bd520523ca547075ebbb2d0671e3e366ee9420403bc33e94d42c4feb177e3613ebd38c743fc3831a7d5f59ddcf42d92fbd4a6598ea7f0a26015c49acde1c021b9fe1f42610a81eb413153d59f2ca9449f0b58acec5004016d4f4d0812b7407a041e45d96c42e93aaab0dcdac8b15c4b10516c807054dfc883187615e5a0936b76ba8b49c93e95830bcfb82c8cea11c2ee8f69f44d7e60fab3aa8f114f13fe0976d9cf1678debc6d47296e53766597c43c0ddb99f664a9a9c0c0ffddb85df7a876d672737340853f6b1fcecc76ea74b763cf05a2cd30432419ad6dcf8cb1cfe5182e3ba06e70e798256a10dba01de15d08ad233801cb765fde6fc83571c0c3ed18dfc15100038878ecdffb46dc2a4cc2953d85746a56b70fdb7fa1f6afa865643b5366ff6c6f6163334e69c0ab8ba43911b72ae4f2b7d7b1a704da488f05ef6d23c1629ba4c514c21866c9c697fb56d6ce3d33edd50f3f63b1bf05c3bc6e32d9cd9d11ca04d925d10d74c73b52cce358ec9136bc7397fef862ee290d1b76dd5766b79b2e4ec5af67a199639f071993a8334ec2f79fc079321995f5d3ea3dc770ec00fe290379307ad740334d3b459491921952e1dbe3ba4d5b2a0d45efe8fa6993afd0b33b503c8dbfd7473a09b8f371b354b16c3cb77bddf288a92a2b97f35aa421e7a4715522cc3b47a287f9f4de5f8fedb6b27bb5d9a895a62704e55c69b8b1d57c19063b375749f0bd941648fd7ac6ce6cb3dd6bc2cbb6f9c5a5add7fcdb1dde4db53896ba0cf33e6fc31dcb2dd36a27cd49ddbc11daee32a5c0d5d8046d24daf134eeadc0965f576820dc71366dce26eb6895131837183b4d76be4809c2bbee9f60832c1"}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000b00)={0x8, 0x2000}) 2018/02/26 20:09:09 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readahead(r1, 0xffffffffffffffd9, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000f00501000000000000000000000000000c7a91000000000019b90774fbe998224ee00e4b90401752e13a998b4697a4d34025db8a904348e10cf1cfbdfeb55ac704fc667f5bd56da744335bf00db0b4b5f131bc4a0342281af39257ff12bd7d69d97da250f9c884d6eeb8c1e3d05be347e58492f52b3d2e14d24d84731cb5f29583b9599c233c", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r0, 0x5462, &(0x7f0000000100)) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x10a}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @empty}, 0x40, {0x2, 0x4e23, @multicast1=0xe0000001}, 'ip6tnl0\x00'}) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000d21d407f8f0000000000000000000000000000000000000000000007000000001004000008010000080100000801000028030000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ac14140b7f000001ff000000000000ff00000000000000000000000000000000ff00ff0000000000000000000000000000000000000000000000000000000000ff00ffffff00000000000000000000000001000401880040fff8000769726c616e300000000000000000000064756d6d793000000000000000000000ff000000000000000000000000000000ff0000000000000000000000000000000000510000000000c000080100000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000800000800000000000000ffffffffac1414bbffffffffffffffffaaaaaaaaaabb00000000000000000000ffff000000ff000000000000000000000180c200000100000000000000000000000000ffffff00000000000000000000fff9000500000004000000097465716c30000000000000000000000062726964676530000000000000000000ff000000000000000000000000000000ff0000000000000000000000000000000000010000000000c000100100000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ac1414aa0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa1500000000000000000000aaaaaaaaaabb00000000000000000000e0000002e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x460) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:09 executing program 7: r0 = semget(0x1, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:09 executing program 2: r0 = socket$inet(0x2, 0x1, 0xfffffffffffffcd5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) sendto$inet(r0, &(0x7f0000000080)="99679466a2d872298b4eaf1db7f014ae0662e53b689b23dec5cd18787e9a702ee11e497aec03b4335e907abb111072632ae43d7fd5276a390a0ad12a83b97e1f56c7b794768f0f4544602cb457ada1735048f864cae91d50b2b441aac449af610b3066d5371476188221f729e262f1b6943d4e6996c458bb21a37aed32a58c7c2f4ad79af183cbb80e8ba9f2bcf7e10f406b8dd71d89bc0e182d5339d3a9a33beb7c5e7839b78b36e928009f7ed7549dc3d27233beb9ea416f2791cbaf9ec5d6d21be352fc79eef593e8c35a3fe2e1bd51630bf4aa38d7ce7d79b77699a6143b8667c149dd7a1c859e133cec2795112efc026e38b6bc", 0xf6, 0x800, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) recvmmsg(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/48, 0x30}], 0x6, &(0x7f00000005c0)=""/143, 0x8f, 0x3}, 0xff}, {{&(0x7f0000000680)=@l2, 0xe, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000000780)=""/151, 0x97}], 0x2, &(0x7f0000000880)=""/192, 0xc0, 0x1}, 0x3}, {{&(0x7f0000000940)=@nl=@proc, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/210, 0xd2}, {&(0x7f0000000a80)=""/155, 0x9b}], 0x2, &(0x7f0000000b80)=""/120, 0x78, 0x7}, 0x81}, {{&(0x7f0000000c00)=@can={0x0, 0x0}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000c40)=""/43, 0x2b}, {&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f0000000d00)=""/108, 0x6c}, {&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/64, 0x40}, {&(0x7f0000000e40)=""/46, 0x2e}, {&(0x7f0000000e80)=""/206, 0xce}, {&(0x7f0000000f80)=""/156, 0x9c}], 0x8, 0x0, 0x0, 0xfffffffffffffffd}, 0x4}, {{&(0x7f00000010c0)=@l2, 0xe, &(0x7f0000001240)=[{&(0x7f0000001100)=""/58, 0x3a}, {&(0x7f0000001140)=""/2, 0x2}, {&(0x7f0000001180)=""/90, 0x5a}, {&(0x7f0000001200)=""/44, 0x2c}], 0x4, &(0x7f0000001280)=""/30, 0x1e, 0x800}, 0x4}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000012c0)=""/202, 0xca}, {&(0x7f00000013c0)=""/221, 0xdd}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002500)=""/4096, 0x1000, 0x8001}, 0x9}, {{&(0x7f0000003500)=@l2, 0xe, &(0x7f00000049c0)=[{&(0x7f0000003540)=""/228, 0xe4}, {&(0x7f0000003640)=""/33, 0x21}, {&(0x7f0000003680)=""/210, 0xd2}, {&(0x7f0000003780)=""/7, 0x7}, {&(0x7f00000037c0)=""/224, 0xe0}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/144, 0x90}, {&(0x7f0000004980)=""/20, 0x14}], 0x8, &(0x7f0000004a40)=""/58, 0x3a, 0x1000}}], 0x7, 0x40002043, &(0x7f0000004c40)={0x77359400}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004c80)={0x0, 0x0}, &(0x7f0000004cc0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004d00)={0x0, @remote, @broadcast}, &(0x7f0000004d40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004d80)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000004e80)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005100)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000005200)=0xe8) getresuid(&(0x7f0000005240), &(0x7f0000005280), &(0x7f00000052c0)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005600)={&(0x7f0000005300)=@acquire={0x2f4, 0x17, 0x520, 0x70bd25, 0x25dfdbfc, {{@in=@broadcast=0xffffffff, 0x4d4, 0x3b}, @in6=@dev={0xfe, 0x80, [], 0x16}, {@in=@rand_addr=0x80000000, @in=@multicast2=0xe0000002, 0x4e21, 0x2, 0x4e20, 0x4, 0xa, 0xa0, 0x80, 0x3b, r2, r3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x9, 0x4e21, 0x4, 0xa, 0x20, 0x80, 0x2c, r4, r5}, {0x8, 0x6, 0x0, 0x2, 0x1f, 0x80, 0x0, 0x100}, {0x1, 0x3f, 0x7, 0xffffffffffffffe1}, 0x4, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}, 0x6, 0xaa5a, 0x9, 0x70bd2a}, [@output_mark={0x8, 0x1d, 0x1ff}, @algo_crypt={0xfc, 0x2, {{'salsa20\x00'}, 0x598, "bfa98ed589b137c4b11435573a74fa4bff5ea122ea6a1d809255429dfe1d4a67af94a194078af22e5a41cdc89180f3f2e0b78c7b0e6c6b1b4153bb62b8bd45ac47d4042174e0878768c0afdb3b891d9eb9cdb52bcff26a96040a3cfb39284f3f77ad3f4f6bd1ca1b924536d73b9ff43cecad4d5014c18e4738e00a3e27a67e875275f766a0680582970717871e33affd8fae9d2b1080f8a122d5f390063d07d6300033830462b818bdc27b61b211257c30a1b1"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd29, 0xffff}}, @etimer_thresh={0x8, 0xc, 0x9}, @policy={0xb0, 0x7, {{@in6=@dev={0xfe, 0x80, [], 0x17}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x4e21, 0x1ff, 0x4e23, 0xd8a5, 0x0, 0x80, 0x80, 0x3a, r6, r7}, {0x6, 0xa6f, 0x2, 0x20, 0x6a2c, 0x5, 0x4, 0x7}, {0x0, 0x100, 0x7f, 0x5}, 0x0, 0x6e6bba, 0x3, 0x1, 0x2}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x201, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 20:09:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) write$vnet(r1, &(0x7f0000001080)={0x1, {&(0x7f0000000040)=""/15, 0xf, &(0x7f0000000080)=""/4096, 0x2, 0x2}}, 0x68) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) timerfd_gettime(r1, &(0x7f0000001100)) 2018/02/26 20:09:09 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@nfc={0x27, 0x1, 0x817d, 0x7}}) socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={"6430058664ff2f000000000000fb00", @ifru_map={0x1f, 0x4, 0x3f0, 0xe6, 0x10000, 0x10001}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:09 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x10040, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000005c0)={0xffff, 0xfb73}, 0x2) fcntl$getown(r1, 0x9) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x9, 0xffffffff, 0x1, 0x3, 0x5, [{0x6, 0xfffffffffffffffc, 0x20, 0x0, 0x0, 0x400}, {0x1, 0xd4b4, 0x7ff, 0x0, 0x0, 0x100}, {0x8, 0x3, 0x4, 0x0, 0x0, 0x100}, {0x400, 0x3, 0x7, 0x0, 0x0, 0x1200}, {0x7, 0x40, 0xb1, 0x0, 0x0, 0x2000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120601100000000000000000000000000c0000f21000000090ee5065ab1ffe3698c965a9c433f9d18b33822cac361183d7fa12fecbcccd7834f83c89b5b624d3e52ec5b42fd0c63c9a828f5f15284f86e33c6b71d727b13a3c9d5c4ba38ecf99cd338f471559f0559b4fae8d1a1af9cca92c620267fb6c36877956accd838b02f93d12edd1246571d793be8fe7", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:09 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = accept(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000040)=0x3a) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) recvmsg$netrom(r0, &(0x7f0000000ac0)={&(0x7f0000000100)=@full={{0x3, {"648c27313d2638"}, 0x1}, [{"ab8abc996de687"}, {"909d92c1d1129d"}, {"f7d66243180c73"}, {"281340211bbca7"}, {"5009372667c34b"}, {"78a9dca1458460"}, {"8bfe7e2cf34b51"}, {"7f4d5f73c340ab"}]}, 0x48, &(0x7f0000000680)=[{&(0x7f00000005c0)="1081b18c", 0x4}, {&(0x7f0000000600)="5ed2cda9d147a3c4eae8aaad23a779daaa526143d5ad1da0e163512e25fe666ba58e1abe7fe45395f043f81282320c203f9ad7a7d2095c69d7f728dbfd4f81839ce75e20de164513931d004629b3ddb85c64c90128f509a23810ae58bcac3ba50fdf", 0x62}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3e8, 0x8040}, 0x40) tee(r1, r0, 0x400, 0x0) r3 = epoll_create(0x40000000000985) r4 = dup3(r3, r2, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000001c0)={"e08d3bbdc90bf81302dab8140ba59bcf09f07b6677a6c8c80a8c9a2a045a3f48e095882f095dc48b6dc108fd4377ed7a17ca4b5a12a850e7a3ffae851705df61d9f0a99bda523e57d551286c1a054182a11c8c420e643df415735f4e47dad686bb52f59f116fbacca2c55b0887dac3b73db79755cf442f128eb4f90c59de54b466cc175f6b3f20d2d6516ac8335ce929e34e1d66dc47fe6cf062088fe167167fcd5ccfc0777ee5aaa2c08729d1876aa2bac1f3833682040ae2c0b2ba749c1ce555a87d9064b28f123f314d7c8187c46074aac969a262bcdb0ed6f29227ecf1f2bb209dc8c98ce2a0670a398928922c57aeb80edd2e3d79c6284c1df63d2d7a159c7d40616763a3bf0a58a1aeddae9b9442b48b31d995b6f2108d5fcbe289ece97f279073df52a2a681c9faad59886cb5768c0fd70ccf409ac4bd764dcdee5de297be0ea225dcbe0c73cb6d9a58ce28c5bbf333e0cf5aa570bd28e5b49003fb42c5345e352f021171b757df5fc79e2de4fa2797aff6757153c88c8fbb93a19f9ab18ceada0635693f2307e50f319f5f97e53125622e6acf7b00e7bd520523ca547075ebbb2d0671e3e366ee9420403bc33e94d42c4feb177e3613ebd38c743fc3831a7d5f59ddcf42d92fbd4a6598ea7f0a26015c49acde1c021b9fe1f42610a81eb413153d59f2ca9449f0b58acec5004016d4f4d0812b7407a041e45d96c42e93aaab0dcdac8b15c4b10516c807054dfc883187615e5a0936b76ba8b49c93e95830bcfb82c8cea11c2ee8f69f44d7e60fab3aa8f114f13fe0976d9cf1678debc6d47296e53766597c43c0ddb99f664a9a9c0c0ffddb85df7a876d672737340853f6b1fcecc76ea74b763cf05a2cd30432419ad6dcf8cb1cfe5182e3ba06e70e798256a10dba01de15d08ad233801cb765fde6fc83571c0c3ed18dfc15100038878ecdffb46dc2a4cc2953d85746a56b70fdb7fa1f6afa865643b5366ff6c6f6163334e69c0ab8ba43911b72ae4f2b7d7b1a704da488f05ef6d23c1629ba4c514c21866c9c697fb56d6ce3d33edd50f3f63b1bf05c3bc6e32d9cd9d11ca04d925d10d74c73b52cce358ec9136bc7397fef862ee290d1b76dd5766b79b2e4ec5af67a199639f071993a8334ec2f79fc079321995f5d3ea3dc770ec00fe290379307ad740334d3b459491921952e1dbe3ba4d5b2a0d45efe8fa6993afd0b33b503c8dbfd7473a09b8f371b354b16c3cb77bddf288a92a2b97f35aa421e7a4715522cc3b47a287f9f4de5f8fedb6b27bb5d9a895a62704e55c69b8b1d57c19063b375749f0bd941648fd7ac6ce6cb3dd6bc2cbb6f9c5a5add7fcdb1dde4db53896ba0cf33e6fc31dcb2dd36a27cd49ddbc11daee32a5c0d5d8046d24daf134eeadc0965f576820dc71366dce26eb6895131837183b4d76be4809c2bbee9f60832c1"}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000b00)={0x8, 0x2000}) 2018/02/26 20:09:09 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r0) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="db4c30944aa8357754a6e9e36580fffffff8ffff0180c2000000080045000024000001000011907800020000e000000100004e2104fcf448a3d711ffff0000751c7b81c0841ffc02885050fe29199ffa65b2d26d57d25ef44c6ccfcb3a992a8496d853712b78fcf505ed827eb12886c394ac8be6fa1b7476dfdd5e1ac2a7589edc815cd083a1b633fe7da5862231"], 0x0) r2 = getuid() setuid(r2) 2018/02/26 20:09:09 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r2 = epoll_create(0x40000000000985) dup3(r2, r2, 0x0) 2018/02/26 20:09:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b202000004060100000000000400000000000000a21d9fcf8546af1b5bfef5d500000000", @ANYRES32], 0x20}, 0x1}, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)) 2018/02/26 20:09:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x400000000000000, 0x4001, 0x1ff, 0x1, 0x13}) 2018/02/26 20:09:10 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) prctl$setendian(0x14, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 20:09:10 executing program 7: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x11b200, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="b80000001df3ea3d2be513c319314bc38d97b62aa92807971ab9c49a64b3525b43e1d452622447157e6e61d55f8cfe4b94ecc255151027eddbe6ebcaf00496a9c7e1b44c7b781200786329a1bdb848b2d24fe2176c33621a83b65b4bca51974b811928394a008c7019c2b13be14b2efb01ba1de13796c05db1c8e7a9dbd216748cbfa4ce4fe2446a4ac4bedb90e97aca803d60372461a6898555a0aa5fdaefb6bfa182e4e3be3296c09a"], &(0x7f00000002c0)=0xc0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0x9}}, 0x5, 0x4, 0x7, 0x4, 0x80}, &(0x7f00000003c0)=0xa0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000400)={0x80, 0x1}) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0x10003) dup3(r3, r2, 0x0) 2018/02/26 20:09:10 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x84e7, 0x2082) write$selinux_create(r0, &(0x7f0000000140)=@objname={'system_u:object_r:netutils_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x36, 0x39, 0x20, './file0\x00'}, 0x5e) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000340)=@ioapic) 2018/02/26 20:09:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0xa44) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:10 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xb) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) mq_timedsend(r0, &(0x7f00000001c0)="b389ff9c151d1d38c06d2df24c408487dba2668c0661c468cd47b4b2fa30b9a76af2031b8b0ee6edc5129267292e106891222be79314399840ded4134a19de3c927d949af91ffd4997361a18c033b56a121f24fd", 0x54, 0xffffffffbeb6a76e, &(0x7f0000000140)={0x0, 0x1c9c380}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:10 executing program 6: r0 = socket$inet(0xa, 0x800, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000000000)="7d312555c178dabaada45724827db8232d5b5427c75d80e2ffe770fbd2a1025ad3367b6125bf02740858fdbc1574ba41b5eac1c9862d9a816876240c7d8707ac697479c60e0cb213086e4d3142ce7cdc2bc603a386e60fcc39ba6590ecff9228946c494f628243f126d7e5a2facfb38a79bb04417776912ef59ec05a40c3471954a09d705c503b7e6ad80661ee27a2f1dcf876f66d06b49db9efc7eed03b3d4ec9cd3fcb7ace437723c8d441", 0xac, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:10 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = accept(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000040000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000040)=0x3a) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) recvmsg$netrom(r0, &(0x7f0000000ac0)={&(0x7f0000000100)=@full={{0x3, {"648c27313d2638"}, 0x1}, [{"ab8abc996de687"}, {"909d92c1d1129d"}, {"f7d66243180c73"}, {"281340211bbca7"}, {"5009372667c34b"}, {"78a9dca1458460"}, {"8bfe7e2cf34b51"}, {"7f4d5f73c340ab"}]}, 0x48, &(0x7f0000000680)=[{&(0x7f00000005c0)="1081b18c", 0x4}, {&(0x7f0000000600)="5ed2cda9d147a3c4eae8aaad23a779daaa526143d5ad1da0e163512e25fe666ba58e1abe7fe45395f043f81282320c203f9ad7a7d2095c69d7f728dbfd4f81839ce75e20de164513931d004629b3ddb85c64c90128f509a23810ae58bcac3ba50fdf", 0x62}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3e8, 0x8040}, 0x40) tee(r1, r0, 0x400, 0x0) r3 = epoll_create(0x40000000000985) r4 = dup3(r3, r2, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000001c0)={"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"}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000b00)={0x8, 0x2000}) 2018/02/26 20:09:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x39}}}, &(0x7f0000000300)=0x8c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x3, 0x9, 0x8, 0x7fff, 0x55, 0x3, 0xfffffffffffffffc, 0x8, r2}, 0x20) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000100)={0x9, 0x8000, 0x5, 0xfffffffffffffff7}) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200)=0x9, 0x4) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 2018/02/26 20:09:10 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f00000001c0)=""/198, &(0x7f0000000040)=0xc6) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f0000000140)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xfffffffffffffd0b, &(0x7f00004e2000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000050601000000002200000000000000000c00010000000000", @ANYPTR], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x880) 2018/02/26 20:09:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$inet(0x2, 0x3, 0x5, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x7f, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in6={0xa, 0x4e20, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x1}], 0x90) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/status\x00', 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000740)={"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"}) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f00000d1000), &(0x7f0000a87000), &(0x7f0000858000), &(0x7f0000478000)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000004c0000010001400000000e388e465b000000000000"]) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x81) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0200003d00000129bd7000fddbdf25020000000c002e0000000000", @ANYRES32, @ANYBLOB="0800630000000000b5aff40e74038662dab432cd498b891cc004efd9f622158c9a6ad2b7909af28b456c6e4efc1216ad6c6274eecab36612275434e47426635b26da5ff9953341634f257c20a4785fd563c09cff03f9252c2f85303f92bbd60c00260000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x48000}, 0x4) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f47500200000"]) 2018/02/26 20:09:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2001, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)=0x5, 0x4) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:10 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) msgget(0x2, 0x481) dup3(r1, r0, 0x0) 2018/02/26 20:09:10 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000f801000000000000ffffffffffffffffb0000000ffffffff60010000ffffffffffffffff60010000ffffffff03000000", @ANYPTR=&(0x7f0000443000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000b00000000000000000000000000000000000000000002000736f000000000000000000000000002000545241434500000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b0000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000079f201"], 0x258) r1 = socket$inet(0x2, 0x4, 0xede2) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 20:09:10 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000ff687e4d4c5b30bd385725e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d84d0a1599c4feaa79b1da4434eb95718323fc8b79937669b12135e951ab4"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = memfd_create(&(0x7f0000000000)='wlan0\x00', 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0xc280000000000000, 0x1f005, 0x1, 0x0, 0x5}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000040)=0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x3, 0x5, 0x0, 0x5, 0x2269, 0xed90}, 0xfffffffffffffffc}, 0xa) r3 = dup2(r1, r1) sendmmsg$inet_sctp(r3, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mlockall(0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="56dea3d59dde2a3059103b2809e5b51d90ea50ed85706298cc81138e6d15538d7b6bf85260fb14938701d6e5517092806f1af7bf5444297b2a2adc032f03e70ddbd8006df4dee2ef28d864db612d4736c6003cb895f66fc5b18635ff2cfd0cf1811576402a40e461269661118b335cf60e4942f43a6172e81ecf19a1f335dec452098ef259000430e28eb1537c47bf683e41adbd3b60c1a855270a8bd053f31109ea535b4c08843cbc1d60f461494712abdf3b8cb5210a146a7250b7", 0xbc, 0xfffffffffffffffa) r3 = add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="d5f0c7f65bf60b2bf435ed326ba7527c446e892c7e8ad0f273a4ae06334c9292bb6f2211516d7b2ed7f709b1fc58f5c458fc763ca18142b3b9960c98e88fb30e3b890f515df27a9d0d45513495ec98a9fd15efa7e632839766921f0e2d4a7484b97776edcc9e98047c6913711e88b97e7f0136bce032750eb4a9cbdecd9ec4ac81ecb311683c69993c852b636db08e03dd30cadb8ee802d7a1f4de8b976c3428978cd1b87ae0487a9c31b8c3a078218fc53913443dc17c8e4f22b758dd370d1bddff7920a99d98266fd317fb4b8314b3df7c0e6e86fce4ba35be2deba789a2c360", 0xe1, r2) keyctl$read(0xb, r3, &(0x7f0000000200)=""/86, 0x56) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f00000000c0)='\'\x00', 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x10001}}}, &(0x7f00000001c0)=0x8c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x8, 0x3, 0x80000001, 0x8, 0x1f}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:10 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x240) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9, 0xa, [0x5, 0x8000, 0x8000, 0x2, 0x0, 0x5, 0xa, 0x7fff, 0x7fffffff, 0x80000000]}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x7}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 2018/02/26 20:09:10 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000300)) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r2 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x200000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0x40000000000981) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x3, 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0x9, 0x6, 0x40, 0x6}, 0x8) r4 = dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000200)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 2018/02/26 20:09:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:10 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000000, 0x2f7aa8e682c5f4a3) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:10 executing program 5 (fault-call:8 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:10 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000005def296692009de9e3a5690f1c4f46ea77e21c5c304a8c611b8303372ee70f15c2fe121f28b9f128adb8a0b6147b12359d9147e54da761d87f24a2983bfb015a6fb9585ba26455a01db1c57386f2f13737ee9a3f1d0d36f641dd8604c0ae7a6810df6da674b38dce6e3db2852ee5"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r0, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) [ 292.021638] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 292.033566] syz-executor5 cpuset=/ mems_allowed=0 [ 292.038473] CPU: 0 PID: 9152 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 292.045738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.055082] Call Trace: [ 292.057656] dump_stack+0x194/0x24d [ 292.061266] ? arch_local_irq_restore+0x53/0x53 [ 292.065912] ? idr_get_free+0xfd0/0xfd0 [ 292.069863] ? kernel_text_address+0x102/0x140 [ 292.074430] warn_alloc+0x19a/0x2b0 [ 292.078039] ? zone_watermark_ok_safe+0x400/0x400 [ 292.082869] ? save_stack+0xa3/0xd0 [ 292.086471] ? save_stack+0x43/0xd0 [ 292.090070] ? kasan_kmalloc+0xad/0xe0 [ 292.093928] ? __kmalloc_node+0x47/0x70 [ 292.097877] ? kvmalloc_node+0x64/0xd0 [ 292.101750] __vmalloc_node_range+0x4f0/0x650 [ 292.106230] ? xt_alloc_entry_offsets+0x21/0x30 [ 292.111425] __vmalloc_node_flags_caller+0x50/0x60 [ 292.116335] ? xt_alloc_entry_offsets+0x21/0x30 [ 292.120982] kvmalloc_node+0x82/0xd0 [ 292.124672] xt_alloc_entry_offsets+0x21/0x30 [ 292.129144] translate_table+0x235/0x1690 [ 292.133269] ? lock_release+0xa40/0xa40 [ 292.137218] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 292.143077] ? __check_object_size+0x8b/0x530 [ 292.147553] ? __might_sleep+0x95/0x190 [ 292.151503] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 292.156325] ? kasan_check_write+0x14/0x20 [ 292.160533] ? _copy_from_user+0x99/0x110 [ 292.164661] do_ip6t_set_ctl+0x370/0x5f0 [ 292.168703] ? translate_compat_table+0x1c50/0x1c50 [ 292.173708] ? mutex_unlock+0xd/0x10 [ 292.177401] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 292.182659] nf_setsockopt+0x67/0xc0 [ 292.186357] ipv6_setsockopt+0x10b/0x130 [ 292.190495] tcp_setsockopt+0x82/0xd0 [ 292.194275] sock_common_setsockopt+0x95/0xd0 [ 292.198748] SyS_setsockopt+0x189/0x360 [ 292.202702] ? SyS_recv+0x40/0x40 [ 292.206137] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 292.211653] ? do_syscall_64+0xb6/0x940 [ 292.215605] ? SyS_recv+0x40/0x40 [ 292.219033] do_syscall_64+0x280/0x940 [ 292.222897] ? __do_page_fault+0xc90/0xc90 [ 292.227104] ? _raw_spin_unlock_irq+0x27/0x70 [ 292.231576] ? finish_task_switch+0x1c1/0x7e0 [ 292.236049] ? syscall_return_slowpath+0x550/0x550 [ 292.240957] ? syscall_return_slowpath+0x2ac/0x550 [ 292.245864] ? prepare_exit_to_usermode+0x350/0x350 [ 292.250858] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 292.256207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.261036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.266199] RIP: 0033:0x453d69 [ 292.269360] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.277044] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 292.284287] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 292.291533] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 292.298779] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 292.306024] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 292.313481] warn_alloc_show_mem: 1 callbacks suppressed [ 292.313484] Mem-Info: [ 292.321341] active_anon:77647 inactive_anon:62 isolated_anon:0 [ 292.321341] active_file:3737 inactive_file:9077 isolated_file:0 [ 292.321341] unevictable:0 dirty:96 writeback:0 unstable:0 [ 292.321341] slab_reclaimable:12290 slab_unreclaimable:96381 [ 292.321341] mapped:24373 shmem:87 pagetables:806 bounce:0 [ 292.321341] free:1401686 free_pcp:347 free_cma:0 [ 292.354593] Node 0 active_anon:310588kB inactive_anon:248kB active_file:14948kB inactive_file:36308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97492kB dirty:384kB writeback:0kB shmem:348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 292.382552] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.388748] FAULT_INJECTION: forcing a failure. [ 292.388748] name failslab, interval 1, probability 0, space 0, times 0 [ 292.408703] lowmem_reserve[]: 0 2864 6373 6373 [ 292.408726] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:872kB local_pcp:296kB free_cma:0kB [ 292.408747] lowmem_reserve[]: 0 0 3509 3509 [ 292.408761] Node 0 Normal free:2656184kB min:37120kB low:46400kB high:55680kB active_anon:310588kB inactive_anon:248kB active_file:14948kB inactive_file:36308kB unevictable:0kB writepending:384kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5152kB pagetables:3224kB bounce:0kB free_pcp:552kB local_pcp:216kB free_cma:0kB [ 292.408781] lowmem_reserve[]: 0 0 0 0 [ 292.408797] Node 0 DMA: 1*4kB [ 292.420010] CPU: 1 PID: 9171 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 292.424572] (U) [ 292.452202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.452206] Call Trace: [ 292.452228] dump_stack+0x194/0x24d [ 292.456523] 0*8kB [ 292.486248] ? arch_local_irq_restore+0x53/0x53 [ 292.486260] ? lock_page_memcg+0x2af/0x380 [ 292.490040] 0*16kB [ 292.493215] should_fail+0x8c0/0xa40 [ 292.500464] 1*32kB [ 292.502412] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.502422] ? unlock_page_memcg+0x2c/0x40 [ 292.511756] (U) [ 292.514308] ? page_add_file_rmap+0x670/0xc50 [ 292.514334] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.517928] 2*64kB [ 292.520049] ? find_held_lock+0x35/0x1d0 [ 292.520069] ? __lock_is_held+0xb6/0x140 [ 292.524708] (U) [ 292.528932] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 292.531141] 1*128kB [ 292.534825] ? rcu_note_context_switch+0x710/0x710 [ 292.534850] should_failslab+0xec/0x120 [ 292.537051] (U) [ 292.542128] kmem_cache_alloc_node+0x56/0x760 [ 292.542146] ? tcp_v4_parse_md5_keys+0x2d0/0x2d0 [ 292.546351] 1*256kB [ 292.548305] __alloc_skb+0xf1/0x780 [ 292.548317] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.552786] (U) [ 292.557940] ? skb_copy_and_csum_dev+0x370/0x370 [ 292.557951] ? rt_cpu_seq_show+0x2c0/0x2c0 [ 292.557960] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.560177] 0*512kB [ 292.564215] ? tcp_v4_md5_lookup+0x22/0x30 [ 292.564229] ? tcp_established_options+0x2c5/0x420 [ 292.568263] 1*1024kB [ 292.570211] ? tcp_current_mss+0x254/0x380 [ 292.570225] ? tcp_mtu_to_mss+0x460/0x460 [ 292.576079] (U) [ 292.578380] sk_stream_alloc_skb+0x126/0x9a0 [ 292.578398] ? tcp_init_transfer+0x3e0/0x3e0 [ 292.583301] 1*2048kB [ 292.587244] ? trace_event_raw_event_lock_acquire+0x262/0x440 [ 292.587260] ? tcp_fastopen_active_detect_blackhole+0x1e0/0x1e0 [ 292.589213] (M) [ 292.593680] ? check_noncircular+0x20/0x20 [ 292.593697] ? tcp_send_mss+0xa4/0x2f0 [ 292.598431] 3*4096kB [ 292.600728] tcp_sendmsg_locked+0x15f6/0x3c70 [ 292.600754] ? lock_downgrade+0x980/0x980 [ 292.604343] (M) [ 292.609502] ? lock_release+0xa40/0xa40 [ 292.609529] ? tcp_sendpage+0x60/0x60 [ 292.611471] = 15908kB [ 292.616221] ? print_irqtrace_events+0x270/0x270 [ 292.620428] Node 0 [ 292.625579] ? find_held_lock+0x35/0x1d0 [ 292.625603] ? lock_acquire+0x1d5/0x580 [ 292.627909] DMA32: [ 292.632104] ? lock_acquire+0x1d5/0x580 [ 292.632113] ? tcp_sendmsg+0x21/0x50 [ 292.632141] ? mark_held_locks+0xaf/0x100 [ 292.637042] 4*4kB [ 292.639415] ? do_raw_spin_trylock+0x190/0x190 [ 292.639434] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 292.643650] (M) [ 292.647761] ? lock_sock_nested+0x91/0x110 [ 292.647770] ? trace_hardirqs_on+0xd/0x10 [ 292.647782] ? __local_bh_enable_ip+0x121/0x230 [ 292.649734] 2*8kB [ 292.654118] tcp_sendmsg+0x2f/0x50 [ 292.654131] inet_sendmsg+0x11f/0x5e0 [ 292.658513] (M) 2018/02/26 20:09:10 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x4, 0x200, 0x7, 0x0, 0x7fffffff, 0x800, 0x3, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfff, 0x9, 0xffff, 0x1ff, 0x7}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r1, 0xfffffffffffff000, 0x80000001, 0x7, 0x3, 0xcd7, 0x1fad, 0x4ad, {r2, @in6={{0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}, 0x7f, 0x54a8, 0x4, 0x3000000000, 0x2}}, &(0x7f0000000200)=0xb8) r3 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r4, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r5 = dup2(r4, r4) sendmmsg$inet_sctp(r5, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:11 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) 2018/02/26 20:09:11 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 292.660889] ? __might_sleep+0x95/0x190 [ 292.660903] ? inet_create+0xf50/0xf50 [ 292.666774] 1*16kB [ 292.672798] ? selinux_socket_sendmsg+0x36/0x40 [ 292.672810] ? security_socket_sendmsg+0x89/0xb0 [ 292.674762] (M) [ 292.678960] ? inet_create+0xf50/0xf50 [ 292.678974] sock_sendmsg+0xca/0x110 [ 292.682841] 2*32kB [ 292.685220] SYSC_sendto+0x361/0x5c0 [ 292.685237] ? SYSC_connect+0x4a0/0x4a0 [ 292.689709] (M) [ 292.693823] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 292.693835] ? vfs_write+0x374/0x510 [ 292.695788] 1*64kB [ 292.699727] ? wait_for_completion+0x770/0x770 [ 292.699748] ? __lock_is_held+0xb6/0x140 [ 292.703520] (M) [ 292.705922] ? __sb_end_write+0xa0/0xd0 [ 292.710647] 2*128kB [ 292.712855] ? fput+0xd2/0x140 [ 292.712870] ? SyS_write+0x184/0x220 [ 292.716905] (M) [ 292.720848] ? SyS_read+0x220/0x220 [ 292.720869] SyS_sendto+0x40/0x50 [ 292.723077] 3*256kB [ 292.727018] ? SyS_getpeername+0x30/0x30 [ 292.727030] do_syscall_64+0x280/0x940 [ 292.730719] (UM) [ 292.734830] ? __do_page_fault+0xc90/0xc90 [ 292.734838] ? _raw_spin_unlock_irq+0x27/0x70 [ 292.734850] ? finish_task_switch+0x1c1/0x7e0 [ 292.736980] 3*512kB [ 292.741527] ? syscall_return_slowpath+0x550/0x550 [ 292.741540] ? syscall_return_slowpath+0x2ac/0x550 [ 292.746532] (UM) [ 292.748474] ? prepare_exit_to_usermode+0x350/0x350 [ 292.748487] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 292.752700] 3*1024kB [ 292.756820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.756841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.761478] (UM) [ 292.763593] RIP: 0033:0x453d69 [ 292.763598] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 292.763610] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 292.767135] 2*2048kB [ 292.770895] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 292.770901] RBP: 000000000072bf58 R08: 0000000020000100 R09: 0000000000000010 [ 292.770906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 292.770913] R13: 00000000000004bb R14: 00000000006f7228 R15: 0000000000000000 [ 292.772870] (UM) [ 292.817765] FAULT_INJECTION: forcing a failure. [ 292.817765] name failslab, interval 1, probability 0, space 0, times 0 [ 292.818867] 714*4096kB (M) = 2934448kB [ 292.818879] Node 0 Normal: 871*4kB [ 292.822630] CPU: 1 PID: 9176 Comm: syz-executor0 Not tainted 4.16.0-rc3+ #330 [ 292.824837] (UME) [ 292.829381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.829385] Call Trace: [ 292.829400] dump_stack+0x194/0x24d [ 292.829417] ? arch_local_irq_restore+0x53/0x53 [ 292.833452] 97*8kB [ 292.835418] should_fail+0x8c0/0xa40 [ 292.839369] (UME) [ 292.841661] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.841680] ? ip6_pkt_prohibit_out+0x160/0x160 [ 292.844845] 42*16kB [ 292.848529] ? rcu_pm_notify+0xc0/0xc0 [ 292.848554] ? find_held_lock+0x35/0x1d0 [ 292.850496] (UME) [ 292.854122] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 292.857538] 1371*32kB [ 292.859834] ? rcu_note_context_switch+0x710/0x710 [ 292.859862] should_failslab+0xec/0x120 [ 292.863885] (UME) [ 292.867739] kmem_cache_alloc_node+0x56/0x760 [ 292.867768] __alloc_skb+0xf1/0x780 [ 292.869795] 753*64kB [ 292.874000] ? skb_copy_and_csum_dev+0x370/0x370 [ 292.874019] ? print_irqtrace_events+0x270/0x270 [ 292.874031] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.878504] (UM) [ 292.882963] ? print_irqtrace_events+0x270/0x270 [ 292.882980] ? find_held_lock+0x35/0x1d0 [ 292.885288] 88*128kB [ 292.890188] ? lock_pin_lock+0x360/0x360 [ 292.890198] ? lock_pin_lock+0x360/0x360 [ 292.890216] alloc_skb_with_frags+0x10d/0x750 [ 292.895120] (UM) [ 292.897147] ? __lock_acquire+0x664/0x3e00 [ 292.897164] ? print_irqtrace_events+0x270/0x270 [ 292.902155] 10*256kB [ 292.907489] ? skb_complete_wifi_ack+0x1b0/0x1b0 [ 292.907508] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.909891] (UM) [ 292.914706] sock_alloc_send_pskb+0x787/0x9b0 [ 292.914738] ? sock_wmalloc+0x1d0/0x1d0 [ 292.919883] 4*512kB [ 292.921923] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 292.921940] ? ipv6_dev_get_saddr+0x4e2/0xdc0 [ 292.925104] (M) [ 292.932778] ? lock_downgrade+0x980/0x980 2018/02/26 20:09:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xb, 0x4, 0x966, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x75, 0x9, 0x1, 0x4}) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)={0x20, 0x5, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000001c0)={0x8a6, 0x7, 0x1}) sendto$ipx(r1, &(0x7f0000000080)="d6626f4e36e543ad267303a89708fe208b3073689480dbcb68d59fd40e88608aa9eb441aa79e5203f77216a935ac4483038aba71a66789687489c7f258b8c98128f7b9458f4a694d8dad83b3385add36e260765737c4930f893da87ff223e61deadc6ff5d86397e4eab47f6e9a09a4a1aff2d909db6f09745c6b9fb4b22e0fd16f56294b660658ad9fc00eb85d972615430fed30345112ed8155e3d7d94b63803b091872d4ded035df5c39c092c6a3fabd08fc09fd025e3fe9b0e92069c4ed8842ec200ab8fb9084fcaac66ed4d664f6a87f517235677494281016f6453f854435b309c91aa0ddfc53682757afd7", 0xee, 0x40800, &(0x7f0000000180)={0x4, 0x9, 0x3f3, "17da553b4fff", 0x8}, 0x10) 2018/02/26 20:09:11 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="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"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:11 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000317da8)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, &(0x7f0000443000), {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {}, []}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x258) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00002fa000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udplite\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003500)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000003540)={@ipv4={[], [0xff, 0xff], @rand_addr=0x20}, 0x1, r3}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x1, 0x3}) 2018/02/26 20:09:11 executing program 2 (fault-call:9 fault-nth:0): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:11 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0xffffffffffffffe1, 0x100, 0x2, 0x1, 0x8, 0x80000000, 0xdfa4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000c00010000040000001042728000ee3a660000000000b21f4badd53fcbc638980cc97740b696fbb762410aefa364bc2f85520aef39546a513b2e7157e3cd4c92d6", @ANYRES32], 0x20}, 0x1}, 0x0) [ 292.932796] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 292.940056] 27*1024kB [ 292.942437] ? check_noncircular+0x20/0x20 [ 292.942447] ? print_irqtrace_events+0x270/0x270 [ 292.949694] (UM) [ 292.956933] ? __lock_is_held+0xb6/0x140 [ 292.956962] sock_alloc_send_skb+0x32/0x40 [ 292.964201] 23*2048kB [ 292.971446] __ip6_append_data.isra.44+0x1c38/0x3390 [ 292.971467] ? ip6_mtu+0x369/0x4d0 [ 292.973500] (UME) [ 292.984648] ? lock_downgrade+0x980/0x980 [ 292.984676] ? ip6_cork_release.isra.42+0x2c0/0x2c0 [ 292.988534] 607*4096kB [ 292.992143] ? ip6_mtu+0x1c7/0x4d0 [ 292.999391] (UM) [ 293.001510] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 293.001520] ? lock_downgrade+0x980/0x980 [ 293.001529] ? print_irqtrace_events+0x270/0x270 [ 293.010864] = 2673892kB [ 293.013430] ? ip6_setup_cork+0xeb8/0x1740 [ 293.013440] ? rcu_pm_notify+0xc0/0xc0 [ 293.017050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 293.021676] ? __local_bh_enable_ip+0x121/0x230 [ 293.021695] ? ip6_dst_mtu_forward+0x3c0/0x3c0 [ 293.023909] 12904 total pagecache pages [ 293.027587] ? __local_bh_enable_ip+0x121/0x230 [ 293.027602] ? ip6_dst_lookup_tail+0x3f8/0x18b0 [ 293.029737] 0 pages in swap cache [ 293.034806] ? check_noncircular+0x20/0x20 [ 293.034830] ip6_make_skb+0x386/0x5e0 [ 293.039465] Swap cache stats: add 0, delete 0, find 0/0 [ 293.041751] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.041772] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.045633] Free swap = 0kB [ 293.049666] ? ip6_push_pending_frames+0xe0/0xe0 [ 293.049681] ? ip6_dst_hoplimit+0x26c/0x420 [ 293.051806] Total swap = 0kB [ 293.057657] ? lock_downgrade+0x980/0x980 [ 293.057674] ? lock_release+0xa40/0xa40 [ 293.060152] 1965969 pages RAM [ 293.065051] ? __lock_is_held+0xb6/0x140 [ 293.065085] ? ip6_find_1stfragopt+0x260/0x260 [ 293.069014] 0 pages HighMem/MovableOnly [ 293.071141] udpv6_sendmsg+0x27fc/0x3400 [ 293.071155] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.075624] 329725 pages reserved [ 293.079235] ? udpv6_setsockopt+0x80/0x80 [ 293.365024] ? avc_has_perm+0x43e/0x680 [ 293.369154] ? avc_has_perm_noaudit+0x520/0x520 [ 293.373802] ? check_noncircular+0x20/0x20 [ 293.378027] ? iterate_fd+0x3f0/0x3f0 [ 293.381806] ? _parse_integer+0x140/0x140 [ 293.385935] ? find_held_lock+0x35/0x1d0 [ 293.389994] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 293.395872] inet_sendmsg+0x11f/0x5e0 [ 293.399647] ? inet_sendmsg+0x11f/0x5e0 [ 293.403595] ? __might_sleep+0x95/0x190 [ 293.407546] ? inet_create+0xf50/0xf50 [ 293.411411] ? selinux_socket_sendmsg+0x36/0x40 [ 293.416055] ? security_socket_sendmsg+0x89/0xb0 [ 293.420785] ? inet_create+0xf50/0xf50 [ 293.424652] sock_sendmsg+0xca/0x110 [ 293.428347] SYSC_sendto+0x361/0x5c0 [ 293.432040] ? SYSC_connect+0x4a0/0x4a0 [ 293.435994] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 293.440815] ? vfs_write+0x374/0x510 [ 293.444507] ? wait_for_completion+0x770/0x770 [ 293.449069] ? __lock_is_held+0xb6/0x140 [ 293.453135] ? fput+0xd2/0x140 [ 293.456303] ? SyS_write+0x184/0x220 [ 293.459994] ? SyS_read+0x220/0x220 [ 293.463607] SyS_sendto+0x40/0x50 [ 293.467037] ? SyS_getpeername+0x30/0x30 [ 293.471073] do_syscall_64+0x280/0x940 [ 293.474938] ? __do_page_fault+0xc90/0xc90 [ 293.479147] ? _raw_spin_unlock_irq+0x27/0x70 [ 293.483618] ? finish_task_switch+0x1c1/0x7e0 [ 293.488088] ? syscall_return_slowpath+0x550/0x550 [ 293.492996] ? syscall_return_slowpath+0x2ac/0x550 [ 293.497903] ? prepare_exit_to_usermode+0x350/0x350 [ 293.502906] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 293.508250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.513072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 293.518235] RIP: 0033:0x453d69 [ 293.521405] RSP: 002b:00007fcacc782c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 293.529092] RAX: ffffffffffffffda RBX: 00007fcacc7836d4 RCX: 0000000000453d69 [ 293.536339] RDX: 0000000000000000 RSI: 0000000020002d80 RDI: 0000000000000013 [ 293.543586] RBP: 000000000072bea0 R08: 0000000020002e00 R09: 000000000000001c [ 293.550828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 293.558075] R13: 00000000000004bc R14: 00000000006f7240 R15: 0000000000000000 2018/02/26 20:09:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000400000000000000000000000000000000002000000"]) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x2, 0x8000, 0x401, 0x0, 0x5}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) fadvise64(r3, 0x0, 0x6, 0x3) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)={0x9, 0x800}) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000180)=0x10022) 2018/02/26 20:09:11 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f00006e1fe0)=ANY=[@ANYBLOB="20000000051601000000000000000000000000000c00010000000000", @ANYRES32], 0x20}, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101c40, 0x4) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x10001, 0x4}, {0x2, 0x101}, {0x7fff, 0x7}, {0x9, 0x3454b953}, {0x8, 0x7}, {0xffffffffffffffe0, 0x100}, {0x2, 0x5}]}) 2018/02/26 20:09:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:11 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x80000000004) dup3(r1, r0, 0x0) 2018/02/26 20:09:11 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:11 executing program 6: r0 = socket$inet(0xa, 0x8000000801, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:11 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x10000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000300)={r4, 0x9, 0xdb75, 0x9}, &(0x7f0000000340)=0x10) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000200)=0x4) dup3(r1, r0, 0x0) 2018/02/26 20:09:11 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={r3}) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0xfffffffffffffe18, 0xfffffffffffffff9, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9caceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 293.653555] FAULT_INJECTION: forcing a failure. [ 293.653555] name failslab, interval 1, probability 0, space 0, times 0 [ 293.664914] CPU: 1 PID: 9212 Comm: syz-executor0 Not tainted 4.16.0-rc3+ #330 [ 293.672184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.675244] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 293.681526] Call Trace: [ 293.681545] dump_stack+0x194/0x24d [ 293.681563] ? arch_local_irq_restore+0x53/0x53 [ 293.693347] syz-executor5 cpuset= [ 293.695894] ? kernel_text_address+0x102/0x140 [ 293.695922] should_fail+0x8c0/0xa40 [ 293.695939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 293.699540] / [ 293.704182] ? save_stack+0xa3/0xd0 [ 293.707607] mems_allowed=0 [ 293.712153] ? save_stack+0x43/0xd0 [ 293.712161] ? kasan_kmalloc+0xad/0xe0 [ 293.712168] ? kasan_slab_alloc+0x12/0x20 [ 293.740704] ? find_held_lock+0x35/0x1d0 [ 293.744781] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 293.750651] ? rcu_note_context_switch+0x710/0x710 [ 293.755575] should_failslab+0xec/0x120 [ 293.759536] kmem_cache_alloc_node_trace+0x5a/0x760 [ 293.764552] __kmalloc_node_track_caller+0x33/0x70 [ 293.769465] __kmalloc_reserve.isra.39+0x41/0xd0 [ 293.774207] __alloc_skb+0x13b/0x780 [ 293.777993] ? skb_copy_and_csum_dev+0x370/0x370 [ 293.782741] ? print_irqtrace_events+0x270/0x270 [ 293.787490] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 293.793354] ? print_irqtrace_events+0x270/0x270 [ 293.798098] ? find_held_lock+0x35/0x1d0 [ 293.802149] ? __lock_is_held+0xb6/0x140 [ 293.806204] alloc_skb_with_frags+0x10d/0x750 [ 293.810678] ? __lock_acquire+0x664/0x3e00 [ 293.814918] ? print_irqtrace_events+0x270/0x270 [ 293.819664] ? skb_complete_wifi_ack+0x1b0/0x1b0 [ 293.824410] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 293.829588] sock_alloc_send_pskb+0x787/0x9b0 [ 293.834083] ? sock_wmalloc+0x1d0/0x1d0 [ 293.838320] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 293.843497] ? ipv6_dev_get_saddr+0x4e2/0xdc0 [ 293.847975] ? lock_downgrade+0x980/0x980 [ 293.852114] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 293.856676] ? check_noncircular+0x20/0x20 [ 293.860892] ? print_irqtrace_events+0x270/0x270 [ 293.865627] ? __lock_is_held+0xb6/0x140 [ 293.869688] sock_alloc_send_skb+0x32/0x40 [ 293.873910] __ip6_append_data.isra.44+0x1c38/0x3390 [ 293.879004] ? ip6_mtu+0x369/0x4d0 [ 293.882529] ? lock_downgrade+0x980/0x980 [ 293.886677] ? ip6_cork_release.isra.42+0x2c0/0x2c0 [ 293.891691] ? ip6_mtu+0x1c7/0x4d0 [ 293.895213] ? ip6_dst_ifdown+0x3d0/0x3d0 [ 293.899350] ? lock_downgrade+0x980/0x980 [ 293.903480] ? print_irqtrace_events+0x270/0x270 [ 293.908228] ? ip6_setup_cork+0xeb8/0x1740 [ 293.912443] ? rcu_pm_notify+0xc0/0xc0 [ 293.916313] ? __local_bh_enable_ip+0x121/0x230 [ 293.920973] ? ip6_dst_mtu_forward+0x3c0/0x3c0 [ 293.925539] ? __local_bh_enable_ip+0x121/0x230 [ 293.930194] ? ip6_dst_lookup_tail+0x3f8/0x18b0 [ 293.934850] ? check_noncircular+0x20/0x20 [ 293.939077] ip6_make_skb+0x386/0x5e0 [ 293.942861] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.947172] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.951483] ? ip6_push_pending_frames+0xe0/0xe0 [ 293.956223] ? ip6_dst_hoplimit+0x26c/0x420 [ 293.960531] ? lock_downgrade+0x980/0x980 [ 293.964666] ? lock_release+0xa40/0xa40 [ 293.968800] ? __lock_is_held+0xb6/0x140 [ 293.972867] ? ip6_find_1stfragopt+0x260/0x260 [ 293.977440] udpv6_sendmsg+0x27fc/0x3400 [ 293.981487] ? ip_reply_glue_bits+0xb0/0xb0 [ 293.985809] ? udpv6_setsockopt+0x80/0x80 [ 293.989960] ? avc_has_perm+0x43e/0x680 [ 293.993925] ? avc_has_perm_noaudit+0x520/0x520 [ 293.998578] ? check_noncircular+0x20/0x20 [ 294.002808] ? iterate_fd+0x3f0/0x3f0 [ 294.006602] ? _parse_integer+0x140/0x140 [ 294.010735] ? find_held_lock+0x35/0x1d0 [ 294.014807] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 294.020684] inet_sendmsg+0x11f/0x5e0 [ 294.024467] ? inet_sendmsg+0x11f/0x5e0 [ 294.028424] ? __might_sleep+0x95/0x190 [ 294.032385] ? inet_create+0xf50/0xf50 [ 294.036260] ? selinux_socket_sendmsg+0x36/0x40 [ 294.040912] ? security_socket_sendmsg+0x89/0xb0 [ 294.045648] ? inet_create+0xf50/0xf50 [ 294.049520] sock_sendmsg+0xca/0x110 [ 294.053219] SYSC_sendto+0x361/0x5c0 [ 294.056921] ? SYSC_connect+0x4a0/0x4a0 [ 294.060884] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 294.065709] ? vfs_write+0x374/0x510 [ 294.069406] ? wait_for_completion+0x770/0x770 [ 294.073980] ? __lock_is_held+0xb6/0x140 [ 294.078061] ? fput+0xd2/0x140 [ 294.081235] ? SyS_write+0x184/0x220 [ 294.084934] ? SyS_read+0x220/0x220 [ 294.088548] SyS_sendto+0x40/0x50 [ 294.091987] ? SyS_getpeername+0x30/0x30 [ 294.096032] do_syscall_64+0x280/0x940 [ 294.099903] ? __do_page_fault+0xc90/0xc90 [ 294.104121] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 294.109652] ? syscall_return_slowpath+0x550/0x550 [ 294.114567] ? syscall_return_slowpath+0x2ac/0x550 [ 294.119484] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 294.124839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.129676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.134846] RIP: 0033:0x453d69 [ 294.138018] RSP: 002b:00007fcacc782c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.145708] RAX: ffffffffffffffda RBX: 00007fcacc7836d4 RCX: 0000000000453d69 [ 294.152962] RDX: 0000000000000000 RSI: 0000000020002d80 RDI: 0000000000000013 [ 294.160215] RBP: 000000000072bea0 R08: 0000000020002e00 R09: 000000000000001c [ 294.167465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 294.174714] R13: 00000000000004bc R14: 00000000006f7240 R15: 0000000000000001 [ 294.181994] CPU: 0 PID: 9205 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 294.189263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.198607] Call Trace: [ 294.201193] dump_stack+0x194/0x24d [ 294.204825] ? arch_local_irq_restore+0x53/0x53 [ 294.209488] ? idr_get_free+0xfd0/0xfd0 [ 294.213457] ? kernel_text_address+0x102/0x140 [ 294.218044] warn_alloc+0x19a/0x2b0 [ 294.221672] ? zone_watermark_ok_safe+0x400/0x400 [ 294.226521] ? save_stack+0xa3/0xd0 [ 294.230141] ? save_stack+0x43/0xd0 [ 294.233762] ? kasan_kmalloc+0xad/0xe0 [ 294.237640] ? __kmalloc_node+0x47/0x70 [ 294.241608] ? kvmalloc_node+0x64/0xd0 [ 294.245502] __vmalloc_node_range+0x4f0/0x650 [ 294.250000] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 294.255016] ? xt_alloc_entry_offsets+0x21/0x30 [ 294.259679] __vmalloc_node_flags_caller+0x50/0x60 [ 294.264607] ? xt_alloc_entry_offsets+0x21/0x30 [ 294.269280] kvmalloc_node+0x82/0xd0 [ 294.272993] xt_alloc_entry_offsets+0x21/0x30 [ 294.277484] translate_table+0x235/0x1690 [ 294.281630] ? lock_release+0xa40/0xa40 [ 294.285582] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 294.291444] ? __check_object_size+0x8b/0x530 [ 294.295922] ? __might_sleep+0x95/0x190 [ 294.299876] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 294.304698] ? kasan_check_write+0x14/0x20 [ 294.308908] ? _copy_from_user+0x99/0x110 [ 294.313034] do_ip6t_set_ctl+0x370/0x5f0 [ 294.317073] ? translate_compat_table+0x1c50/0x1c50 [ 294.322080] ? mutex_unlock+0xd/0x10 [ 294.325768] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 294.331031] nf_setsockopt+0x67/0xc0 [ 294.334816] ipv6_setsockopt+0x10b/0x130 [ 294.338856] tcp_setsockopt+0x82/0xd0 [ 294.342637] sock_common_setsockopt+0x95/0xd0 [ 294.347370] SyS_setsockopt+0x189/0x360 [ 294.351330] ? SyS_recv+0x40/0x40 [ 294.354766] ? move_addr_to_kernel+0x60/0x60 [ 294.359154] ? do_syscall_64+0xb6/0x940 [ 294.363107] ? SyS_recv+0x40/0x40 [ 294.366536] do_syscall_64+0x280/0x940 [ 294.370398] ? __do_page_fault+0xc90/0xc90 [ 294.374610] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 294.380125] ? syscall_return_slowpath+0x550/0x550 [ 294.385035] ? syscall_return_slowpath+0x2ac/0x550 [ 294.389944] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 294.395290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.400112] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 294.405275] RIP: 0033:0x453d69 [ 294.408438] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.416122] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 294.423369] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 294.430611] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 294.437854] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 294.445098] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 294.452592] Mem-Info: [ 294.455051] active_anon:72423 inactive_anon:62 isolated_anon:0 [ 294.455051] active_file:3737 inactive_file:9098 isolated_file:0 [ 294.455051] unevictable:0 dirty:120 writeback:0 unstable:0 [ 294.455051] slab_reclaimable:12305 slab_unreclaimable:95838 [ 294.455051] mapped:24378 shmem:86 pagetables:761 bounce:0 [ 294.455051] free:1406866 free_pcp:400 free_cma:0 2018/02/26 20:09:12 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000bda63c000000000000000000000000000000000000000000000000000000000000000000000000d5520000000000000000000000000000000000000f6b1079578db07cd472274ee6215d5fffef40384cdd9b"], @ANYRES64=r0], 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) dup3(r0, r0, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) r3 = dup2(r1, r1) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={"7f77be575568108b761f8943788644bf", {0x4, 0x3, 0x4, "c82224750ad6", 0x100}}) delete_module(&(0x7f00000000c0)='security.]cgroupem1#posix_acl_access\x00', 0xa00) sendmmsg$inet_sctp(r3, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:12 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x40002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x400000000600) r2 = dup3(r1, r0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0x80000001]) 2018/02/26 20:09:12 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:12 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44b2e921acf2ce0356c4bb829df24c9679eb178e1806"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x8}, 0xffffffffffffffe1, [0x80000000, 0xffffffffffffffff, 0x1, 0x9, 0x1, 0xdbc0, 0xffffffff, 0x1]}, 0x5c) 2018/02/26 20:09:12 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) ioctl$KVM_SMI(r0, 0xaeb7) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) [ 294.488534] Node 0 active_anon:294028kB inactive_anon:248kB active_file:14948kB inactive_file:36392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97512kB dirty:480kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 294.516504] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.542672] lowmem_reserve[]: 0 2864 6373 6373 [ 294.547301] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:872kB local_pcp:296kB free_cma:0kB [ 294.575041] lowmem_reserve[]: 0 0 3509 3509 [ 294.579401] Node 0 Normal free:2662588kB min:37120kB low:46400kB high:55680kB active_anon:306380kB inactive_anon:248kB active_file:14948kB inactive_file:36392kB unevictable:0kB writepending:480kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5056kB pagetables:3192kB bounce:0kB free_pcp:880kB local_pcp:456kB free_cma:0kB [ 294.609208] lowmem_reserve[]: 0 0 0 0 [ 294.613047] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 294.626712] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934448kB [ 294.642266] Node 0 Normal: 667*4kB (UME) 85*8kB (UE) 63*16kB (UME) 1366*32kB (UME) 805*64kB (UM) 87*128kB (M) 8*256kB (M) 5*512kB (UM) 26*1024kB (UM) 25*2048kB (UME) 607*4096kB (UM) = 2679428kB [ 294.659072] FAULT_INJECTION: forcing a failure. [ 294.659072] name failslab, interval 1, probability 0, space 0, times 0 [ 294.659795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 294.659800] 12920 total pagecache pages [ 294.659808] 0 pages in swap cache [ 294.659812] Swap cache stats: add 0, delete 0, find 0/0 [ 294.659816] Free swap = 0kB [ 294.659818] Total swap = 0kB [ 294.659823] 1965969 pages RAM [ 294.659826] 0 pages HighMem/MovableOnly [ 294.671171] CPU: 1 PID: 9248 Comm: syz-executor1 Not tainted 4.16.0-rc3+ #330 [ 294.679713] 329725 pages reserved [ 294.683649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.683654] Call Trace: [ 294.683671] dump_stack+0x194/0x24d [ 294.683687] ? arch_local_irq_restore+0x53/0x53 [ 294.736208] ? find_held_lock+0x35/0x1d0 [ 294.740259] should_fail+0x8c0/0xa40 [ 294.743957] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.749054] ? find_held_lock+0x35/0x1d0 [ 294.753099] ? __lock_is_held+0xb6/0x140 [ 294.757152] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 294.763020] ? rcu_note_context_switch+0x710/0x710 [ 294.767936] should_failslab+0xec/0x120 [ 294.771887] kmem_cache_alloc+0x47/0x760 [ 294.775927] ? __lock_acquire+0x664/0x3e00 [ 294.780148] ptlock_alloc+0x24/0x70 [ 294.783753] pte_alloc_one+0x59/0x100 [ 294.787530] do_huge_pmd_anonymous_page+0x551/0x1b00 [ 294.792610] ? print_irqtrace_events+0x270/0x270 [ 294.797346] ? __thp_get_unmapped_area+0x130/0x130 [ 294.802248] ? __lock_acquire+0x664/0x3e00 [ 294.806461] ? __lock_acquire+0x664/0x3e00 [ 294.810668] ? lock_pin_lock+0x360/0x360 [ 294.814721] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 294.819886] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 294.825062] ? print_irqtrace_events+0x270/0x270 [ 294.829799] ? __lock_acquire+0x664/0x3e00 [ 294.834017] ? print_irqtrace_events+0x270/0x270 [ 294.838752] ? __lock_acquire+0x664/0x3e00 [ 294.842964] ? find_held_lock+0x35/0x1d0 [ 294.847006] ? print_irqtrace_events+0x270/0x270 [ 294.851744] ? __lock_acquire+0x664/0x3e00 [ 294.855954] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 294.861121] ? lock_pin_lock+0x360/0x360 [ 294.865165] __handle_mm_fault+0x18d7/0x3b60 [ 294.869554] ? __pmd_alloc+0x4e0/0x4e0 [ 294.873414] ? check_noncircular+0x20/0x20 [ 294.877627] ? __lock_acquire+0x664/0x3e00 [ 294.881844] ? find_held_lock+0x35/0x1d0 [ 294.885887] ? handle_mm_fault+0x35b/0xb00 [ 294.890098] ? lock_downgrade+0x980/0x980 [ 294.894236] ? handle_mm_fault+0x2f8/0xb00 [ 294.898453] handle_mm_fault+0x44a/0xb00 [ 294.902490] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 294.908353] ? __handle_mm_fault+0x3b60/0x3b60 [ 294.912908] ? vmacache_find+0x5f/0x280 [ 294.916857] ? vmacache_update+0xfe/0x130 [ 294.920981] ? find_vma+0x30/0x150 [ 294.924505] __do_page_fault+0x5c9/0xc90 [ 294.928550] ? mm_fault_error+0x2c0/0x2c0 [ 294.932676] ? lock_downgrade+0x980/0x980 [ 294.936796] ? check_noncircular+0x20/0x20 [ 294.941991] ? check_noncircular+0x20/0x20 [ 294.946211] do_page_fault+0xee/0x730 [ 294.949989] ? __do_page_fault+0xc90/0xc90 [ 294.954205] ? find_held_lock+0x35/0x1d0 [ 294.958254] ? __might_fault+0x110/0x1d0 [ 294.962295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.967122] page_fault+0x62/0x90 [ 294.970548] RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 [ 294.976144] RSP: 0018:ffff8801afb5f010 EFLAGS: 00010202 [ 294.981483] RAX: 0000000000000002 RBX: 0000000000000004 RCX: 0000000000000004 [ 294.988727] RDX: 0000000000000004 RSI: ffff8801afb5f320 RDI: 00000000208e7000 [ 294.995969] RBP: ffff8801afb5f040 R08: ffffed0035f6be64 R09: ffffed0035f6be64 [ 295.003212] R10: 0000000000000001 R11: ffffed0035f6be64 R12: 00000000208e7000 [ 295.010454] R13: ffff8801afb5f320 R14: 00007ffffffff000 R15: 00000000208e7004 [ 295.017720] ? _copy_to_user+0x9b/0xc0 [ 295.021587] sctp_getsockopt+0x3f94/0x7394 [ 295.025802] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.030974] ? lock_page_memcg+0x2af/0x380 [ 295.035189] ? sctp_getsockopt_peeloff_common+0x2c0/0x2c0 [ 295.040700] ? __mem_cgroup_largest_soft_limit_node+0x780/0x780 [ 295.046741] ? __unlock_page_memcg+0x72/0x100 [ 295.051209] ? unlock_page_memcg+0x2c/0x40 [ 295.055419] ? page_add_file_rmap+0x670/0xc50 [ 295.059894] ? page_add_new_anon_rmap+0x750/0x750 [ 295.064717] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.069974] ? print_irqtrace_events+0x270/0x270 [ 295.074704] ? print_irqtrace_events+0x270/0x270 [ 295.079443] ? lock_acquire+0x1d5/0x580 [ 295.083393] ? lock_acquire+0x1d5/0x580 [ 295.087340] ? alloc_set_pte+0x1102/0x1880 [ 295.091554] ? print_irqtrace_events+0x270/0x270 [ 295.096288] ? check_noncircular+0x20/0x20 [ 295.100499] ? lock_release+0xa40/0xa40 [ 295.104456] ? reacquire_held_locks+0x1f9/0x3e0 [ 295.109099] ? reacquire_held_locks+0x1f9/0x3e0 [ 295.113746] ? alloc_set_pte+0x1102/0x1880 [ 295.117964] ? __lock_acquire+0x664/0x3e00 [ 295.122174] ? print_irqtrace_events+0x270/0x270 [ 295.126906] ? filemap_map_pages+0x919/0x15d0 [ 295.131379] ? print_irqtrace_events+0x270/0x270 [ 295.136114] ? print_irqtrace_events+0x270/0x270 [ 295.140851] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.146018] ? __lock_is_held+0xb6/0x140 [ 295.150235] ? print_irqtrace_events+0x270/0x270 [ 295.154972] ? __lock_acquire+0x664/0x3e00 [ 295.159181] ? __lock_acquire+0x664/0x3e00 [ 295.163405] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.168570] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.173733] ? check_noncircular+0x20/0x20 [ 295.177958] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 295.183130] ? print_irqtrace_events+0x270/0x270 [ 295.187859] ? check_noncircular+0x20/0x20 [ 295.192082] ? lock_acquire+0x1d5/0x580 [ 295.196033] ? check_noncircular+0x20/0x20 [ 295.200243] ? __fdget_pos+0x12b/0x190 [ 295.204108] ? check_noncircular+0x20/0x20 [ 295.208321] ? check_noncircular+0x20/0x20 [ 295.212529] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 295.218394] ? find_held_lock+0x35/0x1d0 [ 295.222434] ? find_held_lock+0x35/0x1d0 [ 295.226479] ? avc_has_perm+0x35e/0x680 [ 295.230432] ? lock_downgrade+0x980/0x980 [ 295.234553] ? __fget+0x342/0x5b0 [ 295.237986] ? lock_release+0xa40/0xa40 [ 295.241940] ? lock_release+0xa40/0xa40 [ 295.245895] ? __lock_is_held+0xb6/0x140 [ 295.249942] ? avc_has_perm+0x43e/0x680 [ 295.253895] ? avc_has_perm_noaudit+0x520/0x520 [ 295.258549] ? lock_downgrade+0x980/0x980 [ 295.262671] ? get_pid_task+0xbc/0x140 [ 295.266541] ? proc_fail_nth_write+0x9b/0x1d0 [ 295.271020] ? map_files_get_link+0x3a0/0x3a0 [ 295.275495] ? handle_mm_fault+0x35b/0xb00 [ 295.279717] ? sock_has_perm+0x2a4/0x420 [ 295.283755] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 295.289119] sock_common_getsockopt+0x95/0xd0 [ 295.293593] ? sock_common_getsockopt+0x95/0xd0 [ 295.298243] SyS_getsockopt+0x178/0x340 [ 295.302199] ? SyS_setsockopt+0x360/0x360 [ 295.306322] ? SyS_write+0x184/0x220 [ 295.310019] ? SyS_read+0x220/0x220 [ 295.313634] ? do_syscall_64+0xb6/0x940 [ 295.317586] ? SyS_setsockopt+0x360/0x360 [ 295.321710] do_syscall_64+0x280/0x940 [ 295.325574] ? __do_page_fault+0xc90/0xc90 [ 295.329780] ? _raw_spin_unlock_irq+0x27/0x70 [ 295.334256] ? finish_task_switch+0x1c1/0x7e0 [ 295.338729] ? syscall_return_slowpath+0x550/0x550 [ 295.343635] ? syscall_return_slowpath+0x2ac/0x550 [ 295.348539] ? prepare_exit_to_usermode+0x350/0x350 [ 295.353532] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 295.358878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.363707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 295.368871] RIP: 0033:0x453d69 [ 295.372033] RSP: 002b:00007f21d9cddc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 295.379716] RAX: ffffffffffffffda RBX: 00007f21d9cde6d4 RCX: 0000000000453d69 [ 295.386958] RDX: 000000000000001c RSI: 0000000000000084 RDI: 0000000000000014 [ 295.394201] RBP: 000000000072bea0 R08: 000000002061b000 R09: 0000000000000000 [ 295.401450] R10: 00000000208e7000 R11: 0000000000000246 R12: 0000000000000015 [ 295.408692] R13: 000000000000010b R14: 00000000006f19a8 R15: 0000000000000000 2018/02/26 20:09:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:13 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xe39f, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/45) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:13 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x8, 0x200, 0x2, 0x6, 0x8, 0x0, 0xfc, 0x2, 0x9, 0x1, 0x7, 0x8ce, 0x84a, 0xfffffffffffff187, 0x2], 0x1, 0x20000}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$notify(r0, 0x402, 0x10) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="f6dff0df", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000001995c7c900000000441395f07d7913dff3b54079c0d76a4657caed81e93ad60d960abe99c66069c19eb211438a4200c814bc0c148a7a16b3034bab62c73baade236bc81e96abfde6060c07402f90c643a899bbd5511cd1ce6dc9e3cc388b8496941f266d7a"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f325000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x40000, 0x0) getsockname$netrom(r1, &(0x7f0000000040)=@ax25, &(0x7f0000000080)=0x10) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) bind$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @hyper}, 0x10) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x40, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'syz_tun\x00', @ifru_addrs={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}) bind$vsock_stream(r2, &(0x7f0000000540)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) 2018/02/26 20:09:13 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000413, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1a67, 0x4) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) epoll_create1(0x80000) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:13 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x3) dup3(r1, r0, 0x0) [ 295.497636] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 295.509522] syz-executor5 cpuset=/ mems_allowed=0 [ 295.514435] CPU: 0 PID: 9261 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 295.521697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.531032] Call Trace: [ 295.533599] dump_stack+0x194/0x24d [ 295.537210] ? arch_local_irq_restore+0x53/0x53 [ 295.541854] ? idr_get_free+0xfd0/0xfd0 [ 295.545805] ? kernel_text_address+0x102/0x140 [ 295.550372] warn_alloc+0x19a/0x2b0 [ 295.553976] ? zone_watermark_ok_safe+0x400/0x400 [ 295.558806] ? save_stack+0xa3/0xd0 [ 295.562407] ? save_stack+0x43/0xd0 [ 295.566011] ? kasan_kmalloc+0xad/0xe0 [ 295.569877] ? __kmalloc_node+0x47/0x70 [ 295.573824] ? kvmalloc_node+0x64/0xd0 [ 295.577696] __vmalloc_node_range+0x4f0/0x650 [ 295.582170] ? lock_downgrade+0x980/0x980 [ 295.586302] ? xt_alloc_entry_offsets+0x21/0x30 [ 295.590946] __vmalloc_node_flags_caller+0x50/0x60 [ 295.595851] ? xt_alloc_entry_offsets+0x21/0x30 [ 295.600497] kvmalloc_node+0x82/0xd0 [ 295.604190] xt_alloc_entry_offsets+0x21/0x30 [ 295.608663] translate_table+0x235/0x1690 [ 295.612789] ? lock_release+0xa40/0xa40 [ 295.616739] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 295.622598] ? __check_object_size+0x8b/0x530 [ 295.627076] ? __might_sleep+0x95/0x190 [ 295.631032] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 295.635855] ? kasan_check_write+0x14/0x20 [ 295.640065] ? _copy_from_user+0x99/0x110 [ 295.644191] do_ip6t_set_ctl+0x370/0x5f0 [ 295.648231] ? translate_compat_table+0x1c50/0x1c50 [ 295.653240] ? mutex_unlock+0xd/0x10 [ 295.656932] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 295.662360] nf_setsockopt+0x67/0xc0 [ 295.666056] ipv6_setsockopt+0x10b/0x130 [ 295.670100] tcp_setsockopt+0x82/0xd0 [ 295.673883] sock_common_setsockopt+0x95/0xd0 [ 295.678356] SyS_setsockopt+0x189/0x360 [ 295.682309] ? SyS_recv+0x40/0x40 [ 295.685743] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 295.691257] ? do_syscall_64+0xb6/0x940 [ 295.695210] ? SyS_recv+0x40/0x40 [ 295.698637] do_syscall_64+0x280/0x940 [ 295.702500] ? __do_page_fault+0xc90/0xc90 [ 295.706711] ? _raw_spin_unlock_irq+0x27/0x70 [ 295.711184] ? finish_task_switch+0x1c1/0x7e0 [ 295.715654] ? syscall_return_slowpath+0x550/0x550 [ 295.720559] ? syscall_return_slowpath+0x2ac/0x550 [ 295.725464] ? prepare_exit_to_usermode+0x350/0x350 [ 295.730454] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 295.735797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.740621] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 295.745783] RIP: 0033:0x453d69 [ 295.748946] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.756632] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 295.763876] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 295.771121] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 295.778364] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 295.785617] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 295.793151] Mem-Info: 2018/02/26 20:09:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x400) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x1, @empty, 0x3ff}, @in6={0xa, 0x4e22, 0xc31b, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0xff}, @in6={0xa, 0x4e21, 0x8000000000000000, @mcast1={0xff, 0x1, [], 0x1}, 0x401}], 0x80) r4 = dup3(r2, r1, 0x80000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x38}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000140)={r5, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x8c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:14 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = dup3(r1, r0, 0x0) write(r2, &(0x7f0000000000)="d26d08f24c13227fda669bbe301b4c0fd2600d3a88fde158d580", 0x1a) 2018/02/26 20:09:14 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[], 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 295.795598] active_anon:73974 inactive_anon:61 isolated_anon:0 [ 295.795598] active_file:3738 inactive_file:9110 isolated_file:0 [ 295.795598] unevictable:0 dirty:135 writeback:0 unstable:0 [ 295.795598] slab_reclaimable:12332 slab_unreclaimable:95346 [ 295.795598] mapped:24377 shmem:85 pagetables:777 bounce:0 [ 295.795598] free:1406348 free_pcp:420 free_cma:0 [ 295.828957] Node 0 active_anon:310428kB inactive_anon:244kB active_file:14952kB inactive_file:36440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97508kB dirty:540kB writeback:0kB shmem:340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 51200kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 295.857186] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.883329] lowmem_reserve[]: 0 2864 6373 6373 [ 295.887950] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:872kB local_pcp:296kB free_cma:0kB [ 295.915669] lowmem_reserve[]: 0 0 3509 3509 [ 295.920031] Node 0 Normal free:2657408kB min:37120kB low:46400kB high:55680kB active_anon:312476kB inactive_anon:244kB active_file:14952kB inactive_file:36440kB unevictable:0kB writepending:540kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5216kB pagetables:3256kB bounce:0kB free_pcp:448kB local_pcp:236kB free_cma:0kB [ 295.925676] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 295.949850] lowmem_reserve[]: 0 0 0 0 [ 295.949872] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB [ 295.961708] syz-executor5 cpuset= [ 295.965488] (U) 1*128kB (U) 1*256kB [ 295.971723] / [ 295.975153] (U) [ 295.978848] mems_allowed=0 [ 295.980544] 0*512kB 1*1024kB (U) [ 295.982524] CPU: 1 PID: 9281 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 295.985434] 1*2048kB [ 295.988845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.988849] Call Trace: [ 295.988869] dump_stack+0x194/0x24d [ 295.996118] (M) [ 295.998501] ? arch_local_irq_restore+0x53/0x53 [ 295.998510] ? idr_get_free+0xfd0/0xfd0 [ 296.007848] 3*4096kB [ 296.010400] ? kernel_text_address+0x102/0x140 [ 296.010424] warn_alloc+0x19a/0x2b0 [ 296.014018] (M) [ 296.015968] ? zone_watermark_ok_safe+0x400/0x400 [ 296.015994] ? save_stack+0xa3/0xd0 [ 296.020630] = 15908kB [ 296.024567] ? save_stack+0x43/0xd0 [ 296.024574] ? kasan_kmalloc+0xad/0xe0 [ 296.024583] ? __kmalloc_node+0x47/0x70 [ 296.026974] Node 0 [ 296.031514] ? kvmalloc_node+0x64/0xd0 [ 296.031537] __vmalloc_node_range+0x4f0/0x650 [ 296.035141] DMA32: [ 296.037090] ? lock_release+0xa40/0xa40 [ 296.037107] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.041925] 4*4kB [ 296.045513] __vmalloc_node_flags_caller+0x50/0x60 [ 296.045526] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.047916] (M) [ 296.051512] kvmalloc_node+0x82/0xd0 [ 296.051526] xt_alloc_entry_offsets+0x21/0x30 [ 296.055388] 2*8kB [ 296.059326] translate_table+0x235/0x1690 [ 296.059339] ? lock_release+0xa40/0xa40 [ 296.061555] (M) [ 296.065414] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 296.065425] ? __check_object_size+0x8b/0x530 [ 296.065446] ? __might_sleep+0x95/0x190 [ 296.069909] 1*16kB [ 296.072114] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 296.072131] ? kasan_check_write+0x14/0x20 [ 296.076080] (M) [ 296.080715] ? _copy_from_user+0x99/0x110 [ 296.080731] do_ip6t_set_ctl+0x370/0x5f0 2018/02/26 20:09:14 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000001c0)={0x400, 0x10000}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x9, 0x50000000000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x200}, &(0x7f0000000300)=0x8) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x4}) r3 = socket$inet(0x2, 0x5, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x7530}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r5, 0x7, 0x1, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)=0x1) r6 = dup3(r3, r4, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) socket$bt_l2cap(0x1f, 0x2, 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) ioctl$TIOCNXCL(r5, 0x540d) [ 296.082857] 2*32kB [ 296.087757] ? translate_compat_table+0x1c50/0x1c50 [ 296.087792] ? mutex_unlock+0xd/0x10 [ 296.092416] (M) [ 296.094360] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 296.094378] nf_setsockopt+0x67/0xc0 [ 296.098066] 1*64kB [ 296.102532] ipv6_setsockopt+0x10b/0x130 [ 296.102548] tcp_setsockopt+0x82/0xd0 [ 296.104671] (M) [ 296.108803] sock_common_setsockopt+0x95/0xd0 [ 296.108821] SyS_setsockopt+0x189/0x360 [ 296.112783] 2*128kB [ 296.114735] ? SyS_recv+0x40/0x40 [ 296.114751] ? security_file_ioctl+0x7d/0xb0 [ 296.120606] (M) [ 296.125064] ? security_file_ioctl+0x89/0xb0 [ 296.125079] ? do_syscall_64+0xb6/0x940 [ 296.125095] ? SyS_recv+0x40/0x40 [ 296.129046] 3*256kB [ 296.131266] do_syscall_64+0x280/0x940 [ 296.131276] ? _raw_spin_unlock_irq+0x27/0x70 [ 296.131287] ? finish_task_switch+0x1c1/0x7e0 [ 296.136106] (UM) [ 296.140308] ? syscall_return_slowpath+0x550/0x550 [ 296.140321] ? syscall_return_slowpath+0x2ac/0x550 [ 296.142279] 3*512kB [ 296.146389] ? prepare_exit_to_usermode+0x350/0x350 [ 296.146403] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 296.150442] (UM) [ 296.152650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.152670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 296.157652] 3*1024kB [ 296.161325] RIP: 0033:0x453d69 [ 296.161330] RSP: 002b:00007fae81a9fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.161342] RAX: ffffffffffffffda RBX: 00007fae81aa06d4 RCX: 0000000000453d69 [ 296.163301] (UM) [ 296.168536] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 296.168541] RBP: 000000000072c0c8 R08: 0000000000000004 R09: 0000000000000000 [ 296.168547] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 296.168554] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000003 [ 296.172247] 2*2048kB (UM) 714*4096kB (M) = 2934448kB [ 296.325591] Node 0 Normal: 774*4kB (UME) 74*8kB (UME) 26*16kB (UME) 1344*32kB (UME) 857*64kB (UM) 88*128kB (UM) 9*256kB (UM) 5*512kB (UM) 24*1024kB (UM) 21*2048kB (UME) 605*4096kB (UM) = 2663752kB [ 296.343275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2018/02/26 20:09:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000080)=@sco, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/13, 0x3f}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:14 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000006c0)='/dev/snd/midiC#D#\x00', 0xc90, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1000, 0x80000000, 0x1, 0x80000001, 0x80}, &(0x7f00000007c0)=0xa0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000800)={r3, @in={{0x2, 0x4e23, @empty}}}, 0x8c) r4 = dup(r1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x200, 0x1ff, 0x40, 0x1, 0xfff, 0x4, 0x300, 0xffff, 0x15, 0x0, 0x100000001, 0xc10, 0x9, 0x8000, 0x3ff], 0x6006, 0x4}) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000100)="14214b0f4c47eb46f935391af2c8cef0bd524b2ce5b815e7ea868f1e27081354231099d879aa5a39d8153abf2b01ca51a60dd9e034065df507ffe26d38c77aec4b57d6ef21cb2e1308e02366bf4d093ab5810c227c3f3797857c4b909e026bd6a2307d6a7efcdc15ab1a0276776c8599cac6eaa77e3f4e9be8c9b353c24d7e1aa6d393935b04309ec8a1d77c37fddf4298d2c28822ab4e314f7ee9964d8b51bc42617e898d6dc9b76c95cd063a61c3838b3ec9f2ec5c7cb7d3fe9323a53c8aef3e438ec1bfa7c6d9ee5f98e18182c9ff00", 0xd1}, {&(0x7f0000000200)="bba3b4e5d6dbb2072d05f24b93387bcddd8483333628703410ebf4ea3b86e00cbbe8815ac3516f3408a6132887136adbf5da96f941e5097fe95bee178dba1fcc4f9b7af7cd197ffe5b3e68d3a51ae42649dd456b48fe69a26e9db912", 0x5c}], 0x2, 0x0, 0x0, 0x4000880}, 0x20000000) r5 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000004c0)="f69c8f58e257e164fc340932755f488a0fd686b56b3a6dea5244e0c6d9f4b67d4a87392dfea531417c008ad9f1c51e415517ef8d4012d6884d1f09a401f7c10b11f0c50c37b3b04aa9af3695", 0x4c, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r5, 0x2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000400)='ns/net\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000340)={0x30, {{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x90) connect(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b644610bff025321ff08f7000900"], 0xe) io_setup(0x0, &(0x7f0000000540)=0x0) io_cancel(r8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x401, r7, &(0x7f0000000580)="b097773df5ec8b5366b6425cd7cd18f4afbfe40776f8e1a7dfcbe315fb6291b8ba34d29ac179ff1b0ef5151f9a9be8ecd272974df78baec5fc7b1f5812cd3616a11b1b2c93ffafc37910309c477f9d7c24b4452da29fb1172fc23507aba48fc280c2c45b41be03e63516574d7d7a366227021ab21ff41cfe9e8d2eeb210420e5c0ea71949a2537a02af146cdd0bf88ebb58f", 0x92, 0x8, 0x0, 0x1, r1}, &(0x7f0000000680)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r9 = dup2(r1, r1) sendmmsg$inet_sctp(r9, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:14 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000100)=0x1) socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000040)="fafcb5ed7736b6d1912f436bbf6f5a49a07223dd199e8409f522e6ddb6909410afe44613da3d4d79f7a0") getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f0000000300)=r3) dup3(r1, r0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000140)) 2018/02/26 20:09:14 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) accept4$netrom(r0, &(0x7f0000000000)=@ax25, &(0x7f0000000040)=0x10, 0x800) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:14 executing program 0: r0 = socket$inet6(0xa, 0x800004, 0x2000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000540)="bce492e0ec651fe7eae82fd14544fcdf1f84e55c7bc7985990416930adc66fe86ac03a6bc37d2065861433242f573b8a0d318ea32b65e4f6174499b9190687e071de81abfd23effcdc3cd24ed6be6528fcff00606afd91ba0f481738d7460d4f88028cefae1ecc6a884658d83a3e949e5a841ca369b24c61b79bdb1b05989d13cf5bce64266b44fd1039f4460399284c8b6c8e70bc1dff8032a1d7781803f818351a9561905d28b832ae95fa03766c92b939b79d0645e67b7f99408158784602d5417438987fbbabef931aa71c5e2ab46aeff155c70555584d890d", 0xdb) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000004c0)={0x5, 0x3, 0x1000}, 0x4) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:14 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1, 0x5f6, 0x8}, 0xc) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:14 executing program 2: r0 = socket$inet(0x2, 0x4000000801, 0xfffffffffffffffd) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x100) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r3 = dup3(r0, r1, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64], &(0x7f0000000180)=0x3) close(r0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe3568cb26c8bd44542b481e3ec6d24183dcf928bf25fb7b44930546c7dea8a5719c2d7d54bb4b175ea4fc815904ce03f5022d9c45fe0ece663ee788ccf8a0c38cfc1f9256ad9412c77da095c5"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:14 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000180)=""/167) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="6f000000d7c8d152339f0a4a5405a975ef11816d966f134cd37da391e9ff08f0d1332e25301b37c459873a3c2264098fd2319696e6fbe1bff34554f6cde588cbe4572b3cb1d5df90a13d83a35e6eb678374f7dc75676158a28363e6d96bcad10a5a2dcd02067dd5f9c156596d9e37ed978f02e"], &(0x7f00000002c0)=0x77) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r2, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x1, 0x7, 0x2, 0x4, 0x8}, &(0x7f00000003c0)=0xa0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x120) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000007c0)=""/32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x5, 0x101, 0x4, 0x40000000000, 0x5, 0x6cec}}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r5 = gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x230, 0x16, 0x306, 0x70bd2b, 0x25dfdbfe, {}, [@typed={0x8, 0x7e}, @typed={0x8, 0x7d}, @generic="eca7b1fa125fe24eda7eaa80d8582d308c748ec6d4eebe2375af47e77321f951a5fa32252de30108fdca21d256648198fba881f034574fc21b53aa740e7bd2ca9c75cf5ce4e33d18788c6840489544579d17c653d7e5dd76d173b002ca08b0c74784ffb9613fbdd5854a8aff99b4d5a81a5e4f1350d9071f3dde9d1140060fbe381df4a4b89f708a5755bd87690f5d3bb766de0e7b2f4b92aedadb159b094d7e6976767c21241e6a05fdaa3af5cd5c519d6f61681efdb309a5ffaf1a83ddce43927814c2f9c3f7122f82a4e5293479f462", @typed={0xc, 0x34, @pid=r5}, @typed={0xc, 0x28, @pid=r6}, @nested={0x10, 0x23, [@generic, @typed={0xc, 0x83, @str='-\x00'}]}, @nested={0x110, 0x7e, [@generic="1404552c29722c16543203b1050ee4b23f2b570ba0c82f3fb1f18bcd25ec59c4f31058337a4f997b3dbd1d477b97b8805f46e3c1a75b30", @generic="b21898", @typed={0x18, 0x1a, @str='/selinux/status\x00'}, @generic="60af959d569dbd9ea4fe2aaec3d33e24d2479d8e512a708ee497f9bd400dc6d8e6c4a1a68e1a160ea44c7fa0c1f5b04011c5328e8f99cf5bf0ff1b63f1425ad44d60cf3fe48d4b787970bbc053e798b79cc5097fbb8ad751aa4a64003f88ba65d69318790ce141fb", @generic="d8e06f6efce0a597e5f0da0bf29de9f572fa1e2352c655a9ca6749c87dab297951ad5e47fe14b6915993a71a7bcdbfd383ee08591bbe9e834f2fc3844598203c2d035a13ef5901169cb211ba8b137f04b9ab"]}]}, 0x230}, 0x1}, 0x40000) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) [ 296.351854] 12932 total pagecache pages [ 296.355835] 0 pages in swap cache [ 296.359285] Swap cache stats: add 0, delete 0, find 0/0 [ 296.364644] Free swap = 0kB [ 296.367655] Total swap = 0kB [ 296.370671] 1965969 pages RAM [ 296.373769] 0 pages HighMem/MovableOnly [ 296.377759] 329725 pages reserved [ 296.448985] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 296.460905] syz-executor5 cpuset=/ mems_allowed=0 [ 296.465809] CPU: 1 PID: 9315 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 296.473087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.482440] Call Trace: [ 296.485030] dump_stack+0x194/0x24d [ 296.488687] ? arch_local_irq_restore+0x53/0x53 [ 296.493359] ? idr_get_free+0xfd0/0xfd0 [ 296.497333] ? kernel_text_address+0x102/0x140 [ 296.501930] warn_alloc+0x19a/0x2b0 [ 296.505558] ? zone_watermark_ok_safe+0x400/0x400 [ 296.510412] ? save_stack+0xa3/0xd0 [ 296.514039] ? save_stack+0x43/0xd0 [ 296.517662] ? kasan_kmalloc+0xad/0xe0 [ 296.521540] ? __kmalloc_node+0x47/0x70 [ 296.525509] ? kvmalloc_node+0x64/0xd0 [ 296.529408] __vmalloc_node_range+0x4f0/0x650 [ 296.533902] ? lock_release+0xa40/0xa40 [ 296.537864] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.542514] __vmalloc_node_flags_caller+0x50/0x60 [ 296.547418] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.552067] kvmalloc_node+0x82/0xd0 [ 296.555761] xt_alloc_entry_offsets+0x21/0x30 [ 296.560233] translate_table+0x235/0x1690 [ 296.564361] ? lock_release+0xa40/0xa40 [ 296.568311] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 296.574171] ? __check_object_size+0x8b/0x530 [ 296.578650] ? __might_sleep+0x95/0x190 [ 296.582603] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 296.587426] ? kasan_check_write+0x14/0x20 [ 296.591637] ? _copy_from_user+0x99/0x110 [ 296.595767] do_ip6t_set_ctl+0x370/0x5f0 [ 296.599806] ? translate_compat_table+0x1c50/0x1c50 [ 296.604813] ? mutex_unlock+0xd/0x10 [ 296.608502] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 296.613761] nf_setsockopt+0x67/0xc0 [ 296.617457] ipv6_setsockopt+0x10b/0x130 [ 296.621500] tcp_setsockopt+0x82/0xd0 [ 296.625283] sock_common_setsockopt+0x95/0xd0 [ 296.629761] SyS_setsockopt+0x189/0x360 [ 296.633713] ? SyS_recv+0x40/0x40 [ 296.637140] ? retint_kernel+0x10/0x10 [ 296.641012] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 296.646529] ? do_syscall_64+0xb6/0x940 [ 296.650480] ? SyS_recv+0x40/0x40 [ 296.653909] do_syscall_64+0x280/0x940 [ 296.657776] ? __do_page_fault+0xc90/0xc90 [ 296.661984] ? _raw_spin_unlock_irq+0x27/0x70 [ 296.666456] ? finish_task_switch+0x1c1/0x7e0 [ 296.670927] ? syscall_return_slowpath+0x550/0x550 [ 296.675834] ? syscall_return_slowpath+0x2ac/0x550 [ 296.680738] ? prepare_exit_to_usermode+0x350/0x350 [ 296.685733] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 296.691079] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/02/26 20:09:14 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[]}], 0x1, 0x0) 2018/02/26 20:09:14 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000000)=""/30) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/02/26 20:09:14 executing program 6: r0 = socket$inet(0xa, 0x802, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000000000)) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:14 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @empty}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) getgroups(0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0]) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB="01002e2f66696c56ab17653000"], 0xa, &(0x7f00000000c0)=[{&(0x7f0000000040)="9b52fb8737", 0x5}, {&(0x7f0000000080)}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000002020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x40}, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:15 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x4, 0x1, [0x4]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x4, 0x4}, 0x8) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xfd1b) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1353f44028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d20183dcf928bf25fb7b44c6e106c572ba456beacddad142248b990b98e1ef403845a09cc42594f99f57543370d8e22e58d633cf2b226e0614a01b9c1cf8cda1"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) epoll_create(0x40000000000985) [ 296.695902] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 296.701066] RIP: 0033:0x453d69 [ 296.704233] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.711914] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 296.719160] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 296.726402] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 296.733648] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 296.740892] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 296.776383] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 296.788287] syz-executor5 cpuset=/ mems_allowed=0 [ 296.793190] CPU: 1 PID: 9337 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 296.800453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.809797] Call Trace: [ 296.812368] dump_stack+0x194/0x24d [ 296.815986] ? arch_local_irq_restore+0x53/0x53 [ 296.820631] ? idr_get_free+0xfd0/0xfd0 [ 296.824586] ? kernel_text_address+0x102/0x140 [ 296.829153] warn_alloc+0x19a/0x2b0 [ 296.832763] ? zone_watermark_ok_safe+0x400/0x400 [ 296.837590] ? save_stack+0xa3/0xd0 [ 296.841195] ? save_stack+0x43/0xd0 [ 296.844797] ? kasan_kmalloc+0xad/0xe0 [ 296.848658] ? __kmalloc_node+0x47/0x70 [ 296.852605] ? kvmalloc_node+0x64/0xd0 [ 296.856476] __vmalloc_node_range+0x4f0/0x650 [ 296.860950] ? lock_release+0xa40/0xa40 [ 296.864905] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.869551] __vmalloc_node_flags_caller+0x50/0x60 [ 296.874455] ? xt_alloc_entry_offsets+0x21/0x30 [ 296.879100] kvmalloc_node+0x82/0xd0 [ 296.882793] xt_alloc_entry_offsets+0x21/0x30 [ 296.887265] translate_table+0x235/0x1690 [ 296.891389] ? lock_release+0xa40/0xa40 [ 296.895343] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 296.901203] ? __check_object_size+0x8b/0x530 [ 296.905680] ? __might_sleep+0x95/0x190 [ 296.909632] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 296.914453] ? kasan_check_write+0x14/0x20 [ 296.918666] ? _copy_from_user+0x99/0x110 [ 296.922792] do_ip6t_set_ctl+0x370/0x5f0 [ 296.926834] ? translate_compat_table+0x1c50/0x1c50 [ 296.931838] ? mutex_unlock+0xd/0x10 [ 296.935529] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 296.941589] nf_setsockopt+0x67/0xc0 [ 296.945287] ipv6_setsockopt+0x10b/0x130 [ 296.949326] tcp_setsockopt+0x82/0xd0 [ 296.953107] sock_common_setsockopt+0x95/0xd0 [ 296.957580] SyS_setsockopt+0x189/0x360 [ 296.961531] ? SyS_recv+0x40/0x40 [ 296.964970] ? do_syscall_64+0xb6/0x940 [ 296.968922] ? SyS_recv+0x40/0x40 [ 296.972349] do_syscall_64+0x280/0x940 [ 296.976210] ? __do_page_fault+0xc90/0xc90 [ 296.980420] ? _raw_spin_unlock_irq+0x27/0x70 [ 296.984890] ? finish_task_switch+0x1c1/0x7e0 [ 296.989362] ? syscall_return_slowpath+0x550/0x550 [ 296.994267] ? syscall_return_slowpath+0x2ac/0x550 [ 296.999174] ? prepare_exit_to_usermode+0x350/0x350 [ 297.004164] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 297.009506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.014332] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 297.019668] RIP: 0033:0x453d69 [ 297.022832] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.030516] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 297.037763] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 297.045013] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 297.052260] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 297.059501] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 297.066895] warn_alloc_show_mem: 2 callbacks suppressed [ 297.066897] Mem-Info: [ 297.074742] active_anon:80700 inactive_anon:61 isolated_anon:0 [ 297.074742] active_file:3739 inactive_file:9131 isolated_file:0 [ 297.074742] unevictable:0 dirty:158 writeback:0 unstable:0 [ 297.074742] slab_reclaimable:12369 slab_unreclaimable:95504 [ 297.074742] mapped:24405 shmem:86 pagetables:814 bounce:0 [ 297.074742] free:1399354 free_pcp:403 free_cma:0 [ 297.108115] Node 0 active_anon:324856kB inactive_anon:244kB active_file:14956kB inactive_file:36524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97620kB dirty:632kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 75776kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 297.136084] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.162263] lowmem_reserve[]: 0 2864 6373 6373 [ 297.166887] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:872kB local_pcp:576kB free_cma:0kB [ 297.194612] lowmem_reserve[]: 0 0 3509 3509 [ 297.198980] Node 0 Normal free:2685632kB min:37120kB low:46400kB high:55680kB active_anon:285564kB inactive_anon:244kB active_file:14956kB inactive_file:36524kB unevictable:0kB writepending:632kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4704kB pagetables:2960kB bounce:0kB free_pcp:796kB local_pcp:148kB free_cma:0kB [ 297.228835] lowmem_reserve[]: 0 0 0 0 [ 297.232688] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 297.246345] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934448kB 2018/02/26 20:09:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="0000000000040200000000000000000000000000000000000000ae00000000000000000000000d000000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:15 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058011000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x4800, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000002c0)=0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x3b, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e20, @rand_addr=0x5255}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0xcf, 0x7ff, 0x1ff, 0x4, 0x1, &(0x7f00000001c0)='lo\x00', 0x80000000, 0x6, 0x9}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r2, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x20001, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000180)) ioctl$TIOCEXCL(r3, 0x540c) r4 = dup2(r2, r2) connect$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x7f, 0x8, 0x7, 0x7, 0x75, "fffd3790b44c885e7e7196f5a45c31f32e7814e3146a296318434496a552e90c886b453ee41e89c2620ca472ae467097632999eadbbf39e3fe141cc14497da", 0x71}, 0x60) sendmmsg$inet_sctp(r4, &(0x7f000080f000)=[{&(0x7f0000000080)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[]}], 0x1f7, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f00000000c0)) 2018/02/26 20:09:15 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x0, 0x0, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2=0xe0000002, @multicast1=0xe0000001, 0xffffffff, 0x0, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x100000001, 0x2, 0x1, 0xd7, 0x7ff, 0x3, 'dummy0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1=0xe0000001, 0x5}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @empty, @empty, 0xd, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x540) 2018/02/26 20:09:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000025c0)={0x0, 0x1d, 0x30, 0x4, 0x8001}, &(0x7f0000002600)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002640)={0x0, 0x5e2, 0xfffffffffffffffb, 0x4, 0x1, 0x4}, &(0x7f0000002680)=0x14) sendmsg$inet_sctp(r0, &(0x7f0000002780)={&(0x7f0000000340)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002540)=[{&(0x7f0000000380)="2f07ccd66146446d4ce995d560629c1d3e7a9d3eff49ef65bdbfa22fc484c50df33d11aa0f84fc1d10f8a055b8812f2de2f30a56afbc8b060942fc909d26cf7387dc815d222b8e6af26a6e60615964bb0fe3ad54e192e1043e9bc988773e9afb218f9f1d7b096e73c39c1578f53523abe1150b5cc04ddfa810e96ec04c24a0497f474bff64058a15836a8c711718bca71a85d99bc56c61a39fbddd799e5e4f040d1edd5ccb134778b92be23717d077cf936ce05860d759ea9e11f1e57546685de03bdc383bbff4ccc80d51c070e3f54a415f18f717e68adece36ec81b5078a4b902f93eab25eb90f7b93447aa9ca7b9ce05ea69779298f1162ac6efc74371a666b053c0912d1ec9600a6ab0c275b9e5a5c2b8032d53d6ccf3675953db97b180191e4be01adf0663811c5e9ce964c202121f20b4ccc1a3dbf39d34dc5ad6e3a7930e3b0e585687240160823b8b10319391b0c7f4109f32e56c09e82b2a077ede34e159525622e804aab1a5c8fcb5e436126515672bf7be16f6a45d13e1063ecc92f9532aab11ccff3158cc1342706b9ab26271bccdea39f2ca144b68145fc3b0d36b6714b784b4a7c1e522bf025091ea5797d18fb4f258c1fc6431d3fd35e33e6774ea4409ba73af93631d0d723e92d19ae00d3e4c456981ede46e15ed501ccf61e40d288d183615ba787aae9cdbee0043639dbba5a19c0f6ca223688841282958ef321335898ce6cdfb49d5620a4c7142ef25405a8c15dcc2c99f46e3926a678596df29f53c1edc749e0df0e58480ccb2ab1bc250144be2155a240159c683c66a3b4d668cba7812369272026d528179180dace2a1502271de8b2e280050b3a4840e8e3e1884d617b3f5673e3143c952b5eeb53946f52933e094d492113906c379e38fb65f7bc98f1680b9a89c03f91cebc39ece1663c22d936121c5e5bf6794088a7853ef86d0e919610a417dba9b74af1e30b53de5a508918e8daa22fbf054034189b9304be994fbbdcbb1275f60915fb82ab648d7a504ae2a4f21cfcc432ac61fa0037ea4f6b1c896ab8f87691a9e77cf8dc98f433270118850048471dc3ee221496a7cda2917a22ad594d59fbe116026f4b810ab1836d7dd099139c8802a84f0a2b8fc59d8d26d97d5a65512e71e8d771640a85de9fbbfd36629416e2939cfabd9b6f84bb543ab5991de9df18041cc54a4c4f925bb8e3cfd824945def8e8396bce3e0fc019927c393bf09dca4669773c01ab81ef41d97f1d5932d5f2d3e260f1dec0185d58ba403f31ce06e34b18d29aa85c87f347cd2c5b6d148f8fbb9c2b26c1e7149d97d39e15acacd627430954c07e98e3227c4cf2f19c2448ec88d065f86096d815fa4fba37577a50172202c918a8a5a0fe52e03948d1acc7661c039aa2d2c5c815d6e66d6a4d91a23b57058d37dc6dfdb897b0d603febfdf4b29edf9eee4454e33eb045534475255266c23d6b3a0fe6cc59c158bd3fed2dab8de15965a6afe72944abb99e4ea7bdfcc9a2b1a823eff0e65ebc6c6cbbdb2f661e258f29aafa368de7394742a71f3053f6e6cad5d578f58845b11e5deb22a1fc62ae930fe67da4e760c797986d2e44392504bc76ebc28ca159cdc6c1b801f830831cc00466606e790bbb6678d0e3ec766bf868d7cc43ee4544f7e0474308b848ab9a5541ff12506f0157e5fae5dca770108c399c8097347471f665ebc3dbd0d99dbc717d2fe871dc94a20325a3fcd78023f4ecf1b31b78c0159dad49ed978a366daabf648def8117a7d7960f2f16db0c07307c72970f9298a436a578f20334119cf5f8ff59bbbe4cea1b121d0457c6a7acfc8fc3a94123ae34c7c82d2de6a5e457a6f65607ce13a465a97d3479516224b5a2dddb100a3d62798e8e5e916aa3812e7603aba95bd93f527a45d625b352c10f05a1880542ef69b5e852cc42f0664d16e409df6c7d45981ac0d3ccb6387c9cde78b0025b6788566bcd45673280cbcd3bcd53c6a17b872a2f7fa7431b1d5227a26bf4326970e54c19c7b89ddb64f9ce0907f226733bc7a99a7fac7a642de8d04dc75f9f8d4fa5ac27e427be1e7a3a97fe9323f5806193360e98baf8aacdb77440342f3298e80765f92c93d9b9d15b04bf4a0309deb4a14e4bbaa1a165cd05bee7fad46ae9556fb6937a9c4de0770fd6c5c9e3e99108596b15dd17ff43c066a841324200e8e7ede511b94b2be049e58f35b25c16cc17c38252306b3ea5d2e81705833881e062ddf9d3693e0a4f46c7c4e4ee4d0b086c8b9ad0df643238ab8d59f186498071883763bb60db85c222a80560efa490cc59262e19fb3b97426742cc10545043ee52499f59737e13b9e4e4097e37de56b24291cc01256c930fef7c9570ec7677b69262e5e69cec621f4b83704c31949e2ca0fecc86600a60bc0bb7f0b5d4ddc89e68c40d5ab9dc979d052a4b7ee0d7451d32370573bf7d94ed62b4609bba090fb80d03ed03d45a72faa2fe3a90003996920662132160a463bca547c6fc2722cf4cccfae6452c01e5aa1e16b1593d3bd47d3ac4700e7974812a87e71f63fe666381c67cca627bc8dada139a0365b2af72e85ac4818815deee28b7ca098321a40f3145d8d820007958d52f0955c2c5e8c571627985d06a786d212a52cff56161e41a9a042fd0755757366dbc2a4ee986a23c30d5217ece7de0dc89ca5501f0b24ed1ef085bf6e229697ee74c9a7306aa581202f7af49d6a8f7651c0999ab5b12ee60efa40a5b8f83fdfeb370aa0b73971fd28fd2b4602c721216720c9376eeba99e11c0ab4b5d92d4c502359ced5beb34945e401decd2e8593d019a108c42fe332ada588a2d3b927af14b830ef2dee81ab8b3f37326dab1775904dc9a0a68532a30677537bdadafd80c8b67451ceef4e950b14759465f2a7651393ef6378b8ddc92322e7ec55353792fc651ee5b287f4e6c515fc8a631d7472a89287da3895e4485bf0c0bead1cee98bf83bb8954872b82c3d2932492c2a1df26dbeef04f962fd21ae0190cff6cb758e430001798d84bf3ec74061a0ce8759a189c16fd5c91ea6f8a2a16e6dacaf95d29c218ff085d067f6695725b8b6120ce3b66ff511eab888bbaeffcca1888e1f73e2de0ed88f8661b5aec8a75eac0c2bba98b0c623155f409a809f38d143bb13535be776d831b7e86f3074a23aff0706fb493f069222502a29c8f845a524b413e78b4231f3fa28595753e728ac7404c379f914da0dca466383ded251dce5a0e37c014be16d23a245f430444d9dce43aba8b80a62925abb8ecfecf21d04d4289446a3dde6e4450fefafb5a275aabd3c924f5b0c5b9a0bc96acf4c802005ebd906e15a6cd18db722b774fbd03e11e5280aa3d074ab8b17656784ebeb8d95094a74cfd3c8c482e8b6aac0dde51288673eee1e0cb4f6415ff3cccb9683f6995d5c350aeb3a07bb00c04d3c94fab9efbb9b82114f3cc9c21ac6d38c43e6e935b04baf6fe44bbc1170770f9ee3374cc3491f6022290fcd64eeadc81b55f1c5aeb4218f92865b65b4cb7f831397d2a725b921c8dbfff14795d366a5076fb624006d85aee56012e6370cd7d14a4933ece31fa43a65a814ece7b5290e5841949cd1a4b3e4bea0f3c591474c338c70fa28549416c24aacda735048cd3057b4db9f9b309318bdde44e7be8d9f5fed0ffaeeefed2d55a5e0c45a29d2783ac9f84fdfb14d383dedd25a0f2a8226821ec2bfb6fab763320bcde47739d0d1632eea239ddbc1cd24860b15818a8ff0c628cc4521eccf8f9badfeda005000b558ecef4caa75dbe06eb47feb102eb0ae601e1b6f3a28609476be2358ed91095555fc3890d59bbea5178a5d07c20234d2e300b58620155fde4e1d1ed350b5846d98ada07407439ece9da3323a795ae9adec9f5bc79294360dd30953e6313ed3627835b4f63053c55f0454fd8ff1cd764b5d0e5e856eea227a7955455534c0ff8583704a05e575612f281d33b6ed7c7e16dead20e8e348ddc06e7d7f7726dae087d6b42bb9db6c1fb77a1e3213b2a508313c70dc57168ea2378e61fcd4e71a1ea7b928d5559003940114d0e812c844422bdf8ea120ec43c610a226f2bc57c960e5aa50f1149cacab9aef4347af419adc26d5937327b15c2f7d65ec907da7ec460eb0a31ad94a060563c64f8bd5be555ff0650e8f64f767a27e2fb9c0cb851bf82b6dacae4b6526016785c12af4e694c3c0ca41cc66b2cac3b948e7fef882e977ac57deec432b395fd49e21e5e356496c3f2e7692c2fc6e827cecaa68387bd94eb67983234250efe06b08be336ba1420f109f0d207ee5fbef57705391c7420c8449c7a0e537bb2f35d1da5da10166a5380f2466b796d92e84c141411d011bdc1a463234aee697976a5d52f4c8d52be25a63ab6e96d2df949dd8836a0f79a9960bad389c2700678414412cee84d31be3e1eff2025cc238bfb7ce76ccf5c50a7d7d508421134df280f7aacf532ab84d9f05a4722b5b196930b36de58c1dcaff9a581c7e8a7f02c2e1ff482b4431882c357ba5fbc09e09c937336b09b703d60f90dd8aba5d5e6f2634afd06c0213cff607427a3a205c55462c89337343b5923eb77626efb4655a427487f84f540d808312da3dc524241e2ffab8eb728cfbf63366feb51c1dc34d38d84ef1315c8578572c87aec494e25d7ab17467293c07210cbaa7550cc7adf60a949106e1cd5b63c976ef774a8d37155d1afd73fef92101b6eb02d0bcc4eaceda67ed2274837b965bf58a06d59dfc317adda53d66b6eb0a03ff44c2995064c726a4e3923d80ea01371fd168bb971185ea99fe8da67243b9940b6975603c18323799dedfebba73d34178945c0da51a0686d05166183eca41932e26ec68add5367588e83d7c17afd07007cb948d5ae1958165297daa282918923add34ced1163e1d6d48484be1c9dc2a41bcad196b8e3aa2ec5552075ebe6b9966fcecdb2b44e8f1e1b77876bae3073d0ade4bca52ec26b661e1fde4dfd1b56cd9118ad0e00d6e14355e8f3b0e62ba4b936753c3ab82bab4eb567eaaf2181a945f47e54b62d047737c28fa384430edb5c07b7196d93e50b0de5de9fed0c5ee4d3123375636c0525eacef9b95d4dc874b232a31474f87e73d6ce4d9ccdcbbe76faabbf389f8d05d116b38adebaa228c4c031fd3dfb9cf4ac315fc53e5cf483c1dcb69a909a0dedca5207bd8eb5773aa5edc0a9ddc27d2e160bc6b2010f8cb8fbf6bcec680ac9bb1adf13db46ae103f623ed91c25aff70b4cb13617b978b8149668bb50420b46b5929a5b6466c3efb34fc842adf372b935eedc53bcf0531b6d459a7a240ce2cb970cbaa8714b52216fbfaaf0b6f083644be19b55facf49485e2a195275cd63955bf18a5ba1d421667fdead87f0d5b7ee9c6a5479058364ed4624b192e11b1220aa8ff54cbb280bec20e11d6c98215a7c826640cbf9c4dede66fa52be75b25fc3370d548d69d4dfc6148f1177ee85b7a54e04d1798622891cb0fee49e8365f0a9cc0bf7c5e162652550303e74970886c565b1e95c261e9f2cb2f36e3582cab8dbfd9ef642cde21413311a2fd32a43630c62be7a2946ac21c593a9561acc752b6e6bd595deedfa38c8f1785396294548cde168f432e946b45eb17f568b02b22bfc6a759bea59f0c819cc86947e4609b423a55f318235cc8bfe89f4065f99b1b5f5ddae8bc9517798914f85cedf3bfe5d83330511d10af438f63aa2a218b640ced6cba3701e2cbb49464f5fa6d29b4b7b7dee714322364356b2f0a38c81d4dde71bd0733ed9fdc4a001b0eb407c6378", 0x1000}, {&(0x7f0000001380)="cbd8544b6c3113f2a6b651ec3a4bd5a90ba082b75265720f5137a8377a1be1212f9e2b746bb7d1fb1ce2212a25fd858e86925aba6c3609b5c16a3459dbbd1d1c541bc15fb09183e6cf9625bdc94e368b3d9d737900aa61ae080efb254fef5e9de70b83d5e1bbee73f7052c63498eaf69314c8c74e3a3f9e93a45dcfa2f406ea9e141a3e27abac5f73feb2312cec9d34d9ff71b7f11a4e8dd2372b054c9fe4f20a89cd46129b6e54bdaa83c2f0fe116a1eef766ef11ea44c6a477b5af3d5c2ee30be9743ecb6004508c4541bb4745c7189d1318ed18b9057758797bbe3e6638d9237dd987d7a5745edcb71bf614a691310f88cda889f9330a02b8e5397546971c09acc6fbca51df0e464a65648846436b028581c696be5383b250a707dcbdaf208aa6f67c879badd1396a891e04deb03c13b9f9cd488c1e51d9c96912ffdcec22f8db0b5f3ed0234fd972fc1675edddc8ac4a677d87bc7da4c8ed02bddf23cab8f17e686d3dde89c7a95bcc70d8aeb395ab3b98eda9c1810303087c1be90033fe6e03c612976dc0aae81ee45f6020e93bb5d9078544dfe016287e60bb1b558e39fe8854429db1d09bd192a8321f81d94dbe9fdea2433dc91666097c677273ed79606921ad9b32b0d770fa92812568ca99b9a1c761380429f5c9e0dc6a019013a98191450233cc17b6f7af047e716962a24fbe673377a0be40e571366100c8ca3690410b037514f7bdfe09187fea2a3c74cb9575177362e22f931529a063e6c9777014578bbaceb58e2554695e48ab937bc4fbc42238d1e2fd30e03c25697f5c9eae57dc2f109f3f0ef4654b3ef0e6f8bc9537b40924dfd2d33a1aee608f49e3a8a00095d4af9bae235b19d93d08b4cdd6597436bbd2b0eedafe5192468cb9d0e233d6b004a57bbc9de52432a2186f8eba90c8be3248a02281141d78bf1d7d3c3d567739b717c8c6b0ac4d3c2a0a51e0ccd6720254ecfe5fd9a9ccb7f7227d1fc0584174c05d32b1c01b936dc5f621dc1fc5ecde0550951cea1d4cf5c1c29312acdb5d83421cfdfb69e1ecf3aa33d5ddb2a09d1057a61caa3b28a804ce7cc0890a3f231f91e95ceb98e922a04543166ab92ef7311cedb9da9b34b4b956db180e485d40d4407877b26f75d4d071e62bff668a89016f44bf460e07a113a8c48185b7f89d829cc8ac30bfb44bd751cbfbb16b277bff662843a942c7da9ec084870202685c327e5a04ed181ea07e77a6d2b4e62e21c62b93021e60740321b6fab8d5577c4ff1bd5680812745887096253cf6e39b2da3f891c3cc96674f37327f059187959c28fc036cf0fcf41134eeadfa45e888bef4c174946d8e9daf0b1b4dd509d14a3fdf3f3376c50834763c90a6d513cafcf12e1d82de35b4c998ae56c52a1f4b238cff7572113f050901ab55e1abcec785e2e2c821fd1423e742a80fffc20edc3bf5dfad0877b77bcdd1db244f560d47aa1dc563ceb37351a2658a12b8308fca2250a4cc4f9e904a96c636debea5b2c7e925a20c45a26c7c50513ed201f9d480f7d08b353c5c763dbd0c1f84112624d4755fd1f93d86ed1530ebadd719963241ad327e757a1f00a74bdf5989eac1fcce98de73a5e03d33802e4741e25e6f4a25fb86ad81fa489044b5de6269618e3399524172298f397db20882add91681dba43a785cb497d0d1c1fcb28d271877c127bf4aa54cdcd6402a16e271c33791a3e6e91d92a35c23b8c9a776ec14d01aab624680fab2ef2250c45ac6bdc94a76b746a1acf5d4993f7c1bd8fc3ac7c554e5b013e1bf48169592532382c0c8d31ee9253ebf9af991e8adc071236cb260df8fe54e3d4acbac6750614785c8fea16e1766891ede23957f748fe40f2b8033954f55b70155f5616b89ad968c87f872d1528d246d67be0a400b4e6943fc72a7dfac751d08273252e6979fe6c2da9c459b3163f795f1ba56281fd637d030f0ee834f6138de4e6c2e55bb355c053534a2f8095a0e6c1fec1d93aca954feb9280d5dd6d5aefdf5f140405698e5c88626ebe6452b37d5de3ad6bff832fddfd379d5c7ed03203ade85f84113989b9b7212af1b792983f1c90050c9ee5ecb945a1796eb77d208b04926a67b842dccc82de6cca57228b2373e51327049964cca5de206405a537444a5869765d6e36a0f2eb9cc57dc7a4c3cddc2b50691866457706dc3190771e333800f8eff764a6f7c3fba876ab1d9252d7c7d41717084d784166ed3b4381457b83c6102cb343d279366f1ab53e072e1b677c806a07193ae42e269a44198d770073589bc1e64f2901152fc35b6bbe76afcb530a909616570c1e629f352e3db81bdf8bf6ec97ac23cc2e2e9217e4d72b1ddab9d0bbea052fb92e3f4da54c0f27fb078648e8a10fcfa93d0bb21e1ddcda53a33324eb77e14a4054c984d0fbabb8b08cf1bc1c3d4291eabb6ed0f07099b359eaf59a4f9e85f78f5245dd3abe91108f797a93d844a1ca60d76b887e0117358b532436e36c0390c2f328e75ff3ec5692460cd8bb0235218faa47463e1e595ccd0f93d576826d296f83746318e7e9bc5f288b998f531a769d61ba7fe6700f18f76d7dc3247c81dc15b900fd533ccf75a20e06c9f9236cb4b944d60e58bfbd9c14d8cd5a07ee60c39625b2b469003f453a1ff8d5d99f494156f0ab6888d66d7960b01c7716adfd516fcc4b3dbc49b0a24b4c86297fa6ba8ea38bf87980bb96cfa5fe18e3fe2585fd26842167e70d4047406d20d09946c36de838a56c52de2e55fe76e83a499d87940f606789ace57fbd6cd6c8518e65664d67fa192337f72b2507cc32544e19a0cfa4e9ca5705f68427a840bdeae602e4564ae29c655dd06f77d27e3b43de92d9e1b603584155db5bf714ea77384c5cea60193551d75ba2b769b485e368c83e32131ec737a3b50e505cfaa55f17e6a01c26d080be662aab7028d8ef2d9838754fd3cc3edb193763908a2d89c7d58b67595e5ee415cb4475b7e2f997212dde9298295a87653a13fde6f1e67d4233b7662511c671c2882220b50303163b494ee2059ec85dcced08fff4a0b171a90c6e7b44e5255b74b1d8d9ec138a1320ad3087f422d00a7933cd11f112436c0e35a741f80f33859ee6a5fe3b6bbebced9ae7a271b78c0ec2e975e0552ec95702ba2098c698a93f23b2e56b5c1f88cfd158f7a4bc626bca895e4165bf370493c31efbea4d7cedd38bd23bed21a1f2521169d4eb229d747a2041b15cf85a7f68b723f4de62732ec1b5766f32b5bf9a480f52a02d973ab4e2ba32c3075b77e6a631ffa61ad01cce8d9838145eb1aa47f03faea67ca79b79166df924bbcbff92438305dcda4fb0ab37c7492a4ea92bed41b0bb418f081c4187db75cf30dc4a28f66fdc3003b417d3a1cda3587d4aa4018a42b8c6248f84a54ae4db601bdd042b9ebfcaac596892f072dda35d0808ec0e2f44cd78e0576a9e2648c7fea85f9e1180dd19d0ad3cad67a618c1e38aae05eb10b6162418059e24e649f7e6d533757bb792b72a20f3c8a837774bcfd369c5eee5ce19581dea2664f46ce00ca61da76c0ee9510fa2336ffe64441a09e83555352d87c13471d763f11f3b62ef7c34620f1322bab098591ac619d6831fdfa2f6d1679300c17c6261e3864b625bdef0129652a99dc8067b0f24de05f229ee3c6334190a701956ea750688d49e3ea87669eb05db25b19ac2e27e158bbbc99433ae7ddd9761a8a6cc05c403791d248645be16647a0d183bef2141a35f3718769a80c01c6f381a6216d2df0b4582a1a8da455960a23968d24b601563b11f86e034a5f35926f84ffc3d24d1db9c0516fd922675d604c034c24eb65eb3f19d4da68b492532bebbbc68d69734dce02ccfda7c94732d446d8c4939dc1ff76e6c289be8469bb6f0d1a92fcfbc266514704bb4742b3787e22c94acf31f81d9b635c9f8b997ca9cbc19d8f3c5036a67a8012bfafa88c143533f033c710af99ff5d1511ad7f31eecae0a6d224fe52999035c73750e7c5dd411c39988151b91174930ddb7fe78d267bb91327468e6c9be2c5767e92541070737f65a56c3c848826b008b505a68bc0c6fa000e438376cae674d18c1eea30725018c300b29ead77989d85fda45d00625c71a2aaf66a4040bd6224e73ee7137021c0552ea8ee550774369e163532235991f58a6006db476735ce5cb42efd6f9766f03c29face85c9924c643b0298f683691565f3cee803e3a29c0ce19f0b44f950eeebf7080aa38f27038aa0a8e8e2ec5e60a921bddef2704c2ce87f5a013d54b819d3b01c2c03ef418618854a0824a7c556b1cec179145da91a4de2986db28a7b68cc715a13cb983398b8bda00d5997759874718daa5f13397ecb6948043aab1a3d83b50fae81c90e4c33fdd3aed621bfd79d183be7a100e0745d6eb5f6a87bbb8cb4365d4674b1dc8363f9d4e5a6e8ed87c6831bac4e773f54a8ccfb2598beec7204869ff0e514331871ccbb8b01aaa35c308a27d0d7112dbd5b75fecdc32bfb38f10a5ae9b7219fe00108ae7229a3172256c3d5f956e2515721257cd3e2810bec0e378f2ebda023f2679fef15db480d807aa8ea560ebd5b6495c897e3fe3e233a9823e5e20338d71423768aac0d0aecd2950c6436fa57e8521d1745fd7fec0ff4edcdd7be342d81459becc9b936d0c33c1996826a4abdaf92f6f1a7b26685f3c8a3d6b9266553767df4b6962ac0dd75362f59dacd60999bff966086e8402dde4e5c070f4ea9d6fafb0889edb1bfaab834d080b1d215d21012087a3f8627554488216c4933043c633c13e908329f733d591bf18694ecee31ee4213a260f9dc1cdebb8e94cb464ed55565554b2d14639f92442984f1897549fa4fc2b4806942c6dcf5b1dce1e14ba43b99da5c8cf33fe50f5f3898c7849ae7155f935cbee39d227dc8c2ff59817d93590c26cc0894a97c0cfb51bb05f9a314f57e858a1f872c61d1802c4797cea65be162392698465aafc6e48f8d2622c09afbfc625d9e1c2ecb41003efab93d6e8e86695349695710e19a55f4a91f2669fbddfac9ea38519cc0006613640834dc0a14cef8899e35cf9a59bc72bebd0a08f0835f94c2da2411cc602d38637e5d879c25a03e4969d49e8e876f19e601bef603e37a628a2b0677c48ce5ecacb5c1575929975383642decacf657e3e65e91ae56b11eac56babc1adc09cb7604512c2087eaabe320fbf86f74904f4839f4de7fcda0beae5a85d82fa0224854d805bb98c27cf822718aa2281a63f530987de1c2c002a94fd00507afcb9945bd7e0d78601d4b0f337803a7d024e901e46f4ed1c1d13b25084b64c6801b81929a41a0192cbc86c13a118bca2a88925ba8fd1ea9fc64b6566006eac34192a0d03f784548c2a19b03aad5874134512104d537519c8ec5aface5262beb62fdefd2e42367bf4a5c627de9dec6815f1d3aa9506a73c68f419fdd66dc87dc5809327da155c2f5e11c14f9ea40cfe510e3616d926e5ed646d9ba3ce53cc855e4937c5546d81a2e3f3c9ecf441cc1fbcab4dd226857f77371ea4f1a3f05e9ea21b44fcc11094bb2072c4b68b5d7179731500c62a54364ebc7201d4b32cb6129d6bdd1985f96e3cad97ad52aac601a2f916470a3fa26eed8ccaacaf738a898dfe7b13cd03e649db945fed4ebb18170784509e78acc516bfcaa4f605eb19372e0c3aedf7795afb59ca6163790703660c7661360aa168ccb1663270b4875bb7bce91077d433889df694e37fe91b3edfa29a850f2d96907fcdf30d8002f6068b82464b119e4042fb8ce2fe8d2d578eebb", 0x1000}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="418dea1d0ad33fdae8070966f2e3309d67f0e8391a2171a3d804fe22e28c1feec20ac8788290dd187657885cfeb052e49f684baccc64cc420d854f93d9367fe871ff66ff842a1d3667b97d6d5ebbca1bf187708bd37d86b847a4de3bb8847a71c28bcf1453a28b8cdf2a90fb2963927e44c624a1ec87ecc05c949b9fffb85e2ceb7e6055d9cdbcf538b5d76691f31d495d50afe74532f5421d7b9dd6858bdd091fb69cf54c10f71d80416c3d8a554ed45d8f1e7e8b8494fb437fad8be15554fe27b1898d356947d5e5eaf60e8f68885bb4831c4763d8df202dba005da4e8f5fcaedcb66ba12a50e14d62b8f4a9f54296af57777f5dfd7be7", 0xf8}, {&(0x7f00000024c0)}, {&(0x7f0000002500)="88494db3fd5352007aa06a0eda21dd", 0xf}], 0x6, &(0x7f00000026c0)=[@init={0x18, 0x84, 0x0, {0x8a54, 0x1, 0x0, 0x2}}, @init={0x18, 0x84, 0x0, {0x59, 0x6, 0x9, 0x20}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x608, 0x8000, 0x2, 0x50dd, 0x6, 0x3, 0x4, r1}}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x200, 0x8, 0x40, 0xfffffffffffffff8, 0x6, 0x8, 0xffff, r2}}], 0xc0, 0x4000}, 0x4000) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0xfffffffffffffffd) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000005007e0005000700ffff0180ff07"], &(0x7f0000000180)=0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x16}, 0x200}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f0000000100)) r6 = gettid() sched_setparam(r6, &(0x7f0000000300)=0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r7, 0x101}, &(0x7f0000000280)=0x8) 2018/02/26 20:09:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = gettid() ptrace$poke(0x4, r1, &(0x7f0000000080), 0xfa1) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/16) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB]) 2018/02/26 20:09:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x12080) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x0) signalfd(r1, &(0x7f0000000000)={0x3}, 0x8) r2 = dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0xfffffffffffffffb, 0x4) 2018/02/26 20:09:15 executing program 7: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={"352e3aa9ecec104acee8c33541c41373", {0x4, 0x1, 0x100, "9728c3bc9261", 0x40}}) semget(0x2, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000240)={@rand_addr=0xfff, @rand_addr}, 0x2516f1aae2990535) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) dup3(r2, r2, 0xfffffffffffffffd) [ 297.261886] Node 0 Normal: 868*4kB (UME) 192*8kB (UME) 25*16kB (ME) 1330*32kB (UME) 885*64kB (UM) 88*128kB (UM) 8*256kB (M) 5*512kB (UM) 23*1024kB (UM) 31*2048kB (UME) 605*4096kB (UM) = 2685600kB [ 297.279537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 297.288122] 12955 total pagecache pages [ 297.292105] 0 pages in swap cache [ 297.295559] Swap cache stats: add 0, delete 0, find 0/0 [ 297.300927] Free swap = 0kB [ 297.303944] Total swap = 0kB [ 297.306963] 1965969 pages RAM [ 297.310083] 0 pages HighMem/MovableOnly [ 297.314062] 329725 pages reserved 2018/02/26 20:09:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000900)='/dev/rtc\x00', 0x862c2, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x208000, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)=0x400, 0x4) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="021404000c00000029bd7000ffdbdf2502001000e70004d3000004d30000000008001900000000000a004e2002000000ff020000000000000000000000000001010100000a004e220300000000000000000000000000000000000024aa1fbb462bda2c7defa90108000000"], 0x60}, 0x1}, 0x4) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000000)=@req) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000200)={[{0x7f, 0x4, 0x0, 0x1000, 0xda, 0x4, 0x60, 0x7, 0x1, 0xffff, 0x2, 0x1, 0x800}, {0xfffffffffffffffc, 0x101, 0xe642, 0x20b, 0x9, 0x2, 0x7, 0x63bf5f56, 0xffffffffffffff7f, 0x1, 0x1, 0x70, 0x3}, {0x2, 0x1611, 0x3, 0xbb, 0x6, 0x9, 0x8001, 0x7fff, 0x100, 0xffffffffffffff5c, 0x101, 0x1, 0xb8}], 0x8000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r3 = epoll_create(0x40000000000985) dup3(r3, r0, 0x0) 2018/02/26 20:09:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x101) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x300, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x74, &(0x7f0000000280)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x800, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x1f, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x89}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x401}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r2, 0x4}, &(0x7f0000000080)=0x1ac) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r3, 0xfffffffffffffff8}, &(0x7f0000000100)=0x8) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x7, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d80300000098d6c609fe1b1baa000000ffffffffffffffff00000000ffffffff08030000ffffffffffffffff08030000ffffffff03000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000e536c300e0dff44e0000000000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000238020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000038005345540000000000000000000000000000000000000000000000000000030100081f01000609050028040100000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x438) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x8000000000000000}, &(0x7f0000000200)=0xfd30) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)={r4, 0x79, "23823cc3889d9645f2149f292f0609a215d8f41280b000c526a83a00357b894dd33ab9d9a10c63d6d4c8860b816a6d77e50f22c291de96845600426e6c4275ae5d0ebf83811c33506ba152f14842bb431fa5c4406598803e5a3fa486fbdb7f595e50b619000687c0c0c391e92290d90da451003c06d328f5a4"}, &(0x7f0000000440)=0x81) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@sack_info={r4, 0xbba, 0x8}, &(0x7f00000001c0)=0xc) [ 297.382076] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 297.394090] syz-executor5 cpuset=/ mems_allowed=0 [ 297.398988] CPU: 0 PID: 9366 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 297.406267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.415618] Call Trace: [ 297.418207] dump_stack+0x194/0x24d [ 297.421839] ? arch_local_irq_restore+0x53/0x53 [ 297.426507] ? idr_get_free+0xfd0/0xfd0 [ 297.430477] ? kernel_text_address+0x102/0x140 [ 297.435070] warn_alloc+0x19a/0x2b0 [ 297.438691] ? zone_watermark_ok_safe+0x400/0x400 [ 297.443521] ? save_stack+0xa3/0xd0 [ 297.447128] ? save_stack+0x43/0xd0 [ 297.450729] ? kasan_kmalloc+0xad/0xe0 [ 297.454588] ? __kmalloc_node+0x47/0x70 [ 297.458538] ? kvmalloc_node+0x64/0xd0 [ 297.462411] __vmalloc_node_range+0x4f0/0x650 [ 297.466887] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 297.471886] ? xt_alloc_entry_offsets+0x21/0x30 [ 297.476531] __vmalloc_node_flags_caller+0x50/0x60 [ 297.481437] ? xt_alloc_entry_offsets+0x21/0x30 [ 297.486084] kvmalloc_node+0x82/0xd0 [ 297.489777] xt_alloc_entry_offsets+0x21/0x30 [ 297.494253] translate_table+0x235/0x1690 [ 297.498379] ? lock_release+0xa40/0xa40 [ 297.502330] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 297.508190] ? __check_object_size+0x8b/0x530 [ 297.512670] ? __might_sleep+0x95/0x190 [ 297.516619] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 297.521442] ? kasan_check_write+0x14/0x20 [ 297.525653] ? _copy_from_user+0x99/0x110 [ 297.529778] do_ip6t_set_ctl+0x370/0x5f0 [ 297.533819] ? translate_compat_table+0x1c50/0x1c50 [ 297.538826] ? mutex_unlock+0xd/0x10 [ 297.542515] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 297.547769] nf_setsockopt+0x67/0xc0 [ 297.551463] ipv6_setsockopt+0x10b/0x130 [ 297.555503] tcp_setsockopt+0x82/0xd0 [ 297.559283] sock_common_setsockopt+0x95/0xd0 [ 297.563759] SyS_setsockopt+0x189/0x360 [ 297.567715] ? SyS_recv+0x40/0x40 [ 297.571147] ? filp_open+0x70/0x70 [ 297.574668] ? move_addr_to_kernel+0x60/0x60 [ 297.579054] ? do_syscall_64+0xb6/0x940 [ 297.583014] ? SyS_recv+0x40/0x40 [ 297.586445] do_syscall_64+0x280/0x940 [ 297.590306] ? __do_page_fault+0xc90/0xc90 [ 297.594512] ? _raw_spin_unlock_irq+0x27/0x70 [ 297.598982] ? finish_task_switch+0x1c1/0x7e0 [ 297.603456] ? syscall_return_slowpath+0x550/0x550 [ 297.608360] ? syscall_return_slowpath+0x2ac/0x550 [ 297.613264] ? prepare_exit_to_usermode+0x350/0x350 [ 297.618255] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 297.623599] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/02/26 20:09:15 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @random="86fc901ac15b"}, 0x10) sendto$inet(r0, &(0x7f0000000080)='\t', 0xc, 0x20000000000000, &(0x7f00006f7000)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0xb3d1379f8640fc7d) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x9}, 0x4) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="063a0000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sysfs$1(0x1, &(0x7f0000000200)='vboxnet0*trustedvmnet0}cpusetselinux\x00') sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, &(0x7f0000000240)=0x3) 2018/02/26 20:09:15 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) [ 297.628431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 297.633596] RIP: 0033:0x453d69 [ 297.636762] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.644444] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 297.651689] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 297.658933] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 297.666177] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 297.673421] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:15 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffffffffffff200200002002000020020000ffffffff04000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000a54e18c7d700000000000000000000000000000008000b0000000000000740000000000000007398b41e3ba6a1ffa86e39f2ac7da5a48dc3adc4ec3d50c6e9ae3d22d0e6703d88f0eebdc97cf4165536379dbd4aa919da116c694ead1147c2345dc6edf595f77e7ddf4bdf046475db2f0af59e163e12000887d6fccf6da8035aaa4a5e454ffa20d05f14761c"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x200, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x100000000, 0x3a5802) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40080) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x20, 0x0, r3}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r4, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r5 = dup2(r4, r4) sendmmsg$inet_sctp(r5, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000200)=0x100000000, &(0x7f0000000240)=0x4) [ 297.716643] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 297.728672] syz-executor5 cpuset=/ mems_allowed=0 [ 297.733583] CPU: 1 PID: 9366 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 297.740852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.750206] Call Trace: [ 297.752803] dump_stack+0x194/0x24d [ 297.756443] ? arch_local_irq_restore+0x53/0x53 [ 297.761823] ? idr_get_free+0xfd0/0xfd0 [ 297.765801] ? kernel_text_address+0x102/0x140 [ 297.770403] warn_alloc+0x19a/0x2b0 [ 297.774038] ? zone_watermark_ok_safe+0x400/0x400 [ 297.778885] ? save_stack+0xa3/0xd0 [ 297.782494] ? save_stack+0x43/0xd0 [ 297.786097] ? kasan_kmalloc+0xad/0xe0 [ 297.789958] ? __kmalloc_node+0x47/0x70 [ 297.793907] ? kvmalloc_node+0x64/0xd0 [ 297.797781] __vmalloc_node_range+0x4f0/0x650 [ 297.802257] ? lock_release+0xa40/0xa40 [ 297.806215] ? xt_alloc_entry_offsets+0x21/0x30 [ 297.810861] __vmalloc_node_flags_caller+0x50/0x60 [ 297.815764] ? xt_alloc_entry_offsets+0x21/0x30 [ 297.820411] kvmalloc_node+0x82/0xd0 [ 297.824103] xt_alloc_entry_offsets+0x21/0x30 [ 297.828575] translate_table+0x235/0x1690 [ 297.832702] ? lock_release+0xa40/0xa40 [ 297.836656] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 297.842519] ? __check_object_size+0x8b/0x530 [ 297.847001] ? __might_sleep+0x95/0x190 [ 297.850955] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 297.855780] ? kasan_check_write+0x14/0x20 [ 297.859989] ? _copy_from_user+0x99/0x110 [ 297.864118] do_ip6t_set_ctl+0x370/0x5f0 [ 297.868160] ? translate_compat_table+0x1c50/0x1c50 [ 297.873153] ? SYSC_recvfrom+0x3d7/0x5a0 [ 297.877204] ? mutex_unlock+0xd/0x10 [ 297.880893] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 297.886150] nf_setsockopt+0x67/0xc0 [ 297.889846] ipv6_setsockopt+0x10b/0x130 [ 297.893887] tcp_setsockopt+0x82/0xd0 [ 297.897670] sock_common_setsockopt+0x95/0xd0 [ 297.902146] SyS_setsockopt+0x189/0x360 [ 297.906101] ? SyS_recv+0x40/0x40 [ 297.909534] ? pid_task+0x1a0/0x1a0 [ 297.913141] ? do_syscall_64+0xb6/0x940 [ 297.917101] ? SyS_recv+0x40/0x40 [ 297.920532] do_syscall_64+0x280/0x940 [ 297.924396] ? __do_page_fault+0xc90/0xc90 [ 297.928607] ? _raw_spin_unlock_irq+0x27/0x70 [ 297.933078] ? finish_task_switch+0x1c1/0x7e0 [ 297.937550] ? syscall_return_slowpath+0x550/0x550 [ 297.942454] ? syscall_return_slowpath+0x2ac/0x550 [ 297.947360] ? prepare_exit_to_usermode+0x350/0x350 [ 297.952353] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 297.957698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.962523] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/26 20:09:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000002883c20000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:16 executing program 0: r0 = dup(0xffffffffffffff9c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000001b40)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001b80)={@ipv4={[], [0xff, 0xff], @rand_addr=0x9}, 0x5, r1}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r2, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:16 executing program 2: r0 = epoll_create(0x80000000) read(r0, &(0x7f0000000000)=""/244, 0xf4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8) sendmsg(r1, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_map={0x2}}) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r2 = epoll_create(0x4000000000097d) dup3(r2, r0, 0x0) [ 297.967686] RIP: 0033:0x453d69 [ 297.970850] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.978531] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 297.985776] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 297.993021] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 298.000266] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 298.007509] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:16 executing program 7: semget(0x1, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0x3000, 0x4, 0x0, 0x14000], 0x80000001, 0x2, 0x5}) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) socket$kcm(0x29, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000340)={0x15, 0x92, &(0x7f0000000280)="dd8318af25de9eadac90ed0e93b5a097c450ddce0f35bb833d2bef9c2155eb7efcd6bad073a0ace0fce6c86c501b9740b2c2f88f94c76003b301b9bb4e51c2da3c74adff215b07dad86e0e5874680fe51b7d2990356cdc1dcf83942d0cd90333a0490eb5351b3acb9f2850a3cd44c77a261872a38b0ff75c7ef12a4751eabf2a7c7edab47593d62bb3adff5e30e2fd1f3c84"}) dup3(r2, r1, 0x0) 2018/02/26 20:09:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x7f, 0x0, 0x0, 0x6}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) r3 = msgget$private(0x0, 0x240) msgctl$IPC_RMID(r3, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:16 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)={0x6, 0xd64, 0x6, 0xfff, 0x5, 0x20, 0x2d4, 0x8001, 0x5, 0x8000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) lseek(r1, 0x0, 0x3) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, 0x10000, 0x1, 0x3, 0x5, 0x50, 0x4e3, 0x2}, &(0x7f00000001c0)=0x20) eventfd2(0x8, 0x800) r2 = epoll_create(0x40000000000985) r3 = dup(r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)=0x8, 0x4) futimesat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0)={0x6}, 0x2cf) dup3(r2, r0, 0x0) 2018/02/26 20:09:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) rt_sigtimedwait(&(0x7f0000000480)={0x7}, &(0x7f00000004c0), &(0x7f0000000540)={0x0, 0x1c9c380}, 0x8) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x0, 0x0, [{0x40000001, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000b395cf0063e4a8afb70c5c0992d183cca82b46b91e9c902ee9a258e6644c62018ce18ee49e53dd39d50b80e1dc363c190d933f84faf458c672f76338419476927edf453d38011065198d"]) r4 = semget$private(0x0, 0x1, 0xa) syz_open_dev$random(&(0x7f0000000380)='/dev/random\x00', 0x0, 0x0) semtimedop(r4, &(0x7f0000000140)=[{0x1, 0xfffffffffffffe01, 0x800}, {0x0, 0x1ff, 0x800}, {0x4, 0x6, 0x800}], 0x3, &(0x7f0000000180)) r5 = open(&(0x7f0000000080)='./file0\x00', 0x201, 0x163) getpeername$packet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14b) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f00000000c0)=""/25, &(0x7f00000002c0)=0x19) getsockopt$inet6_int(r5, 0x29, 0xcb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 2018/02/26 20:09:16 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000001200)={r2, &(0x7f0000000200)=""/4096}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r3, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\a\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x28) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r4, 0x80, 0x30}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x460000000, 0x852b, 0xffff, 0x1720}, 0x14) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40040, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000100)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) syz_open_dev$dmmidi(&(0x7f0000001240)='/dev/dmmidi#\x00', 0x7fff, 0x80) r6 = dup2(r3, r3) sendmmsg$inet_sctp(r6, &(0x7f0000001280)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4200, 0x0) rt_sigreturn() r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x20}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x200, 0x3}, 0x98) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) clone(0x80000000, &(0x7f0000000140)="245b412b04042e436ab75ce98f89172365e9", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="ef86a265d067dfb7b170f988bb74a229ab71e2fd195d65") 2018/02/26 20:09:16 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d5d2c1fb5c8441721b03e5f1f0df6a44178adf388e64b014707008ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x40000) dup3(r2, r0, 0x0) 2018/02/26 20:09:16 executing program 7: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) ioctl$void(r0, 0x5451) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) timer_create(0x0, &(0x7f0000000380)={0x0, 0x19, 0x4, @thr={&(0x7f0000000240)="d3c36d2e7d5e6f69f2630ef215345d699d3fd2155b1240d7614d21a65b80927491e3779fca1e99d278ad4f0ea00d8db2117b24ced4562613d5aec861a114be6630f02b06e12ea1e5767c0cd2c502d93e13dbdb97bd75ab7a51cb1a676653df3ca5a32aa7abc6cf869b921cce83d1ee1c4c1df61d1eb10c6f7fea7ffd2c400181950c5334a442b8cc1c3bc75d1c67d04549d21d611f725a715abc233798622dcaf9ef8c2c226141073edd8d361eff0403fd00e1ed6316f1c20469ad6887669fdb89c51689530a0e7d21bd77169590d794b2ff50c75d6ed4e3842e10d2c0e89368ec1447ff1178d198eec1a3da", &(0x7f0000000340)="a9564dbfed13e36dddcdf2a1ef2ade67e52c2a2d7b947d37"}}, &(0x7f0000000400)=0x0) timer_getoverrun(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40000, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r4 = epoll_create(0x40000000000985) dup3(r4, r1, 0x0) 2018/02/26 20:09:16 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10002, 0x20) r2 = dup(r0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000000c0)={r1, 0xffff, 0x6, r2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000c38fbbbc271d7707798800000100004000000000000000000000"]) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:16 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x7f, 0x4) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:16 executing program 6: r0 = socket$inet(0xa, 0x8000e, 0x0) epoll_create1(0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x9, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) getpriority(0x1, r2) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:16 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = syz_open_dev$sndpcmc(&(0x7f0000001200)='/dev/snd/pcmC#D#c\x00', 0x5, 0x200000) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001240), 0x4) dup3(r1, r0, 0x0) 2018/02/26 20:09:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x105000, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) accept$nfc_llcp(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x60) 2018/02/26 20:09:16 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)={""/16, @ifru_settings={0x0, 0x0, @cisco=&(0x7f0000000040)={0x1, 0x80000000}}}) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0xbb, 0x4, 0x8, &(0x7f0000ffd000/0x2000)=nil, 0xfff}) recvfrom(r2, &(0x7f00000001c0)=""/53, 0x35, 0x10000, 0x0, 0x0) 2018/02/26 20:09:16 executing program 0: r0 = socket$inet6(0xa, 0x4000000000000005, 0xffffffffffffffff) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000540)=""/4096) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001540)={0x0, 0xf6, "883d5a04e39eae2e203c40791d9286f7ebbf451af8dcf0c875c06e50c8510f8b5c6e3f516f0df71e47290db3ad2e56eb0cd668ab05455eef481b2ffd70581e7edd6b3996320477413ba750a3cb95d0ba5f1cea232db9b93cf43dbecebe887a70495ed071cc312dac92404dfa04d0331b2e26e61b9bfcb82ce8115adfa02b4acebe20a57b76d60e22904054c0ddd5ca8b3f010f02151a8830297cf2d86f217940b288aa5736ce1ad178b4099c045bb72922ce21e5e1d8a6bfe20ff372c9f72f038e40b0b614a2657742d5398eeb2fe629aebd82e4ef88915b7541500e114f23babb49d826d6a22c6af9a6369ff8a7bb1dcc843c1a4404"}, &(0x7f0000000480)=0xfe) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001640)={r1, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x8c) socket$nfc_raw(0x27, 0x9535291a2612f294, 0x0) 2018/02/26 20:09:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000e359904ccebd236273686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 298.526424] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 298.538534] syz-executor5 cpuset=/ mems_allowed=0 [ 298.543456] CPU: 0 PID: 9467 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 298.550728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.560080] Call Trace: [ 298.562669] dump_stack+0x194/0x24d [ 298.566306] ? arch_local_irq_restore+0x53/0x53 [ 298.570974] ? idr_get_free+0xfd0/0xfd0 2018/02/26 20:09:16 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:16 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x81}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0xd6ce18b}, &(0x7f00000000c0)=0x8) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 298.574948] ? kernel_text_address+0x102/0x140 [ 298.579539] warn_alloc+0x19a/0x2b0 [ 298.583170] ? zone_watermark_ok_safe+0x400/0x400 [ 298.588029] ? save_stack+0xa3/0xd0 [ 298.591666] ? save_stack+0x43/0xd0 [ 298.595296] ? kasan_kmalloc+0xad/0xe0 [ 298.599183] ? __kmalloc_node+0x47/0x70 [ 298.603158] ? kvmalloc_node+0x64/0xd0 [ 298.607059] __vmalloc_node_range+0x4f0/0x650 [ 298.611571] ? xt_alloc_entry_offsets+0x21/0x30 [ 298.616244] __vmalloc_node_flags_caller+0x50/0x60 [ 298.621171] ? xt_alloc_entry_offsets+0x21/0x30 [ 298.625840] kvmalloc_node+0x82/0xd0 [ 298.629559] xt_alloc_entry_offsets+0x21/0x30 [ 298.634052] translate_table+0x235/0x1690 [ 298.638213] ? lock_release+0xa40/0xa40 [ 298.642180] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 298.648245] ? __check_object_size+0x8b/0x530 [ 298.652749] ? __might_sleep+0x95/0x190 [ 298.656740] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 298.661585] ? kasan_check_write+0x14/0x20 [ 298.665814] ? _copy_from_user+0x99/0x110 [ 298.669954] do_ip6t_set_ctl+0x370/0x5f0 [ 298.673998] ? translate_compat_table+0x1c50/0x1c50 [ 298.679015] ? mutex_unlock+0xd/0x10 [ 298.682712] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 298.687967] nf_setsockopt+0x67/0xc0 [ 298.691660] ipv6_setsockopt+0x10b/0x130 [ 298.695697] tcp_setsockopt+0x82/0xd0 [ 298.699477] sock_common_setsockopt+0x95/0xd0 [ 298.703950] SyS_setsockopt+0x189/0x360 [ 298.707904] ? SyS_recv+0x40/0x40 [ 298.711337] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 298.716850] ? do_syscall_64+0xb6/0x940 [ 298.720808] ? SyS_recv+0x40/0x40 [ 298.724236] do_syscall_64+0x280/0x940 [ 298.728098] ? __do_page_fault+0xc90/0xc90 [ 298.732305] ? _raw_spin_unlock_irq+0x27/0x70 [ 298.736777] ? finish_task_switch+0x1c1/0x7e0 [ 298.741249] ? syscall_return_slowpath+0x550/0x550 [ 298.746166] ? syscall_return_slowpath+0x2ac/0x550 [ 298.751071] ? prepare_exit_to_usermode+0x350/0x350 [ 298.756062] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 298.761403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.766241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.771402] RIP: 0033:0x453d69 [ 298.774571] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.782252] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 298.789493] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 298.796743] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 298.804000] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 298.811252] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 298.818633] warn_alloc_show_mem: 2 callbacks suppressed [ 298.818637] Mem-Info: [ 298.826468] active_anon:71936 inactive_anon:62 isolated_anon:0 [ 298.826468] active_file:3739 inactive_file:9150 isolated_file:0 [ 298.826468] unevictable:0 dirty:178 writeback:0 unstable:0 [ 298.826468] slab_reclaimable:12431 slab_unreclaimable:95082 [ 298.826468] mapped:24370 shmem:88 pagetables:750 bounce:0 [ 298.826468] free:1408576 free_pcp:431 free_cma:0 [ 298.840845] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 298.859843] Node 0 active_anon:287744kB inactive_anon:248kB active_file:14956kB inactive_file:36600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97480kB dirty:712kB writeback:0kB shmem:352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 45056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 298.871760] syz-executor5 cpuset=/ [ 298.899571] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.903111] mems_allowed=0 [ 298.903120] CPU: 1 PID: 9497 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 298.929227] lowmem_reserve[]: [ 298.932113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.932117] Call Trace: [ 298.932135] dump_stack+0x194/0x24d [ 298.932150] ? arch_local_irq_restore+0x53/0x53 [ 298.939426] 0 2864 6373 6373 [ 298.939439] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:872kB local_pcp:300kB free_cma:0kB [ 298.939454] lowmem_reserve[]: 0 0 3509 3509 [ 298.939466] Node 0 Normal free:2683948kB min:37120kB low:46400kB high:55680kB active_anon:287744kB inactive_anon:248kB active_file:14956kB inactive_file:36600kB unevictable:0kB writepending:712kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4800kB pagetables:3000kB bounce:0kB free_pcp:844kB local_pcp:232kB free_cma:0kB [ 298.939481] lowmem_reserve[]: 0 0 0 0 [ 298.939495] Node 0 DMA: 1*4kB (U) [ 298.942601] ? idr_get_free+0xfd0/0xfd0 [ 298.942615] ? kernel_text_address+0x102/0x140 [ 298.942640] warn_alloc+0x19a/0x2b0 [ 298.952059] 0*8kB [ 298.954522] ? zone_watermark_ok_safe+0x400/0x400 [ 298.954548] ? save_stack+0xa3/0xd0 [ 298.958146] 0*16kB [ 298.962779] ? save_stack+0x43/0xd0 [ 298.962788] ? kasan_kmalloc+0xad/0xe0 [ 298.962796] ? __kmalloc_node+0x47/0x70 [ 298.965885] 1*32kB [ 298.993515] ? kvmalloc_node+0x64/0xd0 [ 298.993537] __vmalloc_node_range+0x4f0/0x650 [ 298.993562] ? xt_alloc_entry_offsets+0x21/0x30 [ 298.997852] (U) [ 299.027573] __vmalloc_node_flags_caller+0x50/0x60 [ 299.027584] ? xt_alloc_entry_offsets+0x21/0x30 [ 299.027597] kvmalloc_node+0x82/0xd0 [ 299.031380] 2*64kB [ 299.034890] xt_alloc_entry_offsets+0x21/0x30 [ 299.034900] translate_table+0x235/0x1690 [ 299.034915] ? lock_release+0xa40/0xa40 [ 299.038866] (U) [ 299.043407] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 299.043418] ? __check_object_size+0x8b/0x530 [ 299.043440] ? __might_sleep+0x95/0x190 [ 299.047039] 1*128kB [ 299.049157] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 299.049174] ? kasan_check_write+0x14/0x20 [ 299.053996] (U) [ 299.057587] ? _copy_from_user+0x99/0x110 [ 299.057603] do_ip6t_set_ctl+0x370/0x5f0 [ 299.059824] 1*256kB [ 299.063419] ? translate_compat_table+0x1c50/0x1c50 [ 299.063425] ? SYSC_recvfrom+0x3d7/0x5a0 [ 299.063454] ? mutex_unlock+0xd/0x10 [ 299.067305] (U) [ 299.071245] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 299.071263] nf_setsockopt+0x67/0xc0 [ 299.073480] 0*512kB [ 299.077335] ipv6_setsockopt+0x10b/0x130 [ 299.077352] tcp_setsockopt+0x82/0xd0 [ 299.081820] 1*1024kB [ 299.086457] sock_common_setsockopt+0x95/0xd0 [ 299.086474] SyS_setsockopt+0x189/0x360 [ 299.088430] (U) [ 299.093329] ? SyS_recv+0x40/0x40 [ 299.093353] ? do_syscall_64+0xb6/0x940 [ 299.097993] 1*2048kB [ 299.101672] ? SyS_recv+0x40/0x40 [ 299.101684] do_syscall_64+0x280/0x940 [ 299.103902] (M) [ 299.108366] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 299.108377] ? syscall_return_slowpath+0x550/0x550 [ 299.108389] ? syscall_return_slowpath+0x2ac/0x550 [ 299.112517] 3*4096kB [ 299.116460] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 299.116479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.118430] (M) [ 299.124286] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 299.124294] RIP: 0033:0x453d69 [ 299.128772] = 15908kB [ 299.132702] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.132713] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 299.132718] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 299.132722] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 299.132729] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 299.135037] Node 0 [ 299.139836] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 299.308967] DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934448kB 2018/02/26 20:09:17 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x313) sendto$inet6(r0, &(0x7f0000000540)="f0847d42d9eaf991414135c1d58dcb3875d51b5b8eec0fd7c22328ec09e5bbd9116bb26746b1757ec7e765acdb3dadfb03973c851f78b4e106000fe6cd6e5e5eb35f3b17995d0997655f65179fb6518da4a1cf96b971577b155e2c0ee58d94c6f3cd3882a8eeac158d00000000000000000000000000000000000000000000000000", 0x32a, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0xe431d437cb7701e5) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/rfcomm\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000740)={@remote, 0x0}, &(0x7f0000000780)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000007c0)={@loopback={0x0, 0x1}, r3}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @rand_addr=0x7fffffff}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="35550efe0b71c0232b1774c2a61479f21f7e3742be1785e89b92c410262704db81e093e8fbd9e2f2d3ef2ac71e5303ffae039b3d03e429713ae96a673c91a04c5ed21d3511aab733e7803a8e49027c455b60bb2ff95d75e24e2c4a592f32bb40fdff627768fa7c118cd82d07268a5abb16411088d4d9553cfdd5300134484fa416f7da76827e6cf6867f65aaa9a308fa4b0003f5e5ff9f1d4c83184c7abc5eaac8b3608265d2265aa41648ebf8f5eb876fd2587cfe4c84fa2040756f676c1f5afbe2ee51dddcb18d5939235cc168d991afce8008bd8cd50ca4bae3e6bf", 0xdd}, {&(0x7f0000000200)="c530067615abec399b99806e3286694505ca1d512e2f535e7940d4816ee49e531dedd32859a8915c3377f39e5690030a58c6e76b8b43bd8f1cb434c59fba", 0x3e}, {&(0x7f0000000240)="cb3fb72f395fd1e752ed8fa7b1c9e5b586aea5ee9f6834086e0f975bc5a9aacbbafaebd1", 0x24}, {&(0x7f0000000280)="2a98be416c95ccd0a07548fc15de793fa37c3b0090ab8148689e0c74440314165ea9d8e4db0ed93dcd869879d30be3584431b92b996b6d8c217eb282893873c0156dccce7cb4763f6c4a5f0a30856a7c35eee386987db9f5d6650e245de1a888499a21d901b0eddd9a985d78b27fbb925564bc4e53855e3265ef42a194f870fbad028feb3a69e521d280ded86f630254270371c910c0a628c1e1a9e09c1d0b1377e8205fb8483e9634ba6589c0c2333dc963401521cd11222442b0497984802b", 0xc0}, {&(0x7f0000000340)="605c4b64e2d6f8fad2619a1673e750d1cc72acb4b90e9699c871963239a54d7a2c33d016c475fd9f365d130a461110fc322dd5c5b92c4cf61be9f136f98b8d031cea0867b9fd752cb56c144cf22c98fb16bb5967bfda627eaa9e0a14e9eaffc6a75274525295c15bbe8bab87c12b9b46456aa8eb340142a808780cbb07bc3b3605a8556189c08f202cb61dc73c58ea87a8b539e3f107e0b9a832276596153468d663c126c7bb721cc06fe08ddb05fe2ce84e245bdf2099da955ddb29e7b60e67f1957c5babe88c200684b21dcc49", 0xce}, {&(0x7f0000000440)="ff641c3c9e2e707797d6b3e6e580c01d89f12eba694931bb2da9e392020bb39434a37804c2fbf4df8219ea432706632308565e0dc5060dacb182a1f683cdaf8defa0d1bbcb4ff653f5b54fecf35098de2b0696097622e7284997f29ff0c57a591ee617b6d525b4c3d03cd429b5324aac95b39b084b227251c1383a1f664cea0644f06c764b5851921988946df58389cb730a59b0f7c3e5ba44920a9658a7791b7bdc17140d43ba8d9a76bbe4e69313ee34d5125ab51ab6c856ad67ac233bc4a9469c031b0b348b4a1b18881e8766f1a8c8154a05b3927c29b6be10a0a53a916f68660f426f2f597e90", 0xe9}, {&(0x7f0000000540)="f5a439afd610c35cfe99aca731536868be822ce7c8928b01e9e7cc673fa390bc25dee1b61cb87c19927c0b78d081c85c1e631b6fa3a4216ee8b040ae3fe08b8b8c1a4ca5d46e365365e15c9351573498a5d57d6b20715bdcbd402bf6504d467b12f130d03e782a09b6dc9dd0d42c65185240", 0x72}, {&(0x7f00000005c0)="0aa73bc63c3237039109e5b4fdb367ad9ab9d72e564c0adf194c90fe08667e958bc2b780ad2a7065239b3abdbb4bf91b4a6290554f4d435324f3b49f08554654553e20bf12be8e5dae2cdbc5433ba521a64f4b", 0x53}], 0x8, 0x0, 0x0, 0x20004000}, 0x800) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x822}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x200) accept$nfc_llcp(r2, &(0x7f0000000140), &(0x7f0000000080)=0x60) 2018/02/26 20:09:17 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xffffffffffffff76) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r2, 0x9}, &(0x7f00000000c0)=0x8) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r3 = dup2(r1, r1) sendmmsg$inet_sctp(r3, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:17 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x10000) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000280)=0x8001) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000200)={""/16, @ifru_names}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:17 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"64307130000000060300000000008000", @ifru_map={0x2}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x3, r0, 0x400}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:17 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000100)=0xfffffffffffffc1f) 2018/02/26 20:09:17 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4978eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed195419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 299.323912] Node 0 Normal: 1001*4kB (UME) 362*8kB (UME) 118*16kB (UME) 1351*32kB (UME) 946*64kB (UM) 100*128kB (UM) 25*256kB (UM) 19*512kB (UM) 21*1024kB (UM) 15*2048kB (UME) 608*4096kB (UM) = 2684084kB [ 299.342107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.350683] 12976 total pagecache pages [ 299.354669] 0 pages in swap cache [ 299.358121] Swap cache stats: add 0, delete 0, find 0/0 [ 299.363482] Free swap = 0kB [ 299.366497] Total swap = 0kB [ 299.369512] 1965969 pages RAM [ 299.372613] 0 pages HighMem/MovableOnly [ 299.376585] 329725 pages reserved [ 299.424709] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 299.436641] syz-executor5 cpuset=/ mems_allowed=0 [ 299.441548] CPU: 1 PID: 9510 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 299.448804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.458136] Call Trace: [ 299.460710] dump_stack+0x194/0x24d [ 299.464319] ? arch_local_irq_restore+0x53/0x53 [ 299.468966] ? idr_get_free+0xfd0/0xfd0 [ 299.472919] ? kernel_text_address+0x102/0x140 [ 299.477485] warn_alloc+0x19a/0x2b0 [ 299.481092] ? zone_watermark_ok_safe+0x400/0x400 [ 299.485920] ? save_stack+0xa3/0xd0 [ 299.489522] ? save_stack+0x43/0xd0 [ 299.493123] ? kasan_kmalloc+0xad/0xe0 [ 299.496983] ? __kmalloc_node+0x47/0x70 [ 299.500929] ? kvmalloc_node+0x64/0xd0 [ 299.504800] __vmalloc_node_range+0x4f0/0x650 [ 299.509274] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 299.514270] ? xt_alloc_entry_offsets+0x21/0x30 [ 299.518915] __vmalloc_node_flags_caller+0x50/0x60 [ 299.523819] ? xt_alloc_entry_offsets+0x21/0x30 [ 299.528462] kvmalloc_node+0x82/0xd0 [ 299.532157] xt_alloc_entry_offsets+0x21/0x30 [ 299.536630] translate_table+0x235/0x1690 [ 299.540754] ? lock_release+0xa40/0xa40 [ 299.544707] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 299.550572] ? __check_object_size+0x8b/0x530 [ 299.555055] ? __might_sleep+0x95/0x190 [ 299.559011] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 299.563841] ? kasan_check_write+0x14/0x20 [ 299.568051] ? _copy_from_user+0x99/0x110 [ 299.572181] do_ip6t_set_ctl+0x370/0x5f0 [ 299.576224] ? translate_compat_table+0x1c50/0x1c50 [ 299.581232] ? mutex_unlock+0xd/0x10 [ 299.584926] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 299.590184] nf_setsockopt+0x67/0xc0 [ 299.593882] ipv6_setsockopt+0x10b/0x130 [ 299.597922] tcp_setsockopt+0x82/0xd0 [ 299.601704] sock_common_setsockopt+0x95/0xd0 [ 299.606267] SyS_setsockopt+0x189/0x360 [ 299.610222] ? SyS_recv+0x40/0x40 [ 299.613660] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 299.619177] ? do_syscall_64+0xb6/0x940 [ 299.623134] ? SyS_recv+0x40/0x40 [ 299.626563] do_syscall_64+0x280/0x940 [ 299.630428] ? __do_page_fault+0xc90/0xc90 [ 299.634635] ? _raw_spin_unlock_irq+0x27/0x70 [ 299.639106] ? finish_task_switch+0x1c1/0x7e0 [ 299.643577] ? syscall_return_slowpath+0x550/0x550 [ 299.648482] ? syscall_return_slowpath+0x2ac/0x550 [ 299.653387] ? prepare_exit_to_usermode+0x350/0x350 [ 299.658380] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 299.663723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.668547] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/26 20:09:18 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x7, 0x6, 0x1ff, 0x2}, {0x101, 0x0, 0x1000, 0x9}, {0x2, 0x608, 0x81c, 0x9}, {0x1, 0x3, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0x2, 0x1}, {0xfff00000000000, 0x1, 0x1000, 0x6}, {0x89, 0x2, 0x3, 0x7}, {0x7b, 0x2, 0x2, 0x8}]}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:18 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpriority(0x1, r0) r1 = socket$inet(0x2, 0x80000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x800, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f00000000c0)=0x80000000, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)="65757365727b47504c2b6e6f64657621298c6367726f757000", &(0x7f00000001c0)='/dev/ppp\x00', &(0x7f0000000200)='/dev/ppp\x00', &(0x7f0000000240)='(system\x00'], &(0x7f00000003c0)=[&(0x7f00000002c0)='/dev/ppp\x00', &(0x7f0000000300)='/dev/ppp\x00', &(0x7f0000000340)='/dev/ppp\x00', &(0x7f0000000380)='&keyringlocgroup\x00']) [ 299.673713] RIP: 0033:0x453d69 [ 299.676877] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.684559] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 299.691803] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 299.699051] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 299.706292] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 299.713534] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:18 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1c2d, 0x6, 0x2, 0x9, "2d54518f1a263a53e7b46024a4a4fa69d48e01e9cf66bccf6916ff16c05a363be8574cc5280887f5b40a64ebf8d49661a125ec6c3e801b6c2b973db82f20fea6", "18ffd1f210e463e623ea378f6594de458e4c2fe3680082bf3624c6436aebd68f", [0x2, 0xffffffffffffff01]}) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000de3f0000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff5f86da14954ccee200000000006476020c43", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:18 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x5, 0xe2, 0x0, 0x7]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:18 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:18 executing program 7: semget(0x1, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x5, 0x10000) write$vnet(r0, &(0x7f00000005c0)={0x1, {&(0x7f00000003c0)=""/205, 0xcd, &(0x7f00000004c0)=""/252, 0x2, 0x3}}, 0x68) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, r2}, 0xc) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x3f, 0x0, 0x6, 0x6}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r4, 0x3, 0x60000000000000, 0x3c5}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x8) r5 = epoll_create(0x40000000000985) dup3(r5, r1, 0x80000) [ 299.810784] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 299.822713] syz-executor5 cpuset=/ mems_allowed=0 [ 299.827633] CPU: 0 PID: 9528 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 299.834899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.844246] Call Trace: [ 299.846819] dump_stack+0x194/0x24d [ 299.850431] ? arch_local_irq_restore+0x53/0x53 [ 299.855075] ? idr_get_free+0xfd0/0xfd0 [ 299.859032] ? kernel_text_address+0x102/0x140 [ 299.863599] warn_alloc+0x19a/0x2b0 [ 299.867208] ? zone_watermark_ok_safe+0x400/0x400 [ 299.872042] ? save_stack+0xa3/0xd0 [ 299.875645] ? save_stack+0x43/0xd0 [ 299.879265] ? kasan_kmalloc+0xad/0xe0 [ 299.883126] ? __kmalloc_node+0x47/0x70 [ 299.887074] ? kvmalloc_node+0x64/0xd0 [ 299.890948] __vmalloc_node_range+0x4f0/0x650 [ 299.895423] ? lock_release+0xa40/0xa40 [ 299.899380] ? xt_alloc_entry_offsets+0x21/0x30 [ 299.904030] __vmalloc_node_flags_caller+0x50/0x60 [ 299.908937] ? xt_alloc_entry_offsets+0x21/0x30 [ 299.913585] kvmalloc_node+0x82/0xd0 [ 299.917276] xt_alloc_entry_offsets+0x21/0x30 [ 299.921746] translate_table+0x235/0x1690 [ 299.925870] ? lock_release+0xa40/0xa40 [ 299.929823] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 299.935682] ? __check_object_size+0x8b/0x530 [ 299.940161] ? __might_sleep+0x95/0x190 [ 299.944114] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 299.948938] ? kasan_check_write+0x14/0x20 [ 299.953150] ? _copy_from_user+0x99/0x110 [ 299.957281] do_ip6t_set_ctl+0x370/0x5f0 [ 299.961323] ? translate_compat_table+0x1c50/0x1c50 [ 299.966329] ? mutex_unlock+0xd/0x10 [ 299.970106] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 299.975361] nf_setsockopt+0x67/0xc0 [ 299.979055] ipv6_setsockopt+0x10b/0x130 [ 299.983098] tcp_setsockopt+0x82/0xd0 [ 299.986878] sock_common_setsockopt+0x95/0xd0 [ 299.991354] SyS_setsockopt+0x189/0x360 [ 299.995308] ? SyS_recv+0x40/0x40 [ 299.998744] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 300.004257] ? do_syscall_64+0xb6/0x940 [ 300.008214] ? SyS_recv+0x40/0x40 [ 300.011645] do_syscall_64+0x280/0x940 [ 300.015507] ? __do_page_fault+0xc90/0xc90 [ 300.019716] ? _raw_spin_unlock_irq+0x27/0x70 [ 300.024192] ? finish_task_switch+0x1c1/0x7e0 [ 300.028662] ? syscall_return_slowpath+0x550/0x550 [ 300.033569] ? syscall_return_slowpath+0x2ac/0x550 [ 300.038475] ? prepare_exit_to_usermode+0x350/0x350 [ 300.043466] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 300.048812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.053635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.058798] RIP: 0033:0x453d69 [ 300.061964] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.069648] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 300.076892] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 300.084136] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 300.091380] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 300.098625] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 300.106920] warn_alloc_show_mem: 2 callbacks suppressed [ 300.106923] Mem-Info: [ 300.114742] active_anon:72487 inactive_anon:61 isolated_anon:0 [ 300.114742] active_file:3739 inactive_file:9165 isolated_file:0 [ 300.114742] unevictable:0 dirty:193 writeback:0 unstable:0 [ 300.114742] slab_reclaimable:12431 slab_unreclaimable:94880 [ 300.114742] mapped:24401 shmem:86 pagetables:788 bounce:0 [ 300.114742] free:1408003 free_pcp:499 free_cma:0 [ 300.148113] Node 0 active_anon:287768kB inactive_anon:244kB active_file:14956kB inactive_file:36660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97504kB dirty:772kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 59392kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 300.176076] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.202226] lowmem_reserve[]: 0 2864 6373 6373 [ 300.206846] Node 0 DMA32 free:2934448kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:868kB local_pcp:300kB free_cma:0kB [ 300.234561] lowmem_reserve[]: 0 0 3509 3509 [ 300.238917] Node 0 Normal free:2684132kB min:37120kB low:46400kB high:55680kB active_anon:287768kB inactive_anon:244kB active_file:14956kB inactive_file:36660kB unevictable:0kB writepending:772kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5024kB pagetables:3004kB bounce:0kB free_pcp:1124kB local_pcp:520kB free_cma:0kB [ 300.268809] lowmem_reserve[]: 0 0 0 0 [ 300.272645] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 300.286291] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934448kB [ 300.301850] Node 0 Normal: 878*4kB (UME) 324*8kB (UME) 120*16kB (UME) 1332*32kB (UME) 966*64kB (UM) 97*128kB (UM) 23*256kB (UM) 19*512kB (UM) 21*1024kB (UM) 19*2048kB (UME) 606*4096kB (UM) = 2683096kB [ 300.319937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 300.320421] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 300.328524] 12989 total pagecache pages [ 300.328534] 0 pages in swap cache [ 300.328540] Swap cache stats: add 0, delete 0, find 0/0 [ 300.328543] Free swap = 0kB [ 300.328547] Total swap = 0kB [ 300.328552] 1965969 pages RAM [ 300.328555] 0 pages HighMem/MovableOnly [ 300.328559] 329725 pages reserved [ 300.369738] syz-executor5 cpuset=/ mems_allowed=0 [ 300.374622] CPU: 1 PID: 9545 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 300.381873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.391200] Call Trace: [ 300.393766] dump_stack+0x194/0x24d [ 300.397372] ? arch_local_irq_restore+0x53/0x53 [ 300.402027] ? idr_get_free+0xfd0/0xfd0 [ 300.405978] ? kernel_text_address+0x102/0x140 [ 300.410544] warn_alloc+0x19a/0x2b0 [ 300.414153] ? zone_watermark_ok_safe+0x400/0x400 [ 300.418981] ? save_stack+0xa3/0xd0 [ 300.422583] ? save_stack+0x43/0xd0 [ 300.426184] ? kasan_kmalloc+0xad/0xe0 [ 300.430046] ? __kmalloc_node+0x47/0x70 [ 300.433996] ? kvmalloc_node+0x64/0xd0 [ 300.437871] __vmalloc_node_range+0x4f0/0x650 [ 300.442346] ? lock_release+0xa40/0xa40 [ 300.446300] ? xt_alloc_entry_offsets+0x21/0x30 [ 300.450948] __vmalloc_node_flags_caller+0x50/0x60 [ 300.455854] ? xt_alloc_entry_offsets+0x21/0x30 [ 300.460502] kvmalloc_node+0x82/0xd0 [ 300.464196] xt_alloc_entry_offsets+0x21/0x30 [ 300.468671] translate_table+0x235/0x1690 [ 300.472796] ? lock_release+0xa40/0xa40 [ 300.476747] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 300.482606] ? __check_object_size+0x8b/0x530 [ 300.487084] ? __might_sleep+0x95/0x190 [ 300.491036] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 300.495857] ? kasan_check_write+0x14/0x20 [ 300.500069] ? _copy_from_user+0x99/0x110 [ 300.504197] do_ip6t_set_ctl+0x370/0x5f0 [ 300.508239] ? translate_compat_table+0x1c50/0x1c50 [ 300.513232] ? SYSC_recvfrom+0x3d7/0x5a0 [ 300.517281] ? mutex_unlock+0xd/0x10 [ 300.520971] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 300.526230] nf_setsockopt+0x67/0xc0 [ 300.529926] ipv6_setsockopt+0x10b/0x130 [ 300.533970] tcp_setsockopt+0x82/0xd0 [ 300.537754] sock_common_setsockopt+0x95/0xd0 [ 300.542230] SyS_setsockopt+0x189/0x360 [ 300.546186] ? SyS_recv+0x40/0x40 [ 300.549622] ? security_file_ioctl+0x7d/0xb0 [ 300.554004] ? security_file_ioctl+0x89/0xb0 [ 300.558396] ? do_syscall_64+0xb6/0x940 [ 300.562392] ? SyS_recv+0x40/0x40 [ 300.565820] do_syscall_64+0x280/0x940 [ 300.569680] ? _raw_spin_unlock_irq+0x27/0x70 [ 300.574152] ? finish_task_switch+0x1c1/0x7e0 [ 300.578623] ? syscall_return_slowpath+0x550/0x550 [ 300.583530] ? syscall_return_slowpath+0x2ac/0x550 [ 300.588868] ? prepare_exit_to_usermode+0x350/0x350 [ 300.593862] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 300.599208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.604034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.609195] RIP: 0033:0x453d69 2018/02/26 20:09:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x0, 0x0, []}) 2018/02/26 20:09:18 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x410e02, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x5, 0x2b8b}, 0x0, 0x3, 0x100, {0x1f, 0x5}, 0x8, 0x8001}) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:18 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = dup3(r1, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@rand_addr=0x4, @in=@rand_addr=0x3f, 0x4e23, 0x7, 0x4e21, 0xffff, 0xa, 0x80, 0x80, 0x3a, r3, r4}, {0x9, 0x7, 0x3, 0x80000001, 0x0, 0xa1, 0xfffffffeffffffff, 0xa6d}, {0x3, 0x7fffffff, 0x0, 0x85c}, 0x2, 0x6e6bb3, 0x1, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0x32}, 0x2, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x4, 0x2, 0xc670, 0x5, 0x0, 0xfffffffffffffffd}}, 0xe8) 2018/02/26 20:09:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0x0, 0x20020003, &(0x7f0000000140)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e24, @multicast2=0xe0000002}, 'dummy0\x00'}) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:18 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x3, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x8000, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/68, 0x44}], 0x1, &(0x7f0000000600)=""/5, 0x5, 0x7fffffff}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) fchownat(r3, &(0x7f0000000400)='./file0\x00', r5, r6, 0x900) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0xffffffffffffff71, &(0x7f0000000380)=[{&(0x7f0000000000)="6da90be26826c806f5e0dd3c77894c2daa61d5410eb008838a64692944e6bb01ec850c1aaec85ecfce61b6c9696f4a419591fd5803aeccabc69b2205fdd42ea932295bd53f08e8e678d4550f9fdda10eb6bbff962a450250c3be97eb0dcdf9", 0x5f}, {&(0x7f0000000080)="93810047265f5ebf453d414274057766d335d552e1ae089e5b248c70f2db65cba46a69c89472a7763da6757651a10f04b361d1ce296497c1957e43c093b084b4898a370bcbde447dcc6adcbd498faaaf03", 0x51}, {&(0x7f0000000100)="e709d83f45d578e9437d67855bf6c4f9863fdebcc2d8e49fdf38a848c75958a04c1174d5be4385d5b61b8e2b7ee853b6fc69fd28a920171dee83a87b3674213e199011837340014954840e032066e96761f18a7e6fd0bebfa897cf807a2e056a8f28209d99fbb3eba45eebadec25a76104340c7f1cbb348ccbd16c16c392394f8ec3ac1b68229cc4631e8d01984e0df6da589efdff4b64e0eb0e791c1af4cfa75a0aa58ac814e21e8fd4065a057ff1", 0xaf}, {&(0x7f00000001c0)="99d3439af3478c31437c6a29a67f076df69dc953904e6744b9684df2c4dc6d25f12b7f06d0d50bf8f0fbd9257c4e6ef01d6241f718b8ed5fc2a43d531b2c8fefcd5f1e6b6bff8fc86dbc541ad648bde80ee1f8f9baba200543a29866a0f415392c84916108bcf82a76dbc35b80282226a5f5a7e1c0be290f95f2bd4ebc4fd7e41bc08132be8f338241727d18fe9161cfbf1ab5bf8aaf", 0x96}, {&(0x7f0000000280)="ac6bddf2632c5078d32ef749bd7a61dbdb0b208975972fcd2667220620dc76c5557c962864d5ff7e4c48593b95305e00d3dcaaf5c2825cfb64f8e9a104a913ef374ffb8071b88d634bde6154cdc62ad4f15ccdea76e043a20b977feda1af75b3da6ee6c526d737cd22109a6ba5515aa8db02b1bcdbc0ff2a9f1d5ea8031d8b72ed4469ef35c02ecfcbc56c2a095ab8d78ffafedeef1ddf1cf29df21a29d5d2e026992e0381518e76d904da164d2757cb01d15af953b156d5f21d22dc03560c5cc2870ee79bd78fe4476da03e36fcfc940aba086b9c7647", 0xd7}], 0x5, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:18 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = semget(0x0, 0x7, 0x201) semctl$GETZCNT(r2, 0x80003, 0xf, &(0x7f0000000040)=""/42) r3 = dup3(r1, r0, 0x0) pwritev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="77d992df6e8b9ed70bdc41221b9adf", 0xf}], 0x1, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1342, 0x3, 0x6f8, 0xc688}, 0x10) 2018/02/26 20:09:18 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x3) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x28) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000004c0)={0x9, 0x10, [0x7, 0x1, 0x6, 0xffffffff]}) [ 300.612357] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.620042] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 300.627285] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000018 [ 300.634531] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 300.641777] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 300.649023] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 2018/02/26 20:09:18 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b8020000ffffffff000000009800000058010000ffffffff0affffff200200002002000020120000ffffffff04000000", @ANYPTR=&(0x7f0000008000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030007265616c6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) setsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000000)="79dd6e117c9297efcbbad3bb5aec769a2bd66cacd8de782a9300e013f0196c614d30907731e788914978fa", 0x2b) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) 2018/02/26 20:09:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000480)) 2018/02/26 20:09:19 executing program 6: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f000000bbf8)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x98, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000008000), {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x318) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000482000), 0x0, 0x800000120000001, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x852b, 0xffff}, 0x14) r2 = dup2(r1, r1) sendmmsg$inet_sctp(r2, &(0x7f000080f000)=[{&(0x7f0000499ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f0000090000)=[{&(0x7f0000d34f8b)="04", 0x1}], 0x1}], 0x1, 0x0) [ 300.719997] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 300.731978] syz-executor5 cpuset=/ mems_allowed=0 [ 300.736884] CPU: 0 PID: 9568 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 300.744154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.753503] Call Trace: [ 300.756088] dump_stack+0x194/0x24d [ 300.759718] ? arch_local_irq_restore+0x53/0x53 [ 300.764386] ? idr_get_free+0xfd0/0xfd0 2018/02/26 20:09:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 300.768356] ? kernel_text_address+0x102/0x140 [ 300.772944] warn_alloc+0x19a/0x2b0 [ 300.776574] ? zone_watermark_ok_safe+0x400/0x400 [ 300.781443] ? save_stack+0xa3/0xd0 [ 300.785072] ? save_stack+0x43/0xd0 [ 300.788689] ? kasan_kmalloc+0xad/0xe0 [ 300.792567] ? __kmalloc_node+0x47/0x70 [ 300.796535] ? kvmalloc_node+0x64/0xd0 [ 300.800431] __vmalloc_node_range+0x4f0/0x650 [ 300.804933] ? lock_release+0xa40/0xa40 [ 300.808909] ? xt_alloc_entry_offsets+0x21/0x30 [ 300.813578] __vmalloc_node_flags_caller+0x50/0x60 2018/02/26 20:09:19 executing program 6 (fault-call:6 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x3c3002, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)={@rand_addr=0x5, @multicast1=0xe0000001, 0x0, 0x2, [@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x18) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 300.818507] ? xt_alloc_entry_offsets+0x21/0x30 [ 300.823184] kvmalloc_node+0x82/0xd0 [ 300.826903] xt_alloc_entry_offsets+0x21/0x30 [ 300.831392] translate_table+0x235/0x1690 [ 300.835541] ? lock_release+0xa40/0xa40 [ 300.839514] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 300.845396] ? __check_object_size+0x8b/0x530 [ 300.849899] ? __might_sleep+0x95/0x190 [ 300.853873] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 300.858721] ? kasan_check_write+0x14/0x20 [ 300.862953] ? _copy_from_user+0x99/0x110 2018/02/26 20:09:19 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0xb67017943c17ffd3, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) [ 300.867109] do_ip6t_set_ctl+0x370/0x5f0 [ 300.871166] ? sock_ioctl+0x36b/0x610 [ 300.874968] ? translate_compat_table+0x1c50/0x1c50 [ 300.879977] ? dlci_ioctl_set+0x40/0x40 [ 300.883966] ? mutex_unlock+0xd/0x10 [ 300.887676] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 300.892958] nf_setsockopt+0x67/0xc0 [ 300.896674] ipv6_setsockopt+0x10b/0x130 [ 300.900756] tcp_setsockopt+0x82/0xd0 [ 300.904654] sock_common_setsockopt+0x95/0xd0 [ 300.909155] SyS_setsockopt+0x189/0x360 [ 300.913132] ? SyS_recv+0x40/0x40 [ 300.916588] ? security_file_ioctl+0x7d/0xb0 [ 300.920991] ? security_file_ioctl+0x89/0xb0 [ 300.925395] ? do_syscall_64+0xb6/0x940 [ 300.929367] ? SyS_recv+0x40/0x40 [ 300.932812] do_syscall_64+0x280/0x940 [ 300.936696] ? __do_page_fault+0xc90/0xc90 [ 300.940935] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 300.946470] ? syscall_return_slowpath+0x550/0x550 [ 300.951390] ? syscall_return_slowpath+0x2ac/0x550 [ 300.956300] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 300.961644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.966475] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.971638] RIP: 0033:0x453d69 [ 300.974801] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.982484] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 300.989729] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 300.996987] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 301.004246] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 301.011509] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 301.030240] FAULT_INJECTION: forcing a failure. [ 301.030240] name fail_futex, interval 1, probability 0, space 0, times 1 [ 301.041788] CPU: 1 PID: 9605 Comm: syz-executor6 Not tainted 4.16.0-rc3+ #330 [ 301.049047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.058373] Call Trace: [ 301.060942] dump_stack+0x194/0x24d [ 301.064548] ? arch_local_irq_restore+0x53/0x53 [ 301.069195] ? numa_migrate_preferred+0x250/0x250 [ 301.074040] should_fail+0x8c0/0xa40 [ 301.077732] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 301.082813] ? update_curr+0x2e3/0xa60 [ 301.086678] ? numa_migrate_preferred+0x250/0x250 [ 301.091497] ? enqueue_task_fair+0x3c8/0x24a0 [ 301.095974] ? active_load_balance_cpu_stop+0x1320/0x1320 [ 301.101484] ? select_task_rq_fair+0xaa7/0x2910 [ 301.106136] ? lock_downgrade+0x980/0x980 [ 301.110266] ? lock_release+0xa40/0xa40 [ 301.114220] ? check_noncircular+0x20/0x20 [ 301.118428] ? check_noncircular+0x20/0x20 [ 301.122633] ? check_noncircular+0x20/0x20 [ 301.126846] ? put_prev_task_fair+0x80/0x80 [ 301.131146] should_fail_futex.part.10+0x1a/0x20 [ 301.135875] get_futex_key+0x3a7/0x1d50 [ 301.139833] ? futex_lock_pi_atomic+0x2f0/0x2f0 [ 301.144475] ? try_to_wake_up+0xf9/0x15f0 [ 301.148596] ? lock_downgrade+0x980/0x980 [ 301.152721] ? lock_downgrade+0x980/0x980 [ 301.156848] ? check_preempt_curr+0x350/0x350 [ 301.161314] ? __lock_is_held+0xb6/0x140 [ 301.165352] ? do_raw_spin_trylock+0x190/0x190 [ 301.169906] ? do_raw_spin_trylock+0x190/0x190 [ 301.174464] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 301.179541] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.184532] ? trace_hardirqs_on+0xd/0x10 [ 301.188658] ? try_to_wake_up+0xf9/0x15f0 [ 301.192795] ? __lock_acquire+0x664/0x3e00 [ 301.197027] ? migrate_swap_stop+0x970/0x970 [ 301.201416] ? find_held_lock+0x35/0x1d0 [ 301.205463] ? __mutex_unlock_slowpath+0x2ef/0xac0 [ 301.210369] ? lock_downgrade+0x980/0x980 [ 301.214492] ? debug_mutex_lock_common+0x110/0x110 [ 301.219398] ? lock_pin_lock+0x360/0x360 [ 301.223436] ? do_raw_spin_trylock+0x190/0x190 [ 301.227999] ? wake_up_q+0x8a/0xe0 [ 301.231524] ? __mutex_unlock_slowpath+0x2f8/0xac0 [ 301.236430] ? wait_for_completion+0x770/0x770 [ 301.240989] ? _raw_spin_unlock+0x22/0x30 [ 301.245114] ? __mutex_lock+0x5bd/0x1a80 [ 301.249153] ? rt6_multipath_select.part.58+0x3c0/0x3c0 [ 301.254492] ? fib6_rule_lookup+0x15c/0x600 [ 301.258790] ? check_noncircular+0x20/0x20 [ 301.263005] ? mutex_unlock+0xd/0x10 [ 301.266702] ? __rtnl_unlock+0x7e/0x90 [ 301.270567] ? print_irqtrace_events+0x270/0x270 [ 301.275303] futex_wake+0x193/0x680 [ 301.278905] ? print_irqtrace_events+0x270/0x270 [ 301.283642] ? get_futex_key+0x1d50/0x1d50 [ 301.287853] ? print_irqtrace_events+0x270/0x270 [ 301.292582] ? print_irqtrace_events+0x270/0x270 [ 301.297329] ? __lock_acquire+0x664/0x3e00 [ 301.301551] do_futex+0x11b0/0x22a0 [ 301.305153] ? __lock_acquire+0x664/0x3e00 [ 301.309368] ? exit_robust_list+0x240/0x240 [ 301.313678] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 301.318846] ? __lock_acquire+0x664/0x3e00 [ 301.323054] ? kasan_check_write+0x14/0x20 [ 301.327268] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 301.332435] ? check_noncircular+0x20/0x20 [ 301.336649] ? check_noncircular+0x20/0x20 [ 301.340856] ? check_noncircular+0x20/0x20 [ 301.345069] ? check_noncircular+0x20/0x20 [ 301.349281] ? find_held_lock+0x35/0x1d0 [ 301.353313] ? check_noncircular+0x20/0x20 [ 301.357522] ? find_held_lock+0x35/0x1d0 [ 301.361557] ? find_held_lock+0x35/0x1d0 [ 301.365598] ? find_held_lock+0x35/0x1d0 [ 301.369646] SyS_futex+0x260/0x390 [ 301.373166] ? do_futex+0x22a0/0x22a0 [ 301.376940] ? native_load_gs_index+0x2d/0x30 [ 301.381413] ? __might_sleep+0x95/0x190 [ 301.385370] mm_release+0x422/0x590 [ 301.388971] ? mm_access+0x140/0x140 [ 301.392659] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.397646] ? trace_hardirqs_on+0xd/0x10 [ 301.401765] ? _raw_spin_unlock_irq+0x27/0x70 [ 301.406235] ? acct_collect+0x637/0x800 [ 301.410184] do_exit+0x484/0x1ad0 [ 301.413613] ? mm_update_next_owner+0x930/0x930 [ 301.418258] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 301.423429] ? sctp_setsockopt+0x2be/0x61d0 [ 301.427728] ? sctp_setsockopt_paddr_thresholds+0x550/0x550 [ 301.433411] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 301.438572] ? check_noncircular+0x20/0x20 [ 301.442782] ? check_noncircular+0x20/0x20 [ 301.446995] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 301.452167] ? print_irqtrace_events+0x270/0x270 [ 301.456905] ? __lock_is_held+0xb6/0x140 [ 301.460940] ? check_noncircular+0x20/0x20 [ 301.465150] ? lock_acquire+0x1d5/0x580 [ 301.469096] ? check_noncircular+0x20/0x20 [ 301.473300] ? __fdget_pos+0x12b/0x190 [ 301.477163] ? memset+0x31/0x40 [ 301.480418] ? find_held_lock+0x35/0x1d0 [ 301.484460] ? get_signal+0x7a9/0x16d0 [ 301.488321] ? lock_downgrade+0x980/0x980 [ 301.492450] do_group_exit+0x149/0x400 [ 301.496312] ? do_raw_spin_trylock+0x190/0x190 [ 301.500865] ? SyS_exit+0x30/0x30 [ 301.504287] ? _raw_spin_unlock_irq+0x27/0x70 [ 301.508755] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.513745] get_signal+0x73a/0x16d0 [ 301.517438] ? ptrace_notify+0x130/0x130 [ 301.521474] ? avc_has_perm_noaudit+0x520/0x520 [ 301.526121] ? iterate_fd+0x3f0/0x3f0 [ 301.529894] ? lock_downgrade+0x980/0x980 [ 301.534029] ? proc_fail_nth_write+0x9b/0x1d0 [ 301.538501] ? map_files_get_link+0x3a0/0x3a0 [ 301.542973] do_signal+0x90/0x1e90 [ 301.546492] ? sock_has_perm+0x2a4/0x420 [ 301.550527] ? setup_sigcontext+0x7d0/0x7d0 [ 301.554825] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 301.560506] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 301.565777] ? fput+0xd2/0x140 [ 301.568943] ? exit_to_usermode_loop+0x8c/0x2f0 [ 301.573592] exit_to_usermode_loop+0x258/0x2f0 [ 301.578159] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 301.583669] ? do_syscall_64+0xb6/0x940 [ 301.587619] do_syscall_64+0x6e5/0x940 [ 301.591485] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 301.597005] ? syscall_return_slowpath+0x550/0x550 [ 301.601914] ? syscall_return_slowpath+0x2ac/0x550 [ 301.606818] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 301.612158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.616977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.622140] RIP: 0033:0x453d69 [ 301.625405] RSP: 002b:00007f5278b7ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 2018/02/26 20:09:19 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b70c000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x80, 0x2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0)=0x7, 0x4) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000540)={[], 0xfffffffffffffffa, 0x23, 0x5, 0x0, 0x1000, 0x10f005, 0x11000, [], 0xff}) 2018/02/26 20:09:19 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14) bind$packet(r1, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x4, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget(0x3, 0x2000, 0x1004, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000240)=""/223) setsockopt$inet6_int(r3, 0x29, 0x10000041, &(0x7f0000001fde), 0xffc4) rt_sigsuspend(&(0x7f0000000080)={0x1f}, 0x8) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:19 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000080)=0x2) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000180), &(0x7f000061b000)=0x4) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1e2, 0x400080) 2018/02/26 20:09:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="8e23929132867a3628ae01000000000100000600000000000000000000000000000000000000"]) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:19 executing program 4: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@generic={0x4, 0x4, 0x3f}) r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e26, @broadcast=0xffffffff}, 0x10) dup3(r1, r0, 0x0) 2018/02/26 20:09:19 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x6, 0x80000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000100)=@req={0x50, &(0x7f0000000080)={'rose0\x00', @ifru_mtu=0x1}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x3ff, 0x3, 0x2, 0x20]}) close(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@int, &(0x7f0000000180)=0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000001c0)={0x3, 0x8, 0x3ff, 0x404}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec1d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf38ce64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:19 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_settings={0x3ff, 0x8001, @sync=&(0x7f0000000280)={0x3, 0x200, 0x1}}}) r1 = epoll_create(0x40000000000985) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000200)=0x4) sendto$llc(r1, &(0x7f00000002c0)="f28c56cc248914dceb6b0f21facb767ee002b3fedfa49342e46aa8ebcf90f5b736f5d8eeaedbe182eb14a3cface7bf6f5f0b313ad8bf2a54e1dc3a6270e48b0988c50279676dd5338f3d8687f4f95350e1", 0x51, 0x1, &(0x7f0000000340)={0x1a, 0x1b, 0x587, 0x0, 0x0, 0x4f, @random="f8e67f615fd5"}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) dup3(r1, r0, 0x0) [ 301.633085] RAX: ffffffffffffffea RBX: 00007f5278b7f6d4 RCX: 0000000000453d69 [ 301.640328] RDX: 000000000000002f RSI: 0000000000000029 RDI: 0000000000000013 [ 301.647572] RBP: 000000000072c180 R08: 0000000000000392 R09: 0000000000000000 [ 301.654811] R10: 0000000020e6e000 R11: 0000000000000246 R12: 0000000000000015 [ 301.662051] R13: 0000000000000509 R14: 00000000006f7978 R15: 0000000000000000 2018/02/26 20:09:19 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac14000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_access(r2, &(0x7f0000000040)={'system_u:object_r:bin_t:s0', 0x20, 'unconfined', 0x20, 0x38, 0x31}, 0x29) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:20 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x680800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000200)={0x3, 0x81, 0x6, 0xbe, [], [], [], 0x100000000, 0x101, 0xf, 0x200, "46040ddb0bd67d76bd258e679b7d9779"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r2, 0x0) 2018/02/26 20:09:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="d9c9312bcfff6ae300e7a0d92db643d1", 0x10, 0x8000, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000006dfeffff00000000ffffffffffffffff00000000ffffffff08020000ffffffffffffffff08020000ffffffff03000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0xffffffffffffffe8) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x5, 0xe87d}, 0x14) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fstat(r0, &(0x7f0000000040)) 2018/02/26 20:09:20 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) dup3(0xffffffffffffffff, r0, 0x0) 2018/02/26 20:09:20 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000000)={{0x1, 0x1, 0x5, 0x2, 0x8}, 0x7, 0x1ea0000000, 0x8001}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) fcntl$setpipe(r0, 0x407, 0x9) 2018/02/26 20:09:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x8000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000004c0)={0x4, 0x0, 0x1, 0x8001}) r3 = accept$packet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14) connect$packet(r3, &(0x7f0000000680)={0x11, 0x16, r4, 0x1, 0x101, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000005c0)={0xfff, r2}) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r5) [ 301.710604] sctp: [Deprecated]: syz-executor2 (pid 9612) Use of int in max_burst socket option. [ 301.710604] Use struct sctp_assoc_value instead [ 301.745168] sctp: [Deprecated]: syz-executor2 (pid 9630) Use of int in max_burst socket option. [ 301.745168] Use struct sctp_assoc_value instead 2018/02/26 20:09:20 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=""/56, &(0x7f0000000040)=0x38) 2018/02/26 20:09:20 executing program 7: semget(0x1, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x648, 0x80000001}, 0x8) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x6}, 0x10) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0x40000000000985) r4 = dup3(r3, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000200)={0x342, 0x9, 0xfffffffffffffffb, 'queue0\x00', 0x1}) 2018/02/26 20:09:20 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000000)="48099c3823673bf3c1928d1de7df0123b734da0e19da45849d7596f71feef8119d407eeb60661eed1740cabd8387dffd4f601dab0ea5fd533c4a6cb0c9ffbdbbd5974d40dfe1747c8abad035ba06bce73f7195c36554c4eab915cf51a12bec013f58ea3dd17554c42cf3ed28eb0b175824aa473ee1ae4c2db996f9440376a5ea9cf328a54c6c170e1cb7f2f6bb047ef2cb04ab689b4e91282c2226ad8918834de9ca10b2a847fb3fc77d91c9943e7eb05ac0382a2d21bf3ec3f08020acda847ab3b6e89ad0dd3cfb55f1a2ae32", 0xcd) [ 301.811851] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 301.823742] syz-executor5 cpuset=/ mems_allowed=0 [ 301.828675] CPU: 0 PID: 9647 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 301.835938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.845267] Call Trace: [ 301.847835] dump_stack+0x194/0x24d [ 301.851446] ? arch_local_irq_restore+0x53/0x53 [ 301.856091] ? idr_get_free+0xfd0/0xfd0 [ 301.860045] ? kernel_text_address+0x102/0x140 [ 301.864613] warn_alloc+0x19a/0x2b0 [ 301.868219] ? zone_watermark_ok_safe+0x400/0x400 [ 301.873053] ? save_stack+0xa3/0xd0 [ 301.876656] ? save_stack+0x43/0xd0 [ 301.880257] ? kasan_kmalloc+0xad/0xe0 [ 301.884132] ? __kmalloc_node+0x47/0x70 [ 301.888082] ? kvmalloc_node+0x64/0xd0 [ 301.891957] __vmalloc_node_range+0x4f0/0x650 [ 301.896431] ? lock_release+0xa40/0xa40 [ 301.900385] ? xt_alloc_entry_offsets+0x21/0x30 [ 301.905034] __vmalloc_node_flags_caller+0x50/0x60 [ 301.909942] ? xt_alloc_entry_offsets+0x21/0x30 [ 301.914590] kvmalloc_node+0x82/0xd0 [ 301.918283] xt_alloc_entry_offsets+0x21/0x30 [ 301.922759] translate_table+0x235/0x1690 [ 301.926886] ? lock_release+0xa40/0xa40 [ 301.930853] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 301.936716] ? __check_object_size+0x8b/0x530 [ 301.941197] ? __might_sleep+0x95/0x190 [ 301.945150] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 301.949977] ? kasan_check_write+0x14/0x20 [ 301.954190] ? _copy_from_user+0x99/0x110 [ 301.958319] do_ip6t_set_ctl+0x370/0x5f0 [ 301.962362] ? translate_compat_table+0x1c50/0x1c50 [ 301.967370] ? mutex_unlock+0xd/0x10 [ 301.971059] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 301.976315] nf_setsockopt+0x67/0xc0 [ 301.980016] ipv6_setsockopt+0x10b/0x130 [ 301.984064] tcp_setsockopt+0x82/0xd0 [ 301.987846] sock_common_setsockopt+0x95/0xd0 [ 301.992321] SyS_setsockopt+0x189/0x360 [ 301.996275] ? SyS_recv+0x40/0x40 [ 301.999711] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 302.005227] ? do_syscall_64+0xb6/0x940 [ 302.009183] ? SyS_recv+0x40/0x40 [ 302.012610] do_syscall_64+0x280/0x940 [ 302.016476] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 302.021988] ? syscall_return_slowpath+0x550/0x550 [ 302.026897] ? syscall_return_slowpath+0x2ac/0x550 [ 302.031806] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 302.037153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.041977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.047151] RIP: 0033:0x453d69 [ 302.050315] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.058001] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 302.065252] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 302.072498] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 302.079740] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 302.086987] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 302.094338] warn_alloc_show_mem: 2 callbacks suppressed [ 302.094340] Mem-Info: [ 302.102153] active_anon:72970 inactive_anon:61 isolated_anon:0 2018/02/26 20:09:20 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) syz_open_dev$adsp(&(0x7f0000001040)='/dev/adsp#\x00', 0x7, 0x8100) sendto$inet(r0, &(0x7f0000fa3fff)='\x00', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001080)={0x0, 0x20, 0x1}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001100)=@assoc_id=r3, 0x4) [ 302.102153] active_file:3741 inactive_file:9188 isolated_file:0 [ 302.102153] unevictable:0 dirty:216 writeback:0 unstable:0 [ 302.102153] slab_reclaimable:12445 slab_unreclaimable:94546 [ 302.102153] mapped:24378 shmem:86 pagetables:799 bounce:0 [ 302.102153] free:1407911 free_pcp:409 free_cma:0 [ 302.136118] Node 0 active_anon:298060kB inactive_anon:244kB active_file:14964kB inactive_file:36752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97512kB dirty:864kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 92160kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 302.163982] sctp: [Deprecated]: syz-executor1 (pid 9664) Use of int in maxseg socket option. [ 302.163982] Use struct sctp_assoc_value instead [ 302.164075] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.203312] lowmem_reserve[]: 0 2864 6373 6373 [ 302.207954] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:308kB free_cma:0kB [ 302.235707] lowmem_reserve[]: 0 0 3509 3509 [ 302.240092] Node 0 Normal free:2666660kB min:37120kB low:46400kB high:55680kB active_anon:306296kB inactive_anon:244kB active_file:14964kB inactive_file:36752kB unevictable:0kB writepending:864kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5440kB pagetables:3196kB bounce:0kB free_pcp:820kB local_pcp:396kB free_cma:0kB [ 302.246357] sctp: [Deprecated]: syz-executor1 (pid 9674) Use of int in maxseg socket option. [ 302.246357] Use struct sctp_assoc_value instead [ 302.269914] lowmem_reserve[]: 0 0 0 0 [ 302.269935] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 302.270045] Node 0 DMA32: 5*4kB [ 302.287440] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 302.300538] (UM) 2*8kB (M) 1*16kB (M) [ 302.303926] syz-executor5 cpuset= [ 302.315867] 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) [ 302.319769] / [ 302.323205] 3*512kB [ 302.328900] mems_allowed=0 [ 302.330597] (UM) 3*1024kB (UM) [ 302.332926] CPU: 1 PID: 9672 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 302.335833] 2*2048kB [ 302.339072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.339076] Call Trace: [ 302.339097] dump_stack+0x194/0x24d [ 302.346347] (UM) [ 302.348728] ? arch_local_irq_restore+0x53/0x53 [ 302.348737] ? idr_get_free+0xfd0/0xfd0 [ 302.358074] 714*4096kB [ 302.360625] ? kernel_text_address+0x102/0x140 [ 302.360649] warn_alloc+0x19a/0x2b0 [ 302.364245] (M) [ 302.366280] ? zone_watermark_ok_safe+0x400/0x400 [ 302.366305] ? save_stack+0xa3/0xd0 [ 302.370939] = 2934324kB [ 302.374880] ? save_stack+0x43/0xd0 [ 302.374887] ? kasan_kmalloc+0xad/0xe0 [ 302.374895] ? __kmalloc_node+0x47/0x70 [ 302.377460] Node 0 [ 302.382002] ? kvmalloc_node+0x64/0xd0 [ 302.382027] __vmalloc_node_range+0x4f0/0x650 [ 302.382043] ? lock_release+0xa40/0xa40 [ 302.385645] Normal: [ 302.387591] ? xt_alloc_entry_offsets+0x21/0x30 [ 302.387607] __vmalloc_node_flags_caller+0x50/0x60 [ 302.392424] 793*4kB [ 302.396109] ? xt_alloc_entry_offsets+0x21/0x30 [ 302.396123] kvmalloc_node+0x82/0xd0 [ 302.396136] xt_alloc_entry_offsets+0x21/0x30 [ 302.398695] (UME) [ 302.402291] translate_table+0x235/0x1690 [ 302.402305] ? lock_release+0xa40/0xa40 [ 302.406168] 390*8kB [ 302.410108] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 302.410120] ? __check_object_size+0x8b/0x530 [ 302.410142] ? __might_sleep+0x95/0x190 [ 302.412346] (UME) [ 302.416202] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 302.416219] ? kasan_check_write+0x14/0x20 [ 302.420689] 154*16kB [ 302.424629] ? _copy_from_user+0x99/0x110 [ 302.424646] do_ip6t_set_ctl+0x370/0x5f0 [ 302.426944] (UME) [ 302.431583] ? translate_compat_table+0x1c50/0x1c50 [ 302.431617] ? mutex_unlock+0xd/0x10 [ 302.436764] 1331*32kB [ 302.438792] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 302.438809] nf_setsockopt+0x67/0xc0 [ 302.443455] (UME) [ 302.447141] ipv6_setsockopt+0x10b/0x130 [ 302.447157] tcp_setsockopt+0x82/0xd0 [ 302.451626] 1008*64kB [ 302.453748] sock_common_setsockopt+0x95/0xd0 [ 302.453765] SyS_setsockopt+0x189/0x360 [ 302.457883] (UM) [ 302.461827] ? SyS_recv+0x40/0x40 [ 302.461848] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 302.464140] 90*128kB [ 302.469990] ? do_syscall_64+0xb6/0x940 [ 302.470006] ? SyS_recv+0x40/0x40 [ 302.474475] (UM) [ 302.478412] do_syscall_64+0x280/0x940 [ 302.478421] ? _raw_spin_unlock_irq+0x27/0x70 [ 302.478433] ? finish_task_switch+0x1c1/0x7e0 [ 302.480562] 19*256kB [ 302.485372] ? syscall_return_slowpath+0x550/0x550 [ 302.485386] ? syscall_return_slowpath+0x2ac/0x550 [ 302.489596] (UM) [ 302.491977] ? prepare_exit_to_usermode+0x350/0x350 [ 302.491990] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 302.496122] 19*512kB [ 302.500157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.500178] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.502297] (UM) [ 302.507273] RIP: 0033:0x453d69 [ 302.507278] RSP: 002b:00007fae81ac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.507289] RAX: ffffffffffffffda RBX: 00007fae81ac16d4 RCX: 0000000000453d69 [ 302.510983] 21*1024kB [ 302.513440] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 302.513446] RBP: 000000000072c010 R08: 0000000000000004 R09: 0000000000000000 [ 302.513451] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 302.513457] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000002 [ 302.518710] (UM) 14*2048kB (UME) 604*4096kB (UM) = 2666132kB [ 302.673757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 302.682343] 13014 total pagecache pages [ 302.686324] 0 pages in swap cache [ 302.689789] Swap cache stats: add 0, delete 0, find 0/0 [ 302.695153] Free swap = 0kB [ 302.698185] Total swap = 0kB [ 302.701232] 1965969 pages RAM [ 302.704337] 0 pages HighMem/MovableOnly [ 302.708322] 329725 pages reserved 2018/02/26 20:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a30000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty, 0x3d}, 0x166) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000540)={0x7ff, {{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x90) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/02/26 20:09:21 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="000099cf3add3eecf4bc9c507b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944a40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:21 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x20000000) r1 = dup(r0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x7, 0x7a, 0x3, 0x1f, 0x0, 0x5, 0xffffffff, 0x0, 0x1, 0x8}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)="a639c639a05bec37cf54aaca1e90344d11f09e15", 0x14) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/25, 0x19) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$VT_RELDISP(r2, 0x5605) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:21 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0xa040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x7) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:21 executing program 7: semget(0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000200)={{0x10001, 0x4, 0x7ff, 0x7f, 0x10001, 0x7d5}, 0x4000000000000000}) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:21 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x190) setsockopt$inet6_buf(r1, 0x29, 0xfb, &(0x7f0000000000)="fa46149123b70d5cdca3e0632d360cbe7d83a95da5e52e56909d4fe8b7ea694118d7e3d0691e98fcf1cf86a8e576c2bef779d99e31a58db2f9722b7f7b69eb28f4de87a200d8813e6bb1d9608e08429833a89ee714fe0fb687aafca2e55e4f09e972b756e644711767211da7435b5f90597c6398803d94e4815a80d5374e72f69748d796eb8bb6af32cf9a52a6e9a3fb956aa84fc59c38fc8365", 0x9a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 302.784930] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 302.796850] syz-executor5 cpuset=/ mems_allowed=0 [ 302.801780] CPU: 1 PID: 9697 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 302.809044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.818376] Call Trace: [ 302.820948] dump_stack+0x194/0x24d [ 302.824561] ? arch_local_irq_restore+0x53/0x53 [ 302.829206] ? idr_get_free+0xfd0/0xfd0 [ 302.833157] ? kernel_text_address+0x102/0x140 [ 302.837723] warn_alloc+0x19a/0x2b0 [ 302.841328] ? zone_watermark_ok_safe+0x400/0x400 [ 302.846157] ? save_stack+0xa3/0xd0 [ 302.849763] ? save_stack+0x43/0xd0 [ 302.853363] ? kasan_kmalloc+0xad/0xe0 [ 302.857223] ? __kmalloc_node+0x47/0x70 [ 302.861172] ? kvmalloc_node+0x64/0xd0 [ 302.865043] __vmalloc_node_range+0x4f0/0x650 [ 302.869522] ? lock_release+0xa40/0xa40 [ 302.873479] ? xt_alloc_entry_offsets+0x21/0x30 [ 302.878126] __vmalloc_node_flags_caller+0x50/0x60 [ 302.883034] ? xt_alloc_entry_offsets+0x21/0x30 [ 302.887679] kvmalloc_node+0x82/0xd0 [ 302.891374] xt_alloc_entry_offsets+0x21/0x30 [ 302.895846] translate_table+0x235/0x1690 [ 302.899986] ? lock_release+0xa40/0xa40 [ 302.904198] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 302.910061] ? __check_object_size+0x8b/0x530 [ 302.914540] ? __might_sleep+0x95/0x190 [ 302.918493] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 302.923316] ? kasan_check_write+0x14/0x20 [ 302.927525] ? _copy_from_user+0x99/0x110 [ 302.931651] do_ip6t_set_ctl+0x370/0x5f0 [ 302.935692] ? translate_compat_table+0x1c50/0x1c50 [ 302.941432] ? mutex_unlock+0xd/0x10 [ 302.945126] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 302.950382] nf_setsockopt+0x67/0xc0 [ 302.954075] ipv6_setsockopt+0x10b/0x130 [ 302.958118] tcp_setsockopt+0x82/0xd0 [ 302.961901] sock_common_setsockopt+0x95/0xd0 [ 302.966375] SyS_setsockopt+0x189/0x360 [ 302.970328] ? SyS_recv+0x40/0x40 [ 302.973765] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 302.979282] ? do_syscall_64+0xb6/0x940 [ 302.983233] ? SyS_recv+0x40/0x40 [ 302.986663] do_syscall_64+0x280/0x940 [ 302.990524] ? __do_page_fault+0xc90/0xc90 [ 302.994737] ? _raw_spin_unlock_irq+0x27/0x70 [ 302.999211] ? finish_task_switch+0x1c1/0x7e0 [ 303.003684] ? syscall_return_slowpath+0x550/0x550 [ 303.008592] ? syscall_return_slowpath+0x2ac/0x550 [ 303.013497] ? prepare_exit_to_usermode+0x350/0x350 [ 303.018490] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 303.023836] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.028663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/26 20:09:21 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)="d1", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:21 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000006b5ac09add6885a4941ce2af6e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac1400000000000000000000000000000000000000000000000000000000000000825bcd07bba99707cfcc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000600000000000000000000000000000000000000000000000000a800d0000004000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002680200000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000001f0000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f4bdf9cfd552a8501d0bdba30fbca0236aa370bc46d71ae35a2bee9e196c1046b9c3b2b8ffbd3b540df98996ac237fd1247ed2c2c4c46cd243d5bd57f53d3fd4d4d94f011d38a92cf93cf93f6b4d6540d256f9550c39ab6a1deb86c5e50e18f82e125d3efb0cc35acf0800000000000000000000000000000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000a40)={0x81, {{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x0, 0x8, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x4e24, @rand_addr=0x2000000000}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @rand_addr=0x9}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf92}}}, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @multicast2=0xe0000002}}]}, 0x4d8) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:21 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {}]}) dup3(r1, r0, 0x0) [ 303.033827] RIP: 0033:0x453d69 [ 303.036991] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.044678] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 303.051924] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 303.059169] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 303.066415] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 303.073658] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:21 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x24) getsockname$inet(r0, &(0x7f0000000240)={0x0, 0x0, @multicast2}, &(0x7f0000000280)=0x10) r1 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x101000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000001, 0x40200) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:21 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="00000080", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000000)=""/149) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 303.134472] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 303.146379] syz-executor5 cpuset=/ mems_allowed=0 [ 303.151389] CPU: 1 PID: 9697 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 303.158660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.158713] QAT: Invalid ioctl [ 303.167997] Call Trace: [ 303.168019] dump_stack+0x194/0x24d [ 303.168038] ? arch_local_irq_restore+0x53/0x53 [ 303.168048] ? idr_get_free+0xfd0/0xfd0 [ 303.168061] ? kernel_text_address+0x102/0x140 [ 303.168087] warn_alloc+0x19a/0x2b0 [ 303.194167] ? zone_watermark_ok_safe+0x400/0x400 [ 303.198995] ? save_stack+0xa3/0xd0 [ 303.202602] ? save_stack+0x43/0xd0 [ 303.206210] ? kasan_kmalloc+0xad/0xe0 [ 303.210069] ? __kmalloc_node+0x47/0x70 [ 303.214023] ? kvmalloc_node+0x64/0xd0 [ 303.217894] __vmalloc_node_range+0x4f0/0x650 [ 303.222367] ? lock_release+0xa40/0xa40 [ 303.226323] ? xt_alloc_entry_offsets+0x21/0x30 [ 303.230967] __vmalloc_node_flags_caller+0x50/0x60 [ 303.235870] ? xt_alloc_entry_offsets+0x21/0x30 [ 303.240516] kvmalloc_node+0x82/0xd0 [ 303.244209] xt_alloc_entry_offsets+0x21/0x30 [ 303.248679] translate_table+0x235/0x1690 [ 303.252805] ? lock_release+0xa40/0xa40 [ 303.256758] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 303.262619] ? __check_object_size+0x8b/0x530 [ 303.267098] ? __might_sleep+0x95/0x190 [ 303.271049] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 303.275870] ? kasan_check_write+0x14/0x20 [ 303.280083] ? _copy_from_user+0x99/0x110 [ 303.284211] do_ip6t_set_ctl+0x370/0x5f0 [ 303.288251] ? translate_compat_table+0x1c50/0x1c50 [ 303.293244] ? SYSC_recvfrom+0x3d7/0x5a0 [ 303.297296] ? mutex_unlock+0xd/0x10 [ 303.300985] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 303.306262] nf_setsockopt+0x67/0xc0 [ 303.309958] ipv6_setsockopt+0x10b/0x130 [ 303.314002] tcp_setsockopt+0x82/0xd0 [ 303.317788] sock_common_setsockopt+0x95/0xd0 [ 303.322265] SyS_setsockopt+0x189/0x360 [ 303.326217] ? SyS_recv+0x40/0x40 [ 303.329649] ? move_addr_to_kernel+0x60/0x60 [ 303.334038] ? do_syscall_64+0xb6/0x940 [ 303.337993] ? SyS_recv+0x40/0x40 [ 303.341423] do_syscall_64+0x280/0x940 [ 303.345283] ? __do_page_fault+0xc90/0xc90 [ 303.349491] ? _raw_spin_unlock_irq+0x27/0x70 [ 303.353961] ? finish_task_switch+0x1c1/0x7e0 [ 303.358435] ? syscall_return_slowpath+0x550/0x550 [ 303.363339] ? syscall_return_slowpath+0x2ac/0x550 [ 303.368247] ? prepare_exit_to_usermode+0x350/0x350 [ 303.373240] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 303.378594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.383420] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.388585] RIP: 0033:0x453d69 [ 303.391747] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.399432] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 303.406674] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 303.413921] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 303.421163] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 303.428408] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:21 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x4, 0xfff, 0x0, 0x0, 0x5, 0x7}) getsockname(r2, &(0x7f0000000100)=@hci={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x16}}, @empty, @loopback={0x0, 0x1}, 0x6, 0x100, 0x9, 0x500, 0x20, 0x240, r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) r1 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x1, 0xc2100) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000004c0)=[0x9, 0x8]) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:21 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$dupfd(r1, 0x406, r0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd44475d0b0fb369cea28258e968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51946d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 303.435738] warn_alloc_show_mem: 2 callbacks suppressed [ 303.441135] Mem-Info: [ 303.443585] active_anon:73486 inactive_anon:61 isolated_anon:0 [ 303.443585] active_file:3741 inactive_file:9200 isolated_file:0 [ 303.443585] unevictable:0 dirty:228 writeback:0 unstable:0 [ 303.443585] slab_reclaimable:12470 slab_unreclaimable:93853 [ 303.443585] mapped:24363 shmem:86 pagetables:749 bounce:0 [ 303.443585] free:1407554 free_pcp:400 free_cma:0 [ 303.476980] Node 0 active_anon:296020kB inactive_anon:244kB active_file:14964kB inactive_file:36800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97452kB dirty:912kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 43008kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 303.505132] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.531302] lowmem_reserve[]: 0 2864 6373 6373 [ 303.533576] QAT: Invalid ioctl [ 303.535936] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:992kB local_pcp:684kB free_cma:0kB [ 303.535960] lowmem_reserve[]: 0 0 3509 3509 [ 303.535978] Node 0 Normal free:2667864kB min:37120kB low:46400kB high:55680kB active_anon:308444kB inactive_anon:244kB active_file:14964kB inactive_file:36800kB unevictable:0kB writepending:912kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5312kB pagetables:3144kB bounce:0kB free_pcp:440kB local_pcp:176kB free_cma:0kB [ 303.535998] lowmem_reserve[]: 0 0 0 0 [ 303.607877] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 303.621528] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 303.637180] Node 0 Normal: 759*4kB (UME) 469*8kB (UME) 159*16kB (UE) 1343*32kB (UME) 1013*64kB (UM) 109*128kB (UM) 17*256kB (UM) 19*512kB (UM) 21*1024kB (UM) 12*2048kB (UME) 603*4096kB (UM) = 2661140kB [ 303.655373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 303.663972] 13026 total pagecache pages [ 303.667977] 0 pages in swap cache [ 303.671462] Swap cache stats: add 0, delete 0, find 0/0 [ 303.676828] Free swap = 0kB [ 303.679856] Total swap = 0kB [ 303.682911] 1965969 pages RAM 2018/02/26 20:09:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="00000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000a00)={0xfff, 0x8, 0xb67, 0x3, 0x0}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000f40)={0x0, 0xaa, "c272a24bc0c1b0c4db5a1a9866721b64a5934ef4dd17734b1dd5588e0577420179f1d7c2455163e8d9f62b3da014b3a7ccad92b5393d26984ba26e968f5748452f2d13c45fdc60512350daea41a98351324cedb7dc77b38899db62e0c9919af3c607b82c8802cef3eec914b1b20a819202dcffe76735be8ca06aae5d7563ba3e206f83e1b4a6b70ca7805d55356a426f8c48af78a039e5f17600da54efc5178d39e1b8d43e5ec31e266c"}, &(0x7f0000002040)=0xb2) sendmmsg$inet_sctp(r4, &(0x7f00000020c0)=[{&(0x7f00000004c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000540)="68fa54a3", 0x4}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000580)="8ece8a797e0f8ca3e63e4ca0ffd04e8fdf5e37024a34a45a9a03501472b36d29", 0x20}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f00000005c0)="2a88d11ec020a6775b2816e3e791d406539a5f8cc0799ffc20e852739bc067c8cef18e9aca9e7b163af15016252f38d9747d52e56185f130be500075b3cc6ba7cf6cb3ac0ff1d76817b4c3a7fc0ff0799572d7223d1b46c70052e64838f8f715874b0f2f5731e6130afb0e019ac951cf455281c96a551a9079e07fa174811fe4a29367940a275fc6b20edef2d6bd638b335ff415519291", 0x97}, {&(0x7f0000000680)="ac7841834d448c8d0968d2bb48971b0e9f7a22c778c6e03cd1311e4313526c2f617700c1ab89880d39407927abc3e867410eaac453127f4cd6c868d4e1a329905ed37e4cfab4112fcfd7abf93002aa622224f4a534cc708837f83191e63cb2b1dee92997df40eabbd654658d66d6dd608d7e10c2d365cacf8134723b7508b18d8b39e8b6db580a6c659e2810a2a38c62610c8f6a237f8e81e235ec173a4d0ca4070a", 0xa2}, {&(0x7f0000000740)="6b7faad1c3d6554c74e672523653eb3f61359f1c3c17efaf4f40f07cf0b44cf5197f86c23f33aabf3a347ef41a1836790e38acdbbc754d92ad16104d6c12ade8bda7707d62db1d726d51c4dd0a2bfec0ea17dd3cca270896ec90ca7ba3a616dea3c7dee47cff6ed63c4a73b9c03e644a4807a03332c0b0a26e", 0x79}, {&(0x7f00000007c0)="ece7f029d7ab75f86cf8c41520a23fe699d4778f5e70dd286ff02da708b10edbc012a554cea6b75b4dc187e6e389271b8e07bb32074f6d5f262e1ac35cbe984ae430eb7e499ca93c6ccc00f5b68c268bf908737ac5cfcdb675400c94407cd05f5a4f2557fc00a362ebd5228e6427955d535bb699f180b67629b9e07a51f686fe898d46f0de33b9863b1a51b05f634abce5ef070d0fb001d68f7377ec04a1f97e9597d2ccd151f95f27ee5bd80f56c69c1993d39cddc91fd22021ccf4245f375466468d", 0xc3}], 0x8, 0x0, 0x0, 0x4040010}, {&(0x7f0000000940)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000980)}], 0x1, &(0x7f0000000a80)=[@init={0x18, 0x84, 0x0, {0x9, 0x7, 0x9, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x7f, 0x7, 0xffffffff, 0x9, r5}}], 0x60}, {&(0x7f0000000b00)=@in={0x2, 0x4e21, @loopback=0x7f000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="07483e7f4bdbfb698f00d60bf3daa6ea5f53b2f6107ce60e9eea430908f856ed710935254e58dbf0b5ba343f036438a168faeaab0e80ef38b33df76f075026bc26d90393a691e5450064d9ab54a1e921ad81ec24aba441bd334be2979c16fc9bcf199eec509bbdade3d90553da7e5a0b14a895a0371bc9e05b61964d18075327527b897736d38c38be4adc96c7eb9ab672d5f8d7766f58e9d3566e7b391a68580c38fca35dca68dfc32594b089d6ef4569c9bf4001caaf2462df27873a5ed198338b40bba455df9c", 0xc8}, {&(0x7f0000003e40)="5e77bf9bf864dfd5818696ee394b6190f3c5f898cf93d1a8d1479a99f81d260b349cbd0011c2f31836d6295b914ae3df1b245f31f36491b5e41fda101767bab1ae16c3e8fc8a076c938687eb0e2d293fa24428b6c68dda882b5d6c08e9ded3b40be648ef922b640067a50277c8cb1e5cc2e54ddf254b47bdc9906369cdb0c09a21809623de2d7759e0520106b71460c3c097439f86190c2ccb88cee7110dbd29016fbe2810050e49de6eb90610fdba771a81233ad8a9316ca4954399069e03e9c5bde3765bafddec6d0a2dacfd4518399bd31dc57427fd63b42c90fcaa733a84b6d2c5f600585f1947aca53459db56b02a35aa086c8718369a113a61f19d7f3aef7d4dd677646ccf690adb77760168788bbeaf13013ff293cc625d9d8ba3a2a17c0189489a6d160986f1deb687c96563af983acc15ef42d2e3626810a581c11ad9897907b032af33dab33d3661d406f73bcb1b0eae9b927fc9d5e417d7518f41212ac65074c176647b54d82754d69f0220461900b7aba15012e5fa82339f51562b2a5d0ecac551c3cffcc34d240f889a1395c360ebe576b5d82b2dfd6f461436ceb371ea89e56dbe22db05b4f6aff801320a671415810f446e2dc695f7c6b8eeb61de65cdc41a41b18b21532d2badcfa58cc0d09328288e07f139b13f2fdaaf2e4f07406e622a9e98860d0d2badebf1d1b52e8c191cf72fe05974862e13cb55c0405b40414802fadd6d12d03414dfe16880885a1fdcae0f6469fde67af354b440e52a949ca7415ea6a42d1b6875ffa101cb51bf2a1a6a612ade3bb47964beefa13396f2a127fb80213e52d17340761e9a113e74aa0e3bdf0ef7f091cd2e53b656ffa6713728d71140560c31e6238e2830719c396e4456a47ac16eed1457be2d49edd462bc3aac3d8263b418bcd167f6c7a8b5b50735b7a35e3a90ddab4dfc036b0d77dbfeaf251093c60173c2a9986b67bf76a3878636d981c8fe4ee93c96403e77afafa3f798276e971a48f6115237bd404fd0ca823fe6dac7b1ce3e39254fe7befefec37a9db68328119532752c16a8a288ffa20f24e75715748e2e07707c18cda7af8c7a018516cbf9e58609bb3cfdd273f8dae46edd4431a6b34a24536c3d46b7ee051dbb64d00734bdbadc86ee7172c171d71c7d8c916fb3f7c2ac2e3b0e3e2ac1b4a00c0edbf52171522edfc182fbe41dcb12ab553144d461fb5b4425166efe95faf0cb226fbcaf67f1e3b5ec6231f0e695365213d7663fd4fc105da5e8490625d04fb4ff0398bcd769aaade916dd9a95c1a067da73a8f4be60c8f3158f6f4930c82238f55e820e06eaebad7fc02cce52c5b7d721bdf2177ee8eb9daa7e14248dffaeec8e9edf5b638c533cb8449017bb1a6e1ca945ce3f4d82eb26b4ea53112c8d1f9e6ce6a6fc841f26c2c68933f4fdbd2ae5fb494607e899a3b89901efb1218e08db17150760c3e92d87839cbf4ee8f79d6e5877e3354951f198a6aedc4841bcf52610587594c3def7f408f90e275b062d9bb36619c873ed957ba52d78c32fe401bb0612ae7cef95ae9e0ff03cba43eebbdfec58507b5f951d849001de4c2565ce1d88b254151886cb4cbca59eb91e7298f02f9c6d932a6b56a7f6d18cc68d9de68508c80481a85aebb16f7149f820304aa0dfcd4f4d263c189a4f2cadc03bbdbd308908d68a780ee6e78d36cde3f33ef40137ed4f23db354e92046f76ae058bacc91777ba33fda27703de1c1a4d82d25643674ffdcc6fcb4a7076a61902c3f5c6ab9f1d09e6fc1efae1fe6da018186234c2ec977774a7d21b3a3dd3f11ff39ce24b89c14ab9ca82220f2048889348a7b4d26cd0034659f07f6dc60b4c6ef2e09fb4dcff823c2b5aa42945e6fead02c3fcec00e80a43c30d0437dbc7e80cfad5a3d42eeb77befae919bc1447a668753f18e9022b872caae7161aa6dd97ec36bde040e6b842360169405a727285d72709c49b61ca69076f4cea2779f36d7cce2c2dfdd036d11b5df6f2352979930eadaa0b6326687c0c44448926cf9d9c1bbcd04c497cd4fec09f550bea1d4b10cb8b5e690271dded3875c3430bfdfc3553dee40a2670f49cb725beeb3b0436506d333bddb0a08db79f200df02cfc1722402dc2874556fffcd5261a7933874430aec4745d911f4801b847b51200715da6d0d04a9b3a117e958e5f938f8afa5aa243e5ab6403f97bd8c9a2b62fdc8d346d1682e79433713c2b76d2ad2d37a25612f78950fd390a9b2ecfcf16816913a8f81b2a125259c2a7d49e62e9cfcac11fbcd5ba15bbaf1d64e350489e91a2be0408d7f67e0a2ffe199c4b05c87ea9b7662c80e3d41c48b8d9fd9b97f2f1f6f94ebac7942c2fe4f3d75f3ce65730e310882ab882ebc7d163f9ff4508f3629762a23cc2e2af650175c4e55b91e2d289270c47dffa68b038a1dd405e55bcd9abebfb973621597bf1c4c5f2f5cf311fffa18ca543d667e439b2de97b7227c66e20c810cedfb19c0d678b50f5fea1bcf5f9e361f528078636712964d23013ea4c86025047c6c81a4d699f5c289c73eacaf473f419a0fc45bd317609270b3ae3583fa60f8a7cf82648b8bb3afc67c29b9fde8a781efe8d92b0b837ef89b321d1d93edbb68e6ed4ffc9c4604722aeeb9f87fd6b3b1008d6ee54ef14a1c8c607e23fdaeb23fa062ac513560682ebde27aadc1eb4697518fab5076f0015fe64b852634a4f3c51f617398e9384b1628f64c2c37dde7ebbd9b810830ccfe2b1239ea9f1cbb0885159e36cfe6ccdba8ea2e12af76ef191aa1f1fb98772d0cf18042a80d8956bee88e9deaa9a6e0f41351b7a6074c1e61d2ce3ff5f4ddcc2ddd5232a96899f30f09737ff465c46083f9f5ae14b1905b9f8faa97f68cf74ef4b1539463429efd2a41cc22ccc1e03c1156ec781d28c20370e09fdad59416a4772e485d0a3a9a9b7c93108e19faccc7a427b83faed939ba5ade3bd39d4315093342dfd47c46a6151af7bfb2701e720b70441ea5ab40a4e81e6a3d5b3ad11be457ccc9d000ba69dd7d94915b1898f6bd96d87c2ff0091e5840f6154bd6a04aa13921d16412472af6585d1a3913eec1a32b78328368ccd89ac7fb4e706ebc9384571ad53f77b53fe0c60315dfedeadad8a18c8e0c09b5503c67de3f2b49d5ed5ba03bf188cfb56d8ae7e101200c1b8680b957f758b141c4ef834fdc52aa235280ee9fab44a99d009ac93966ea6feae8b51b5ab3b9739c89122dc79c5f37d5d9be6fd8f2e900bc143298527259fd0802cc3450434676fc69ab350a3c24e2f563bd8c6fbc9941b904cdaaa711f946d758ec977ced896d09ec2740b069887243adab5f6b4a349680d5cab748c955a473cbca18833ceba3dbd4ec246d782825e731184893555d4a73b0d9fc9ad6bef0117b01b6d183f87caff1a91f179465a6ebb06740078c1a5573f38f50f8c5a7b0622c0e50ff9dfb2e103fd2884835e3642f6240abb6ba4fa10caa83f3aee89e7d0b02980671f99f37f78bf3a1d68084b52cec24f53ded0c200754126c1840db8c8f36458a6e2e7c2681a0a4123960bc70731b97e0af938c7ee5f6b8b492b15ffb935bad970785f770e16af88686c4f7e290a7d6e03d949e58904781973355d32f1e92a56749f71598879b2d4d4a546de274351fbdb492fb43f0532893c39816de89e667c0de2752a09dc7769068e717ee249386b9f9bf86e1f70cfb30b4205dfe36a4319545096ee626dc755a61d0cfe29bb2b07b7c27a02e42c90f3de09044fa0613427f351b62761c7721ba8c65ac4316c5f23fff2e9e33173b6e3c3fa5ae5073b3648f08372af39f3e4e5d8cdc52fad56b6f4120d40a41c4254aca37fab601e62ae284ca6c659055e4c8fe20fa237f98ef6a64d051fa59a1d509883331a91dbbea72fd615ddd054e5fa5088164278bd7207f775bd230b35187f8f13c7284ab4226471023330c494770beb40313200c8f17b2b87c470dacb0d2310b9c66b2d2cd7959637e499e43b8ccaf6fd66eafa90c7a42e168d2c6daf602831e5e6a50897904fe67b51d544d08efd6686026424a310ad4f77c22d0ffb12890aff75346f2d6e9bee16db323237b092ab2cd135823c7f5040a983e1a2afa6974d7ccbbddd7e557f700ceb2ae9c97edfe197a15734a6dc39fb22bce5d1b8ada21c8dc75bc73abf36d6f2d789ba81f3e7c2ea5b817f20e1f12cfd93cddbbd969f58726e270d6b69f83e28e0c77d626b059a83250109d42fe7385da27b6d9412fd163c4effa44eaaa964be8c8deaa5b5af4112c98d884de132a8a798bb350f8cdb0adde392489b7d5816f1556f050f3240031371fd6b40d82c20dca72e408f3db746d9c91802b1f271e24b21b8f0538a474179c112befbee27e97507a79a5a7cb28b7a0b1eb2eef41f4a10fd509488baa24cc8f1adac39500f59dfb318c3a33c1947929b011d595dea1ec8d6393c26aa9af2774ef35e7aabdd9ec85fc0bb36b0ca05e18a03276c66d6c5e01bdc691c627b6bf2c2a9e420cf515bba3c9f6aeffb081b1b190f3fd30c5946de98e7eeae2f16a9aafe463e11732ad671eb46a82a50a7f305ef3a65e964fb457d9381304985eb45767f6c50c99671af01a2e3acaaf35ee3a38874a26b0856da8913cadc35072da6dd97123110adcda957a870bf5d5c98723c6daf94c4832a222c1a48f528f472b3d7a2123f9f51716a2432f98c4863dfe483bfd21ccdef0079c6a300339fdccd9a557b001291a799bee86bc6520da323ca749353ee7ca31dfefe53d7fb7f55cd3ba2bc84db25f5eb9508340985ad074ab514f13b62cf9dc1118d0f78ad3baf285978c49cca0ed48872e239b1044949bb53b9e27c20360f4114836244fb4800a6c86ccb8493ef1095ec530c888cca4494615298ca417570b6ccac8f8070f8ec628e1d7f3db250805bd0090ba7e2003839161edf6d74adac6141b1a41d7e59bcfcd4c43b7276e53aa5a4c95e3630d6e0d36711335ceaa648077e9a2b8cad2b89d4f585fbbc1a7fa40479966fe58289d824bb6e395f4df04784c081e062f1b2451e82cdbeeccf76b5b027b5f9f5058bc74de521feb07da99790994becb05bf74dfe630a85c8a64bb4275e1b411095459cf209e8551f4fbc3b0b574b76556b07bde53694021ca0cfaf4cc597ba88e7885a5faa1e34041f587d0cddea773918b8ee0b5e27125c7c3afbbd9eb8bb5008ebf3f5012391c74dbc80b7d4939a29048f908b3415cba1780e5df9b61b2afc9e78fb8c21d48a7e73870e5ba5e9a3a110476c915d52ff44049184ca9580c45324ad1234f42a1f9c96103a9e24a74247cd8c9a2ab164123de81f8a4b29a17160532e23c2de5ec763deddbb0086bfa6c75293524bc52abb187dbaf7a3c2ba3a967ba833a5ef0e943a8f27d8ebe2117e5d93b19f81cfb9b47770c01b1ef6abc8888c425a3823720824d63471fb2dbb372a3e8a760dc3648d4f79141b47913c2f985a4e5631a2eb7e2833afa28eb172e51d469d7342cfa1fb8630fd8ae46200bb35b2c7a02f21a44397e024f9d278dfdfafb1dcfa0e364d3173a370cae8300fe304827c98d28f1df92e296b3b758441b9eeefe4b88d4b7d23a358f5563f9f3f59ed37a7b35bffc868b91e1c2b5cf709f3257cf445362edd5866a36873a363d9f3294f189122a54e8d6113a2539557a5f8728ed3d56cadb9c6e9ab6a99ac815d5847911747eee393e13274f8609ece8be56da854d5ec2eaae25a52ef72a753924832929728b39d5ef5fc8eed70c44f513bab8f680bc1c36f4c478b1083a8f4eeb9605ecbebb59f", 0x1000}, {&(0x7f0000000c40)="29251d225dcf9ac847e1493f2efc5fe57e0911d916c48bf168001f5ddd1ef7c078f6c11c99e2bd", 0x27}, {&(0x7f0000000c80)="c3e4234bb79da799a7d8b31c25205768a61ec12eb10800487778814a664262ade8f7e523fddf90130d96d4218772d5e53a7929e03034fdaf1c3b0064331dbf3ffbd07bfbdc14e6a07ade939990c5524e338cd6c275a09c72609300ad8b1694c4f5f48ce9ef01e40989cd68f1f3b292dbaed753f05562e278bf2174518edb130be23d24f049b7aa099c0f60f14e12f6015d81c8d78f3f8013a62c216d401b865dd621a27c03af355a40d2f117baf98884e5a3e0f6c0b92855e2614a1791f734597aff2885059da3f98e12b7064414a45f59a29d00ebe20be257c5aea7", 0xdc}, {&(0x7f0000000d80)="3586edf9f69c1ab2ec0f48b0694bfe41fa1c75050b1d8cc3c2c35cc4125fd66a5343fb526a2308d9103d32ee65de541d534485f689125a", 0x37}, {&(0x7f0000004e40)="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", 0x1000}, {&(0x7f0000000dc0)="c6e2beb305e8781567ad61ca7199a3d4bbc23af4d275eeba86dcf9a7152cc5b2b8e353075e5c55e0a44c3908f7e64f77ba0dc26c00ad4735eef31415ab09d84b5c698a08fe7ba0d2ff678c7cb6a3740593d8e295dbff820369a1a1fb7a6837869bb46a4e554e094ea560e06a3cf65089e560f890900764047882131946323ca2d92da9371a2348cfc8b4567b068f7950abd9ee179768b6c1a79493e8a112fb9c30ea81dde66490ce2c9036c973ed02fccaa0b2a994b619b15680c18ea245247d937998f4b91d6e0b66d79d90ea33cef67cecf3f16a3959b40f0e4f87d2103c8eb81b07014a02", 0xe6}], 0x7, &(0x7f0000002080)=[@sndrcv={0x30, 0x84, 0x1, {0xf6, 0x9, 0x4, 0x3, 0x6, 0x6, 0x1, 0x6, r6}}], 0x30, 0x24040814}], 0x3, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000979000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001000)={0x0, 0x2, 0x0, 0x1000, &(0x7f000031e000/0x1000)=nil}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = semget$private(0x0, 0x1, 0x200) semctl$IPC_RMID(r8, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) socketpair$inet6(0xa, 0x0, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x259f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x3}, &(0x7f00000001c0)=0x8) 2018/02/26 20:09:22 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000001c0)=0xfff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000df456418afe3344f39de776bd16b5a321c8f357502cefa11b7", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000000)=0xffff) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 303.686027] 0 pages HighMem/MovableOnly [ 303.690028] 329725 pages reserved [ 303.767081] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 303.779058] syz-executor5 cpuset=/ mems_allowed=0 [ 303.783953] CPU: 0 PID: 9755 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 303.791219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.800551] Call Trace: [ 303.803118] dump_stack+0x194/0x24d [ 303.806725] ? arch_local_irq_restore+0x53/0x53 [ 303.811368] ? idr_get_free+0xfd0/0xfd0 [ 303.815406] ? kernel_text_address+0x102/0x140 [ 303.819986] warn_alloc+0x19a/0x2b0 [ 303.823599] ? zone_watermark_ok_safe+0x400/0x400 [ 303.828424] ? save_stack+0xa3/0xd0 [ 303.832032] ? save_stack+0x43/0xd0 [ 303.835636] ? kasan_kmalloc+0xad/0xe0 [ 303.839496] ? __kmalloc_node+0x47/0x70 [ 303.843441] ? kvmalloc_node+0x64/0xd0 [ 303.847308] __vmalloc_node_range+0x4f0/0x650 [ 303.851782] ? lock_release+0xa40/0xa40 [ 303.855734] ? xt_alloc_entry_offsets+0x21/0x30 [ 303.860378] __vmalloc_node_flags_caller+0x50/0x60 [ 303.865285] ? xt_alloc_entry_offsets+0x21/0x30 [ 303.869931] kvmalloc_node+0x82/0xd0 [ 303.873623] xt_alloc_entry_offsets+0x21/0x30 [ 303.878096] translate_table+0x235/0x1690 [ 303.882222] ? lock_release+0xa40/0xa40 [ 303.886169] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 303.892038] ? __check_object_size+0x8b/0x530 [ 303.896521] ? __might_sleep+0x95/0x190 [ 303.900472] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 303.905292] ? kasan_check_write+0x14/0x20 [ 303.909504] ? _copy_from_user+0x99/0x110 [ 303.913628] do_ip6t_set_ctl+0x370/0x5f0 [ 303.917665] ? translate_compat_table+0x1c50/0x1c50 [ 303.922666] ? mutex_unlock+0xd/0x10 [ 303.926355] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 303.931608] nf_setsockopt+0x67/0xc0 [ 303.935301] ipv6_setsockopt+0x10b/0x130 [ 303.939340] tcp_setsockopt+0x82/0xd0 [ 303.943121] sock_common_setsockopt+0x95/0xd0 [ 303.947603] SyS_setsockopt+0x189/0x360 [ 303.951562] ? SyS_recv+0x40/0x40 [ 303.954994] ? move_addr_to_kernel+0x60/0x60 [ 303.959387] ? do_syscall_64+0xb6/0x940 [ 303.963340] ? SyS_recv+0x40/0x40 [ 303.966791] do_syscall_64+0x280/0x940 [ 303.970651] ? __do_page_fault+0xc90/0xc90 [ 303.974865] ? _raw_spin_unlock_irq+0x27/0x70 [ 303.979364] ? finish_task_switch+0x1c1/0x7e0 [ 303.983838] ? syscall_return_slowpath+0x550/0x550 [ 303.988744] ? syscall_return_slowpath+0x2ac/0x550 [ 303.993650] ? prepare_exit_to_usermode+0x350/0x350 [ 303.998642] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 304.003983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.008809] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.013974] RIP: 0033:0x453d69 [ 304.017137] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.024820] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 304.032079] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 304.039324] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 304.046916] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 304.054162] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 304.083734] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 304.095742] syz-executor5 cpuset=/ mems_allowed=0 [ 304.100637] CPU: 0 PID: 9755 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 304.108439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.117780] Call Trace: [ 304.120349] dump_stack+0x194/0x24d [ 304.123963] ? arch_local_irq_restore+0x53/0x53 [ 304.128604] ? idr_get_free+0xfd0/0xfd0 [ 304.132562] ? kernel_text_address+0x102/0x140 [ 304.137132] warn_alloc+0x19a/0x2b0 [ 304.140740] ? zone_watermark_ok_safe+0x400/0x400 [ 304.145579] ? save_stack+0xa3/0xd0 [ 304.149208] ? save_stack+0x43/0xd0 [ 304.152808] ? kasan_kmalloc+0xad/0xe0 [ 304.156668] ? __kmalloc_node+0x47/0x70 [ 304.160615] ? kvmalloc_node+0x64/0xd0 [ 304.164483] __vmalloc_node_range+0x4f0/0x650 [ 304.168957] ? lock_release+0xa40/0xa40 [ 304.172918] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.177563] __vmalloc_node_flags_caller+0x50/0x60 [ 304.182468] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.187116] kvmalloc_node+0x82/0xd0 [ 304.190808] xt_alloc_entry_offsets+0x21/0x30 [ 304.195277] translate_table+0x235/0x1690 [ 304.199400] ? lock_release+0xa40/0xa40 [ 304.203353] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 304.209215] ? __check_object_size+0x8b/0x530 [ 304.213693] ? __might_sleep+0x95/0x190 [ 304.217642] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 304.222468] ? kasan_check_write+0x14/0x20 [ 304.226687] ? _copy_from_user+0x99/0x110 [ 304.230813] do_ip6t_set_ctl+0x370/0x5f0 [ 304.234854] ? translate_compat_table+0x1c50/0x1c50 [ 304.239846] ? SYSC_recvfrom+0x3d7/0x5a0 [ 304.243893] ? mutex_unlock+0xd/0x10 [ 304.247583] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 304.252844] nf_setsockopt+0x67/0xc0 [ 304.256537] ipv6_setsockopt+0x10b/0x130 [ 304.260578] tcp_setsockopt+0x82/0xd0 [ 304.264355] sock_common_setsockopt+0x95/0xd0 [ 304.268828] SyS_setsockopt+0x189/0x360 [ 304.272779] ? SyS_recv+0x40/0x40 [ 304.276210] ? move_addr_to_kernel+0x60/0x60 [ 304.280606] ? do_syscall_64+0xb6/0x940 [ 304.284557] ? SyS_recv+0x40/0x40 [ 304.287987] do_syscall_64+0x280/0x940 [ 304.291851] ? __do_page_fault+0xc90/0xc90 [ 304.296063] ? _raw_spin_unlock_irq+0x27/0x70 [ 304.300534] ? finish_task_switch+0x1c1/0x7e0 [ 304.305007] ? syscall_return_slowpath+0x550/0x550 [ 304.309918] ? syscall_return_slowpath+0x2ac/0x550 [ 304.314834] ? prepare_exit_to_usermode+0x350/0x350 [ 304.319833] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 304.325184] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.330031] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/02/26 20:09:22 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x14) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x4, 0x0, 0x9, 0x31eb}, {0x8, 0x8, 0x5, 0x3}, {0x3, 0x73, 0x2, 0xb1a}]}, 0x10) dup3(r1, r0, 0x0) 2018/02/26 20:09:22 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x7, 0x84) accept$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084510000000000000000000000000000000000000000000a0000006d0100000000000000000000000000ffffac140000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000f22606eaa079b34ac9534509578e97ce62cd454d637223f773c7483994167f386c91b452e2e5b030ecbd8959633f623859224f464b0a8306dd8c720b936b835789410f171a31c009d0b429d47997a2b17f99f5196ff4a61ae39b"], 0x190) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xb, "31efc43dfd4dfd822f63c4"}, &(0x7f00000000c0)=0x13) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x5, 0x2, 0x1ff, 0x3, 0x7}, &(0x7f0000000440)=0xa0) getsockname$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x1, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/26 20:09:22 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0xfffffffffffffffc, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:22 executing program 7: semget(0x0, 0x0, 0xfffffffffffffffc) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x440000) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"603084070100800400", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) fcntl$getownex(r2, 0x10, &(0x7f0000000280)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000400)={r3, 0x7, &(0x7f0000000300)=[0xa9c000000000, 0x1000, 0x8000, 0x9, 0x9, 0x100000001, 0x4], &(0x7f0000000340)=[0x9, 0x9, 0x3], 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x8, 0x2], &(0x7f00000003c0)=[0x6656c11a, 0x80]}) dup3(r2, r0, 0x0) 2018/02/26 20:09:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0x0, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0x52, 0x2023, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:22 executing program 3: syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7f, 0x2000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x202, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x250000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) 2018/02/26 20:09:22 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "c09967b0cc7475b8f646d61d1966c775d8e170d290efdccf189eb363ce55b39cb1f5908c9fd58eb6128426b7ac3d41095556d6c1b8e5b06eedaa39dd0d49ba990e41a445903a3da8cd10631aab6ce69a3fce6ec001d7865f59da2cbf4bf12d5b2d3bc494850f513c140a5a3ef7add9ac10b00291b63973c038ce475d3d48ad7828730faf99d6e32be048f670701768e004fce40e5a9f8a8f791ee71a522c1fc9802f9b490567"}, 0xb6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x101) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000f24000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = eventfd(0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)) read(r2, &(0x7f0000294fda)=""/38, 0x26) io_setup(0x5, &(0x7f0000f3f000)=0x0) io_submit(r3, 0x1, &(0x7f0000134000)=[&(0x7f0000d44fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00001bcf37), 0x0, 0x0, 0x0, 0x1, r2}]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000004c0)="b7970d9cba260900000078560db60a64", 0xe) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f00000005c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 304.335205] RIP: 0033:0x453d69 [ 304.338367] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.346047] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 304.353295] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 304.360539] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 304.367791] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 304.375038] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 304.420192] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 304.432138] syz-executor5 cpuset=/ mems_allowed=0 [ 304.437055] CPU: 1 PID: 9774 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 304.444315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.453645] Call Trace: [ 304.456217] dump_stack+0x194/0x24d [ 304.459823] ? arch_local_irq_restore+0x53/0x53 [ 304.464468] ? idr_get_free+0xfd0/0xfd0 [ 304.468421] ? kernel_text_address+0x102/0x140 [ 304.472990] warn_alloc+0x19a/0x2b0 [ 304.476597] ? zone_watermark_ok_safe+0x400/0x400 [ 304.481425] ? save_stack+0xa3/0xd0 [ 304.485031] ? save_stack+0x43/0xd0 [ 304.488632] ? kasan_kmalloc+0xad/0xe0 [ 304.492493] ? __kmalloc_node+0x47/0x70 [ 304.496440] ? kvmalloc_node+0x64/0xd0 [ 304.500314] __vmalloc_node_range+0x4f0/0x650 [ 304.504788] ? lock_release+0xa40/0xa40 [ 304.508743] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.513391] __vmalloc_node_flags_caller+0x50/0x60 [ 304.518294] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.522942] kvmalloc_node+0x82/0xd0 [ 304.526633] xt_alloc_entry_offsets+0x21/0x30 [ 304.531104] translate_table+0x235/0x1690 [ 304.535232] ? lock_release+0xa40/0xa40 [ 304.539185] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 304.545049] ? __check_object_size+0x8b/0x530 [ 304.549525] ? __might_sleep+0x95/0x190 [ 304.553476] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 304.558296] ? kasan_check_write+0x14/0x20 [ 304.562510] ? _copy_from_user+0x99/0x110 [ 304.566634] do_ip6t_set_ctl+0x370/0x5f0 [ 304.570674] ? translate_compat_table+0x1c50/0x1c50 [ 304.575681] ? mutex_unlock+0xd/0x10 [ 304.579372] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 304.584628] nf_setsockopt+0x67/0xc0 [ 304.588322] ipv6_setsockopt+0x10b/0x130 [ 304.592364] tcp_setsockopt+0x82/0xd0 [ 304.596144] sock_common_setsockopt+0x95/0xd0 [ 304.600618] SyS_setsockopt+0x189/0x360 [ 304.604574] ? SyS_recv+0x40/0x40 [ 304.608012] ? move_addr_to_kernel+0x60/0x60 [ 304.612405] ? do_syscall_64+0xb6/0x940 [ 304.616356] ? SyS_recv+0x40/0x40 [ 304.619784] do_syscall_64+0x280/0x940 [ 304.623649] ? __do_page_fault+0xc90/0xc90 [ 304.627943] ? _raw_spin_unlock_irq+0x27/0x70 [ 304.632413] ? finish_task_switch+0x1c1/0x7e0 [ 304.636886] ? syscall_return_slowpath+0x550/0x550 [ 304.641794] ? syscall_return_slowpath+0x2ac/0x550 [ 304.646702] ? prepare_exit_to_usermode+0x350/0x350 [ 304.651694] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 304.657043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.661870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.667121] RIP: 0033:0x453d69 [ 304.670283] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.677968] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 304.685212] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 304.692458] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 304.699703] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 304.706950] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 304.714296] warn_alloc_show_mem: 2 callbacks suppressed 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x200000) fcntl$notify(r1, 0x402, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="5280", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 304.714298] Mem-Info: [ 304.722106] active_anon:77130 inactive_anon:61 isolated_anon:0 [ 304.722106] active_file:3741 inactive_file:9215 isolated_file:0 [ 304.722106] unevictable:0 dirty:251 writeback:0 unstable:0 [ 304.722106] slab_reclaimable:12518 slab_unreclaimable:93845 [ 304.722106] mapped:24390 shmem:86 pagetables:788 bounce:0 [ 304.722106] free:1404434 free_pcp:349 free_cma:0 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) [ 304.755572] Node 0 active_anon:306488kB inactive_anon:244kB active_file:14964kB inactive_file:36860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97484kB dirty:1004kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 43008kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 304.783667] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.809812] lowmem_reserve[]: 0 2864 6373 6373 2018/02/26 20:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="53000000223c12f54e960c53eebc10f2f2c6847ccc16b2420ab8d4ddbc6b8f29b2b5b1a26db44761a0d806b489db895d2ac91e15be24ef538da49896f96b635f5034f9e803cb0150af2b56386d2ef37e513ddd2f86c8e1"], &(0x7f0000000080)=0x5b) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x400, 0x7fff, 0x4, 0x4, 0x8, 0x1f, 0x180000000000, 0x7, r3}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x10400, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 304.814444] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:692kB free_cma:0kB [ 304.842162] lowmem_reserve[]: 0 0 3509 3509 [ 304.846545] Node 0 Normal free:2661340kB min:37120kB low:46400kB high:55680kB active_anon:314772kB inactive_anon:244kB active_file:14964kB inactive_file:36860kB unevictable:0kB writepending:1004kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5504kB pagetables:3176kB bounce:0kB free_pcp:372kB local_pcp:120kB free_cma:0kB [ 304.864724] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 304.876420] lowmem_reserve[]: 0 0 0 0 [ 304.876442] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 304.876514] Node 0 [ 304.888370] syz-executor5 cpuset= [ 304.892101] DMA32: 5*4kB (UM) [ 304.905629] / [ 304.907849] 2*8kB [ 304.911287] mems_allowed=0 [ 304.914460] (M) 1*16kB (M) [ 304.916183] CPU: 0 PID: 9805 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 304.918311] 2*32kB [ 304.921200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.921205] Call Trace: [ 304.921225] dump_stack+0x194/0x24d [ 304.924129] (M) [ 304.931373] ? arch_local_irq_restore+0x53/0x53 [ 304.931382] ? idr_get_free+0xfd0/0xfd0 [ 304.933598] 1*64kB [ 304.942932] ? kernel_text_address+0x102/0x140 [ 304.942957] warn_alloc+0x19a/0x2b0 [ 304.945524] (M) [ 304.949121] ? zone_watermark_ok_safe+0x400/0x400 [ 304.949146] ? save_stack+0xa3/0xd0 [ 304.951087] 3*128kB [ 304.955722] ? save_stack+0x43/0xd0 [ 304.955729] ? kasan_kmalloc+0xad/0xe0 [ 304.955738] ? __kmalloc_node+0x47/0x70 [ 304.959690] (UM) [ 304.961891] ? kvmalloc_node+0x64/0xd0 [ 304.961917] __vmalloc_node_range+0x4f0/0x650 [ 304.966469] 2*256kB [ 304.970072] ? lock_release+0xa40/0xa40 [ 304.970089] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.972041] (M) [ 304.976854] __vmalloc_node_flags_caller+0x50/0x60 [ 304.976863] ? xt_alloc_entry_offsets+0x21/0x30 [ 304.976877] kvmalloc_node+0x82/0xd0 [ 304.980477] 3*512kB [ 304.982769] xt_alloc_entry_offsets+0x21/0x30 [ 304.982782] translate_table+0x235/0x1690 [ 304.986385] (UM) [ 304.990241] ? lock_release+0xa40/0xa40 [ 304.990255] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 304.994203] 3*1024kB [ 304.996233] ? __check_object_size+0x8b/0x530 [ 304.996256] ? __might_sleep+0x95/0x190 [ 305.000111] (UM) [ 305.004573] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 305.004589] ? kasan_check_write+0x14/0x20 [ 305.006892] 2*2048kB [ 305.010832] ? _copy_from_user+0x99/0x110 [ 305.010848] do_ip6t_set_ctl+0x370/0x5f0 [ 305.015493] (UM) [ 305.017442] ? translate_compat_table+0x1c50/0x1c50 [ 305.017451] ? SYSC_recvfrom+0x3d7/0x5a0 [ 305.022357] 714*4096kB [ 305.027012] ? mutex_unlock+0xd/0x10 [ 305.030703] (M) [ 305.032994] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 305.033011] nf_setsockopt+0x67/0xc0 [ 305.037480] = 2934324kB [ 305.041600] ipv6_setsockopt+0x10b/0x130 [ 305.041617] tcp_setsockopt+0x82/0xd0 [ 305.043654] Node 0 [ 305.047598] sock_common_setsockopt+0x95/0xd0 [ 305.047614] SyS_setsockopt+0x189/0x360 [ 305.053473] Normal: [ 305.055855] ? SyS_recv+0x40/0x40 [ 305.055874] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 305.060350] 703*4kB [ 305.064289] ? do_syscall_64+0xb6/0x940 [ 305.064305] ? SyS_recv+0x40/0x40 [ 305.066348] (UME) [ 305.071158] do_syscall_64+0x280/0x940 [ 305.071167] ? _raw_spin_unlock_irq+0x27/0x70 [ 305.071177] ? finish_task_switch+0x1c1/0x7e0 [ 305.075390] 432*8kB [ 305.077768] ? syscall_return_slowpath+0x550/0x550 [ 305.077781] ? syscall_return_slowpath+0x2ac/0x550 [ 305.081905] (UME) [ 305.085933] ? prepare_exit_to_usermode+0x350/0x350 [ 305.085946] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 305.087992] 160*16kB [ 305.092983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.093005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.097037] (UE) [ 305.099588] RIP: 0033:0x453d69 [ 305.099593] RSP: 002b:00007fae81ac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.099603] RAX: ffffffffffffffda RBX: 00007fae81ac16d4 RCX: 0000000000453d69 [ 305.103301] 1343*32kB [ 305.105236] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 305.105241] RBP: 000000000072c010 R08: 0000000000000004 R09: 0000000000000000 [ 305.105247] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 305.105251] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000002 [ 305.260602] (UME) 1013*64kB (UM) 120*128kB (UM) 13*256kB (UM) 19*512kB (UM) 21*1024kB (UM) 12*2048kB (UME) 603*4096kB (UM) = 2661020kB 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c43f4a0dcb8769870e893ed560ae4f34", 0x10) r2 = dup3(r0, r1, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x1, 0xdd, 0xfffffffeffffffff, &(0x7f0000000040)='rose0\x00', 0x7, 0xf31, 0x4}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={r3, 0x46, 0x1, [0x78]}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x40000000000005, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x40, @empty, 0x2}], 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty, 0x6}}}, &(0x7f0000000100)=0x8c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x10000, 0x1, 0x7f, 0x7, 0x4}, 0x14) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:23 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"6630025a6b9ff722bd00", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) [ 305.272919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 305.281510] 13044 total pagecache pages [ 305.285509] 0 pages in swap cache [ 305.288985] Swap cache stats: add 0, delete 0, find 0/0 [ 305.294359] Free swap = 0kB [ 305.297400] Total swap = 0kB [ 305.300427] 1965969 pages RAM [ 305.303549] 0 pages HighMem/MovableOnly [ 305.307528] 329725 pages reserved 2018/02/26 20:09:23 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000000020000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:23 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2080) recvmsg$netrom(r0, &(0x7f0000000700)={&(0x7f0000000200)=@ax25={0x3, {"1e2ed3ed4711f7"}, 0x3}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="b1223d252c5d24b98d6ca32dbaff7a46469ea43afc840eca6b3d3cbabd3393e5659b2ea0307478a21f2de501d3d71b80fec68a472282b9c5d12da81f8b78da907b777368a7126cd19c4cef8942fd9687a9dc20", 0x53}, {&(0x7f00000002c0)="dbaffa63c3690b9429e054fd86dc2ac94a5fcb32827078a032e06cf4f40d63d10311d359edd54fd2efc32dfe2e885a7bf929492c33f8a99df4ebf1d09ffde95e92c99f", 0x43}, {&(0x7f0000000340)="42c71f883eb443741a0284df1530e2b71a9956ebeaf252c596cd7315a320f66d2b0d2ce23d4e49b90cc0cf6db757541349f327cb2767e51e3b55f8a6d5db76320a57a064716463544e8d53c113352e437a9dfda8a43639fbed5712d6f137040d77875b93fa4c26af7d53d2c46bbcb6d8111b8f7f0cd7569312f5c281d6238e2e9f391c4366bdc966ae324eea7e77839ff74a007732e9ea1ca83de09308365a15b8eb2fbc380bf201ca4825d05f284cd144fd5a6499d38e2a43b4b35d2d503198ac4c07423f2750d70227354f215ecf82", 0xd0}, {&(0x7f0000000440)="25e2489e14", 0x5}, {&(0x7f0000000480)="25d1acba37c2acbcb38a20e1c8b2e73c0b6bd88929e1ccb43d370b09e0bc87851ffc10811a9026074e57ae1a4a6bbba8f4a11fa3deed660eb7dff81ec8543986aa759c53aa3b6cdb41a2ab4387e88e057c2f68185f492cc6ed456fa0b0c45e7fadde0938b3cde87f93ae4d9fb1c6229373eb9d39f4fef29c8620929c3ffd15bc8483f7faa9dcbd24b17e3ba4958f91489034c0cdfb79c8a67833b6b3025b", 0x9e}], 0x5, &(0x7f00000005c0)=[{0x100, 0x10f, 0x80000001, "08931576580836840363b4954539b21a83905ce70a30032d6afb3ccac376730e58d029b85af71ffd32303466f5b1953c08a7b611309e356de2576920659a5928b84af6cb507012d817bbbcd4c5674b818985c5f511ffac43198c9b0c3dc138b8c7ae3a4338ce994a4ed964a8ad908aa5a1e08f3c2f5e8d249d5b5689eb40b5119b85582ff02c3169e21d6780af494ced35c3278c58ebcf511a07a25672a2e1c04d1c4e306450f5d468852cabe57c748317387cf5f1d67f413c714c1e7c99dd089c9fdf4cb9fba7075264e7c6911c889a3f7050c30cf105b53cbdc540b9bc0e5f46e0b4181840639828dc60"}, {0x38, 0x103, 0x3, "5fbba5d7e1c469a4d6d35b7004fcbb6859c075857c3733361bd9940a52eeb150cb51ae0b60"}], 0x138, 0x1}, 0x100) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'yam0\x00', @ifru_map={0x2}}) fdatasync(r1) r2 = epoll_create(0x2) r3 = dup3(r2, r1, 0x0) fremovexattr(r3, &(0x7f0000000740)=@random={'system.', '/dev/net/tun\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000780)={0x1f, 0x9, 0x5, 0x0, 0x6, 0x5, 0x2, 0x0, 0x4, 0x200, 0x6, 0x5, 0x0, 0xfff, 0x6, 0x1, 0x81, 0x3, 0x6}) 2018/02/26 20:09:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc, 0x9fb, 0x1000}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000140)="d2cdc11f180ff3e29341cca175168ba9e238c0a40101f9eb93f1277f45cf6077f197c25ee550eed139beba05358e19b9ef0e2313195d8704529d5d0c101a6cd53b1237a3f1e9d61ae5c00080b9dec2529c0836d3043dd120ef76ec9e79eec03c2795660c53dbf2abd7dc703b4e98fec6639ad76c78704cd05807308121cef8a393acf8261d195e393ecbdaafaec1a4b1e538b6f7e452bd26ad3a788e462c1febae202946c28ed8294a8fd4bcec5051a49d732f8e82af2ec9039809dfa78e0ad56094f9079fc36a048d277cffc70d47cd4bdc5e16", 0xd4) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8001, 0x400000) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x43, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/7, 0x7) syz_open_procfs(r5, &(0x7f0000000140)='children\x00') ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000"]) 2018/02/26 20:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/29, 0x1d) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) pwrite64(r0, &(0x7f0000000140)="48ba116bf188424eda40f73ae73fc9e82293bca7f5184981f27d202b32b43bb6cf21c2e42029376b3b6adb9c1d1f83489acb4bf8dd4d421a492a773117e3e666ec1445507f29517812b22512d744e0533c57d57616ed65fe", 0x58, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="00000000000000000000200000000000000000000000000000000000000000000000000024000000fb96000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x3) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000200)=0x19) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x7, "f72a1418d7bfd2"}, &(0x7f0000000040)=0xf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x7f, 0x8, 0x5, 0x800, r2}, 0x10) getcwd(&(0x7f00000000c0)=""/179, 0xb3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000340)=0xfffffff7fffffe00) ioctl$TIOCCBRK(r1, 0x5428) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000240)=0x4) 2018/02/26 20:09:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) getuid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:23 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x3, 0x1ff, 0x8001, 0x8, 0x3, 0x9, 0x5, 0x2, 0x8, 0x5, 0x10000, 0x9, 0x1, 0x59, 0x7ff], 0x10000, 0x80000}) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@host=0x2}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x6529, 0x80000000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f000061b000)=0xffffffffffffffad) 2018/02/26 20:09:23 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = dup(r1) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x8) dup3(r1, r0, 0x0) 2018/02/26 20:09:23 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x2000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xd9, "2b71ed88def2c00f1d2d20093a8ca58a7a26ae855824604564784a4db16f008d0e1158acf0ba7be21f8ef1dae7065df84a241791abd2747898057d9d9ed333cf278e9cadb018570b8655203528f69aff9e4b37b733846a2eea7e88644609cf61275532365bd0bb3db25989dd6f98b11972d6f8c8ad04bbf5b4bf9e1fb00ab9a0b9455293145688b6f5b5986daa1804c34db4d5a77fd24823d6ed15e468e5d1ff10b100d3e756a76746888b5bb4fdc9c1c33dc41a8641c11b45a6510a1876a81476a3da0c00ae787857d5cb5392903b8641eef435f07c17ed05"}, &(0x7f0000000280)=0xe1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r3, 0x81}, &(0x7f0000000300)=0x8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffbff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r4, @in={{0x2, 0x4e21, @rand_addr=0x895}}}, 0x8c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:23 executing program 4: r0 = syz_open_dev$tun(&(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000001c0)=""/151) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$peek(0x2, r2, &(0x7f0000000100)) r3 = epoll_create(0x40000000000985) dup3(r3, r0, 0x0) 2018/02/26 20:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x7, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2c0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) [ 305.736203] QAT: Invalid ioctl [ 305.738943] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 305.751338] syz-executor5 cpuset=/ mems_allowed=0 [ 305.756232] CPU: 0 PID: 9863 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 305.763499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.772842] Call Trace: [ 305.775429] dump_stack+0x194/0x24d [ 305.779238] ? arch_local_irq_restore+0x53/0x53 2018/02/26 20:09:24 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000000)="97b26bee720a4742aa72cac7a7629106a1b681232eff99b07f3b92e3531b9483136068899626131ac7ed69843177d389ff2dfbc8a39834754f2d9dd8f11a7527a7dc189227f80f341ff4d89747dfaad8aed166a52c394716604c43debd74890aed4194a3ee7b48a8e40f8ca9f14abd9ea382c8bdb5c292055d91157781c098869e732da63ab5086fdc44ee59e8a0ab38a7c56bd92590bdc2cbe99625db4fbbbfe7139ee04a4854a004a875ad1d2d9f32967b41506a86") sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0xfffffffffffffdfa, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000140)={{0x8de, 0x2, 0x2, 0x7f, "275bdd3700e4a28d1038544f0f8059a138c9cb3d2ee4deb440de6daac9303db2e818dc29fc04881edb86fefc", 0x7}, 0x0, 0x0, 0x4, r4, 0x8, 0xdb, "5daee9f1c6503b684328c6a5e4236b66889421864e7e90484050d406fd784a854c9389cb28fd3c6eab5e925b3d1e46ae6519ccff0f4bc2a76c19fe18665b2a26", &(0x7f0000000100)="76626f786e65743074727573746564f0656d312b2c00", 0x16, [], [0x7, 0x3, 0xfc, 0xffffffffffffffa0]}) [ 305.783902] ? idr_get_free+0xfd0/0xfd0 [ 305.787870] ? kernel_text_address+0x102/0x140 [ 305.792460] warn_alloc+0x19a/0x2b0 [ 305.796091] ? zone_watermark_ok_safe+0x400/0x400 [ 305.800942] ? save_stack+0xa3/0xd0 [ 305.804189] QAT: Invalid ioctl [ 305.804560] ? save_stack+0x43/0xd0 [ 305.811343] ? kasan_kmalloc+0xad/0xe0 [ 305.815223] ? __kmalloc_node+0x47/0x70 [ 305.819193] ? kvmalloc_node+0x64/0xd0 [ 305.823090] __vmalloc_node_range+0x4f0/0x650 [ 305.827589] ? lock_release+0xa40/0xa40 [ 305.831564] ? xt_alloc_entry_offsets+0x21/0x30 [ 305.836232] __vmalloc_node_flags_caller+0x50/0x60 [ 305.841162] ? xt_alloc_entry_offsets+0x21/0x30 [ 305.845834] kvmalloc_node+0x82/0xd0 [ 305.849554] xt_alloc_entry_offsets+0x21/0x30 [ 305.854049] translate_table+0x235/0x1690 [ 305.858204] ? lock_release+0xa40/0xa40 [ 305.862186] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 305.868070] ? __check_object_size+0x8b/0x530 [ 305.872567] ? __might_sleep+0x95/0x190 [ 305.876535] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 305.881358] ? kasan_check_write+0x14/0x20 [ 305.885583] ? _copy_from_user+0x99/0x110 [ 305.889729] do_ip6t_set_ctl+0x370/0x5f0 [ 305.893793] ? translate_compat_table+0x1c50/0x1c50 [ 305.898806] ? mutex_unlock+0xd/0x10 [ 305.902498] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 305.907755] nf_setsockopt+0x67/0xc0 [ 305.911450] ipv6_setsockopt+0x10b/0x130 [ 305.915491] tcp_setsockopt+0x82/0xd0 [ 305.919273] sock_common_setsockopt+0x95/0xd0 [ 305.923750] SyS_setsockopt+0x189/0x360 [ 305.927705] ? SyS_recv+0x40/0x40 [ 305.931140] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 305.936657] ? do_syscall_64+0xb6/0x940 [ 305.940623] ? SyS_recv+0x40/0x40 [ 305.944062] do_syscall_64+0x280/0x940 [ 305.947924] ? __do_page_fault+0xc90/0xc90 [ 305.952151] ? _raw_spin_unlock_irq+0x27/0x70 [ 305.956629] ? finish_task_switch+0x1c1/0x7e0 [ 305.961111] ? syscall_return_slowpath+0x550/0x550 [ 305.966031] ? syscall_return_slowpath+0x2ac/0x550 [ 305.970949] ? prepare_exit_to_usermode+0x350/0x350 [ 305.975943] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 305.981287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.986116] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.991284] RIP: 0033:0x453d69 [ 305.994459] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.002156] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 306.009401] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 306.016645] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 306.023896] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 306.031150] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 306.038556] warn_alloc_show_mem: 1 callbacks suppressed [ 306.038560] Mem-Info: [ 306.046385] active_anon:74011 inactive_anon:61 isolated_anon:0 [ 306.046385] active_file:3741 inactive_file:9230 isolated_file:0 [ 306.046385] unevictable:0 dirty:263 writeback:0 unstable:0 [ 306.046385] slab_reclaimable:12549 slab_unreclaimable:93754 [ 306.046385] mapped:24387 shmem:86 pagetables:783 bounce:0 [ 306.046385] free:1407443 free_pcp:445 free_cma:0 [ 306.059735] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 306.079770] Node 0 active_anon:296044kB inactive_anon:244kB active_file:14964kB inactive_file:36920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97548kB dirty:1052kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 67584kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 306.079776] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.079796] lowmem_reserve[]: [ 306.091691] syz-executor5 cpuset= [ 306.120073] 0 [ 306.146179] / mems_allowed=0 [ 306.146196] CPU: 1 PID: 9894 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 306.146201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.146205] Call Trace: [ 306.146226] dump_stack+0x194/0x24d [ 306.149309] 2864 [ 306.152735] ? arch_local_irq_restore+0x53/0x53 [ 306.152744] ? idr_get_free+0xfd0/0xfd0 [ 306.154529] 6373 [ 306.157519] ? kernel_text_address+0x102/0x140 [ 306.157544] warn_alloc+0x19a/0x2b0 [ 306.164787] 6373 [ 306.174117] ? zone_watermark_ok_safe+0x400/0x400 [ 306.174142] ? save_stack+0xa3/0xd0 [ 306.180287] ? save_stack+0x43/0xd0 [ 306.180294] ? kasan_kmalloc+0xad/0xe0 [ 306.180302] ? __kmalloc_node+0x47/0x70 [ 306.182346] Node 0 [ 306.186976] ? kvmalloc_node+0x64/0xd0 [ 306.187000] __vmalloc_node_range+0x4f0/0x650 [ 306.190969] DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:300kB free_cma:0kB [ 306.193001] ? xt_alloc_entry_offsets+0x21/0x30 [ 306.197562] lowmem_reserve[]: [ 306.201155] __vmalloc_node_flags_caller+0x50/0x60 [ 306.201168] ? xt_alloc_entry_offsets+0x21/0x30 [ 306.203209] 0 [ 306.208023] kvmalloc_node+0x82/0xd0 [ 306.208037] xt_alloc_entry_offsets+0x21/0x30 [ 306.211638] 0 [ 306.215234] translate_table+0x235/0x1690 [ 306.215249] ? lock_release+0xa40/0xa40 [ 306.219111] 3509 [ 306.223051] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 306.223065] ? __check_object_size+0x8b/0x530 [ 306.225277] 3509 [ 306.229143] ? __might_sleep+0x95/0x190 [ 306.229155] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 306.260659] ? kasan_check_write+0x14/0x20 [ 306.260673] ? _copy_from_user+0x99/0x110 [ 306.265319] Node 0 [ 306.268396] do_ip6t_set_ctl+0x370/0x5f0 [ 306.268412] ? translate_compat_table+0x1c50/0x1c50 [ 306.273329] Normal free:2679540kB min:37120kB low:46400kB high:55680kB active_anon:296044kB inactive_anon:244kB active_file:14964kB inactive_file:36920kB unevictable:0kB writepending:1052kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4928kB pagetables:3132kB bounce:0kB free_pcp:776kB local_pcp:112kB free_cma:0kB [ 306.277969] ? mutex_unlock+0xd/0x10 [ 306.279745] lowmem_reserve[]: [ 306.283425] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 306.283443] nf_setsockopt+0x67/0xc0 [ 306.287912] 0 [ 306.289690] ipv6_setsockopt+0x10b/0x130 [ 306.289707] tcp_setsockopt+0x82/0xd0 [ 306.293828] 0 [ 306.297775] sock_common_setsockopt+0x95/0xd0 [ 306.297792] SyS_setsockopt+0x189/0x360 [ 306.299831] 0 [ 306.305688] ? SyS_recv+0x40/0x40 [ 306.305707] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 306.310172] 0 [ 306.312206] ? do_syscall_64+0xb6/0x940 [ 306.312222] ? SyS_recv+0x40/0x40 [ 306.320978] do_syscall_64+0x280/0x940 [ 306.320986] ? _raw_spin_unlock_irq+0x27/0x70 [ 306.320996] ? finish_task_switch+0x1c1/0x7e0 [ 306.325215] Node 0 [ 306.329328] ? syscall_return_slowpath+0x550/0x550 [ 306.329341] ? syscall_return_slowpath+0x2ac/0x550 [ 306.331557] DMA: [ 306.335584] ? prepare_exit_to_usermode+0x350/0x350 [ 306.335598] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 306.340594] 1*4kB [ 306.369801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.369822] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.373505] (U) [ 306.376576] RIP: 0033:0x453d69 [ 306.376582] RSP: 002b:00007fae81ac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.376592] RAX: ffffffffffffffda RBX: 00007fae81ac16d4 RCX: 0000000000453d69 [ 306.381849] 0*8kB [ 306.385523] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 306.385528] RBP: 000000000072c010 R08: 0000000000000004 R09: 0000000000000000 [ 306.385534] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 306.385541] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000002 [ 306.387327] 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 306.537293] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 306.552883] Node 0 Normal: 778*4kB (UME) 559*8kB (UME) 224*16kB (UME) 1418*32kB (UME) 1055*64kB (UM) 163*128kB (UM) 41*256kB (UM) 25*512kB (UM) 24*1024kB (UM) 22*2048kB (UME) 596*4096kB (UM) = 2679072kB [ 306.571128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 306.579703] 13056 total pagecache pages [ 306.583674] 0 pages in swap cache 2018/02/26 20:09:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x1, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'ifb0\x00', @ifru_flags=0x4c00}) 2018/02/26 20:09:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) r2 = dup(r1) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x0, 0x0, []}) 2018/02/26 20:09:24 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:24 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x4, 0xf9ea, 0x2e0c}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r4, 0x6149ee91}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0xffffffffffffff3f}, 0xfffffffffffffe14) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="87e7590b81778e695e1a57cb3008f090f7d466e45d939269bb8295a07c49583f9a169f7098be991ffd0db6bf446e4b296dc0a7b0efe0de4e376efbd0d429d75f23fb21cfbf3731d292408ded2f346542928a6a658b4618218bf56b3893ad5d3697d3adea5c044cb510f03961b899983451c78e466b3851d0ba7e10c933da2280dc988d89a6c54d74d14848b3479d1eb15a36036cbc1e4098b37d7027351ed51add3060c1b0d6e0afaedaff63613703216f6e4465f8", 0xb5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4f, &(0x7f0000001fde)=0xe5, 0x313) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:24 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80000) setsockopt$inet6_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000140)=0x36e, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000f5b000)=0x3, 0x4) connect$inet6(r3, &(0x7f0000f61000)={0xa, 0x4e20, 0x800, @loopback={0x0, 0x1}}, 0x1c) r4 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x400000, 0x100) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000240)="20b2410a3d4646ba15208a66b163c681b218c0aae41b32b4b846493e755a7f03773c8744c2b7edae4cdffbcbc6d306f8ebc9f25827ab9ab88be88e6f875c62e786912c938fbbf69c1feeaa4d6f332110576b35ad46178989a87b91350bb122ec55e960c5f1b242e56005a1988fcf03c59b849c939e59f284ce9bffae1feb4de35b80076e1cc90aaf1f0537ba492365cfe1c41c0d1cbe4a86f682daaed602ae3697fde8539497b980c439707102") socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000200)) dup3(r2, r0, 0x0) 2018/02/26 20:09:24 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) 2018/02/26 20:09:24 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfe97, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac1400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a0000000000002ec824eb60c21606bce900ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000cbf3000000000000b500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000011f00000000000000000000008000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000086ea8332129c728a00000000000000000000000000000000000000000000000000000000000000000000ac2db5e4cfb9c4dfaeb0fb57ded106ae6195dd1ce1fc4257cd38d43e702398b404fb187799d2a22217e10a9cfa46c01f00a082"], 0x110) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x3, 0x7}, &(0x7f00000000c0)=0x98) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) r3 = geteuid() fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) accept4$alg(r2, 0x0, 0x0, 0x80000) ioprio_set$uid(0x3, r3, 0x1) [ 306.587130] Swap cache stats: add 0, delete 0, find 0/0 [ 306.592485] Free swap = 0kB [ 306.595499] Total swap = 0kB [ 306.598527] 1965969 pages RAM [ 306.601627] 0 pages HighMem/MovableOnly [ 306.605592] 329725 pages reserved 2018/02/26 20:09:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x200, @multicast1=0xe0000001, 0x1, 0x1, [@dev={0xac, 0x14, 0x14, 0x1a}]}, 0x14) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x24, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 306.701092] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 306.713032] syz-executor5 cpuset=/ mems_allowed=0 [ 306.717936] CPU: 0 PID: 9915 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 306.725206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.734554] Call Trace: [ 306.737148] dump_stack+0x194/0x24d [ 306.740790] ? arch_local_irq_restore+0x53/0x53 [ 306.745459] ? idr_get_free+0xfd0/0xfd0 2018/02/26 20:09:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74ddff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) [ 306.749434] ? kernel_text_address+0x102/0x140 [ 306.754033] warn_alloc+0x19a/0x2b0 [ 306.757671] ? zone_watermark_ok_safe+0x400/0x400 [ 306.762529] ? save_stack+0xa3/0xd0 [ 306.766154] ? save_stack+0x43/0xd0 [ 306.769780] ? kasan_kmalloc+0xad/0xe0 [ 306.773664] ? __kmalloc_node+0x47/0x70 [ 306.777632] ? kvmalloc_node+0x64/0xd0 [ 306.781531] __vmalloc_node_range+0x4f0/0x650 [ 306.786035] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 306.791061] ? xt_alloc_entry_offsets+0x21/0x30 [ 306.795728] __vmalloc_node_flags_caller+0x50/0x60 2018/02/26 20:09:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) fadvise64(r0, 0x0, 0x1000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 306.800654] ? xt_alloc_entry_offsets+0x21/0x30 [ 306.805328] kvmalloc_node+0x82/0xd0 [ 306.809049] xt_alloc_entry_offsets+0x21/0x30 [ 306.813552] translate_table+0x235/0x1690 [ 306.817707] ? lock_release+0xa40/0xa40 [ 306.821683] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 306.827570] ? __check_object_size+0x8b/0x530 [ 306.832067] ? __might_sleep+0x95/0x190 [ 306.836028] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 306.840856] ? kasan_check_write+0x14/0x20 [ 306.845071] ? _copy_from_user+0x99/0x110 [ 306.849200] do_ip6t_set_ctl+0x370/0x5f0 [ 306.853243] ? translate_compat_table+0x1c50/0x1c50 [ 306.858253] ? mutex_unlock+0xd/0x10 [ 306.861946] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 306.867205] nf_setsockopt+0x67/0xc0 [ 306.870903] ipv6_setsockopt+0x10b/0x130 [ 306.874946] tcp_setsockopt+0x82/0xd0 [ 306.878731] sock_common_setsockopt+0x95/0xd0 [ 306.883210] SyS_setsockopt+0x189/0x360 [ 306.887168] ? SyS_recv+0x40/0x40 [ 306.890609] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 306.896127] ? do_syscall_64+0xb6/0x940 [ 306.900084] ? SyS_recv+0x40/0x40 [ 306.903514] do_syscall_64+0x280/0x940 [ 306.907381] ? __do_page_fault+0xc90/0xc90 [ 306.911592] ? _raw_spin_unlock_irq+0x27/0x70 [ 306.916063] ? finish_task_switch+0x1c1/0x7e0 [ 306.920539] ? syscall_return_slowpath+0x550/0x550 [ 306.925449] ? syscall_return_slowpath+0x2ac/0x550 [ 306.930357] ? prepare_exit_to_usermode+0x350/0x350 [ 306.935353] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 306.940711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.945542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.950708] RIP: 0033:0x453d69 [ 306.954132] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.961815] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 306.969062] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 306.976309] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 306.983555] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 306.990799] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 307.026889] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 307.038881] syz-executor5 cpuset=/ mems_allowed=0 [ 307.043773] CPU: 0 PID: 9937 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 307.051032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.060535] Call Trace: [ 307.063105] dump_stack+0x194/0x24d [ 307.066715] ? arch_local_irq_restore+0x53/0x53 [ 307.071358] ? idr_get_free+0xfd0/0xfd0 [ 307.075308] ? kernel_text_address+0x102/0x140 [ 307.079876] warn_alloc+0x19a/0x2b0 [ 307.083482] ? zone_watermark_ok_safe+0x400/0x400 [ 307.088311] ? save_stack+0xa3/0xd0 [ 307.091913] ? save_stack+0x43/0xd0 [ 307.095512] ? kasan_kmalloc+0xad/0xe0 [ 307.099371] ? __kmalloc_node+0x47/0x70 [ 307.103318] ? kvmalloc_node+0x64/0xd0 [ 307.107193] __vmalloc_node_range+0x4f0/0x650 [ 307.111669] ? lock_release+0xa40/0xa40 [ 307.115624] ? xt_alloc_entry_offsets+0x21/0x30 [ 307.120268] __vmalloc_node_flags_caller+0x50/0x60 [ 307.125171] ? xt_alloc_entry_offsets+0x21/0x30 [ 307.129819] kvmalloc_node+0x82/0xd0 [ 307.133513] xt_alloc_entry_offsets+0x21/0x30 [ 307.137989] translate_table+0x235/0x1690 [ 307.142116] ? lock_release+0xa40/0xa40 [ 307.146069] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 307.151933] ? __check_object_size+0x8b/0x530 [ 307.156412] ? __might_sleep+0x95/0x190 [ 307.160364] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 307.165187] ? kasan_check_write+0x14/0x20 [ 307.169398] ? _copy_from_user+0x99/0x110 [ 307.173526] do_ip6t_set_ctl+0x370/0x5f0 [ 307.177567] ? translate_compat_table+0x1c50/0x1c50 [ 307.182554] ? SYSC_recvfrom+0x3d7/0x5a0 [ 307.186603] ? mutex_unlock+0xd/0x10 [ 307.190294] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 307.195549] nf_setsockopt+0x67/0xc0 [ 307.199243] ipv6_setsockopt+0x10b/0x130 [ 307.203282] tcp_setsockopt+0x82/0xd0 [ 307.207062] sock_common_setsockopt+0x95/0xd0 [ 307.211535] SyS_setsockopt+0x189/0x360 [ 307.215487] ? SyS_recv+0x40/0x40 [ 307.218924] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 307.224437] ? do_syscall_64+0xb6/0x940 [ 307.228392] ? SyS_recv+0x40/0x40 [ 307.231820] do_syscall_64+0x280/0x940 [ 307.235681] ? __do_page_fault+0xc90/0xc90 [ 307.239887] ? _raw_spin_unlock_irq+0x27/0x70 [ 307.244358] ? finish_task_switch+0x1c1/0x7e0 [ 307.248831] ? syscall_return_slowpath+0x550/0x550 [ 307.253739] ? syscall_return_slowpath+0x2ac/0x550 [ 307.258643] ? prepare_exit_to_usermode+0x350/0x350 [ 307.263637] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 307.268984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.273808] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.278970] RIP: 0033:0x453d69 [ 307.282136] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.289820] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 307.297067] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 307.304312] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 307.311558] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 307.318805] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 307.326124] warn_alloc_show_mem: 2 callbacks suppressed [ 307.331501] Mem-Info: [ 307.333939] active_anon:71385 inactive_anon:61 isolated_anon:0 [ 307.333939] active_file:3743 inactive_file:9242 isolated_file:0 [ 307.333939] unevictable:0 dirty:44 writeback:23 unstable:0 [ 307.333939] slab_reclaimable:12570 slab_unreclaimable:93810 [ 307.333939] mapped:24404 shmem:86 pagetables:742 bounce:0 [ 307.333939] free:1409982 free_pcp:519 free_cma:0 [ 307.367295] Node 0 active_anon:285540kB inactive_anon:244kB active_file:14972kB inactive_file:36968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97616kB dirty:176kB writeback:92kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 96256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 307.395327] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.421467] lowmem_reserve[]: 0 2864 6373 6373 [ 307.426086] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:992kB local_pcp:300kB free_cma:0kB [ 307.453792] lowmem_reserve[]: 0 0 3509 3509 [ 307.458157] Node 0 Normal free:2689916kB min:37120kB low:46400kB high:55680kB active_anon:285540kB inactive_anon:244kB active_file:14972kB inactive_file:36968kB unevictable:0kB writepending:280kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4672kB pagetables:2968kB bounce:0kB free_pcp:976kB local_pcp:348kB free_cma:0kB [ 307.488118] lowmem_reserve[]: 0 0 0 0 [ 307.491950] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 307.505613] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB 2018/02/26 20:09:25 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x200, 0xffffffffffff0000, 0x80000001, 0x4]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x2008}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$KVM_SMI(r0, 0xaeb7) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:25 executing program 7: semget(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1ade01, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xbf1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x8}, &(0x7f0000000380)=0xc) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) readahead(r2, 0xcb, 0x80000000) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r4 = epoll_create(0x40000000000985) dup3(r4, r3, 0x0) 2018/02/26 20:09:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x7c2) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:25 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10600, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000040)=0xa7d) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0xfffffea6) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 2018/02/26 20:09:25 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x1, 0x3, {0xa, 0x4e21, 0xffff, @empty, 0x7ff}}}, 0x3a, &(0x7f0000000200)=[{&(0x7f0000000080)="bbc6ec8fe48a41f4b425afc0034754d49394f60b9bb24295ac2e6396c9c23b58e610e56eeb40e85f2b124d5ef4a1c2d1464fc5d670b57e9c634740700a4500262b183dbbb16b633484fff6768a5b5c5f33bd673d14dcc0f9c66937fccafdac9ac9eafb72108923b67cb09dec1ca0a384e12b80305ec3b997fa71cff5ef983564bbcac0e1006e4fb97e51d5ebc3f6ce0cac225c", 0x93}, {&(0x7f0000000140)="67b0ab1bc7a9bcfb86f9c9cc1d69dcb236c0d485e4c3ac89a9f617d24396a806e71bc34ce4966e2ec7a84ea233bbc5d61a87bec24d7fc638562c4b7c939afb2d1c281191b8621024288ca1161f2a89269536842295b6d2a267848a4a0f2a3b3a", 0x60}, {&(0x7f00000001c0)="e8906c440fd524836e3e9e432bcc5042572233d17666e9725d5307891c304ee66aa17303166a34ce3eb496603778ea907edb64e2b908fd25a2cdee7899d952af", 0x40}], 0x3, &(0x7f0000000240)=[{0x58, 0x100, 0x4, "d687a6f36d04cf34a850e2e09ea0a11e7a3ad6d8e8d4f85b94d5cb559b7a8841795d151de125f371a204b2477bb9ec045947b06ddb693a5af353d77c055596ac8ec066dd6b3f"}, {0xa0, 0x0, 0x0, "d71ecd54f4540df30d1ae5299a0066e1e81246329089d0da9a26c42cf1c5e3c260ba1bb7f8c1b0eb63b9dc93723d7c511dd862ed71120287efc1c597b3da07d49a1ef98a55f5987b06f127ec078a9458e62fc262cb6c6851c7a55fcb1893fbbabe1c13c87f829833ef859f2cfac6b0546a2c78d8028bd546b4c41b64a895d2cf75e5ecc8e6680c361d6e522e3c"}], 0xf8, 0x4800}, 0x24004000) sendto$inet(r0, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:25 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xffff, 0x8, 0x2, 0x8, 0xd1ea, 0x200, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, 0x1, 0x9, 0x3f, 0x80, 0x9}}, &(0x7f0000000040)=0xb8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x4, 0x20, 0x9}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = socket$inet6(0xa, 0x803, 0xeed) r4 = epoll_create(0x40000000000985) dup3(r4, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x100000001, 0x4) 2018/02/26 20:09:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0xf4aa, 0x89, "48cb99c0cafe394f6c19ade96e8a8e0f40869ce8468ff6df223f3cfaefda9c87ef4c16f05f5b8ad5008a2a01c7f47a7a16a49d2fe4428635f083cd5106dd94dbb5fe62566c48ede8d9f0bfd143239602d1ccf16b7729b4f0308106b743503038e7c357768aafb15b8dd826e5d7941d4b6e24901c4d79cbeb515419de43a05195e63220012bd2eeb158"}, 0x91) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) munlockall() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000180)={{0x3, 0x5}, 'port1\x00', 0x29, 0x28, 0x9, 0x200, 0x35, 0x2, 0x5, 0x0, 0x2, 0x6d4}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3f, &(0x7f0000000080)="bb640c02a8af2e2a4c2428c9975a612ee162c844f405c844021ef59874ec452aa0671c1083c0200abfa0e918b8d5b2d1767006fea26f6f8bf5a28df850eba1336f80710007b7a9161447c307bc238cee57cc85d4dd7c673424dbf3c7aa9a61df0a9a77549e69e0e04836795b65e91805151cd0372e91f70462c5b9fc", 0x7c) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) [ 307.521242] Node 0 Normal: 775*4kB (UME) 596*8kB (UME) 234*16kB (UME) 1423*32kB (UME) 1053*64kB (UM) 164*128kB (UM) 39*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 27*2048kB (UME) 596*4096kB (UM) = 2689916kB [ 307.539572] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 307.548170] 13070 total pagecache pages [ 307.552160] 0 pages in swap cache [ 307.555630] Swap cache stats: add 0, delete 0, find 0/0 [ 307.560996] Free swap = 0kB [ 307.564048] Total swap = 0kB [ 307.567097] 1965969 pages RAM [ 307.570201] 0 pages HighMem/MovableOnly [ 307.574189] 329725 pages reserved 2018/02/26 20:09:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000002033f99e87825d5e07ede5beb1f51d054b0a4f34630352efd415f8f88f758176dc0ffab7aad62cd9dca82bc7624c"], 0x468) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) r2 = geteuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000004c0)=r1) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 307.640062] QAT: Invalid ioctl 2018/02/26 20:09:25 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}]}, 0xfffffffffffffea4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)=ANY=[@ANYBLOB="01000000000000000a00000000a161db1b010000000000000020350000000001000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000080000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x42) r3 = getuid() r4 = getgid() fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r4, 0x1000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:25 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) sync() ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x6) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000)={0x1ff, 0x3f0000000000000, 0x9, 0xfffffffffffffffe}, 0x6) 2018/02/26 20:09:25 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x80000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x462300, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x11, "32c35b79844253cfb04a74aba9439d0d1f"}, &(0x7f0000000140)=0x19) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000200)=""/4096) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x6, 0x20, 0xff, 0xff}, &(0x7f00000001c0)=0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:25 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000200)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) [ 307.661471] QAT: Invalid ioctl 2018/02/26 20:09:25 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="020000003596bb9c271494b1488fdc724f0bf4883d00924bb34771609cd858d7165b03f2535984bece2d2ddcc8aede737aec0b0809000000e12a87e9b2f5bc651261bf3311e91a4e05210ee18df7aba49024be00a2c67b4438d0e8a595745f83a24c326dd768187a9655c3cbae9d227677d8d4a3db7bb67b89341a0321ba7d6dc530a312c2310d49a78ff2d9457518fff478cb39780006d7d85089b8bc840762a760786ebe0e3dcba7399fac5edbfd027487148803453fa2da9e90a018912da113ff6bf760dac4cdf68b9f4a93f8d21a7d59a171b359029ce41b62d3856386be200f68", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setitimer(0x5e25d6b70fe654ae, &(0x7f00000003c0)={{}, {r4, r5/1000+30000}}, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r6, 0x4b, "b88dde594eb64f5bd3e791a97b3fb68626890171bf694f2a7c782a3790f907003761db06f5f3abbf969036547b4e60a8cbaa6b1c30a23ab6041004e4c128b0b50aa559702a3a40bb819060"}, &(0x7f00000001c0)=0x53) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) r7 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r8 = request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)='(:mime_type%\x00', 0xfffffffffffffff8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000440)={0x9, 0x7, 0xfffffffffffffffe}) keyctl$negate(0xd, r7, 0x7, r8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={r6, 0x2}, 0x8) 2018/02/26 20:09:25 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x4, 0x8}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:26 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) sendfile(r0, r0, &(0x7f0000000000), 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x200, 0x0) getpeername$llc(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000440)=0x10) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000240)={0x9, 0x10000, 0x5}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100, 0x10040) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x5) accept4$alg(r2, 0x0, 0x0, 0x80800) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000280)=0x9) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r3, 0x1f, 0x7, 0x401}, &(0x7f00000003c0)=0x10) r4 = epoll_create(0x40000000000985) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x4}, 0x8) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f00000002c0), 0x4) socket$packet(0x11, 0x2, 0x300) dup3(r4, r0, 0x0) 2018/02/26 20:09:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0x3232c1) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000180)=0x80000000) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7f, 0x1, 0x9, 0x1, 0xa7b}, &(0x7f0000000300)=0xa0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000340)=r3, 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000001c0)={0x5, 0x7, 0x1, 0xf3, "302ad59d859c21e7e0080929e33d74e3a24741b64da035fc4edd3cea8644d372f905fe4ed8431a63704f350a", 0x799}) write$selinux_context(r4, &(0x7f00000000c0)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000200)={0x1000, 0x100000}) 2018/02/26 20:09:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003bc0)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000003c00)={0x0, 0x7c, "ee035b1bb6fa4764295575c65461f0f22c729986baf957a91e6336470a6e2c699046b279dc35413487ce8363cdb451bf4951a6bd594ab093a8d8f73e7b9fc72f47b38632c5bfd814c354d038509bf1bb7f878ca8b2d9010990d4bca3ac6153833ce8749ed294770039534fb55ecfa36cd26dc0f6f8d214453dfaf3f1"}, &(0x7f0000003cc0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000003d00)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sctp\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000003b80)={0x0, 0x6, 0x6}, &(0x7f0000001f80)=0x1c6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000003500)={0x1, 0x8, 0x0, 0x800, 0x0}, &(0x7f0000003540)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003580)={0x0, 0xffffffff7fffffff}, &(0x7f00000035c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000036c0)={0x0, 0xac, &(0x7f0000003600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0xffffffff0000000, @dev={0xfe, 0x80, [], 0xa}, 0x7}, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}, @in6={0xa, 0x4e22, 0x1ff, @empty, 0x1}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x56da, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, 0x800}]}, &(0x7f0000003700)=0x10) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000001e80), &(0x7f0000001f40)=0x4) sendmmsg$inet_sctp(r3, &(0x7f0000003a80)=[{&(0x7f0000000540)=@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000580)="dda9992f90d5018640ee417a78b42a307865651e1a43323656e9671177315a3bd6e0b532aa9f23cfb432c06c6f577e6f9f540837e555f47d07c1401dce619d1a23ecec354bae76e2f435687558af48f7302cd8c0a2a92935755866bc0b01967f17448447aad2b94921fcaad15ee5c8dac2fc487b193632a6af7d7a5ff955ee5586c039dd4a55d134d17288f9ebb5ec0ec84115a3c123658f59b73f87b0724ff39896381b9370d6b6ef11d82a01a72012f91d703edf1d2a9385473b8c2443d403b58e5f1051401551749167923c28", 0xce}, {&(0x7f0000000680)="89b00ea4e81304e77e49cda3f6d0e139691991926eb116ca64ac4fa8e340af4c93af12122441cd24036428739d896d769416de37e2f7b649035e494740186a67e978dc7f30394315296303217a5cac300d172a4f1c5f055e86e0762837e1b9c4736d89e7db466a977d6112c5a04e63e291c09d9d6bc8d27fd5dc662083e535e1f9e20a1c961dd04b0e0f7bcf2e61a29ac8d2c1e96acd9a046fd9ff05662dafd96a79f0e9e0ffa80181477fe755e5be885dd44da8b64fa5dcbf833b0a03377eb79c2066b0cee205c64fa4865253f633f8974c2b7e27343d47ab0b12430c4881c683b6ba3329b3ef15c653c153ac224766", 0xf0}, {&(0x7f0000000780)="3ea3387da4adf1e34f2972e2f4ca20bbda6a6086a419a463657c8b35b83271008c1d9e9fbedb13582576cebe332d6ea3ca233dc8e444d69f428fc00e56f72b46873911a3ae3da0be8f192ee38ad31b2f1ffdf464cea5e88b59be0763b2d841f78a0f3f85d1764159bffab94e8002f909dc5b425d1b1d4a168008c5624e301b3470d3a93ecec53db7995073295419236977f4ce58b2c29b0d728357f6b3128a92119bf297a411395089f48458921b002ef0dc2c9d03f1eed6ea7636c16886b91fac9b8803ce5d3442b4ee3ed3545edc660c32feaacdac9effa1096ca052a1a48855b15e44c5f9fbb819de019bed6425700dcd27506ab29f11c71d45a2c7990a08fe6505e2fc11127124203975fd0a6266f058da6a23542b6b43487f60387b8a5a9824bf32ba768b2c5d51327743807486a34e41032f179252dfd6e81eb1cbc4a6bf5e93147ed356afc94437e0204f149b8566563c363384db4bb35d03e640627a40713d0ab542364f1e96e7c5533c894f9c7222446c4fbf0efcb6cb9b88e91c8b9b4a0c592880ca9abe634974aee2df2e4695157763d129662b37dae0a0e93001a15aec84a2b521e555b39bc25d9d8b661142d435accd743d7103503088a0322a7d0d3b32fb8ad264fe2157ef86dbf3430688e1f29b4bbe4707543ca2b6e51e7a0377fbd12aa288042024efa1814c84afa5ebce2f8fd30877874740a436b636e759779ac255d98c9e172e4bf57b3113fbf2df64aee37d5991587905f8fe5bdfb00fa6a77f47e2d867764780fd18d49bf00a6707c4f80a1b117fb0476670dbcd9f04ca827e4bda23a496ec1e6ae435827edae811832a4526170276667f473fc4533fbde3fbe92717d305bd9651cd07fb3ce4a1f7e22359a59ccba9cba0f7c53c156d3a12e01f80a8e584ca74ffc8f68de7aed912f09eff1f0d2a7f729f6cda2866675838c3b40390b9805a1a65b4bb194ffe95beba2a8a417aa35c164e9a9e94167551c7a5aced2733382b52d13382a90e86c06b574f46a1526cc484a620a10f6417b0c7afb7d90358977b7e91bcd94f966ed1d0ae93c6b0fb87771ba3b40cdf964b98827240c923926b0ba0d2c036e427c386159eb443af77154df0b37b3551bf967ae2330b17c00d80974d5a56dbc1ebe30e51752be5e27971e2e7d39fbd5df0a169abccbdf4c234f0814b34ca954cda6c2c1bed30ebeceac2db8ee604ef3e80e4e0ca0e943cb64a373bec6489a9a6b4ab1928074f15935a1c841ecfcc57619361a3d4b159ae8602edfe210f216c4bdf64ae3e42f8b1d388bc6de926cb8d9d4d4542ee91c3f4aee951615f92ef8075adcdbd946ff739dfdb6ddd5d00a517365ac13c9f74fc60d960108b216a8a23ee3088989534f56bfb23ea04c6dbba4f0d4558921a93d71ae060b6b538338800cf56f92c272a81e13f2e8f725c1e7beddbf1f15a567264b4ab05ae233978404072f1d81fcd2f40b4079595bc3c2873f2616234ffb8112987a7ae996d3d768f6e785847786d7e7eca5ec862bd39033f7555c463dedf7c17b4e9029e6083691f236c03dc70983ba0c66b4a7c302582ea007da55207ef70c7bd8a03190dd00a1717eb3060488eae8cedce0fc43d33eabf695ab65b53996fea287c09a29d8236a367476cfa6968ccbc74c005b3346492ebee0b50aae72c8a1c1b566974dbd8cd5c4d0c783557c518d6ea0cb060b8e0a6d2b4d4b56bb1b97e970e0ce498032e2a07a1541bfbb81fc3cda2fda509dc2b192fc7395b6b9b79b4b49e5180ee5e038fd24836bc1e6b83b892f7270adf2855a40db16737ae31f0db2e119abf88aad710da943dda86af1480fda52f4f61c472d417d556e8429fc57a1c67e83fc0e88d6fab1c00e7229f560857cad914721e135e189fd290080e2725578223f643e14ef6dd8f0cc396348d7242c8b07179b9033876feb9b79b5ee2d805c458d7561c03e5b9ce27402c67a6a3b376349f5109c14b3f68d781ab427b9ac64cfb4ea611978ac581543dc4acc8c455cca1edec897021f40158e9d5a63626c17fa9b086fe692e2837c8787cc5d45d760906194402c1dcbd9acef05800655a558d3544eb4c1c6a5078687fcf93b909932a692968b7d2fb826934b5becf6a787254a5eba32bec4c857ba69e09aadd726687260dedd784ce1c70957cfe0cfc47ad41e1786b3ebb4525835e34f543a0e7140dec089ce6aa7d2811eefe17262311e0d70540da832ffdf80606df80d7d4bae6188bd24386c348bfb961597a3d332e22382a8fcaab519b5ee8f5ccbd2f39a80697b1b3689f00c9e3b880fd1deca6f127edcd5e95b3324478e8ef91d7698d238d0c59ee93924576d81a315c3fe579cf2a5b25ce0d8f8051bab8c01ffa18c1fa6525145e0be015d7ff1b46b81ba328e0793fcf404d70f39045610434596ee2d6ec2cc926e1ac81532fa5dd1a7f6b359b1a000d1f27150cd8f4a8cb2e38e7aff248249df9811f36dcd3aa2ec3d26803a3310f340bc6eaee7663c9d52f1e269c26ed3259581f08bdd73b90cb50853635fa8ebcf19ae8c6a5e11c28e8cbd3c425d331b9f141304ce58dfafa38cae6aec238f621f1850bcb10b21e7c2ceab636eaf1b4de7d0f1d069c5ec43261717afa8c88583798793147159690f57580c4fdf5c6254a4209b81f505f4cc61fa4fdad0a67b9a1563a5d40b0db5e209207ad326ca496573d2e2308874a19ced132319ce3aa8a754c19d62102f093d90254fb95edd099046f98ec20ed99f08d48c82e213d187c881c573f5ad7f2660cdedceca8166ba829b148f951a8698efe19a0933c47e79a45042043e5923a2257e50981250fe9124fa05e28e8614c41cc2a7771b482753e4473440b18a9fc5d28e7f3709b2d5970d3fd2195370ce278bbb3abd5554c5da697e3e0578937e50e030947155993ab0394d5369da9a2627beb1841cb391f7a6166fddd8e4db736066279085d9fb756635f4a5a3cdec6931c5231ebba20af5c4559c9203a095321d96ad06b1c586cf2107f458651b61631062671748dc044a20707c2ae48736576e2abfb14e89e951f75a5a9f32008bdd8ec4d1eaa2ed1434d7b9c9817b1520580501fae510a0557c9c31548909f9a69c2a9f5327c912ec41009c49439433ebc4c81e65905f767ca44af2e3c84f64024baabe709fcc9939a3d59758847fc2c9520527e90f009215fd4f4f33398b3885b6b5453b324eefbf53a44381eadeea9391b0401eb248f32aee79b53a27e2521efa917a3e00396997ba6993f134a9189c751437df00c1ab82b398a6fbdc58dd8dc668aeb1d88b34bf5aeac11b4fd4baa82970b471a51287a2b679efe607ffcc5298ae035264c706143e965976b11452a552a5cf282501157479d8e9fb2e929f7e08eb2a4bb55a15152faaf02192d4cf797335aeff14538b394765cf948f3fb2e005f701b76e1c3aad68b40662ab5bf31bbdb541937d5e018c2f72bf8acb51e4eb1c9b2b291284c968eb0005c8f79d7b531fab71f76f67a86f5ea5a4bce4c59949d0913a18b57b302cf83e606689ac5a61b83db3defb62e3637319596a4ab4f8476aeef23b0c28decccea4a400d0ab9b679ef4457a8afbadccb8f3eb4d00bcedb422aa94cca1a45cd4b2b70b7aae2d9fc1356b5f67fcdacac0423d04a880d9c39f356505c1d834861a0c67e8f9000aa2013ffbe70f59faec33508fe4c70dde5acf6c36435be8b05aaf06aab11436c97a6c186b2c82897e79ebab3bc63b90049510dcee5109d58a55eb4ed3472800a7260ddef91bbecd1af35fd568f8538b7d7ef5a131e7330bd7e572df5dd5ad6d741b26407c2e923d4807b0039eb8ac1679485c4d72e8604f2f590740851f519e6be726f8a34821dad80b8899f2f45e3e02feee63721299303b7bf29fcf11dfa16bfbf0a80b50eb673f5492144298ffa88a2827f07d0f9e71d887283b3cd2dad55fe5404c7ce9d75bac7e4b68fff92d0aca5237822e476d439de7eecd553d3ee14498a28c4110352c2810f12fb59ac3ca122feb6be3ebff2496046ea5d9858918439315a45d5e14d27a5a83594bab1274388068b68537295e49aa3fd7a401cf95e861fc8fac550594ebeb4918bbd4e90688d8750d92a93ccbf30624554f3d0ae4a8a11a3504bd61cb710d1983f5df1370de24fc768dbaf44a01da5e3a967438283615a87655a39c45938aabfccf43ed9d39c6a3c453ce9369435c36466d1569c0692eab021c9b1d716493c2d03a703de43de9f00222ff0d8bfffd3b339a149732fd8c7214126126eccb64b3585f53a11f645c01f7a9b2bef791eccd461ab5445b9b95e5ed32008cec8364a6aafac79e2cca4af1eb7795fc6c1515695b6eb8e0ca861d61e2f425a6d4ebfd3694721221f47a8e6933b669c5a06c45193f801c14601483d8192fc2d76217f98787ff33c04e009afe0496985a3da1471927fd5c7bce1f901f5d0bffb214fc066323c2e1127c73ac94a71478f6a9e1c0adf024268316a64a1dd05cfaa60796b3486159e7cdd4a837d67f4ad695a6519b09716ceedf1e22ef54e85d8d04ef36452ade2f5d7206830571dec9a18c5ca0328146bde37ab707a5ef1ef0e65801e32f07721c98a56e5589fb8953167097c74fe2a6176270d50a3bc8f92de1cc187f4fc2943bfda004b1f32da40b457d0ed24e44113dfcc1152a8a9c7e164bfff70f51e06bfec6cbbd93e7e358d5a24fac459ab53bba4c660a13e13395339970d477adaf5c4fcce6f3c96480e3f59d55e240de9cf5a641b38de06b36648491c10504fe595bc88fb4ae983c745518be44bfe93034c45ada19202350d77aee7df406bbeca009212a67461057124d9469334ffcead3b86101c267152638d5b759a51ecae2e0539ae7f0953691b601cc5c2f3c1c055911f6e3001177bddc33cd5fa90ff0d4e4552c8f6317ae8ba5da1f86db5e99662cdeeffef36a788f852e23cf367837e95b4d2ba6f9f38f8ca371c83da24b18178446bf177d4e0f6fcf0036c4e1e1a4e0d3d8753ae35f09f6a246a4222bdde2cd8a69186415e61a5a797347978b00897e4b13551b89fadbde5ef04cb9a5435345985d71588734dc3ef9ffe3e313b430186affabf83093f413f36694312560d1a2e14970d70fe4703b88a3452c7a21570436ec59575117e9f262d027339962e1d23474011cdb40348e29a655a5aad8148feb2f8bf906d36b153c4f00eada091c15381eb211e4fd53723a16633b3e1f4d337f45ca82f64cf58e69ef3f8d0a0163d412707fbf5805191eaad5d493be3725a38d5855c72110ac75c272cc278d4a470a0ce1a1984d72a7cde8a1d9d19bd754fc99ffb0027b77070d26a9972a692838e5e97f73aebda03dad6d007c6e4538fe5078de3e7cfc1585e5ef09d6dc6b337cae6230c75459064e6eef0fd3b90152131daba9b68a7aa8eb8c293314d3e42b330ac4f906cfc29190cafd4fd694cb98725ac7b4e626c6dcbed7c84d16548aeaf412be82522cdd3acfbd0d2148505994b0a4371d3720ebb1e7addf83e8c22b4c6f9b1564e91a6c8ba27660792c273aa8b4c23e333adcda7f3827d6ff48a541f062d9cba57bf2032ac4aeba7fe881cf41b6cb7187dba915be61e4663fa3c92d8efdda3925978e10e6b82be2ee8100820effbd3feaf0345df0418d63c394194397775a67e8226ee7546173e0b0e0b03e4936e7133e1c18ee6dc9ca1b7d1b0d1198b238b50af18269809d3fd2edf33c49340b193974676433f431f3bf295c9b9a514e57726fc13e8e73d36219bc697fdc5c1860f38ec02a6c0791e448fe86bf07aac", 0x1000}, {&(0x7f0000001780)="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", 0xff}, {&(0x7f0000001880)="5270d9d03c57a9612c022866c97622fbc9e1420fbe04f1a41776b637501fe1dcb8f5da1010f7b44b913c", 0x2a}, {&(0x7f00000018c0)="e2428d4efe3c888fabc2b97aedb7d2bc2ce2e08b288064bca561081d77", 0x1d}], 0x6, &(0x7f0000001980)=[@init={0x18, 0x84, 0x0, {0xfffffffffffeffff, 0x3ff, 0x1, 0x8}}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x0, 0x6}}], 0x60, 0x1}, {&(0x7f0000001a00)=@in6={0xa, 0x4e22, 0x6839, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff9}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000001a40)="a9d6533b97e707d976a5a0fa899af9ce9744871399428416cc328361f776c1dc25accba556a8c7ebb3f5441e30805e5e44407011", 0x34}, {&(0x7f0000001a80)="b735b0c7015dff6d17e55bf682646338457d5d81a38f557160d9ede878af1e5a012fd0c4d6a47f889ed81bfaaea76a05dad00a25a2a5ca3e2371e46b0aeca46c596123ff10a69536ebe057b66dde0f7a12fe1cb48954c6d213ef794ce3bc33d0d8dc0af6e9e4b72752fb341d2f4be949144be13f035a698962e623c5c5cd5e7f12ea7c94433c1bcc8ece41dddbe9f1f189671ffae7146a99d7dcedf1e533c828671473bb394076043a60d9512ea4ffccec611c209e39a1cde794b38eb4e56759136658d03259ffb0d61106228d7a80d2cd1cd3714fe427b26891a4", 0xdb}, {&(0x7f0000001b80)="644e099e4304c34f4be230a12a231de49e7e6c6f9bbeab17555cf032e2f7908fed2105ce8d83d38221b5aa5b27bdb82cf2662ceb965fbf1082ac265bd0beb9942bdf1afa2324a7b4eff87d41ea399a792871c17da8660ed819b88f05562143e161e40099c9e68c9acb450851b7970a05e61bbe2906f6c9e70003e936fb4475b6abe6faffa5c40978a13cbeb090e56a3c55ae5980acb6db78c27f4a63", 0x9c}, {&(0x7f0000001c40)="054bfce32519c277e18cbe57ebf987d9d25f231bbcbe7f8cb2f698676d3d689f7e35844b1ef3b2cde9700a10337a1aecabf6d6d8e09f1e4cc3da1b1d2ff91470e949e2ef9109187eff622b87a00a6f245f516d5f5410e52385b313e527313bceab849598f7771b80e9122e30655028efcd2cf5a7adba983460bb498736d5d174845258b2528b55398d357776b9565cceff", 0x91}, {&(0x7f0000001d00)="e103fca2035d1ff7236ef10a9d18fdea88401b96c19312cbd56d5b04a711f52c12e6f371c8c5a23d8af14bd92fc0ae126af5d749dbe96fcf8f7a6b2b02ede9380aabeb4cbe2aabca4ba36696f8081c47c1d2f4dacdf726e66e1bcf92f2c7da1ae42b785d276898ce129c989d795d195ab0af8950718c7ff84a1d227f443facb501bdf523e71a8756fc7a5dddf2e3be0490741de27f9d598bce534e951e0d5c44fe5e1d0f67573e37dc2323f466cf6829a7b1bcaa1536a79242702b2e32a034332c04dceb588259cbb5e9872e35ea2cafed723f8d7a66c2cee074f67318a9947587215e971568fe7dc708413e19d401f41e0ec22e536da1", 0xf7}, {&(0x7f0000001e00)="c296ae23a32852259fb4a776d7c6d7455d4e0aeb83e4e050f46a547336b71fa8fa7ff72d2a927dbd555cef071077397d3effff0e43764335b02af7351811846e2b1b6ef6135f2d7ed99096f4f2", 0x4d}, {&(0x7f0000001e80)}], 0x7, &(0x7f0000001fc0)=[@init={0x18, 0x84, 0x0, {0x0, 0x6, 0x6, 0x11}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x205, 0x80, 0x3, r4}}, @init={0x18, 0x84, 0x0, {0x1, 0x8, 0x0, 0xffff}}], 0x90, 0x40}, {&(0x7f0000002080)=@in={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10, &(0x7f0000003480)=[{&(0x7f00000020c0)="0ad5b8433ffd03e118dff87af68db4085ea3251683285d72858df826dca6b9bc347d9c175845c753cce440b1b7ae706000950e476bacf1cc3f71fe293c1ddc95f14e2ee0947ad32c8086730eb041232de910abd9d5be2c0ef12d88be6147d606986d8618e32fb732a6d9034d774fcd72693cf1443560da8dda27499d46da354ea2b1c02b743471ddd9193ea89ece66efcd3a38", 0x93}, {&(0x7f0000002180)="f0485e58f06198ba43fd90f2496c127f0a2fca232a6ab584171f2a623488bc0e397b3ccd40386fce66b1683c4b0f82c28f432be6abaa4f4068ce929f41b305a028501863a619e182972db693e605f080f37734d8ce1935b2f47b7631ac5eab3ca2e845075b4d3070c6e42afd043f8cadb694480bd24d0c784598415be5ef9c6fb85a2a49b1ad0b178e2b2d6677fdd5c60c78cffe05864244ff26fefbe1339ed54e69ae6d543b3d2c158b6344be999ebc898e706999fccd7d8bb2faa24d922c3eb18a3a83bebd4f32d43689fd513a528a9168424499bfcb2e8c7509a6cca0b21cbf1a0fb500a5b837fe7d025c96ebdeb774", 0xf1}, {&(0x7f0000002280)="f39df529113c4d4df73727474cd3cb8746d79706b0e00c80c4ce2f562cb31e9bccf923af5a50f221341b9b92b133b1a5a2e901b012d3210aae4714d8b0788eef72845fe0694e5ede93cfc9ccd81f7f4a3b5ee527", 0x54}, {&(0x7f0000002300)="67dcd61685e9b5cb208530742a880d9e0624caf21384ca10896b271799daf70e5737070cb79c847511098553bcc2d73bea334ff786b33a160a2e2785a55ad664", 0x40}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="2fde1673d3b30c69c72c5bad2c258073fcf51268398b36dd0efd4520ed22453746b82dc5f03ae75faf59b77fcfd194553f6f155f7890bc4cc5e00894643b2d231394caae36fa7329ffc4d313ec43c1728221feb7be", 0x55}, {&(0x7f00000033c0)="e4d967fb19f8b66449587e187242718dda45724022c2828e515f417bc6a4246864f7f4a26d5661c8447526ceb07ebc5bb364fd0c9d77c2cec157169152064449de61d1edc413a5bc0ccd7594aef0dbc344d091b0728cc0f867de7338c664ad11a428a6520ce2c8ffd91f605e", 0x6c}, {&(0x7f0000003440)="44206b1f3a035725bbc2ea65223a606692a88b5adecd4d5d23bead9f296747734b8a8d", 0x23}], 0x8, &(0x7f0000003740)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x8000, 0x3, 0x8, 0x3, 0x5, 0x3, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x7f, 0xd, 0x3f, 0x1, r6}}, @init={0x18, 0x84, 0x0, {0xffffffff, 0x4c, 0x81, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x8000, 0x8004, 0x10000, 0x7fffffff, r7}}], 0xc0, 0x80}, {&(0x7f0000003800)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003840)="efadbafccf85f76749e5bc37ddbf3f7b8d9a7a7eff1e67f54c75411ea4e3729f1d309079ccd3f659cea4abe66c7b42323ae79f8a64d94938f253c8b535f82cdf9f193e387848a41bc0fe658f7da4f9bef7886cfdac3230f214907eaf0d7665afb742a740d57e05fb842a6a6d2b42972ca3c8ef6d2d8f4508227d7801418c87114ee656ba3e2d9ee10caf7cd003", 0x8d}, {&(0x7f0000003900)="884f60759e0fa6a28143e3468c2c49e9af7783e182d8057eef82174016afa901295183e6983393358dc954adc71c019492ee528e5323c6bd1e49a9cfbe31fb30794d0ff06f3914189fccc4ea90a8f99ec69e39919df4a5e4ee3954e15a1235b95858e1e1a8bb8dbd3091ef329d774e0d760d18cd9d00fede2226221d5dbb0fc3eed5fc3b3a733d95f11da2fed99412a3f597dda1fb681d0e562f4b2f59d30bbc9e5b03d9899c17ea863c2bcde96c7bce5c97fee6d8e76ebac2bc4bd398", 0xbd}], 0x2, &(0x7f0000003a00)=[@init={0x18, 0x84, 0x0, {0x1, 0x7, 0x100000000, 0xeb34}}, @init={0x18, 0x84, 0x0, {0x3ff, 0x80000000, 0xffffffffffffffc1, 0x1}}], 0x60, 0x800}], 0x4, 0x40) sendto$inet6(r2, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000480), 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x3}, 0xfffffffffffffe0e) 2018/02/26 20:09:26 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x6, 0x6, 0x1, 0x10000, 0x4, 0x2}, 0x7000000000000000, 0x2, 0xffffffffffffff00}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="0300f68a", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54bd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154404000000dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:26 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4e20, 0xc19, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x33, r3, r4}, {0xfffffffffffffe00, 0x6, 0x2, 0x5, 0x9, 0x7, 0x200, 0x4000000000000}, {0x2, 0x1, 0x400, 0x3}, 0x1, 0x6e6bba, 0x2, 0x0, 0x3}, {{@in=@loopback=0x7f000001, 0x4d4, 0xff}, 0x2, @in6=@empty, 0x3505, 0x2, 0x0, 0x9, 0x5, 0x6, 0x10001}}, 0xe8) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) 2018/02/26 20:09:26 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x3, 0x498, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x9307, 'rose0\x00', 'gretap0\x00', 'ip_vti0\x00', 'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x100, 0x188, 0x1d8, [@owner={'owner\x00', 0x18, {{r3, r4, r5, r6, 0x4, 0x2}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv4=@rand_addr, [0xffffff00, 0xffffffff, 0x0, 0xff], 0x4e22, 0x2e, 0x0, 0x4e24, 0x20, 0x8}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', 0x3}}}]}, @common=@log={'log\x00', 0x28, {{0x27, "a6ab2c9d619f19331991e4ab7ff1479301c6043d1c704621492b2c047b14", 0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd0f8cd903881b240, 0x10, 0x9, 'teql0\x00', 'ifb0\x00', 'syzkaller0\x00', 'teql0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x140, 0x190, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x400, 0x3ff}}}, @pkttype={'pkttype\x00', 0x8, {{0x0, 0x1}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x9, 0x530}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xb, 0x12, 0x806, 'ifb0\x00', 'syz_tun\x00', 'teql0\x00', 'ip6_vti0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, [0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0, []}, []}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x510) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x80000000, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e04e30ec000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000000000000000000000000000010000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer\x00', 0x80040, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) ftruncate(r0, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f0000000780)=0x2, 0x4) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0x1, 0x2, [@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002]}, 0x18) 2018/02/26 20:09:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x40400000000000, 0x2000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:26 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xa00, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000240)=0x8001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) [ 307.842367] warn_alloc: 3 callbacks suppressed [ 307.842380] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 307.858891] syz-executor5 cpuset=/ mems_allowed=0 [ 307.863811] CPU: 1 PID: 9992 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 307.871082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.880434] Call Trace: [ 307.883029] dump_stack+0x194/0x24d [ 307.883456] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 307.886659] ? arch_local_irq_restore+0x53/0x53 [ 307.886668] ? idr_get_free+0xfd0/0xfd0 [ 307.886682] ? kernel_text_address+0x102/0x140 [ 307.886708] warn_alloc+0x19a/0x2b0 [ 307.886723] ? zone_watermark_ok_safe+0x400/0x400 [ 307.919228] ? save_stack+0xa3/0xd0 [ 307.922864] ? save_stack+0x43/0xd0 [ 307.926496] ? kasan_kmalloc+0xad/0xe0 [ 307.930377] ? __kmalloc_node+0x47/0x70 [ 307.934328] ? kvmalloc_node+0x64/0xd0 [ 307.938202] __vmalloc_node_range+0x4f0/0x650 [ 307.942679] ? lock_release+0xa40/0xa40 [ 307.946632] ? xt_alloc_entry_offsets+0x21/0x30 [ 307.951276] __vmalloc_node_flags_caller+0x50/0x60 [ 307.956181] ? xt_alloc_entry_offsets+0x21/0x30 [ 307.960828] kvmalloc_node+0x82/0xd0 [ 307.964521] xt_alloc_entry_offsets+0x21/0x30 [ 307.968992] translate_table+0x235/0x1690 [ 307.973120] ? lock_release+0xa40/0xa40 [ 307.977071] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 307.982934] ? __check_object_size+0x8b/0x530 [ 307.987410] ? __might_sleep+0x95/0x190 [ 307.991362] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 307.996197] ? kasan_check_write+0x14/0x20 [ 308.000407] ? _copy_from_user+0x99/0x110 [ 308.004538] do_ip6t_set_ctl+0x370/0x5f0 [ 308.008579] ? translate_compat_table+0x1c50/0x1c50 [ 308.013588] ? mutex_unlock+0xd/0x10 [ 308.017279] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 308.022544] nf_setsockopt+0x67/0xc0 [ 308.026238] ipv6_setsockopt+0x10b/0x130 [ 308.030278] tcp_setsockopt+0x82/0xd0 [ 308.034058] sock_common_setsockopt+0x95/0xd0 [ 308.039142] SyS_setsockopt+0x189/0x360 [ 308.043094] ? SyS_recv+0x40/0x40 [ 308.046524] ? filp_open+0x70/0x70 [ 308.050048] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 308.055560] ? do_syscall_64+0xb6/0x940 [ 308.059516] ? SyS_recv+0x40/0x40 [ 308.062944] do_syscall_64+0x280/0x940 [ 308.066808] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 308.072322] ? syscall_return_slowpath+0x550/0x550 [ 308.077225] ? syscall_return_slowpath+0x2ac/0x550 [ 308.082136] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 308.087567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.092394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.097560] RIP: 0033:0x453d69 [ 308.100728] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.108426] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 308.115671] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 308.122916] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 308.130159] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff 2018/02/26 20:09:26 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0xc8, &(0x7f0000000000)=[]}, 0x4) 2018/02/26 20:09:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x3e8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2={0xff, 0x2, [], 0x1}, 'syzkaller1\x00', 0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x448) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 308.137401] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 308.169167] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 308.191907] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 308.203782] syz-executor5 cpuset=/ mems_allowed=0 [ 308.208835] CPU: 1 PID: 10014 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 308.216194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.225538] Call Trace: [ 308.228127] dump_stack+0x194/0x24d [ 308.231766] ? arch_local_irq_restore+0x53/0x53 [ 308.236429] ? idr_get_free+0xfd0/0xfd0 [ 308.240399] ? kernel_text_address+0x102/0x140 [ 308.244968] warn_alloc+0x19a/0x2b0 [ 308.248574] ? zone_watermark_ok_safe+0x400/0x400 [ 308.253401] ? save_stack+0xa3/0xd0 [ 308.257016] ? save_stack+0x43/0xd0 [ 308.260620] ? kasan_kmalloc+0xad/0xe0 [ 308.264479] ? __kmalloc_node+0x47/0x70 [ 308.268429] ? kvmalloc_node+0x64/0xd0 [ 308.272305] __vmalloc_node_range+0x4f0/0x650 [ 308.276778] ? lock_release+0xa40/0xa40 [ 308.280735] ? xt_alloc_entry_offsets+0x21/0x30 [ 308.285378] __vmalloc_node_flags_caller+0x50/0x60 [ 308.290280] ? xt_alloc_entry_offsets+0x21/0x30 [ 308.294927] kvmalloc_node+0x82/0xd0 [ 308.298617] xt_alloc_entry_offsets+0x21/0x30 [ 308.303092] translate_table+0x235/0x1690 [ 308.307216] ? lock_release+0xa40/0xa40 [ 308.311165] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 308.317029] ? __check_object_size+0x8b/0x530 [ 308.321508] ? __might_sleep+0x95/0x190 [ 308.325460] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 308.330281] ? kasan_check_write+0x14/0x20 [ 308.334492] ? _copy_from_user+0x99/0x110 [ 308.338617] do_ip6t_set_ctl+0x370/0x5f0 [ 308.342658] ? translate_compat_table+0x1c50/0x1c50 [ 308.347649] ? SYSC_recvfrom+0x3d7/0x5a0 [ 308.351700] ? mutex_unlock+0xd/0x10 [ 308.355390] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 308.360647] nf_setsockopt+0x67/0xc0 [ 308.364341] ipv6_setsockopt+0x10b/0x130 [ 308.368382] tcp_setsockopt+0x82/0xd0 [ 308.372164] sock_common_setsockopt+0x95/0xd0 [ 308.376639] SyS_setsockopt+0x189/0x360 [ 308.380595] ? SyS_recv+0x40/0x40 [ 308.384026] ? filp_open+0x70/0x70 [ 308.387542] ? move_addr_to_kernel+0x60/0x60 [ 308.391930] ? do_syscall_64+0xb6/0x940 [ 308.395884] ? SyS_recv+0x40/0x40 [ 308.399315] do_syscall_64+0x280/0x940 [ 308.403182] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 308.408694] ? syscall_return_slowpath+0x550/0x550 [ 308.413601] ? syscall_return_slowpath+0x2ac/0x550 [ 308.418511] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 308.423855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.428683] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.433846] RIP: 0033:0x453d69 [ 308.437014] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.444702] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 308.451946] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000017 [ 308.459191] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 308.466434] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 308.473679] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 308.480998] warn_alloc_show_mem: 1 callbacks suppressed [ 308.486385] Mem-Info: [ 308.488832] active_anon:78119 inactive_anon:61 isolated_anon:0 [ 308.488832] active_file:3747 inactive_file:9252 isolated_file:0 [ 308.488832] unevictable:0 dirty:39 writeback:0 unstable:0 [ 308.488832] slab_reclaimable:12568 slab_unreclaimable:93753 [ 308.488832] mapped:24382 shmem:86 pagetables:786 bounce:0 2018/02/26 20:09:26 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0x8a) setpriority(0x3, r4, 0x9) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000180)=[{&(0x7f0000000040)="397ef862067fa1ea13cff57f39b45689e6dd42ee8ca7257e89cca3af682eca03bf6b438b6c93362c1a6a293c6bc3dd9aa8dc3d86df2254868d66c442c2ca6f3a930919006f8acf2730c28a3fe3c920ba54f24f768ae61653ca4412e2df648cf9bd237a43a20422f2264e751c1306fd7d9de605a3a185affed91554ffd91adcab36431f3cfdd9fcb499cafcd88cd28d4b37bdaeaef1d5bac47fd8", 0x9a}, {&(0x7f0000000100)="385ec16ab34093f01b1ffa012fa35e397b84c5862107a691e8d9e13cd829a463bd97fa81a5a5db4bbbc22dcbda6f20dd4bd0d72295724b8e642711ee240f6f4aed2e8fe6bab292753f3818c8efd71ca7", 0x50}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2000000000000000ff21d8505bcc2d95", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x24004000}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3, 0x8001}, &(0x7f000034f000)=0x3e1) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x800) poll(&(0x7f0000000980)=[{r1, 0x2504}, {r0, 0x2701}, {r1, 0x20}, {r0, 0x80}, {r1, 0x4200}, {r1, 0x1}, {r0, 0x1108}, {r0, 0x8000}, {r0, 0x220}], 0x9, 0x7) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback=0x7f000001, @rand_addr=0xff, 0xffffffff, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}, 0x8db3, 0x68, 0x4, 0x4000000000000000, 0x80000001, 0x7, 'syz_tun\x00', 'ip6_vti0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5ce5}}}, {{@arp={@rand_addr=0x28000000, @remote={0xac, 0x14, 0x14, 0xbb}, 0x48a62bc015728bc7, 0x0, @empty, {[0x0, 0xff, 0x0, 0xff]}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, {[0x0, 0xff, 0xff, 0xff]}, 0x87, 0x3, 0x9, 0x9cca, 0x2, 0x9, 'irlan0\x00', 'teql0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="f84564014ea2", @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0x2}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x418) [ 308.488832] free:1403198 free_pcp:445 free_cma:0 [ 308.522120] Node 0 active_anon:298072kB inactive_anon:244kB active_file:14988kB inactive_file:37008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97528kB dirty:156kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 308.550072] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.576325] lowmem_reserve[]: 0 2864 6373 6373 [ 308.580981] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:992kB local_pcp:692kB free_cma:0kB [ 308.608723] lowmem_reserve[]: 0 0 3509 3509 [ 308.613099] Node 0 Normal free:2686940kB min:37120kB low:46400kB high:55680kB active_anon:287732kB inactive_anon:244kB active_file:14988kB inactive_file:37008kB unevictable:0kB writepending:204kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4864kB pagetables:3144kB bounce:0kB free_pcp:960kB local_pcp:236kB free_cma:0kB [ 308.643333] lowmem_reserve[]: 0 0 0 0 [ 308.647283] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 308.660925] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 308.676618] Node 0 Normal: 654*4kB (UME) 801*8kB (UME) 223*16kB (UME) 1424*32kB (UME) 1053*64kB (UM) 164*128kB (UM) 34*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 22*2048kB (UME) 598*4096kB (UM) = 2687600kB [ 308.694865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 308.704239] 13084 total pagecache pages [ 308.708243] 0 pages in swap cache [ 308.711705] Swap cache stats: add 0, delete 0, find 0/0 [ 308.717086] Free swap = 0kB [ 308.720125] Total swap = 0kB [ 308.723172] 1965969 pages RAM [ 308.726281] 0 pages HighMem/MovableOnly [ 308.730269] 329725 pages reserved 2018/02/26 20:09:27 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x80, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[], 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[], 0x0, 0xfffffffffffffffc}, 0x40000) 2018/02/26 20:09:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xac, 0x101000) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0xfffffed4}], 0x1, 0x0) sendto$ax25(r2, &(0x7f0000000140)="3d5ffcabc51d37840d4274f54a398d87d7a001b04583d3bda75e69bf68ab658b29dd949b9cd076d3d7c3a3faf068e2e68af4a2b25397bf616973ad04b1259518988febf2ad0e90bb438a521751d6085667ae85a2c019747269c22c3d0a30aecbd3574f5f47ee552ab3684acffcace0c3d286fe1f080537b9d1ba1aab", 0x7c, 0x2400c014, &(0x7f00000001c0)={0x3, {"ba8d94425c8d22"}, 0x200}, 0x10) fchmod(r0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x3, r0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001240), &(0x7f0000001280)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, []}) socket$vsock_stream(0x28, 0x1, 0x0) 2018/02/26 20:09:27 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xc0e}, &(0x7f0000000040)=0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x40000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x1, 0xffffffff}}}, {{@arp={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x14}, 0xffffffff, 0x0, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, 0x2, 0x3b, 0x6, 0x1, 0x8061, 0x6, 'ip6tnl0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x120}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x100000001, 0x4db, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x440) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0xffffffff}}, 0xffff, 0x800}, 0x98) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000100)={r0, 0x3}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000680)={r2, 0x14, "df955df190e46e87aac09c12a01cc2c3016e7dad"}, &(0x7f00000006c0)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:27 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000140)=""/202, &(0x7f0000000240)=0xca) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r1, &(0x7f0000000280)="e887246d9a8f33e618ca37381ef6c27be9ff09e3f1893f8a6960e269d030b941cc9d45a55c59e03d95a0cab5a7685193477731646329bf970502da40eae549a3de0a6df761f66812515f097b66924167e097afbc4685fd9971dcdae64684519e804d88544b273a528f1722cc7444c741ada44b8c", 0x74, 0x800, &(0x7f0000000100)={0x2, 0x6, @empty}, 0x10) 2018/02/26 20:09:27 executing program 7: semget(0x1, 0x0, 0x1) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x420400, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000200)={0x3, 0x9}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:27 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0xb}, @dev={0xfe, 0x80, [], 0x11}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x80000001, 0x9, 0xf54, 0x400, 0x7, 0x2, r1}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="431ea5a234fd09da5b0400018ba5efd3e030144519a2ccbd5286b0846cef94c5cfce978eab4c12e76fef77eecf5fb2142edab4a92f456d8531223be8e8d0045d475ee95b11a1f39a9dd40867408dbb6102000000", 0xfffffffffffffee7, 0x0, &(0x7f0000002e00)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}}, 0x1c) 2018/02/26 20:09:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000016afc8)={&(0x7f0000ac0000)={0x10}, 0xc, &(0x7f00006fb000)={&(0x7f00002ebe88)=@newspdinfo={0x38, 0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, [@ipv4_hthresh={0x8, 0x3}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@empty}}]}, 0x38}, 0x1}, 0x0) 2018/02/26 20:09:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='\a']}) [ 308.802730] sctp: [Deprecated]: syz-executor6 (pid 10037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.802730] Use struct sctp_sack_info instead 2018/02/26 20:09:27 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000040)=0x8) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 308.857453] sctp: [Deprecated]: syz-executor6 (pid 10037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.857453] Use struct sctp_sack_info instead [ 308.878651] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 308.890658] syz-executor5 cpuset=/ mems_allowed=0 [ 308.890685] CPU: 0 PID: 10044 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 308.890691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.890695] Call Trace: [ 308.890712] dump_stack+0x194/0x24d [ 308.890733] ? arch_local_irq_restore+0x53/0x53 [ 308.890744] ? idr_get_free+0xfd0/0xfd0 [ 308.890758] ? kernel_text_address+0x102/0x140 [ 308.890784] warn_alloc+0x19a/0x2b0 [ 308.890802] ? zone_watermark_ok_safe+0x400/0x400 [ 308.890827] ? save_stack+0xa3/0xd0 [ 308.890840] ? save_stack+0x43/0xd0 [ 308.890850] ? kasan_kmalloc+0xad/0xe0 [ 308.890859] ? __kmalloc_node+0x47/0x70 [ 308.890867] ? kvmalloc_node+0x64/0xd0 [ 308.890891] __vmalloc_node_range+0x4f0/0x650 [ 308.890907] ? lock_release+0xa40/0xa40 [ 308.890925] ? xt_alloc_entry_offsets+0x21/0x30 [ 308.890948] __vmalloc_node_flags_caller+0x50/0x60 [ 308.890961] ? xt_alloc_entry_offsets+0x21/0x30 [ 308.890975] kvmalloc_node+0x82/0xd0 [ 308.890991] xt_alloc_entry_offsets+0x21/0x30 [ 308.891007] translate_table+0x235/0x1690 [ 308.891022] ? lock_release+0xa40/0xa40 [ 308.891032] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 308.891044] ? __check_object_size+0x8b/0x530 [ 308.891065] ? __might_sleep+0x95/0x190 [ 308.891076] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 308.891091] ? kasan_check_write+0x14/0x20 [ 309.021140] ? _copy_from_user+0x99/0x110 [ 309.025269] do_ip6t_set_ctl+0x370/0x5f0 [ 309.029310] ? translate_compat_table+0x1c50/0x1c50 [ 309.034315] ? mutex_unlock+0xd/0x10 [ 309.038024] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 309.043281] nf_setsockopt+0x67/0xc0 [ 309.046976] ipv6_setsockopt+0x10b/0x130 [ 309.051025] tcp_setsockopt+0x82/0xd0 [ 309.054807] sock_common_setsockopt+0x95/0xd0 [ 309.059283] SyS_setsockopt+0x189/0x360 [ 309.063234] ? SyS_recv+0x40/0x40 [ 309.066665] ? move_addr_to_kernel+0x60/0x60 [ 309.071054] ? do_syscall_64+0xb6/0x940 [ 309.075006] ? SyS_recv+0x40/0x40 [ 309.078440] do_syscall_64+0x280/0x940 [ 309.082302] ? __do_page_fault+0xc90/0xc90 [ 309.086509] ? _raw_spin_unlock_irq+0x27/0x70 [ 309.090983] ? finish_task_switch+0x1c1/0x7e0 [ 309.095454] ? syscall_return_slowpath+0x550/0x550 [ 309.100360] ? syscall_return_slowpath+0x2ac/0x550 [ 309.105263] ? prepare_exit_to_usermode+0x350/0x350 [ 309.110254] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 309.115596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.120424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.125587] RIP: 0033:0x453d69 [ 309.128751] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.136434] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 309.143679] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 309.150925] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 2018/02/26 20:09:27 executing program 4: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x41}}) 2018/02/26 20:09:27 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) r3 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000040)={0x3, 0x0, 0x100, 0x3, [], [], [], 0xe8dc, 0x4, 0xbe, 0x8, "ef44656896c5ef1cc977e534a4c9a81f"}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x45d) 2018/02/26 20:09:27 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x4000, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8) r2 = epoll_create(0x40000000000985) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) dup3(r2, r0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x400) 2018/02/26 20:09:27 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0xbff4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0xfffffffffffffe37) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) [ 309.158168] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 309.165414] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000000804000000000000ffffffffffffffff00000000ffffffff08020000ffffffffffffffff08020000ffffffff03000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000024a9af023019000000000000000000000000000000000000"], @ANYBLOB="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"], 0x34c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 309.200520] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 309.212399] syz-executor5 cpuset=/ mems_allowed=0 [ 309.217297] CPU: 1 PID: 10044 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 309.224820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.234150] Call Trace: [ 309.236718] dump_stack+0x194/0x24d [ 309.240324] ? arch_local_irq_restore+0x53/0x53 [ 309.244967] ? idr_get_free+0xfd0/0xfd0 [ 309.248917] ? kernel_text_address+0x102/0x140 [ 309.253483] warn_alloc+0x19a/0x2b0 [ 309.257092] ? zone_watermark_ok_safe+0x400/0x400 [ 309.261919] ? save_stack+0xa3/0xd0 [ 309.265521] ? save_stack+0x43/0xd0 [ 309.269120] ? kasan_kmalloc+0xad/0xe0 [ 309.272982] ? __kmalloc_node+0x47/0x70 [ 309.276928] ? kvmalloc_node+0x64/0xd0 [ 309.280798] __vmalloc_node_range+0x4f0/0x650 [ 309.285271] ? lock_release+0xa40/0xa40 [ 309.289225] ? xt_alloc_entry_offsets+0x21/0x30 [ 309.293868] __vmalloc_node_flags_caller+0x50/0x60 [ 309.298772] ? xt_alloc_entry_offsets+0x21/0x30 [ 309.303424] kvmalloc_node+0x82/0xd0 [ 309.307115] xt_alloc_entry_offsets+0x21/0x30 [ 309.311585] translate_table+0x235/0x1690 [ 309.315710] ? lock_release+0xa40/0xa40 [ 309.319658] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 309.325517] ? __check_object_size+0x8b/0x530 [ 309.329995] ? __might_sleep+0x95/0x190 [ 309.333952] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 309.338861] ? kasan_check_write+0x14/0x20 [ 309.343071] ? _copy_from_user+0x99/0x110 [ 309.347199] do_ip6t_set_ctl+0x370/0x5f0 [ 309.351242] ? translate_compat_table+0x1c50/0x1c50 [ 309.356233] ? SYSC_recvfrom+0x3d7/0x5a0 [ 309.360286] ? mutex_unlock+0xd/0x10 [ 309.363977] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 309.369232] nf_setsockopt+0x67/0xc0 [ 309.372924] ipv6_setsockopt+0x10b/0x130 [ 309.376965] tcp_setsockopt+0x82/0xd0 [ 309.380747] sock_common_setsockopt+0x95/0xd0 [ 309.385223] SyS_setsockopt+0x189/0x360 [ 309.389177] ? SyS_recv+0x40/0x40 [ 309.392610] ? security_file_ioctl+0x7d/0xb0 [ 309.396992] ? security_file_ioctl+0x89/0xb0 [ 309.401382] ? do_syscall_64+0xb6/0x940 [ 309.405335] ? SyS_recv+0x40/0x40 [ 309.408770] do_syscall_64+0x280/0x940 [ 309.412635] ? __do_page_fault+0xc90/0xc90 [ 309.416845] ? _raw_spin_unlock_irq+0x27/0x70 [ 309.421316] ? finish_task_switch+0x1c1/0x7e0 [ 309.425787] ? syscall_return_slowpath+0x550/0x550 [ 309.430695] ? syscall_return_slowpath+0x2ac/0x550 [ 309.435601] ? prepare_exit_to_usermode+0x350/0x350 [ 309.440596] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 309.445940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.450765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.455930] RIP: 0033:0x453d69 [ 309.459094] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.466779] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 309.474026] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000017 [ 309.481270] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 309.488514] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff 2018/02/26 20:09:27 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x121080, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 2018/02/26 20:09:27 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b395fe55e85ad4f0cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252ce8615393ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf9"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 309.495759] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 309.503105] warn_alloc_show_mem: 1 callbacks suppressed [ 309.503107] Mem-Info: [ 309.510936] active_anon:71400 inactive_anon:61 isolated_anon:0 [ 309.510936] active_file:3747 inactive_file:9263 isolated_file:0 [ 309.510936] unevictable:0 dirty:82 writeback:0 unstable:0 [ 309.510936] slab_reclaimable:12560 slab_unreclaimable:93897 [ 309.510936] mapped:24363 shmem:86 pagetables:751 bounce:0 [ 309.510936] free:1409227 free_pcp:428 free_cma:0 [ 309.540835] QAT: Invalid ioctl [ 309.544225] Node 0 active_anon:287844kB inactive_anon:244kB active_file:14988kB inactive_file:37052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97452kB dirty:328kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 47104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 309.544230] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.544249] lowmem_reserve[]: 0 2864 6373 6373 [ 309.606165] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:992kB local_pcp:692kB free_cma:0kB [ 309.633896] lowmem_reserve[]: 0 0 3509 3509 [ 309.633916] Node 0 Normal free:2686224kB min:37120kB low:46400kB high:55680kB active_anon:287756kB inactive_anon:244kB active_file:14988kB inactive_file:37052kB unevictable:0kB writepending:328kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4992kB pagetables:3152kB bounce:0kB free_pcp:1304kB local_pcp:648kB free_cma:0kB [ 309.633938] lowmem_reserve[]: 0 0 0 0 [ 309.633957] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 309.634049] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 309.634136] Node 0 Normal: 382*4kB (UME) 841*8kB (UME) 235*16kB (UME) 1417*32kB (UME) 1053*64kB (UM) 164*128kB (UM) 32*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 26*2048kB (UME) 596*4096kB (UM) = 2686288kB [ 309.634217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.634222] 13095 total pagecache pages [ 309.634230] 0 pages in swap cache [ 309.634235] Swap cache stats: add 0, delete 0, find 0/0 [ 309.634238] Free swap = 0kB 2018/02/26 20:09:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=ANY=[], 0x0) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 309.634242] Total swap = 0kB [ 309.634246] 1965969 pages RAM [ 309.634249] 0 pages HighMem/MovableOnly [ 309.634253] 329725 pages reserved [ 309.650458] QAT: Invalid ioctl 2018/02/26 20:09:28 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000000)='\'&^$\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x2c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00003fefe7), &(0x7f00009a2ffc)=0x8) 2018/02/26 20:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r0, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) r6 = dup3(r2, r4, 0x80000) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r6, 0x0) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) recvfrom$inet(r0, &(0x7f0000000140)=""/152, 0x98, 0x10000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, &(0x7f00000000c0)=0x7) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:28 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x9, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) recvfrom(r1, &(0x7f0000000140)=""/100, 0x64, 0x2001, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}}, 0x32) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) fcntl$addseals(r1, 0x409, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, {{0xa, 0x0, 0x400, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2018/02/26 20:09:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x13, 0x0, @thr={&(0x7f0000000100)="9b048fde8dd6a44be30f9f5965d5f67d3afebf56d94f9991dfad35f08e0191bdc55d759abc7e4f2e946a07cba1aa0aaa87c3895e6159c5cd6235253b2696b5d3d182b22283affbf223fcd955", &(0x7f0000000180)="f450f369616c63a831c3fedcc6e47b607b89e8ca074c3a88055d6eed615ae0b0aa59d9908ea90f7b763d6f7a5eb436da52d59a8a1bf43219a19911bc7fdb31eaf8c325705aed670ca061afa99a5dea10d1ebd3cd801a4cd070b31693c9a917c70a4929138c5b62b7672111f533783625b0738446731b5a37ffa69550ebb13763db7487759464a5efcd79cf00d57cdc3df91ccd03b049c58146212c4d80607abbc2ac895019d67692e81215142d13415ea856f418549a3b6be9f87518e719c723"}}, &(0x7f0000000080)=0x0) timer_delete(r3) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:28 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x400}, @in={0x2, 0x4e23, @multicast2=0xe0000002}], 0x68) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) r1 = syz_open_dev$tun(&(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='-(mime_type!em0\x00') 2018/02/26 20:09:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000540)={[{0x9, 0x8, 0x9, 0x6, 0x4, 0x5800, 0x401, 0x3, 0x9, 0x7c, 0x400, 0x4, 0x8}, {0x5, 0x6, 0x7fff, 0x7, 0x81, 0x9, 0x1b4, 0x3b, 0x1, 0x83, 0xff, 0x2, 0x5}, {0x80000000, 0x81, 0x81, 0x80, 0x9, 0x1, 0xfff, 0x3ff, 0x5, 0x5, 0x100000001, 0x365, 0x3}], 0x80}) 2018/02/26 20:09:28 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r0, r1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000040)={r1, r0, 0x8, 0x100000001, &(0x7f0000000000)="83398144e9", 0xff2, 0x401, 0x7, 0x3ff, 0x598ffbbf, 0x2, 0x6, "cafba120b3e4502257bfaf92aaa8a5c1d33f52c70b393f6c36d32f81869f63"}) accept4$ipx(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) recvfrom$inet6(r2, &(0x7f0000000180), 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e21, 0xfffffffffffffcfa, @empty, 0x9}, 0x1c) r3 = dup3(r0, r1, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffff9c, 0x40047459, &(0x7f00000000c0)=0x242000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[], 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\x00', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff87}, [], {0x95}}, &(0x7f0000000000)="f4206cd55d3174fccd51d063ca3dda5cbf5a01cc7ea92c43b604ffc53727d2d60f55ddeb757cf36a8457125ab48bcbcce4011a423df186cc8d8e6e9a66b1a0a6035a2fc0578cf5aad8b3a24a9c646a37eb26c6212ffc9658f152194b880765d169d550beb059984a10c2", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) [ 309.879962] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 309.892033] syz-executor5 cpuset=/ mems_allowed=0 [ 309.896942] CPU: 1 PID: 10115 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 309.904307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.913660] Call Trace: [ 309.916257] dump_stack+0x194/0x24d [ 309.919896] ? arch_local_irq_restore+0x53/0x53 [ 309.924560] ? idr_get_free+0xfd0/0xfd0 2018/02/26 20:09:28 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[], 0x0) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0x81, 0x80000001, 0x401, 0x7fe6, 0x100, 0xe8d}, 0x2}, 0xa) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r1, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8375e5e70575a6a4c2888db131d7a9fb40f8f5a5122c765441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f85e893579ae0fed995419e9b7ce347cfe1e3ec6d24183dcf928bf65fb7b443ff9394afb8610277d94eba2e153bb41bc122e960b9922cfc75c308849dd1bfb6c57324fed700c43c90a87ea9a14e1d4168cb77e2928ddfb12e7afa9a89ac33ba03705c346b984fa6278a364f38ec5efe87f201dad842a56beabc58c5a5388b78ac95877ac4430a4f320c1e86c6318003cd8101337e769868761f6b3a4fe8ddb90a501519227f49f4c91cd7a1634041d617870f960b6f652788cef2c6c843b4be9e2333d0731fba9a150336499c63a1126ddeaacb49430a544c2fd926bda05ca2c35df8538e34291acca56c7b1ef25cbbf98ecafceaf892f4122cbe490e168ecfd0494cd9c7129164125485d03f3f879552addcdfb100bc8d84afb1457233bfc7f74013326bdce1890939ff79d88b9630c4f3196d64301c3537af4a9b7d5840189e877a819c85f398df81d46bc2015aaea57ad74b437b31f0025f3b644dc0a1736d845337b18f34918c0334cb638093dcc702aee9d0fc23dc6d290b408479c40b6"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 309.928551] ? kernel_text_address+0x102/0x140 [ 309.933144] warn_alloc+0x19a/0x2b0 [ 309.936779] ? zone_watermark_ok_safe+0x400/0x400 [ 309.941632] ? save_stack+0xa3/0xd0 [ 309.945255] ? save_stack+0x43/0xd0 [ 309.948873] ? kasan_kmalloc+0xad/0xe0 [ 309.952751] ? __kmalloc_node+0x47/0x70 [ 309.956719] ? kvmalloc_node+0x64/0xd0 [ 309.960613] __vmalloc_node_range+0x4f0/0x650 [ 309.965123] ? xt_alloc_entry_offsets+0x21/0x30 [ 309.969798] __vmalloc_node_flags_caller+0x50/0x60 [ 309.974727] ? xt_alloc_entry_offsets+0x21/0x30 2018/02/26 20:09:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x5d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x234, &(0x7f00001a7f05)=""/251}, 0x48) [ 309.979395] kvmalloc_node+0x82/0xd0 [ 309.983118] xt_alloc_entry_offsets+0x21/0x30 [ 309.987614] translate_table+0x235/0x1690 [ 309.991764] ? lock_release+0xa40/0xa40 [ 309.995745] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 310.001630] ? __check_object_size+0x8b/0x530 [ 310.006141] ? __might_sleep+0x95/0x190 [ 310.010117] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 310.014973] ? kasan_check_write+0x14/0x20 [ 310.019206] ? _copy_from_user+0x99/0x110 [ 310.023349] do_ip6t_set_ctl+0x370/0x5f0 [ 310.027396] ? translate_compat_table+0x1c50/0x1c50 [ 310.032411] ? mutex_unlock+0xd/0x10 [ 310.036103] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 310.041364] nf_setsockopt+0x67/0xc0 [ 310.045059] ipv6_setsockopt+0x10b/0x130 [ 310.049098] tcp_setsockopt+0x82/0xd0 [ 310.052882] sock_common_setsockopt+0x95/0xd0 [ 310.057357] SyS_setsockopt+0x189/0x360 [ 310.061309] ? SyS_recv+0x40/0x40 [ 310.064748] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 310.070263] ? do_syscall_64+0xb6/0x940 [ 310.074219] ? SyS_recv+0x40/0x40 [ 310.077647] do_syscall_64+0x280/0x940 [ 310.081507] ? __do_page_fault+0xc90/0xc90 [ 310.085718] ? _raw_spin_unlock_irq+0x27/0x70 [ 310.090189] ? finish_task_switch+0x1c1/0x7e0 [ 310.094666] ? syscall_return_slowpath+0x550/0x550 [ 310.099570] ? syscall_return_slowpath+0x2ac/0x550 [ 310.104477] ? prepare_exit_to_usermode+0x350/0x350 [ 310.109475] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 310.114821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.119646] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.124810] RIP: 0033:0x453d69 2018/02/26 20:09:28 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) r3 = getpgid(0x0) ptrace$cont(0x1f, r3, 0x5, 0x6) membarrier(0x11, 0x0) r4 = dup3(r2, r1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000400)={0xfffffffffffffff8, {{0xa, 0x4e24, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x7f}}}, 0x88) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000004c0)={r0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast2}}, {{@in=@rand_addr}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x20, 0x80000000, 0x0, 0xdd, 0x6, 0x0, 0xf31d, {0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x8, 0x6, 0x8000, 0x10000, 0x7ff}}, &(0x7f0000000640)=0xb8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000680)={r5, 0x2, 0x6932, 0x2}, &(0x7f00000006c0)=0x10) 2018/02/26 20:09:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x38000, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000004c0)=0x7f, &(0x7f0000000540)=0x4) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:28 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 310.127972] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.135657] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 310.142903] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 310.150148] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 310.157391] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 310.164639] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 310.209557] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 310.221434] syz-executor5 cpuset=/ mems_allowed=0 [ 310.226326] CPU: 1 PID: 10115 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 310.233679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.243033] Call Trace: [ 310.245630] dump_stack+0x194/0x24d [ 310.249268] ? arch_local_irq_restore+0x53/0x53 [ 310.253932] ? idr_get_free+0xfd0/0xfd0 [ 310.257895] ? kernel_text_address+0x102/0x140 [ 310.262464] warn_alloc+0x19a/0x2b0 [ 310.266070] ? zone_watermark_ok_safe+0x400/0x400 [ 310.270899] ? save_stack+0xa3/0xd0 [ 310.274502] ? save_stack+0x43/0xd0 [ 310.278103] ? kasan_kmalloc+0xad/0xe0 [ 310.281963] ? __kmalloc_node+0x47/0x70 [ 310.285910] ? kvmalloc_node+0x64/0xd0 [ 310.289781] __vmalloc_node_range+0x4f0/0x650 [ 310.294255] ? lock_release+0xa40/0xa40 [ 310.298212] ? xt_alloc_entry_offsets+0x21/0x30 [ 310.302858] __vmalloc_node_flags_caller+0x50/0x60 [ 310.307766] ? xt_alloc_entry_offsets+0x21/0x30 [ 310.312414] kvmalloc_node+0x82/0xd0 [ 310.316104] xt_alloc_entry_offsets+0x21/0x30 [ 310.320576] translate_table+0x235/0x1690 [ 310.324703] ? lock_release+0xa40/0xa40 [ 310.328654] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 310.334512] ? __check_object_size+0x8b/0x530 [ 310.338988] ? __might_sleep+0x95/0x190 [ 310.342938] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 310.347760] ? kasan_check_write+0x14/0x20 [ 310.351969] ? _copy_from_user+0x99/0x110 [ 310.356095] do_ip6t_set_ctl+0x370/0x5f0 [ 310.360137] ? translate_compat_table+0x1c50/0x1c50 [ 310.365144] ? mutex_unlock+0xd/0x10 [ 310.368833] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 310.374088] nf_setsockopt+0x67/0xc0 [ 310.377785] ipv6_setsockopt+0x10b/0x130 [ 310.381825] tcp_setsockopt+0x82/0xd0 [ 310.385605] sock_common_setsockopt+0x95/0xd0 [ 310.390098] SyS_setsockopt+0x189/0x360 [ 310.394053] ? SyS_recv+0x40/0x40 [ 310.397490] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 310.403005] ? do_syscall_64+0xb6/0x940 [ 310.406964] ? SyS_recv+0x40/0x40 [ 310.410394] do_syscall_64+0x280/0x940 [ 310.414257] ? __do_page_fault+0xc90/0xc90 [ 310.418465] ? _raw_spin_unlock_irq+0x27/0x70 [ 310.422940] ? finish_task_switch+0x1c1/0x7e0 [ 310.427410] ? syscall_return_slowpath+0x550/0x550 [ 310.432314] ? syscall_return_slowpath+0x2ac/0x550 [ 310.437219] ? prepare_exit_to_usermode+0x350/0x350 [ 310.442211] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 310.447555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.452381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.457546] RIP: 0033:0x453d69 [ 310.460710] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 310.468394] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 310.475637] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 310.482879] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 310.490124] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 310.497368] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 [ 310.504689] warn_alloc_show_mem: 1 callbacks suppressed [ 310.504691] Mem-Info: [ 310.512481] active_anon:72953 inactive_anon:61 isolated_anon:0 [ 310.512481] active_file:3747 inactive_file:9272 isolated_file:0 [ 310.512481] unevictable:0 dirty:100 writeback:0 unstable:0 [ 310.512481] slab_reclaimable:12559 slab_unreclaimable:94129 [ 310.512481] mapped:24402 shmem:86 pagetables:780 bounce:0 [ 310.512481] free:1408020 free_pcp:539 free_cma:0 [ 310.545839] Node 0 active_anon:289764kB inactive_anon:244kB active_file:14988kB inactive_file:37088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97608kB dirty:400kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 55296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 310.573811] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.599969] lowmem_reserve[]: 0 2864 6373 6373 [ 310.604603] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:992kB local_pcp:688kB free_cma:0kB [ 310.632322] lowmem_reserve[]: 0 0 3509 3509 [ 310.636690] Node 0 Normal free:2682012kB min:37120kB low:46400kB high:55680kB active_anon:291840kB inactive_anon:244kB active_file:14988kB inactive_file:37088kB unevictable:0kB writepending:400kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4928kB pagetables:2972kB bounce:0kB free_pcp:1152kB local_pcp:584kB free_cma:0kB [ 310.666579] lowmem_reserve[]: 0 0 0 0 [ 310.670429] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 310.684072] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 310.699726] Node 0 Normal: 509*4kB (UM) 801*8kB (UME) 241*16kB (UME) 1412*32kB (UME) 1054*64kB (UM) 162*128kB (UM) 31*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 21*2048kB (UME) 597*4096kB (UM) = 2679820kB [ 310.717909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 310.726490] 13106 total pagecache pages [ 310.730506] 0 pages in swap cache [ 310.733963] Swap cache stats: add 0, delete 0, find 0/0 [ 310.739344] Free swap = 0kB [ 310.742378] Total swap = 0kB [ 310.745421] 1965969 pages RAM [ 310.748542] 0 pages HighMem/MovableOnly [ 310.752529] 329725 pages reserved 2018/02/26 20:09:29 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c400300000003000000000000001f6300000c0000000d6300002c53ea8a5061accd7728eb82d6659de49160269c5fef99756a"], 0xcf, 0x0, &(0x7f0000000040)="31e94e3508998d616dfba9cd0af3ac47a67001c19b883c94f5ed04a977a04a51463e46f11d95aa021f61ba4881881e397563949ee52d76499ac8bc0c506678a54735030373a7ac806aa3ab2b0187c054e8604e43eba0206fd1712300fc8bc36aa6955a30113444138d6fb28e4192914ea3a655d191f21c0f586299350206a0c9ca8719e0ecf0f656c60e461a0eae0564989983d8aea9b6c527b5632769548378a460473b136812ec821a621a8a5276ad969d952fe206b1f84c532c799fd91556e08d7973019839e68eb7af22a87cea"}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="1ac32d00191ef0cdd701f133007504e3d08488d806c7ce04cf7eb686b156"]) 2018/02/26 20:09:29 executing program 0: r0 = msgget$private(0x0, 0x608) msgctl$IPC_RMID(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r1, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000005c0)={0x0}) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x42013, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000800)='bridge0\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000600)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000640)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0xe8, 0x0, &(0x7f0000000680)=[@clear_death={0x400c630f, 0x3, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000540)=[@ptr={0x70742a85, 0x0, &(0x7f00000004c0), 0x1, 0x3, 0x18}], &(0x7f0000000580)=[0x48, 0x40, 0x70]}, 0x1000}}, @acquire_done={0x40106309, r3}, @acquire_done={0x40106309, r4, 0x1}, @acquire_done={0x40106309, r5, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, r6, 0x2}, @request_death={0x400c630e, 0x3, 0x1}, @clear_death={0x400c630f, 0x1, 0x2}, @dead_binder_done={0x40086310}], 0x3c, 0x0, &(0x7f0000000780)="6ea440faff0cf957ba8691ada77235c14466ddbe5db67249f10f2954922159b5235664fef04094a2fc1fc13d9f13ee9a22c8f5d30babbb23c3f287c7"}) 2018/02/26 20:09:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000080)={"06ae575e95985a64da33e25e197b310b242ef72122617dbfc7aeb4aa65c6d3f1a8333305d2ffc3239472b3cafa6a31423111307e5de7a1e680ff6570cea0694e7c27936b12b1e77cef6b5c45854c26c506b3c65fa3e90afed93431905c4b499291e4cd3240fca73bd7a7e32762665b6f6b6d2a760da240a95cdd9b0e972c07f34e2ad3f6fdad808112cb72d5d8681bbe9cbf2b1cdf623a269a667fde98a5c4a8ce1bb011ac6467ee20f3cb0fdfad546e8276bdbb3eeb13f0a0e245b997f531bce7f1fb7764aeb382870763423209fea4ab89c1006e270f09d2bc6d1054ca70baab4313e23f3b6c2fe1150d35c0f2f137e00208bc10c7597d900f1889328be430b9c782529bf7ad6486ba61a2f354137e7bbe69eac26399103a228264eedd654386e91446dce1c65585b90ee83397eec9403367f6efd206238f518a25168c3a7ede36a00f0c338cecca8f9fbfd6a497e6887be7ea44614b785b9ca04cd387dee48a6428601c21383992433cfd310655f319546e2c939ac2759d0ccd1e4ef81b2f40ed204cf9bd9d33cc59b6f13f582157e7b88c4059a6df447fee91575138e3a4a767c777566768989487c8d9bf49501d815eaa592128daa55e9a518046b90029080c92b1ee578dad015c6220ea82edf5e1584ce9df704e143231a2c12c42dbea787809db4c3e97c220668516271cd5b9e4bed06e44f6a28e41d649856be5a364bc2676231647c70013e1fbcac1956659b72e5be7f78ac52734878fde7f304e2f4c7f6fb2af44aaba3d87a3e2deaa9f12ccd602ebbc6ec9d86a9ae7212a914045be588702315abcfe99a838a3ed3a1a2c00ab7c31ff2a106514048af4a0a8199d95e0d97d839fc525ac3efbbac70592031382854bc19ae100e747eda2c305f8fe264d59402b57be56e750d7c889803b4d40716c7d349aa31d3331ca8591a8a79d7f7b249ef24122ceafdb3317a478feea586dc76a60606641ccc618242408dbe1024f91ea55c963b14c41c2b3e6a1286b9733829f532e00ea8a9d6bf94df2763c20b54e499660f260dfa5067a29470178a9a394e93e866532299f441ebcebc5a3d594d07dd3ace5c2810de62833c05325db79e1b40f2a3867e3599a92bff3524e4bb2a6c095aa0c4d2f97c9c1e87dd4f9b80d7fddd9be4e7c76aa98f8ad4e644b56e0b94226299eabee78cfa8141bc92047c61598c98bd84c0eb2326b2fd26ad3f483fe1729ad8f972076a77d49b426955bfeca9ce01cb0ff482fa2e9972c4819ec27c8612c88ef67baf52f2139b2ce38318e434913327b4ea87276ee54c4fe1984e08079b0c0866eadd2f1a02a288f2f18666568ff3db97e6b4f27079e835c894f81cee48c9999f98508c34a2b7afbf535707b2485173e01be1a6011ac02d06958b8807c5cf161cd43418eaa526e495df4acf6a8ef76a4714f71fc58b20deca8"}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f000016c000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2018/02/26 20:09:29 executing program 7: semget(0x1, 0x0, 0x360) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x10000, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000200)) ioctl$TUNSETLINK(r0, 0x400454cd, &(0x7f00000002c0)=0x9) socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) 2018/02/26 20:09:29 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000062a99852915566355eccf57000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:29 executing program 5: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x7) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000001c0)) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:29 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x7fff, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x9}, @in6={0xa, 0x4e22, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in6={0xa, 0x4e24, 0x401, @mcast2={0xff, 0x2, [], 0x1}, 0x100000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e20, @multicast2=0xe0000002}], 0xfffffffffffffec1) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2) 2018/02/26 20:09:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000006b5ac09add6885a4941ce2af6e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac1400000000000000000000000000000000000000000000000000000000000000825bcd07bba99707cfcc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:29 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x80001) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) getpeername$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:29 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x7e, "c8b817048e0e23853197c7bfb566c2d9c31e57a68822efd5a83e501aadb88a7091fc51c4189535e42e6220ec3b360f76e6a7999c2c5c7b8e35c8b789a6047f96d51a845fe6431d41b200c1cbc3d137bc1d48e9aa90d7f7739234d69c446363444768099ec5871b6f7630ca78ddf86799e4fef7e9e11ef5720c1008cfb0b2"}, &(0x7f00000000c0)=0x86) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r3, 0x19, "75a480a46a0ab5e25031d50ff9c502a3022f29f4601450b762"}, &(0x7f0000000140)=0x21) 2018/02/26 20:09:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="000000000000000000000000000020000080000000000000000000000000000000000051b8926df73b61764000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}}}, &(0x7f0000000480)=0x8c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e24, 0xffffffffffffff7f, @empty, 0xae2}}}, 0x8c) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 310.853075] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 310.865088] syz-executor5 cpuset=/ mems_allowed=0 [ 310.869994] CPU: 0 PID: 10183 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 310.877350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.886711] Call Trace: [ 310.886731] dump_stack+0x194/0x24d [ 310.886749] ? arch_local_irq_restore+0x53/0x53 [ 310.897576] ? idr_get_free+0xfd0/0xfd0 [ 310.901551] ? kernel_text_address+0x102/0x140 [ 310.906143] warn_alloc+0x19a/0x2b0 [ 310.909762] ? zone_watermark_ok_safe+0x400/0x400 [ 310.914598] ? save_stack+0xa3/0xd0 [ 310.918205] ? save_stack+0x43/0xd0 [ 310.921805] ? kasan_kmalloc+0xad/0xe0 [ 310.925665] ? __kmalloc_node+0x47/0x70 [ 310.929610] ? kvmalloc_node+0x64/0xd0 [ 310.933482] __vmalloc_node_range+0x4f0/0x650 [ 310.937964] ? xt_alloc_entry_offsets+0x21/0x30 [ 310.942614] __vmalloc_node_flags_caller+0x50/0x60 [ 310.947521] ? xt_alloc_entry_offsets+0x21/0x30 [ 310.952170] kvmalloc_node+0x82/0xd0 [ 310.955863] xt_alloc_entry_offsets+0x21/0x30 [ 310.960340] translate_table+0x235/0x1690 [ 310.964468] ? lock_release+0xa40/0xa40 [ 310.968419] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 310.974278] ? __check_object_size+0x8b/0x530 [ 310.978756] ? __might_sleep+0x95/0x190 [ 310.982706] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 310.987529] ? kasan_check_write+0x14/0x20 [ 310.991737] ? _copy_from_user+0x99/0x110 [ 310.995863] do_ip6t_set_ctl+0x370/0x5f0 [ 310.999908] ? translate_compat_table+0x1c50/0x1c50 [ 311.004913] ? mutex_unlock+0xd/0x10 [ 311.008603] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 311.013857] nf_setsockopt+0x67/0xc0 [ 311.017554] ipv6_setsockopt+0x10b/0x130 [ 311.021597] tcp_setsockopt+0x82/0xd0 [ 311.025378] sock_common_setsockopt+0x95/0xd0 [ 311.029853] SyS_setsockopt+0x189/0x360 [ 311.033809] ? SyS_recv+0x40/0x40 [ 311.037247] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 311.042762] ? do_syscall_64+0xb6/0x940 [ 311.046715] ? SyS_recv+0x40/0x40 [ 311.050141] do_syscall_64+0x280/0x940 [ 311.054012] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 311.059528] ? syscall_return_slowpath+0x550/0x550 [ 311.064433] ? syscall_return_slowpath+0x2ac/0x550 [ 311.069341] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.074689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.079517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.084681] RIP: 0033:0x453d69 [ 311.087846] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.095531] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 2018/02/26 20:09:29 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000180)={@ipx={0x4, 0xfffffffffffffffd, 0xfffffffffffffff8, "5dea9ef2a1c3"}, {&(0x7f0000000080)=""/189, 0xbd}, &(0x7f0000000140), 0x8}, 0x30) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) accept4$packet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x14, 0x80800) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:29 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x3, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x8000, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/68, 0x44}], 0x1, &(0x7f0000000600)=""/5, 0x5, 0x7fffffff}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) fchownat(r3, &(0x7f0000000400)='./file0\x00', r5, r6, 0x900) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0xffffffffffffff71, &(0x7f0000000380)=[{&(0x7f0000000000)="6da90be26826c806f5e0dd3c77894c2daa61d5410eb008838a64692944e6bb01ec850c1aaec85ecfce61b6c9696f4a419591fd5803aeccabc69b2205fdd42ea932295bd53f08e8e678d4550f9fdda10eb6bbff962a450250c3be97eb0dcdf9", 0x5f}, {&(0x7f0000000080)="93810047265f5ebf453d414274057766d335d552e1ae089e5b248c70f2db65cba46a69c89472a7763da6757651a10f04b361d1ce296497c1957e43c093b084b4898a370bcbde447dcc6adcbd498faaaf03", 0x51}, {&(0x7f0000000100)="e709d83f45d578e9437d67855bf6c4f9863fdebcc2d8e49fdf38a848c75958a04c1174d5be4385d5b61b8e2b7ee853b6fc69fd28a920171dee83a87b3674213e199011837340014954840e032066e96761f18a7e6fd0bebfa897cf807a2e056a8f28209d99fbb3eba45eebadec25a76104340c7f1cbb348ccbd16c16c392394f8ec3ac1b68229cc4631e8d01984e0df6da589efdff4b64e0eb0e791c1af4cfa75a0aa58ac814e21e8fd4065a057ff1", 0xaf}, {&(0x7f00000001c0)="99d3439af3478c31437c6a29a67f076df69dc953904e6744b9684df2c4dc6d25f12b7f06d0d50bf8f0fbd9257c4e6ef01d6241f718b8ed5fc2a43d531b2c8fefcd5f1e6b6bff8fc86dbc541ad648bde80ee1f8f9baba200543a29866a0f415392c84916108bcf82a76dbc35b80282226a5f5a7e1c0be290f95f2bd4ebc4fd7e41bc08132be8f338241727d18fe9161cfbf1ab5bf8aaf", 0x96}, {&(0x7f0000000280)="ac6bddf2632c5078d32ef749bd7a61dbdb0b208975972fcd2667220620dc76c5557c962864d5ff7e4c48593b95305e00d3dcaaf5c2825cfb64f8e9a104a913ef374ffb8071b88d634bde6154cdc62ad4f15ccdea76e043a20b977feda1af75b3da6ee6c526d737cd22109a6ba5515aa8db02b1bcdbc0ff2a9f1d5ea8031d8b72ed4469ef35c02ecfcbc56c2a095ab8d78ffafedeef1ddf1cf29df21a29d5d2e026992e0381518e76d904da164d2757cb01d15af953b156d5f21d22dc03560c5cc2870ee79bd78fe4476da03e36fcfc940aba086b9c7647", 0xd7}], 0x5, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:29 executing program 7: semget(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000fdb000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, &(0x7f0000e9afc0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}, @common=@unspec=@mark={0x30, 'mark\x00', 0x1}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={0x38, 'connbytes\x00', 0x0, {0x0, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x430) sendmsg(r0, &(0x7f00009f1fc8)={&(0x7f0000db5000)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f00007ddf90)=[]}, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r1, 0x0) 2018/02/26 20:09:29 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 311.102774] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 311.110022] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 311.117266] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 311.124511] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:29 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 311.185425] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 311.197318] syz-executor5 cpuset=/ mems_allowed=0 [ 311.202221] CPU: 0 PID: 10200 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 311.209576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.218916] Call Trace: [ 311.221499] dump_stack+0x194/0x24d [ 311.225109] ? arch_local_irq_restore+0x53/0x53 [ 311.229751] ? idr_get_free+0xfd0/0xfd0 [ 311.233702] ? kernel_text_address+0x102/0x140 [ 311.238272] warn_alloc+0x19a/0x2b0 [ 311.241883] ? zone_watermark_ok_safe+0x400/0x400 [ 311.246712] ? save_stack+0xa3/0xd0 [ 311.250315] ? save_stack+0x43/0xd0 [ 311.253915] ? kasan_kmalloc+0xad/0xe0 [ 311.257774] ? __kmalloc_node+0x47/0x70 [ 311.261719] ? kvmalloc_node+0x64/0xd0 [ 311.265589] __vmalloc_node_range+0x4f0/0x650 [ 311.270066] ? lock_release+0xa40/0xa40 [ 311.274027] ? xt_alloc_entry_offsets+0x21/0x30 [ 311.278674] __vmalloc_node_flags_caller+0x50/0x60 [ 311.283579] ? xt_alloc_entry_offsets+0x21/0x30 [ 311.288228] kvmalloc_node+0x82/0xd0 [ 311.291919] xt_alloc_entry_offsets+0x21/0x30 [ 311.296389] translate_table+0x235/0x1690 [ 311.300513] ? lock_release+0xa40/0xa40 [ 311.304462] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 311.310321] ? __check_object_size+0x8b/0x530 [ 311.314800] ? __might_sleep+0x95/0x190 [ 311.318748] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 311.323569] ? kasan_check_write+0x14/0x20 [ 311.327782] ? _copy_from_user+0x99/0x110 [ 311.331908] do_ip6t_set_ctl+0x370/0x5f0 [ 311.335948] ? translate_compat_table+0x1c50/0x1c50 [ 311.340936] ? SYSC_recvfrom+0x3d7/0x5a0 [ 311.344986] ? mutex_unlock+0xd/0x10 [ 311.348679] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 311.353937] nf_setsockopt+0x67/0xc0 [ 311.357634] ipv6_setsockopt+0x10b/0x130 [ 311.361676] tcp_setsockopt+0x82/0xd0 [ 311.365456] sock_common_setsockopt+0x95/0xd0 [ 311.369931] SyS_setsockopt+0x189/0x360 [ 311.373887] ? SyS_recv+0x40/0x40 [ 311.377318] ? security_file_ioctl+0x7d/0xb0 [ 311.381700] ? security_file_ioctl+0x89/0xb0 [ 311.386086] ? do_syscall_64+0xb6/0x940 [ 311.390037] ? SyS_recv+0x40/0x40 [ 311.393467] do_syscall_64+0x280/0x940 [ 311.397328] ? __do_page_fault+0xc90/0xc90 [ 311.401535] ? _raw_spin_unlock_irq+0x27/0x70 [ 311.406005] ? finish_task_switch+0x1c1/0x7e0 [ 311.410480] ? syscall_return_slowpath+0x550/0x550 [ 311.415387] ? syscall_return_slowpath+0x2ac/0x550 [ 311.420296] ? prepare_exit_to_usermode+0x350/0x350 [ 311.425289] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.430634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.435458] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.440621] RIP: 0033:0x453d69 [ 311.443787] RSP: 002b:00007fae81ae1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.451470] RAX: ffffffffffffffda RBX: 00007fae81ae26d4 RCX: 0000000000453d69 [ 311.458714] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 311.465959] RBP: 000000000072bf58 R08: 0000000000000004 R09: 0000000000000000 [ 311.473202] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 311.480445] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000001 2018/02/26 20:09:29 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) accept$netrom(r2, &(0x7f0000000000)=@full, &(0x7f0000000080)=0x48) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:29 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0x20b) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000540)=0x1ff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) r2 = open(&(0x7f0000000480)='./file0\x00', 0x400, 0x20) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000004c0)=0x1) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000580)="5f9307", 0x3) 2018/02/26 20:09:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0xdb50, 0x100) bind$ax25(r1, &(0x7f0000000380)={0x3, {"5dc26e2502cebd"}, 0x1000}, 0x10) r2 = memfd_create(&(0x7f00000002c0), 0x6) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x3, @loopback=0x7f000001}}, 0x20) sendto$inet(r0, &(0x7f0000fa0fff), 0xb77591352a3ba15d, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x4a) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'gre0\x00', @ifru_flags=0x1000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x800, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffb4f, r0, &(0x7f0000000280)="62b88ce577b9760aa058845ce6c95bed24", 0x11, 0xefaa, 0x0, 0x1, r2}]) accept$unix(r2, &(0x7f0000000140)=@file={0x0, ""/108}, &(0x7f00000001c0)=0x6e) setsockopt$inet6_int(r3, 0x29, 0x41, &(0x7f0000000240)=0x9, 0x4) sendto$inet(r2, &(0x7f0000000040)="a8", 0xfffffffffffffd00, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0xffffffffffffff99) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x100000000}], 0x1c) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 2018/02/26 20:09:29 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:29 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0x7c, @local={0xfe, 0x80, [], 0xaa}, 0x58}, {0xa, 0x4e22, 0x3ff, @local={0xfe, 0x80, [], 0xaa}, 0xb0}, 0x6, [0x7, 0x5, 0xa0, 0x6, 0x1000000000000000, 0x2, 0x6, 0x5]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="f7ff0100000000002ce233ea"]) 2018/02/26 20:09:29 executing program 7: r0 = semget(0x1, 0x0, 0x4) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000000)=0x86a) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7ff, 0x4000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x11, "fd4e766a0c47b2f1273f27f376a14fcbf5"}, &(0x7f0000000280)=0x19) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x5, 0x9, [0x9, 0x6, 0x401, 0x3f, 0xfff, 0x20, 0x4, 0x88, 0x100000001]}, 0x1a) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r4 = epoll_create(0x40000000000985) dup3(r4, r3, 0x0) [ 311.581275] FAULT_INJECTION: forcing a failure. [ 311.581275] name failslab, interval 1, probability 0, space 0, times 0 [ 311.592602] CPU: 0 PID: 10236 Comm: syz-executor4 Not tainted 4.16.0-rc3+ #330 [ 311.599974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.609324] Call Trace: [ 311.611915] dump_stack+0x194/0x24d [ 311.615547] ? arch_local_irq_restore+0x53/0x53 [ 311.620219] ? lock_downgrade+0x980/0x980 [ 311.624381] should_fail+0x8c0/0xa40 [ 311.628093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.633181] ? __local_bh_enable_ip+0x121/0x230 [ 311.637826] ? _raw_spin_unlock_bh+0x30/0x40 [ 311.642211] ? release_sock+0x1d4/0x2a0 [ 311.646159] ? refcount_add+0x60/0x60 [ 311.649935] ? __release_sock+0x360/0x360 [ 311.654063] ? find_held_lock+0x35/0x1d0 [ 311.658125] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 311.663991] ? rcu_note_context_switch+0x710/0x710 [ 311.668909] should_failslab+0xec/0x120 [ 311.672861] kmem_cache_alloc_node+0x56/0x760 [ 311.677335] ? netlink_insert+0x500/0x500 [ 311.681464] __alloc_skb+0xf1/0x780 [ 311.685071] ? skb_copy_and_csum_dev+0x370/0x370 [ 311.689801] ? kasan_check_write+0x14/0x20 [ 311.694014] ? _copy_from_user+0x99/0x110 [ 311.698145] ? selinux_socket_getpeersec_dgram+0x22f/0x330 [ 311.703744] ? selinux_inet_conn_established+0xf0/0xf0 [ 311.708998] ? sock_has_perm+0x2a4/0x420 [ 311.713042] ? security_socket_getpeersec_dgram+0x91/0xc0 [ 311.718556] netlink_sendmsg+0xa86/0xe60 [ 311.722601] ? netlink_unicast+0x6b0/0x6b0 [ 311.726815] ? security_socket_sendmsg+0x89/0xb0 [ 311.731547] ? netlink_unicast+0x6b0/0x6b0 [ 311.735760] sock_sendmsg+0xca/0x110 [ 311.739453] ___sys_sendmsg+0x767/0x8b0 [ 311.743409] ? copy_msghdr_from_user+0x590/0x590 [ 311.748137] ? find_held_lock+0x35/0x1d0 [ 311.752185] ? __f_unlock_pos+0x19/0x20 [ 311.756135] ? lock_downgrade+0x980/0x980 [ 311.760257] ? get_pid_task+0xbc/0x140 [ 311.764124] ? __fget_light+0x2b2/0x3c0 [ 311.768074] ? fget_raw+0x20/0x20 [ 311.771506] ? find_held_lock+0x35/0x1d0 [ 311.775546] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 311.780365] ? vfs_write+0x374/0x510 [ 311.784055] ? wait_for_completion+0x770/0x770 [ 311.788625] __sys_sendmsg+0xe5/0x210 [ 311.792401] ? __sys_sendmsg+0xe5/0x210 [ 311.796353] ? SyS_shutdown+0x290/0x290 [ 311.800308] ? __sb_end_write+0xa0/0xd0 [ 311.804275] ? SyS_read+0x220/0x220 [ 311.807880] ? __sys_sendmsg+0x210/0x210 [ 311.811914] SyS_sendmsg+0x2d/0x50 [ 311.815432] do_syscall_64+0x280/0x940 [ 311.819295] ? __do_page_fault+0xc90/0xc90 [ 311.823504] ? _raw_spin_unlock_irq+0x27/0x70 [ 311.827976] ? finish_task_switch+0x1c1/0x7e0 [ 311.832449] ? syscall_return_slowpath+0x550/0x550 [ 311.837355] ? syscall_return_slowpath+0x2ac/0x550 [ 311.842259] ? prepare_exit_to_usermode+0x350/0x350 [ 311.847250] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.852593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.857416] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.862579] RIP: 0033:0x453d69 [ 311.865744] RSP: 002b:00007f0022067c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.873425] RAX: ffffffffffffffda RBX: 00007f00220686d4 RCX: 0000000000453d69 2018/02/26 20:09:30 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:30 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$TCSBRKP(r2, 0x5425, 0x6) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffffffffffffd53, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ipddp0\x00', r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:30 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000269f0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098550e61f1bb60e608e784e994f4d54097765607f4671c0ef6cfb025cae6fe8809f4dc69724804c366b1c9e5af3a588dfd22f3479f1514604ff45d884cf322dfc1f08399113584445363478276c9c223b0fb9647b30a73a27a8db6c0780cc37c7a038b52a67d65464a"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:30 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000200)={""/16, @ifru_ivalue}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x80000) [ 311.880669] RDX: 0000000000000000 RSI: 0000000020d7a000 RDI: 0000000000000013 [ 311.887911] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 311.895153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 311.902395] R13: 00000000000004b4 R14: 00000000006f7180 R15: 0000000000000000 2018/02/26 20:09:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000240)="bf65aab16d732656e1850eec1f90943a9397ff3950636205326c07f49c0a12a00b56e89d8c1916413fd4cf1802bca72f8291f4ac0f4e4dc210ee76fa224fb35ba8f4065707f82913f2e75f4c6f2f687ce6465fdb31f65f2f11bcffde6d2db64ca60ebe047ade9acee12f7c5d3fad63a44f49d952852db4a1f692c68320935b01699d7d343e0bc526adbab3dd61e2e01e9eec760f8cc267cd8a205d846fa47e0d46cbf6e102e12ebee2e0", 0x29b, 0x20020007, &(0x7f0000000200)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="208000000000000000000000001320824e009d0b278bede1ffe3d03d831e269e1e78ffc43255397d2c33d483328000000000000000cbf46c1b1ed304b0227b397b3e0e908ea73f7b8e04f78d010400009b3dc622a8484e44f165c56b567be489cd6cc77e29fb35c3964e422c99cabc20be22171d0efd7b604056d880bd9b7b7932af3bc29afc1c6bdec0fe8c000000000000000000000000000000000000000000000000573593793b52809f90e6c62637ca835a79f97a8f27412570df44cf7323eaea9f2f6d1e8d4d8986527496", @ANYRES32], 0x20}, 0x1}, 0x0) [ 311.964099] validate_nla: 76 callbacks suppressed [ 311.964103] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 311.994163] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 312.006061] syz-executor5 cpuset=/ mems_allowed=0 [ 312.010954] CPU: 1 PID: 10265 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 312.018313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.027655] Call Trace: [ 312.030225] dump_stack+0x194/0x24d [ 312.033837] ? arch_local_irq_restore+0x53/0x53 [ 312.038567] ? idr_get_free+0xfd0/0xfd0 [ 312.042520] ? kernel_text_address+0x102/0x140 [ 312.047088] warn_alloc+0x19a/0x2b0 [ 312.050693] ? zone_watermark_ok_safe+0x400/0x400 [ 312.055530] ? save_stack+0xa3/0xd0 [ 312.059134] ? save_stack+0x43/0xd0 [ 312.062735] ? kasan_kmalloc+0xad/0xe0 [ 312.066594] ? __kmalloc_node+0x47/0x70 [ 312.070542] ? kvmalloc_node+0x64/0xd0 [ 312.074416] __vmalloc_node_range+0x4f0/0x650 [ 312.078897] ? xt_alloc_entry_offsets+0x21/0x30 [ 312.083543] __vmalloc_node_flags_caller+0x50/0x60 [ 312.088448] ? xt_alloc_entry_offsets+0x21/0x30 [ 312.093092] kvmalloc_node+0x82/0xd0 [ 312.096784] xt_alloc_entry_offsets+0x21/0x30 [ 312.101254] translate_table+0x235/0x1690 [ 312.105382] ? lock_release+0xa40/0xa40 [ 312.109341] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 312.115208] ? __check_object_size+0x8b/0x530 [ 312.119691] ? __might_sleep+0x95/0x190 [ 312.123642] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 312.128465] ? kasan_check_write+0x14/0x20 [ 312.132678] ? _copy_from_user+0x99/0x110 [ 312.136803] do_ip6t_set_ctl+0x370/0x5f0 [ 312.140843] ? translate_compat_table+0x1c50/0x1c50 [ 312.145848] ? mutex_unlock+0xd/0x10 [ 312.149538] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 312.154796] nf_setsockopt+0x67/0xc0 [ 312.158491] ipv6_setsockopt+0x10b/0x130 [ 312.162534] tcp_setsockopt+0x82/0xd0 [ 312.166318] sock_common_setsockopt+0x95/0xd0 [ 312.170794] SyS_setsockopt+0x189/0x360 [ 312.174751] ? SyS_recv+0x40/0x40 [ 312.178185] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 312.183702] ? do_syscall_64+0xb6/0x940 [ 312.187655] ? SyS_recv+0x40/0x40 [ 312.191084] do_syscall_64+0x280/0x940 [ 312.194947] ? __do_page_fault+0xc90/0xc90 [ 312.199154] ? _raw_spin_unlock_irq+0x27/0x70 [ 312.203627] ? finish_task_switch+0x1c1/0x7e0 [ 312.208098] ? syscall_return_slowpath+0x550/0x550 [ 312.213005] ? syscall_return_slowpath+0x2ac/0x550 [ 312.217915] ? prepare_exit_to_usermode+0x350/0x350 [ 312.222908] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 312.228252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.233079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.238244] RIP: 0033:0x453d69 [ 312.241409] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.249089] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 312.256335] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 312.263584] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 312.270828] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 312.278072] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 312.285441] warn_alloc_show_mem: 2 callbacks suppressed [ 312.285444] Mem-Info: [ 312.293832] active_anon:77090 inactive_anon:61 isolated_anon:0 [ 312.293832] active_file:3747 inactive_file:9293 isolated_file:0 [ 312.293832] unevictable:0 dirty:138 writeback:0 unstable:0 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20001000060601000000000004000000000108000000010000000000", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:30 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="901e4fb0868a34347afede0e87366400f05ad6d67b1c2b1ef8ee182ece8d3499af4d03e197724059de226dcb8c9eb3986ca11aad2d8af37f9750856fc0f95f9ba6c4561aeff2efcf055b33eb606425deb2745d1735d7b89934cd6c3b97fa6421981a445d8e35aa2b5adbea11b4a72eac880dc0", 0x73, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r2, r3) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000008a075d43ee56be3a00090000000300000008040000c8000100ffffffffffe7ffffc800a537416483fc07b90000ffffffffffffffffd8010000ffffffff0300000005a67ec7d5fe10b0677e5775aa9a3c094f62cef68a779ad0968ff7ab60fff284542b3f11e2f524c0a6b25966cc7e564e86b05996e1a326f4fec47ffa56629ffddc8d26", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000100000000000000000000ffff00000006ffffffffffffffff00000000ffffffff000000ffffffffffffffffffffffff006772653000000000000000000000000074756e6c300000000000000000000000ff000000000000000000000000000000ff0000000000000000000000000000003a0008050100000000000000a800d00000000000000000000000000000000000000000000000000000004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026b0300000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x63b) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 312.293832] slab_reclaimable:12554 slab_unreclaimable:93875 [ 312.293832] mapped:24379 shmem:86 pagetables:815 bounce:0 [ 312.293832] free:1404215 free_pcp:434 free_cma:0 [ 312.301451] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 312.327215] Node 0 active_anon:312528kB inactive_anon:244kB active_file:14988kB inactive_file:37172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97516kB dirty:552kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 57344kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 312.327221] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.327241] lowmem_reserve[]: 0 2864 6373 6373 [ 312.327262] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:684kB free_cma:0kB [ 312.421147] lowmem_reserve[]: 0 0 3509 3509 [ 312.425525] Node 0 Normal free:2691700kB min:37120kB low:46400kB high:55680kB active_anon:283616kB inactive_anon:244kB active_file:14988kB inactive_file:37172kB unevictable:0kB writepending:552kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4864kB pagetables:2964kB bounce:0kB free_pcp:740kB local_pcp:88kB free_cma:0kB [ 312.455226] lowmem_reserve[]: 0 0 0 0 [ 312.459073] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 312.472701] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 312.488339] Node 0 Normal: 550*4kB (UME) 733*8kB (UME) 297*16kB (UME) 1422*32kB (UME) 1053*64kB (UM) 168*128kB (UM) 30*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 25*2048kB (UME) 598*4096kB (UM) = 2693392kB [ 312.506607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 2018/02/26 20:09:30 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [{[{0x9100, 0x7fffffff, 0x7, 0x1}], {0x8100, 0x5, 0x1f, 0x3}}], {@mpls_uc={0x8847, {[{0x46, 0x10001, 0x8f35, 0xa84}, {0x8, 0x1174, 0xfffffffffffffff1, 0x2}, {0x6, 0x4, 0x3, 0x2}, {0x1ff, 0x401, 0x4, 0x7f}, {0x2645, 0x0, 0xe0, 0x8}, {0x7fffffff, 0xc89, 0x6, 0xdd0}, {0x2, 0x7fffffff, 0x8, 0x9}, {0x1f, 0xa4, 0x8, 0x9}, {0x5, 0x7fff, 0x7, 0x4}, {0x1, 0x10000, 0x400, 0x3}], @generic="2608bb2e2ca291c0607e602e4d04d1bc38dcbbd47bcb98ee5eb46227d4f6f44b2e041dbbf10415bd492472806732d8db5399d13f228a336ef4ae6f06d4f44d04bced324670c8b5ca1af9592235a16b033bb04d4f3f02d6176135733de8e285f4a358af712c0936f159c3a96d53915c8bbac61db5e3e83625301ea5fe93d6f8866303121e7173c8b6575e98bdad18111090f3654c"}}}}, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000200)={0x0, 0xae, &(0x7f0000000140)="f34c07a0c3a05896b1481012189cd644f9a181222ddfbb8317cdba17ca3f64ce89e627c3f4552542ab194e5f7011f69acdf5f2c733ed910971d607c1298b7f9030b7fef224abd13b8252197c3cdf1847d887ce0b179f4cf779203a21a1ea65edc84d00079d05ef3bef59e0a15bcc67a9e673e5c901388d7cec7aeba3defa5a879a7e0b88685410266dbbeda343b6e163877c728edcc988ac7bebbb2af06e5a8f521dd41e3b006913bffebfd9589f"}) 2018/02/26 20:09:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000e4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028000000000000000000000000000000000000000000000c0460f90000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x414140, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000005c0)=""/201, 0xc9, 0x9, &(0x7f0000000700)={r2, r3+30000000}) bind(r0, &(0x7f0000000540)=@nfc={0x27, 0x9, 0x8, 0x7}, 0x10) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@int, &(0x7f00000004c0)=0x4) 2018/02/26 20:09:30 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r0}) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x7, &(0x7f00000000c0)=0xffffffff, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x300, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x383, 0x7, 0x80, 0x783, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x40000001, 0x0, 0x2}]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, 0x7, 0x1, 0x200, 0x5, 0x6}, &(0x7f0000000200)=0xa0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYPTR, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="7822428fb0a67c436e265196e2e991e75010dac535b416000e94ff0dc71f53f90bc8d819", @ANYBLOB="1144544d8288a0d0b0f84416a8db7b4bb7e8ebbfd2169d0c43ed0b95926a43bb095f9e84208574ce0b9f8290b50d7ffe0c8662d72f3ec6778bea09eaf5e132e623459fe4844b823e053c12f007ab275281a4ab0e281b7dabd926dddedaa422aa1e8b38ec696131fbe1de5c002872f95618f86f45c89c3ce753e476d4a91000a0ae3b045be7713ca483919d7f94a98b392f084e971fe3c0d0f88295f5a93039ae6ea24fd2d1492c757c9a3e53a7515b007d1c3fc6284d45359243e582c3183a2e325846101bb510466ed92223db8fc405b8c5aa965f50a11b554b7297d336f8186dd453767095e4391e", @ANYPTR], @ANYPTR64, @ANYBLOB="f8921798c88437ad8f01d4f15b3ee6759d6fbc66f0adf148e228242f3e824a25a390b0a4758a27232c3947c5e58c6815e5b06ef4831d42170838237b11b7ef5bfa0a1db8e53132769e74f83a10316a7060dacaa366d99035c1e8dfb5e09dd0a88b949410e0ddfe902bae1d830bf2fcce717b5e9d872c838ab520285dcccc4acffb62e90b7a954365e53e11ca2bf87d952e53bcb4bf4eb1e9d0888b0e6f3041e560edb9d6b4de75000dd0035f6860c5fdba9deb4a59dff743d8428cbc45a76902654d2488d00cd7e4f602e0fc3dd331eb8d694949431c4edc60"]) 2018/02/26 20:09:30 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x79cdcd5c, 0x48000) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) 2018/02/26 20:09:30 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}}, 0x108) [ 312.515211] 13137 total pagecache pages [ 312.519199] 0 pages in swap cache [ 312.522685] Swap cache stats: add 0, delete 0, find 0/0 [ 312.528055] Free swap = 0kB [ 312.531075] Total swap = 0kB [ 312.534089] 1965969 pages RAM [ 312.537192] 0 pages HighMem/MovableOnly [ 312.541170] 329725 pages reserved [ 312.582821] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 312.602352] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 312.611361] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 312.614237] syz-executor5 cpuset=/ mems_allowed=0 [ 312.626403] CPU: 0 PID: 10299 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 312.633753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.643099] Call Trace: [ 312.645684] dump_stack+0x194/0x24d [ 312.649317] ? arch_local_irq_restore+0x53/0x53 [ 312.653979] ? idr_get_free+0xfd0/0xfd0 [ 312.657945] ? kernel_text_address+0x102/0x140 [ 312.662516] warn_alloc+0x19a/0x2b0 [ 312.666121] ? zone_watermark_ok_safe+0x400/0x400 [ 312.670951] ? save_stack+0xa3/0xd0 [ 312.674553] ? save_stack+0x43/0xd0 [ 312.678155] ? kasan_kmalloc+0xad/0xe0 [ 312.682021] ? __kmalloc_node+0x47/0x70 [ 312.685970] ? kvmalloc_node+0x64/0xd0 [ 312.690044] __vmalloc_node_range+0x4f0/0x650 [ 312.694527] ? xt_alloc_entry_offsets+0x21/0x30 [ 312.699174] __vmalloc_node_flags_caller+0x50/0x60 [ 312.704079] ? xt_alloc_entry_offsets+0x21/0x30 [ 312.708729] kvmalloc_node+0x82/0xd0 [ 312.712421] xt_alloc_entry_offsets+0x21/0x30 [ 312.716891] translate_table+0x235/0x1690 [ 312.721021] ? lock_release+0xa40/0xa40 [ 312.724975] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 312.730836] ? __check_object_size+0x8b/0x530 [ 312.735316] ? __might_sleep+0x95/0x190 [ 312.739266] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 312.744086] ? kasan_check_write+0x14/0x20 [ 312.748298] ? _copy_from_user+0x99/0x110 [ 312.752426] do_ip6t_set_ctl+0x370/0x5f0 [ 312.756466] ? translate_compat_table+0x1c50/0x1c50 [ 312.761473] ? mutex_unlock+0xd/0x10 [ 312.765162] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 312.770505] nf_setsockopt+0x67/0xc0 [ 312.774378] ipv6_setsockopt+0x10b/0x130 [ 312.778420] tcp_setsockopt+0x82/0xd0 [ 312.782203] sock_common_setsockopt+0x95/0xd0 [ 312.786680] SyS_setsockopt+0x189/0x360 [ 312.790633] ? SyS_recv+0x40/0x40 [ 312.794067] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 312.799582] ? do_syscall_64+0xb6/0x940 [ 312.803534] ? SyS_recv+0x40/0x40 [ 312.806966] do_syscall_64+0x280/0x940 [ 312.810829] ? __do_page_fault+0xc90/0xc90 [ 312.815035] ? _raw_spin_unlock_irq+0x27/0x70 [ 312.819514] ? finish_task_switch+0x1c1/0x7e0 [ 312.823988] ? syscall_return_slowpath+0x550/0x550 [ 312.828893] ? syscall_return_slowpath+0x2ac/0x550 [ 312.833799] ? prepare_exit_to_usermode+0x350/0x350 [ 312.838793] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 312.844136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.848960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.854124] RIP: 0033:0x453d69 [ 312.857288] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.864974] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 312.872217] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 2018/02/26 20:09:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000062801000000000080000000000000000c00010000000000", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:31 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000280)) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) creat(&(0x7f0000000400)='./file0\x00', 0x22) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x40000000000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, [], 0x16}, 0x8}}}, 0x8c) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r3, 0xbc, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e24, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0xd6aead9}, @in6={0xa, 0x4e21, 0x4d34, @mcast2={0xff, 0x2, [], 0x1}, 0x29}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e21, 0xfff, @remote={0xfe, 0x80, [], 0xbb}, 0x8}]}, &(0x7f00000003c0)=0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x2, 0x4) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x6, 0xffffffff00000001}) setsockopt$inet6_dccp_buf(r5, 0x21, 0xf, &(0x7f0000000440)="be99a1beff5ebec6b766e880be14fc796fe039", 0x13) 2018/02/26 20:09:31 executing program 4: r0 = accept$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000300)=0x8) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x2e4) sched_setaffinity(0x0, 0x8, &(0x7f0000e86ff8)=0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000754000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000040)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/48) write$selinux_load(r2, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "1fc4726e48a1097bb91568d6382f590a563303ceab3dfcf4e1330a2bb777ace75715989f31436353e5f0264d9d7727ab36fe3c720dd1ef26e864ee6a9f8696bbe027e1736ea93b11e028fa6826b73844a7a0029cd357cbb9984b0c06d9acb3f7822602d3caa49e74ae22c78f4a89821952521acaacb286b0ee5093fe069f7ec7411f2dab340ea4904003f4fd90086ec8e664"}, 0xa2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'syzkaller1\x00', @ifru_addrs={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) listen$netrom(r4, 0x7ff) r6 = dup2(r3, r3) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00', 0x1) sendmsg$nl_netfilter(r3, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000100), 0x4) 2018/02/26 20:09:31 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="22fb550732867c5a7109525d8f4065a423210ad53a8f44295334fe8625581e1918f4c68133292da877bc57e8927ac3640e07dbc37661929c365e31499174424324f189857ea4") setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 312.879460] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 312.886704] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 312.893946] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:31 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000540)=0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) ioctl$int_out(r0, 0x2, &(0x7f0000000a80)) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCSCTTY(r9, 0x540e, 0xe0) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000a40)=[r1, r2, r3, r4, r5, r6, r7, r8, r10]) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 312.954904] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 312.966952] syz-executor5 cpuset=/ mems_allowed=0 [ 312.971849] CPU: 1 PID: 10299 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 312.979204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.980289] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 312.988545] Call Trace: [ 312.988567] dump_stack+0x194/0x24d 2018/02/26 20:09:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB="0000e2e772dc000000000000000000000000000000000000000000000000000000000000000000000028a5353b000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x801, 0x0) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 312.988588] ? arch_local_irq_restore+0x53/0x53 [ 312.988597] ? idr_get_free+0xfd0/0xfd0 [ 312.988610] ? kernel_text_address+0x102/0x140 [ 312.988631] warn_alloc+0x19a/0x2b0 [ 313.018828] ? zone_watermark_ok_safe+0x400/0x400 [ 313.023689] ? save_stack+0xa3/0xd0 [ 313.025460] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 313.027308] ? save_stack+0x43/0xd0 [ 313.027322] ? kasan_kmalloc+0xad/0xe0 [ 313.027332] ? __kmalloc_node+0x47/0x70 [ 313.027341] ? kvmalloc_node+0x64/0xd0 [ 313.027364] __vmalloc_node_range+0x4f0/0x650 2018/02/26 20:09:31 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7ff, 0x80000000, 0x800, 0x100000001, 0x4}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0x8) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:31 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = accept4$ipx(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'yam0\x00', 0x52}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) [ 313.027381] ? lock_downgrade+0x980/0x980 [ 313.058631] ? xt_alloc_entry_offsets+0x21/0x30 [ 313.063304] __vmalloc_node_flags_caller+0x50/0x60 [ 313.068251] ? xt_alloc_entry_offsets+0x21/0x30 [ 313.072921] kvmalloc_node+0x82/0xd0 [ 313.076636] xt_alloc_entry_offsets+0x21/0x30 [ 313.081127] translate_table+0x235/0x1690 [ 313.085278] ? lock_release+0xa40/0xa40 [ 313.089248] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 313.095135] ? __check_object_size+0x8b/0x530 [ 313.099638] ? __might_sleep+0x95/0x190 [ 313.103610] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 313.108450] ? kasan_check_write+0x14/0x20 [ 313.112678] ? _copy_from_user+0x99/0x110 [ 313.116828] do_ip6t_set_ctl+0x370/0x5f0 [ 313.120886] ? translate_compat_table+0x1c50/0x1c50 [ 313.125910] ? mutex_unlock+0xd/0x10 [ 313.129614] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 313.134886] nf_setsockopt+0x67/0xc0 [ 313.138594] ipv6_setsockopt+0x10b/0x130 [ 313.142635] tcp_setsockopt+0x82/0xd0 [ 313.146417] sock_common_setsockopt+0x95/0xd0 [ 313.150893] SyS_setsockopt+0x189/0x360 [ 313.154847] ? SyS_recv+0x40/0x40 [ 313.158283] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 313.163796] ? do_syscall_64+0xb6/0x940 [ 313.167750] ? SyS_recv+0x40/0x40 [ 313.171180] do_syscall_64+0x280/0x940 [ 313.175044] ? __do_page_fault+0xc90/0xc90 [ 313.179252] ? _raw_spin_unlock_irq+0x27/0x70 [ 313.183725] ? finish_task_switch+0x1c1/0x7e0 [ 313.188196] ? syscall_return_slowpath+0x550/0x550 [ 313.193102] ? syscall_return_slowpath+0x2ac/0x550 [ 313.198009] ? prepare_exit_to_usermode+0x350/0x350 [ 313.203009] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 313.208357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.213182] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.218347] RIP: 0033:0x453d69 [ 313.221509] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.229193] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 313.236436] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000001a [ 313.243679] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 2018/02/26 20:09:31 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) r2 = syz_open_dev$admmidi(&(0x7f00000024c0)='/dev/admmidi#\x00', 0x4, 0x1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001180)={0x0, 0xd8}, &(0x7f00000011c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001200)={0x2130, 0xfff, 0x0, 0x1000, 0x1000, 0x1, 0x5, 0xe6bd, r4}, 0x20) r5 = shmget(0x2, 0x1000, 0x220, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r6 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, r6) sendmsg$nl_netfilter(r2, &(0x7f00000028c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f0000002540)={0x340, 0x9, 0x2, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@generic="b6348abab78d72f6f47620cf188b803df9cb27d4e3e68fe0604abd93f7ad3bfae0defa8165f1e95e73596d3bdf6c7c28e0e1d8f3168f7a5ab06bc70e65ddfde3286f4b228b6e9d0cf5ed2d2356b88db61d3e88986bc01fea9adf3986dc80f2a8051a0e9db206fb06777d91effa3321abb62abffa56bbe63718dc2052f6d73e0c0ddb4bc79ef515d8252286fbc54a1dc894da4d9026ee24fbd6672a3affc29cbda829da6f216e6b87ad2fe445df3e65b26f8424d309f6b22da89d520db1edcda420e87539c073", @nested={0x1d0, 0x3f, [@generic="2a10b9741126f324a349500cc17b048904bae3c1aa9fbeda379eed683fd29a817d313abe4d570fc4291e34769b74ee3dc75714cc8246caa96b2bee2622b01ed76adbb967409a329e579660963849d55b25fe9a25bf6dfc1beef722c43c10308c842b3b790a7c1d689f83fd9a437cf3f309f0bfee9d2b54780ac806bd8475502f536843b90ea4bc941c4824fbccf4e8fa9b93c852a8805876bb4f66e6e80e384e781e0fcaaf924d8d2e7369774cd36a0d53395a0e955d5a2e771c3369db77a46453fd471ca6279b547f", @typed={0xc, 0x68, @fd=r1}, @generic="b440ffbb5f3885e8f5dbc242cf35a2a195b555a7a19dc8d1df76d3932baecd6c14c045d3b13ffa7f41", @typed={0xcc, 0x8e, @binary="6695ce9f877e3ce46e7addcac78eea613748e081f6a2b19830f9a74818ebe262543ca0d088ef86379315207946a6bb1412028d8ed642ee1bcb76feaddb0e20d1b8921f4f90dd46813e40b711f1fbe4c08b16528d96df4b03758d7eb5a8188732992ad22dfda164c61d2cb77064e57ceaa41c45ad50a3b4daea74e8084abc0490dbf14a2b85ba0d20d02c049832b5eb60af7c0aeeb4226f77aee188e1a3344e461321e3ef1748f98301b40d05a6fb6a53d5f474b34ce64750ea89f00ec6f585821067bf"}]}, @nested={0x94, 0x8f, [@generic="a2ea48dbd9f79db6d16830bae7c493798697df2a2eed10ea5ff4d531a919124645a1d4be74870a35cee9e6940585f0e197ca897d078d1c322bac5cd81e17cc540c3e0d845d637ad50f63d39275b431f1c8ea24d40689aad011d2079c815478fd31c2a1b9ef0f54acc3902d4543c91798b46c02dfa7ad774c7bae8ed0235aab5fb3", @typed={0xc, 0x18, @u32=0x6}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 2018/02/26 20:09:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_yield() sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000600000000000087000000000c00010877204c7e00000000", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:31 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'vlan0\x00', @ifru_addrs={0x2, 0x4e22, @multicast1=0xe0000001}}) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000004c0)) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x40, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}, 0x1db) [ 313.250925] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 313.258168] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x490002) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000240)=0x3, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000008f2a600800000000000000b49bcec219c6af4fbd6fc4486b7ff4d9d86b852d89418ac1f800c887e2eddfe2179981adae8870c4c55f873eb4b75d3b31b42438c678c0b6bbc71088532e9ae70991ee634e0467cec6daabf68a1c912aebf385c63cd4d97280efa216642affd13e22371c7a3d1fc10a0b90b347a165ab"]) 2018/02/26 20:09:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000480)={0x40001, 0x0, [0x759267b3, 0x101, 0x2, 0x1, 0xfffffffffffffff9, 0x8, 0x3, 0xf0]}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20c26730572546a749000000060601000000000000000000cd5268d49446556a00", @ANYRES32], 0x20}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) sched_yield() clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="03000000000800050000004000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="0100008001000000000000a0080300006c9b60bdb1647dba"], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440)=0x210, 0x4) 2018/02/26 20:09:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000fc0)=@broute={'broute\x00', 0x20, 0x3, 0xe00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000080), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x4, 0x88fd, 'yam0\x00', 'syzkaller0\x00', 'dummy0\x00', 'teql0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xb8, 0x120, 0x198, [@limit={'limit\x00', 0x20, {{0xfffffffffffff64d, 0x5, 0x7, 0x5, 0x401}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@dnat={'dnat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2a83, 0x0, 0x400, 0x0, 0x0, "af808833a8c2e0b5a171ce2bf0b34b5823d338ce180916a5e22315da2deefce1f7c124f156a9b6b9a01dd79a104a5d5da5134b9ba6d063cf4011442c6dd0e52c"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x0, []}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x0, []}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x0, 0x0, 0x63f5, 'erspan0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', 'sit0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, [0x0, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xa90, 0xac0, 0xaf0, [@u32={'u32\x00', 0x7c0, {{[{[{0x10000, 0x3}, {0x100000001, 0x3}, {0x3, 0x1}, {0x8, 0x1}, {0x1000, 0x3}, {0x2, 0xd7e87a1abd1020e6}, {0xfffffffffffffc01, 0x3}, {0x4000000000000000, 0x3}, {0x7, 0x2}, {0x7f, 0x2}, {0x0, 0x2}], [{0x2, 0x7ca}, {0x0, 0x10001}, {0xb, 0x3ff}, {0xffffffffffffff49}, {0x3, 0x6}, {0x5, 0x7}, {0x80000000, 0x4}, {0xfffffffffffeffff}, {0x5, 0x8}, {}, {0xf8, 0x1}], 0xa, 0xb}, {[{}, {0x7f, 0x2}, {0x6, 0x1}, {0x5186}, {0x1ff}, {0x81, 0x3}, {0x401, 0x2}, {0x4, 0x1}, {0x7f}, {0x0, 0x3}, {0x401}], [{}, {0x6, 0xffffffff}, {0x2, 0xd2}, {0x2, 0x101}, {0xea93, 0x3}, {0x4, 0x48fb}, {0xba28, 0xfffffffffffffffb}, {0x6, 0xffffffffffffff01}, {0x4f4, 0x7}, {0x3, 0x4}, {0x5, 0x5}], 0x6, 0x2}, {[{0x100000001, 0x3}, {0xffffffffffffffff, 0x2}, {0x5}, {0x1, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x6, 0x3}, {0xf8, 0x3}, {0x7, 0x3}, {0x4, 0x3}], [{0xaa39, 0x1}, {0x8001, 0x12}, {0x9, 0x7}, {0x8000000000, 0xf7}, {0x7f, 0x9}, {0x6, 0x3}, {0x3, 0xfffffffffffffff9}, {0x4, 0x400}, {0x0, 0x3}, {0x80, 0x7}, {0x4}], 0xa, 0xa}, {[{0x7fff, 0x1}, {0xfffffffffffffffe, 0x2}, {0x4, 0x3}, {0x100000001, 0x3}, {0x2, 0x1}, {0x8}, {0x10000, 0x2}, {0x6, 0x2}, {}, {0x2, 0x2}, {0x490, 0x3}], [{0x100000001, 0x7}, {0x20, 0x9}, {0x1, 0x4da6561}, {0x81}, {0xa, 0x1}, {0x40, 0x400}, {0x3}, {0x6, 0xde0}, {0x9, 0x7fffffff}, {0x81, 0x80000000}, {0xffffffff, 0xffff}], 0x5, 0xa}, {[{0x4, 0x2}, {0xffffffffffffff01}, {0x4, 0x2}, {0x800, 0x3}, {0x782, 0x2}, {0x6, 0x1}, {0xc000000000000000, 0x3}, {0x87, 0x1}, {0x7fffffff, 0x3}, {0x4, 0x3}, {0x1, 0x1}], [{0x45, 0x2}, {0x6, 0xffffffffffffff7f}, {0x6, 0x80000000}, {0x7, 0x80000001}, {0x7, 0x53c}, {0x5, 0x6}, {0x101, 0xa6c}, {0x800, 0x8bd}, {0x57, 0x4}, {0x2f77249b}, {0x81, 0x1}], 0x4, 0x9}, {[{0x5, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x8, 0x3}, {0x3, 0x3}, {0xc50, 0x3}, {0xffff, 0x3}, {0x0, 0x3}, {0x2, 0x1}], [{0x45d2, 0x598}, {0x2, 0x6}, {0x1, 0x2}, {0x40, 0x14e4200000}, {0x7, 0x100}, {0x4, 0x80000000}, {0x9, 0x10001}, {0xba71, 0x200}, {0x1, 0x2}, {0x10001}, {0x0, 0x9}], 0x4, 0x7}, {[{0x1, 0x3}, {0x9, 0x2}, {0xfffffffffffffffe, 0x1}, {0x3f, 0x1}, {0x9, 0x1}, {0x7}, {0x4, 0x3}, {0xfffffffffffffff9, 0x3}, {0x7, 0x2}, {0x3c8a, 0x3}, {0x9a, 0x2}], [{0x7fffffff}, {0x1, 0x2}, {0x5, 0x40}, {0x0, 0x2}, {0x100000000, 0x8}, {0x3d60000000000, 0x1c7d}, {0x940, 0x101}, {0x10000, 0x4}, {0x1000, 0x2}, {0x0, 0x8}, {0x0, 0x6}], 0x3, 0x3}, {[{0x5, 0x3}, {0x0, 0x3}, {0x10000, 0x2}, {0x1000}, {0x0, 0x3}, {0x6, 0x3}, {0xa3c}, {0x3}, {0x4, 0x1}, {0x1, 0x3}, {0xfffffffffffffffa}], [{0x7, 0x400}, {0x3}, {0x2, 0x2}, {0x3ff, 0x2}, {0x8, 0x6}, {0x4, 0x3}, {0xffff, 0x3ff}, {0x4, 0x1}, {0x64, 0xb}, {0x400, 0x73}, {0x2, 0x4}], 0x1, 0x8}, {[{0x5, 0x1}, {0x3ff, 0x3}, {0x3, 0x3}, {0x1}, {0x80000001, 0x3}, {0x1, 0x2}, {0xfffffffffffffffe, 0x3}, {}, {0x6df4}, {0xffffffffffff0000}, {0x2}], [{0x800, 0x1}, {0xffffffff, 0x8}, {0x2}, {0x7fffffff}, {0x9, 0x15}, {0xffffffffffffff80, 0x9}, {0x6, 0x80}, {0x0, 0x1}, {0x8218, 0x8001}, {0x200}, {0x6, 0x800}], 0x0, 0x6}, {[{0x4, 0x2}, {0x434, 0x1}, {0xffff, 0x1}, {0x1, 0x2}, {0x100, 0x1}, {0x9, 0x1}, {0x3, 0x1}, {0xffffffffffff7079, 0x1}, {0x2a}, {0x1ff, 0x1}, {0xfffffffffffffeae}], [{0xf4d, 0x8000}, {0x1000, 0x100}, {0x2f2}, {0x40, 0x8}, {0x7, 0x4}, {0x1, 0x50}, {0x9, 0x1}, {0xffff, 0x7f}, {0x6, 0x3}, {0x1e, 0x5}, {0x122, 0xffff}], 0xb, 0xa}, {[{0x5, 0x3}, {0xfffffffffffffffe, 0x3}, {}, {0x1, 0x3}, {0x200, 0x3}, {0xfffffffffffffffd, 0x3}, {0x7fffffff, 0x2}, {0xffffffff, 0x1}, {0x9, 0x1}, {0x9}, {0x100000000, 0x1}], [{0xffff, 0x6}, {0x4943, 0x4}, {0x83d, 0x4}, {0x0, 0x4}, {0x8000, 0x80000000}, {0x7e8, 0x6}, {0xe4, 0x55f04854}, {0x6}, {0x8, 0x9}, {0xff, 0xffffffffffffffff}, {0x0, 0x6}], 0x8, 0x6}], 0x1}}}, @bpf0={'bpf\x00', 0x210, {{0x19, [{0x7, 0x6, 0x5, 0xfffffffffffff000}, {0x2, 0x5, 0x12, 0x6}, {0x9, 0x80000001, 0x7fff, 0xffffffff}, {0x6, 0x84ac, 0xffffffff, 0x401}, {0x6, 0x4, 0xffff, 0x1}, {0xb7a, 0x4, 0x400, 0x7}, {0x401, 0x9, 0x61, 0x5}, {0x7, 0x1000, 0x7f, 0x68}, {0xffffffff, 0x7ff, 0x3, 0x6}, {0x5, 0xa1d, 0x7, 0x62aa}, {0x3, 0x5, 0x8, 0xd05e}, {0x0, 0x2000000, 0x7, 0x4}, {0x3ff, 0x7, 0x0, 0x1}, {0x4, 0x100000000, 0xaa90, 0x8}, {0x0, 0xb5, 0x3abf24ed, 0xffffffffffff0000}, {0x1, 0x1, 0xffffffffffffff81, 0x8e9}, {0x3, 0x5, 0x8, 0xfffffffffffffa70}, {0x1, 0x5, 0x8001, 0x6}, {0x7, 0x100, 0xda, 0x9}, {0x100000001, 0x43442f3c, 0x1, 0x4}, {0x80, 0x400, 0x0, 0x1}, {0x401, 0x7, 0xfffffffffffffffa, 0x7fffffff}, {0xffffffffffffffc1, 0x7, 0x1, 0x80}, {0x2, 0x8, 0xffff, 0xa252}, {0x9, 0x2, 0x8, 0x1}, {0x5, 0x6, 0x7f, 0x7}, {0xffffffffffffffff, 0x20, 0x3, 0xffff}, {0x100000000, 0x0, 0x1f, 0x9}, {0x100000000, 0x840, 0x200, 0x800}, {0x7f, 0x5, 0x81, 0x8001}, {0x7, 0x3ff, 0x5, 0x3}, {0x5, 0xffc, 0xfffffffffffffb2b, 0x5}, {0x10001, 0x1000, 0x7, 0x8}, {0x2, 0x7f, 0x8000, 0x1}, {0x2, 0xffffffffffffffe0, 0x2, 0x40}, {0x40, 0xd681, 0x8, 0x100}, {0x3, 0x4, 0x6, 0x2}, {0xfffffffffffffc01, 0x20, 0x8014, 0xd3b}, {0x7fff, 0x5, 0x7}, {0x1, 0x400, 0xffff, 0x3}, {0x1ff, 0xffff, 0x1, 0x5}, {0x7f, 0x9, 0x1, 0x1}, {0xfff, 0x8, 0xa30, 0x2}, {0x5, 0x9, 0x6, 0x1}, {0x5, 0x586, 0x7, 0x1}, {0xffff, 0x7ff, 0x10000, 0x7ff}, {0x2, 0x10000, 0x8, 0x2c0}, {0x6, 0xfa23, 0x101, 0x20}, {0x200, 0x9, 0x100000001, 0x5}, {0x0, 0x9, 0x6, 0xb5}, {0x5, 0x5, 0x200, 0x3}, {0xfffffffffffffffd, 0x3, 0x1, 0x8}, {0x4c, 0xfcdb, 0x6, 0x8}, {0xcd, 0x100, 0x4, 0x1732}, {0x20000000000000, 0x8, 0x3, 0x6}, {0x8b77, 0x10001, 0x10000, 0x8}, {0x8, 0x2, 0xff, 0x4}, {0x400, 0x4, 0xffffffffffff8000, 0x9}, {0x8, 0x10000, 0x8001, 0x8}, {0x1000000000000, 0x9, 0x5, 0xfffffffffffffffd}, {0x6, 0x5, 0x2, 0x6}, {0x279ffa99, 0x2, 0x1, 0x40}, {0x40, 0x1, 0x10000, 0x2}, {0xffffffffffff8000, 0x2, 0x6, 0x8}], 0x3}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffeffff}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {{{0x3, 0x3, 0x601f, 'rose0\x00', 'ip6gre0\x00', 'ipddp0\x00', 'rose0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="a016dc0b1a04", [0x0, 0x0, 0xff, 0xff, 0xff], 0x70, 0x70, 0xb8, []}, []}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x5, 0x6}}}}]}]}, 0xe78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:31 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x30, r2, 0x0) r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0xd63, 0x4) 2018/02/26 20:09:31 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x2000000, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x1, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/02/26 20:09:31 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create(0x40000000000985) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x81}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x6}, 0x8) signalfd4(r0, &(0x7f0000000000)={0x2a5}, 0x8, 0x800) dup3(r1, r0, 0x0) 2018/02/26 20:09:31 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) migrate_pages(r4, 0x1ff, &(0x7f0000000040)=0x8000, &(0x7f0000000080)=0x6) 2018/02/26 20:09:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000b2000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000a92000), 0xfffffffffffffc85, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000aebffc), 0x4) writev(r1, &(0x7f0000793fa0)=[{&(0x7f0000dfa000)="06", 0x1}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:31 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x7, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x11, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000005c0)=""/15) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/82, 0x52}, {&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/251, 0xfb}, {&(0x7f0000000200)=""/44, 0x2c}], 0x4, 0x23) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffff000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000000000000000000000000000000000000000001000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060fa84a3fd6678fe4c943e640826741e50083150fdf1b1175e0f132f0d1fa9a6f3b67c18fdd1b2fb5efd28965c37d5ffc285cdfc5f0bd94f60719b66973ce015094c25375b1a8a0e274392205ecfbb04ce4bc8fa08cce7"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:31 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80100, 0x1) ioctl$TCSBRK(r1, 0x5409, 0xffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:31 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:31 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x42, 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r2, r1, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) r4 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000000)={0x20071026, r4}, &(0x7f0000000040)={0x3, 0x3, 0x8, 0xd1f5, 0x0, 0x1}) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) sendmsg(r1, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca4ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 313.417240] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 313.451788] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 313.463904] syz-executor5 cpuset=/ mems_allowed=0 [ 313.468793] CPU: 0 PID: 10374 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 313.476163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.485495] Call Trace: [ 313.488069] dump_stack+0x194/0x24d [ 313.491679] ? arch_local_irq_restore+0x53/0x53 [ 313.496323] ? idr_get_free+0xfd0/0xfd0 [ 313.500274] ? kernel_text_address+0x102/0x140 [ 313.504843] warn_alloc+0x19a/0x2b0 [ 313.508449] ? zone_watermark_ok_safe+0x400/0x400 [ 313.513277] ? save_stack+0xa3/0xd0 [ 313.516882] ? save_stack+0x43/0xd0 [ 313.520482] ? kasan_kmalloc+0xad/0xe0 [ 313.524342] ? __kmalloc_node+0x47/0x70 [ 313.528290] ? kvmalloc_node+0x64/0xd0 [ 313.532164] __vmalloc_node_range+0x4f0/0x650 [ 313.536641] ? lock_downgrade+0x980/0x980 [ 313.540767] ? xt_alloc_entry_offsets+0x21/0x30 [ 313.545414] __vmalloc_node_flags_caller+0x50/0x60 [ 313.550318] ? xt_alloc_entry_offsets+0x21/0x30 [ 313.554967] kvmalloc_node+0x82/0xd0 [ 313.558659] xt_alloc_entry_offsets+0x21/0x30 [ 313.563134] translate_table+0x235/0x1690 [ 313.567258] ? lock_release+0xa40/0xa40 [ 313.571208] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 313.577067] ? __check_object_size+0x8b/0x530 [ 313.581544] ? __might_sleep+0x95/0x190 [ 313.585496] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 313.590317] ? kasan_check_write+0x14/0x20 [ 313.594529] ? _copy_from_user+0x99/0x110 [ 313.598655] do_ip6t_set_ctl+0x370/0x5f0 [ 313.602695] ? translate_compat_table+0x1c50/0x1c50 [ 313.607703] ? mutex_unlock+0xd/0x10 [ 313.611392] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 313.616651] nf_setsockopt+0x67/0xc0 [ 313.620347] ipv6_setsockopt+0x10b/0x130 [ 313.624388] tcp_setsockopt+0x82/0xd0 [ 313.628170] sock_common_setsockopt+0x95/0xd0 [ 313.632650] SyS_setsockopt+0x189/0x360 [ 313.636607] ? SyS_recv+0x40/0x40 [ 313.640044] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 313.645557] ? do_syscall_64+0xb6/0x940 [ 313.649510] ? SyS_recv+0x40/0x40 [ 313.652936] do_syscall_64+0x280/0x940 [ 313.656798] ? __do_page_fault+0xc90/0xc90 [ 313.661019] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 313.666535] ? syscall_return_slowpath+0x550/0x550 [ 313.671439] ? syscall_return_slowpath+0x2ac/0x550 [ 313.676348] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 313.681695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.686522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.691685] RIP: 0033:0x453d69 [ 313.694847] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.702529] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 313.709773] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 313.717023] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 313.724270] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 313.731516] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 313.738840] warn_alloc_show_mem: 2 callbacks suppressed [ 313.744219] Mem-Info: [ 313.746668] active_anon:73523 inactive_anon:61 isolated_anon:0 [ 313.746668] active_file:3747 inactive_file:9306 isolated_file:0 [ 313.746668] unevictable:0 dirty:157 writeback:0 unstable:0 [ 313.746668] slab_reclaimable:12538 slab_unreclaimable:93941 [ 313.746668] mapped:24377 shmem:86 pagetables:770 bounce:0 [ 313.746668] free:1407107 free_pcp:414 free_cma:0 [ 313.780040] Node 0 active_anon:306428kB inactive_anon:244kB active_file:14988kB inactive_file:37224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97508kB dirty:628kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 313.807994] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.834175] lowmem_reserve[]: 0 2864 6373 6373 [ 313.838817] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:312kB free_cma:0kB [ 313.842468] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 313.866539] lowmem_reserve[]: 0 0 3509 3509 [ 313.866563] Node 0 Normal free:2650412kB min:37120kB low:46400kB high:55680kB active_anon:323020kB inactive_anon:248kB active_file:14996kB inactive_file:37244kB unevictable:0kB writepending:684kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5536kB pagetables:3212kB bounce:0kB free_pcp:396kB local_pcp:168kB free_cma:0kB [ 313.866585] lowmem_reserve[]: 0 0 0 0 [ 313.866602] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 313.866672] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB [ 313.879937] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 313.881776] (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 313.881836] Node 0 Normal: 285*4kB (UE) 703*8kB (UE) [ 313.911684] syz-executor5 cpuset= [ 313.915426] 307*16kB (UE) 1388*32kB [ 313.928963] / [ 313.935177] (UME) [ 313.946951] mems_allowed=0 [ 313.957852] 1054*64kB (UM) 168*128kB (UM) 30*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 21*2048kB (UME) 590*4096kB (UM) = 2650268kB [ 313.957900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.957905] 13146 total pagecache pages [ 313.963090] CPU: 1 PID: 10405 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 313.966527] 0 pages in swap cache 2018/02/26 20:09:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x3, 0x20900) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fremovexattr(r0, &(0x7f0000000300)=@random={'osx.', 'security,\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='status\x00') write$selinux_access(r2, &(0x7f00000002c0)={'system_u:object_r:getty_etc_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x36, 0x31}, 0x3b) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x1, 0xa512, 0x6, 0x9, 0x10000, 0x6, 0x1f, 0x20, 0x0, 0x5, 0x2, 0xffffffff}) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r4 = memfd_create(&(0x7f0000000040)="707070312a47504c6d643573756d73656c696e75786d643573756d766d6e6574312d8c7b00", 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000100)={0x0, 0x1f, 0x524, 0x0, 0xf}) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000340)) 2018/02/26 20:09:32 executing program 0: pipe(&(0x7f0000000700)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={0x0, 0x8}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000007c0)={r1, 0x7, 0x4}, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r2, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x80000001, 0x4000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x200, 0x2, [0xad14, 0x8283]}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={r4, 0xf9, "b158b730e5da93f0d6af20878b37eb75ed96f85b955bac5e7f2e27af9673df7a11a5cfc2cc83b725f20d4ee0873454fcc9c479f606d4636e2135b46ba802016c2662aa028a873b28dccc9aa14197b574ab7de15dfa0c59ec38ee3fbf69b23f8972db7c9c37ec3427e468aef366b3a8939b8144231db6ef6942ee6b3a381feb46f0c5cff40f7f402a38d161b01854522ef8a0c314536fbd4d37177c3fa9785b1dcb251940b1e7653923087dcc6d901547867cb7f434d3090e0d21585f7d9e41d4377dc04858b6cd9f7c57f1c052c2fe4ab95ac95d4226e873a88e065c357993ce776864b4a00ded6cd2a9e0047e2f82ec872ae9f47b43b19d60"}, &(0x7f00000006c0)=0x101) [ 313.970199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.970203] Call Trace: [ 313.970226] dump_stack+0x194/0x24d [ 313.971917] Swap cache stats: add 0, delete 0, find 0/0 [ 313.974039] ? arch_local_irq_restore+0x53/0x53 [ 313.974048] ? idr_get_free+0xfd0/0xfd0 [ 313.976982] Free swap = 0kB [ 313.988650] ? kernel_text_address+0x102/0x140 [ 313.988674] warn_alloc+0x19a/0x2b0 [ 313.997220] Total swap = 0kB [ 314.001163] ? zone_watermark_ok_safe+0x400/0x400 [ 314.001188] ? save_stack+0xa3/0xd0 [ 314.008516] 1965969 pages RAM 2018/02/26 20:09:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x1, 0x220800) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=0x0, &(0x7f0000000540)=0x4) truncate(&(0x7f00000005c0)='./file0\x00', 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x8, 0x10}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000004c0)={0x20000009}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 314.011933] ? save_stack+0x43/0xd0 [ 314.011940] ? kasan_kmalloc+0xad/0xe0 [ 314.011948] ? __kmalloc_node+0x47/0x70 [ 314.021284] 0 pages HighMem/MovableOnly [ 314.023829] ? kvmalloc_node+0x64/0xd0 [ 314.023853] __vmalloc_node_range+0x4f0/0x650 [ 314.027457] 329725 pages reserved [ 314.032800] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.032811] __vmalloc_node_flags_caller+0x50/0x60 [ 314.082635] audit: type=1400 audit(1519675772.236:173): avc: denied { setattr } for pid=10417 comm="syz-executor4" name="NETLINK" dev="sockfs" ino=139458 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 314.086326] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.086342] kvmalloc_node+0x82/0xd0 [ 314.086355] xt_alloc_entry_offsets+0x21/0x30 [ 314.144238] translate_table+0x235/0x1690 [ 314.148394] ? lock_release+0xa40/0xa40 [ 314.152368] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 314.158257] ? __check_object_size+0x8b/0x530 [ 314.162756] ? __might_sleep+0x95/0x190 [ 314.166730] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 314.171558] ? kasan_check_write+0x14/0x20 [ 314.175771] ? _copy_from_user+0x99/0x110 [ 314.179900] do_ip6t_set_ctl+0x370/0x5f0 [ 314.183942] ? __local_bh_enable_ip+0x121/0x230 [ 314.188591] ? translate_compat_table+0x1c50/0x1c50 [ 314.193599] ? mutex_unlock+0xd/0x10 [ 314.197293] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 314.202551] nf_setsockopt+0x67/0xc0 [ 314.206245] ipv6_setsockopt+0x10b/0x130 [ 314.210290] tcp_setsockopt+0x82/0xd0 [ 314.214074] sock_common_setsockopt+0x95/0xd0 [ 314.218551] SyS_setsockopt+0x189/0x360 [ 314.222505] ? SyS_recv+0x40/0x40 [ 314.225941] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 314.231459] ? do_syscall_64+0xb6/0x940 [ 314.235414] ? SyS_recv+0x40/0x40 [ 314.238845] do_syscall_64+0x280/0x940 [ 314.242708] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.247180] ? finish_task_switch+0x1c1/0x7e0 [ 314.251655] ? syscall_return_slowpath+0x550/0x550 [ 314.256567] ? syscall_return_slowpath+0x2ac/0x550 [ 314.261474] ? prepare_exit_to_usermode+0x350/0x350 [ 314.266466] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 314.271812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.276638] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.281802] RIP: 0033:0x453d69 [ 314.284969] RSP: 002b:00007fae81ac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.292653] RAX: ffffffffffffffda RBX: 00007fae81ac16d4 RCX: 0000000000453d69 [ 314.299899] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 314.307145] RBP: 000000000072c010 R08: 0000000000000004 R09: 0000000000000000 [ 314.314390] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 314.321635] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000002 2018/02/26 20:09:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x40000081}, {0xbff, 0x0, 0x9}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = getpgid(0x0) r3 = fcntl$getown(r0, 0x9) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a00)=0x0) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8080}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000180)={0x3cc, 0x20, 0x800, 0x70bd26, 0x25dfdbfc, "", [@nested={0xc, 0x6d, [@typed={0x8, 0x43}]}, @generic="f2b62124fec078496be2cd86086b8d4922e24d9a0d9d15dcc89b5f7053e703a9938f752d96086b50ccde5b3726144dd0f5843db43b810cc60d299a5d74924c65e614395c883c6264ce6e4b0d9435d394db90ec3f9c72466bf7c1ba6b7125ffab71822dcc6970404c7a4d6619aca3551a81822aca201c93000b95e212387e76199432f08cceb330", @nested={0x150, 0x5b, [@generic="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", @typed={0x38, 0x55, @binary="052cb5651d1e79f1aa335e15424bc6c6fd58b4d5d32b7762388f9acb7b1144f9dcea3b604e816eaaba2461197fd605"}, @typed={0x8, 0x2c}, @typed={0xc, 0x56, @pid=r1}]}, @generic="3c0c76530489d7be9ac59fd4cfd407aad0c5d04220325e36ebabb994938ae0b1d793f1af3e32cdd7394bc3d2e0937322162bfc5330969078e31a6dcf817b7d02cf3a4693d28737166e1e76650fff8810c5b29c3d5acd75f514a2a6626886b15d0e858703bb07d8", @typed={0x7c, 0xf, @binary="581df810d08c3032a08dedf03e8a49b986b099b152db4bef25cf62fe5a74f707019c9c2c90f0fec2463e0ae7f58493895ae76c8d47feddd8cec1474c7a34d14ac2c6788e26dea5711fc7eeb4f8290d310c64d8c091f6095e1664f19e55d6fcb638ebfc03265701f7e1d279db1519e12af09c32"}, @generic="794c8fc74d256daf61e93d57c565caad6d6d7f92538805a4e4601e5c1d8b1442da5a432e275114a50936017d112b370b1d386bddc9b67fbc1990fdbe9bfddcaeb869ebcf67510636b019d5d04e86ca6f202e991cd5a42cf500f5b2881eb7bf455ccf2ba5a49aab3a69a50fbca5d19d261ad7b2fadb31f4f184fe68f363954fcb03661ed818f37f63e9382b97db081beaa8ff7d639af8708519a90933c902a12f414412464b2bbdf6900d99136ae459e9dbc594de441ba8dfda486f086d12a08c9f6f951945d544d321726f113520e2f6521a403f2ba988aee508554ba44f9d348171e6", @typed={0x10, 0x29, @u64=0xd2b2}]}, 0x3cc}, {&(0x7f0000000580)={0x178, 0x2b, 0x120, 0x70bd2c, 0x25dfdbfe, "", [@generic="34585c5afe9514669890d0e044f8f9cfbc0e49291d", @typed={0x18, 0x12, @ipv6=@loopback={0x0, 0x1}}, @typed={0xc, 0x38, @u32=0xfffffffeffffffff}, @nested={0x114, 0x8c, [@generic="23103181d0dd3c8a692006c903ab20ff516a866f7a8c27a255f8f462470984ab0397230bd7b7b0bca99894646b63c6eea686028502bac1c61e9b519a80fa8597f9a8b8c9ca125599765e64b24166ae7bdf10d6bd0f9b826cd9a0c342e6bc9c10c68ec4", @typed={0xc, 0x46, @fd=r0}, @generic="6755e05b7c17a33c7e6327433301d81bcba2e4ca5b252e76e91bcf2fc731a89db19973e7213e264d5b74dbce6722ffd4b8d82079e42d03d626e8ad09d6340b0f37503d2ff4864eece7774f8a7d4e76a05ff0a2a8f0a89cb63a34ab82b9457acf62af8c2da5c15c8df5bf6f755164bfe783b537565b29783e0aa47ab291d330f615e2139116a4ba305d583e005a6352ebd68eae", @typed={0xc, 0x53, @pid=r2}]}, @typed={0x18, 0x17, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x178}], 0x2, &(0x7f0000000b80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x10, 0x1, 0x1, []}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x88, 0x24000000}, 0x4000000) r12 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x10001, 0x1) setsockopt$inet_mreq(r12, 0x0, 0x20, &(0x7f0000000100)={@multicast1=0xe0000001, @multicast2=0xe0000002}, 0x8) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:32 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x9, 0x6b3, 0x5, 0x80, 0x2, 0x9, 0x1}, 0x1c) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x401}, 0x8) close(r0) ioctl$VT_WAITACTIVE(r2, 0x5607) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="128854d344621871cbb1385a0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="3b52459d35f555a7bce2acfc4643d4cb7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff78030000ffffffff", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000540)={0x3, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}}, 0x88) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) 2018/02/26 20:09:32 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xc0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r1, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) getpeername$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, 0x9, 0x9, 0x6, 0x100, 0xe706, 0x40, r2}) r3 = memfd_create(&(0x7f00000002c0)='/dev/rfkill\x00', 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x100, 0x8, 0x0, 0xce, 0x7, 0x6ab, 0x20, 0x3, r4}, 0x20) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000400)={0xfd4, 0x5, 0xffffffff, 0x0, 0x6, 0x20}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000440)={0x1, r1}) setsockopt$inet6_int(r6, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r1, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r7 = getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=r7) ptrace$getenv(0x4201, r7, 0x100000000, &(0x7f0000000300)) 2018/02/26 20:09:32 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0xf041de, 0x3d38, 0x0, 0x1ff, 0x65}, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:32 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) dup3(r1, r0, 0x0) [ 314.405633] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 314.411046] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 314.424846] syz-executor5 cpuset=/ mems_allowed=0 [ 314.429754] CPU: 0 PID: 10438 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 314.437109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.446449] Call Trace: [ 314.449026] dump_stack+0x194/0x24d [ 314.452636] ? arch_local_irq_restore+0x53/0x53 [ 314.457281] ? idr_get_free+0xfd0/0xfd0 [ 314.461234] ? kernel_text_address+0x102/0x140 [ 314.465806] warn_alloc+0x19a/0x2b0 [ 314.469411] ? zone_watermark_ok_safe+0x400/0x400 [ 314.474241] ? save_stack+0xa3/0xd0 [ 314.477847] ? save_stack+0x43/0xd0 [ 314.481448] ? kasan_kmalloc+0xad/0xe0 [ 314.485309] ? __kmalloc_node+0x47/0x70 [ 314.489258] ? kvmalloc_node+0x64/0xd0 [ 314.493130] __vmalloc_node_range+0x4f0/0x650 [ 314.497605] ? lock_release+0xa40/0xa40 [ 314.501566] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.506211] __vmalloc_node_flags_caller+0x50/0x60 [ 314.511118] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.515765] kvmalloc_node+0x82/0xd0 [ 314.519459] xt_alloc_entry_offsets+0x21/0x30 [ 314.523930] translate_table+0x235/0x1690 [ 314.528062] ? retint_kernel+0x10/0x10 [ 314.531935] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 314.536762] ? _copy_from_user+0x99/0x110 [ 314.540893] do_ip6t_set_ctl+0x370/0x5f0 [ 314.544935] ? translate_compat_table+0x1c50/0x1c50 [ 314.549938] ? mutex_unlock+0xd/0x10 [ 314.553626] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 314.558882] nf_setsockopt+0x67/0xc0 [ 314.562579] ipv6_setsockopt+0x10b/0x130 [ 314.566621] tcp_setsockopt+0x82/0xd0 [ 314.570405] sock_common_setsockopt+0x95/0xd0 [ 314.574882] SyS_setsockopt+0x189/0x360 [ 314.578837] ? SyS_recv+0x40/0x40 [ 314.582275] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 314.587794] ? do_syscall_64+0xb6/0x940 [ 314.591747] ? SyS_recv+0x40/0x40 [ 314.595174] do_syscall_64+0x280/0x940 [ 314.599037] ? __do_page_fault+0xc90/0xc90 [ 314.603245] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.607717] ? finish_task_switch+0x1c1/0x7e0 [ 314.612193] ? syscall_return_slowpath+0x550/0x550 [ 314.617101] ? syscall_return_slowpath+0x2ac/0x550 [ 314.622023] ? prepare_exit_to_usermode+0x350/0x350 [ 314.627021] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 314.632367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.637196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.642360] RIP: 0033:0x453d69 [ 314.645526] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 2018/02/26 20:09:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) inotify_init() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000200)={r4}) sendmsg$nl_netfilter(r2, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/member\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:32 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=0x0, &(0x7f0000000500)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={r2, 0x1, 0x7, 0x10001}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x3, 0x4}]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000380)=[{&(0x7f0000000180)="85bc7a8c6a1ba4dc2b9a5922310337c427034990a6107c0bbabc6401d58b475f66f9ae5ea690ced2a70cc8b0b3b6e8df", 0x30}, {&(0x7f00000001c0)="8ab575a6b3b8cae32d95f23d78adb5bbd21f82088d859e583036feb8066de9", 0x1f}, {&(0x7f0000000200)="ba568132d3cd9efdf4357d6728588cd69938b94214e03cb8dea3d5ea9e9b04e605c0af9af0823fa0e76e48db7fb11d69267d0f99ca2efefd9b2447dc24a37477a41f2190e22cc5e39304d1199768dd5b187ae7f5a34e08a1db7c9210a2f372708f9a1e1aecd4c9ccad491877fa3175426508c401147c7b72", 0x78}, {&(0x7f0000000280)="3b236b3eb5ab331e55d3505ab001ca5f2358a5b65e94dd8ddb53b09a0d75626e6df2522a2d52b022add5201eeec0dcfc90c8d27283ae855262dc8c129f61b1260f8f81646ea9bcc2c87ac639500ce9e5006462b335fcfe0b9420f122f8a6ef2bf4ce13b1db4fecfdf69be41128202fa214b16c82c48603b3c13af11cd309a2b44245a9fdb3ad8437e0188fb94491787d4986529dcb1d8ce964a1db79c155790c334f1a23b78afe3095f01713a3c285db03e1c3eefb75816c57eb7a058b8bc61fca62658ed960fb47dbde54cffc49c6952c14c46e4510b9d992bda1357093494e83f193b44f", 0xe5}], 0x4}, 0x8c4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r5, 0x4}, &(0x7f00000000c0)=0x8) [ 314.653210] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 314.660455] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000017 [ 314.667698] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 314.674942] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 314.682184] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:33 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x95, 0x5, 0x101}) ioctl$KDADDIO(r1, 0x4b34, 0x3800) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) fcntl$getown(r1, 0x9) 2018/02/26 20:09:33 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000000)={0x100000000, 0x2283}) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000100)="1e7cfd440ef8707dd5dad3c155d9ff31fdb6bf5aa5a4d0e508f9c785b1b40f4f09ae5c412e69b1aafcbee9abfea767451eae41834ef733759d9092f2dc517d8b3dc778d0d2e37d39bdbabdb71bde527fb10a8cba6a12824e5012ba2520e079444b75414fb4b66e982bea5a4029d2720915047587ec0d2f55d5208edd5de72538bb74b3300d2347930e5f1bf029aa23d02f76a8e681e6fc7a7953a8eacb48e4bb2a3b9f35c65275b8fff543974e983965e91e02cbdae3a51b2ad74b6b543bd3bf21f3117e305163574aab2f547e7161ce8caf68fd961b9d5b5e91b6d52694bc84f9f2b126e20bcdca2c8367bcbb2f4616647b086cd0c3a27cac699a82735b30") sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 314.711880] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 314.723841] sctp: [Deprecated]: syz-executor6 (pid 10454) Use of int in maxseg socket option. [ 314.723841] Use struct sctp_assoc_value instead [ 314.735184] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 314.743131] sctp: [Deprecated]: syz-executor6 (pid 10454) Use of int in maxseg socket option. [ 314.743131] Use struct sctp_assoc_value instead [ 314.761484] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 314.773434] syz-executor5 cpuset=/ mems_allowed=0 [ 314.778340] CPU: 0 PID: 10438 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 314.785700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.795054] Call Trace: [ 314.797663] dump_stack+0x194/0x24d [ 314.801303] ? arch_local_irq_restore+0x53/0x53 [ 314.805968] ? idr_get_free+0xfd0/0xfd0 [ 314.806726] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 314.809936] ? kernel_text_address+0x102/0x140 [ 314.809963] warn_alloc+0x19a/0x2b0 [ 314.809981] ? zone_watermark_ok_safe+0x400/0x400 [ 314.810008] ? save_stack+0xa3/0xd0 [ 314.810020] ? save_stack+0x43/0xd0 [ 314.810028] ? kasan_kmalloc+0xad/0xe0 [ 314.810036] ? __kmalloc_node+0x47/0x70 [ 314.810044] ? kvmalloc_node+0x64/0xd0 [ 314.810064] __vmalloc_node_range+0x4f0/0x650 [ 314.853586] ? lock_release+0xa40/0xa40 [ 314.857545] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.862193] __vmalloc_node_flags_caller+0x50/0x60 [ 314.867098] ? xt_alloc_entry_offsets+0x21/0x30 [ 314.871745] kvmalloc_node+0x82/0xd0 [ 314.875444] xt_alloc_entry_offsets+0x21/0x30 [ 314.879918] translate_table+0x235/0x1690 [ 314.884043] ? lock_release+0xa40/0xa40 [ 314.887996] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 314.893862] ? __check_object_size+0x8b/0x530 [ 314.898341] ? __might_sleep+0x95/0x190 [ 314.902293] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 314.907115] ? kasan_check_write+0x14/0x20 [ 314.911324] ? _copy_from_user+0x99/0x110 [ 314.915452] do_ip6t_set_ctl+0x370/0x5f0 [ 314.919493] ? translate_compat_table+0x1c50/0x1c50 [ 314.924500] ? mutex_unlock+0xd/0x10 [ 314.928190] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 314.933445] nf_setsockopt+0x67/0xc0 [ 314.937139] ipv6_setsockopt+0x10b/0x130 [ 314.941192] tcp_setsockopt+0x82/0xd0 [ 314.944974] sock_common_setsockopt+0x95/0xd0 [ 314.949448] SyS_setsockopt+0x189/0x360 [ 314.953400] ? SyS_recv+0x40/0x40 [ 314.956835] ? security_file_ioctl+0x7d/0xb0 [ 314.961217] ? security_file_ioctl+0x89/0xb0 [ 314.965605] ? do_syscall_64+0xb6/0x940 [ 314.969558] ? SyS_recv+0x40/0x40 [ 314.972985] do_syscall_64+0x280/0x940 [ 314.976848] ? __do_page_fault+0xc90/0xc90 [ 314.981057] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.985527] ? finish_task_switch+0x1c1/0x7e0 [ 314.989999] ? syscall_return_slowpath+0x550/0x550 [ 314.994909] ? syscall_return_slowpath+0x2ac/0x550 [ 314.999814] ? prepare_exit_to_usermode+0x350/0x350 [ 315.004808] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.010154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.014976] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.020138] RIP: 0033:0x453d69 [ 315.023305] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.030986] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 315.038230] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000001c [ 315.045471] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 315.052714] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 315.059958] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 315.067280] warn_alloc_show_mem: 2 callbacks suppressed [ 315.067282] Mem-Info: [ 315.075086] active_anon:74555 inactive_anon:61 isolated_anon:0 [ 315.075086] active_file:3749 inactive_file:9320 isolated_file:0 [ 315.075086] unevictable:0 dirty:180 writeback:0 unstable:0 [ 315.075086] slab_reclaimable:12536 slab_unreclaimable:94040 [ 315.075086] mapped:24396 shmem:86 pagetables:792 bounce:0 [ 315.075086] free:1406445 free_pcp:463 free_cma:0 2018/02/26 20:09:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x4, 0x1, 0x0, 0x25dfdbfd, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) 2018/02/26 20:09:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x1000000000000006, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) sync() r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000, 0x20) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) r2 = dup(r0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) 2018/02/26 20:09:33 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 315.108454] Node 0 active_anon:312640kB inactive_anon:244kB active_file:14996kB inactive_file:37280kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97584kB dirty:720kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 83968kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 315.136409] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.162573] lowmem_reserve[]: 0 2864 6373 6373 [ 315.167193] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:312kB free_cma:0kB [ 315.194920] lowmem_reserve[]: 0 0 3509 3509 [ 315.199285] Node 0 Normal free:2677548kB min:37120kB low:46400kB high:55680kB active_anon:296108kB inactive_anon:244kB active_file:14996kB inactive_file:37280kB unevictable:0kB writepending:720kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:5120kB pagetables:3020kB bounce:0kB free_pcp:936kB local_pcp:264kB free_cma:0kB [ 315.229091] lowmem_reserve[]: 0 0 0 0 [ 315.232928] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 315.246732] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 315.262414] Node 0 Normal: 239*4kB (UME) 728*8kB (UME) 295*16kB (UME) 1405*32kB (UME) 1054*64kB (UM) 168*128kB (UM) 28*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 24*2048kB (UME) 595*4096kB (UM) = 2676748kB [ 315.280666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 315.289256] 13154 total pagecache pages [ 315.293253] 0 pages in swap cache [ 315.296731] Swap cache stats: add 0, delete 0, find 0/0 [ 315.302111] Free swap = 0kB [ 315.305148] Total swap = 0kB [ 315.308179] 1965969 pages RAM 2018/02/26 20:09:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) 2018/02/26 20:09:33 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_dccp_int(r2, 0x21, 0x1f, &(0x7f0000000000)=0x100000000, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000200)=""/229) semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0x8001, {{0x2, 0x4e21, @empty}}, 0x1, 0x2, [{{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e23, @broadcast=0xffffffff}}]}, 0x1a8) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) r2 = epoll_create(0x40000000000985) lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='security.selinux\x00', &(0x7f0000000580)="64307130000000000000002000160000", 0x10, 0x2) dup3(r2, r1, 0x0) 2018/02/26 20:09:33 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0xfffffffffffffffe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:33 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) r3 = shmget(0x3, 0x3000, 0x78000c20, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000040)=""/171) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'gretap0\x00', @ifru_flags=0x2}) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x40) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000004c0)=0x20000000000000, &(0x7f0000000540)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xf7cf}, 0x2c1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000140)="0b90fc43c977515a894992d90ff14d7841d07f89579484a799367dd7e724e2aadadc945c7b965a5b7257de2b61fe170988306ad7f3ad6496cdfafd0b013a9a4e6feb82ce3ba843d5ff9fd8577025cf5834b17f32d83abbd82e30f7b3a7730103c1c4e03da832422cd44b2ad1cbf29fc9f3a537d5a1ec2c0a3e326f837f52cf82e6fa97627012c68ade9737c131eece5f29c7c6b6a38bf5773345cb224177d9cbb43092c9f6e5bfc88d89f230dabc4f2ba2de3e3d16b22a611e90c8d62154fabaa190fe3092e640051540f16b10971a6236e494321589b6bea9888cdf828d08b46ade37") sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8001, 0x400) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000002c0)={0x401, 0xfffffffffffff800, 0x58, 0x2}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0x2, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000006080000000000000000", @ANYRES32], 0x12}, 0x1}, 0x7ff) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x202080) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='dummy0\x00', 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x100000001, 0x1f}, 0xc) bind$nfc_llcp(r2, &(0x7f0000000340)={0x27, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x100, "3612c8f8b63713fe64b7e8c4d042055bf4e1f38ca4a9378f7b21b15ab1f2ffc0f1d4caba481025df15eb5b02a9405ae8e89f2865d5bf78e260c8b032198aeb", 0x6}, 0x60) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x82, @local={0xfe, 0x80, [], 0xaa}, 0x7}, 0x1c) [ 315.311291] 0 pages HighMem/MovableOnly [ 315.315280] 329725 pages reserved [ 315.384925] syz-executor5: vmalloc: allocation failure: 16630153216 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 315.396949] syz-executor5 cpuset=/ mems_allowed=0 [ 315.401862] CPU: 0 PID: 10496 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 315.409213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.418548] Call Trace: [ 315.421117] dump_stack+0x194/0x24d [ 315.424726] ? arch_local_irq_restore+0x53/0x53 [ 315.429369] ? idr_get_free+0xfd0/0xfd0 [ 315.433323] ? kernel_text_address+0x102/0x140 [ 315.437892] warn_alloc+0x19a/0x2b0 [ 315.441496] ? zone_watermark_ok_safe+0x400/0x400 [ 315.446324] ? save_stack+0xa3/0xd0 [ 315.449928] ? save_stack+0x43/0xd0 [ 315.453530] ? kasan_kmalloc+0xad/0xe0 [ 315.457388] ? __kmalloc_node+0x47/0x70 [ 315.461336] ? kvmalloc_node+0x99/0xd0 [ 315.465208] __vmalloc_node_range+0x4f0/0x650 [ 315.469689] ? xt_alloc_entry_offsets+0x21/0x30 [ 315.474336] __vmalloc_node_flags_caller+0x50/0x60 [ 315.479238] ? xt_alloc_entry_offsets+0x21/0x30 [ 315.483883] kvmalloc_node+0x82/0xd0 [ 315.487574] xt_alloc_entry_offsets+0x21/0x30 [ 315.492047] translate_table+0x235/0x1690 [ 315.496174] ? lock_release+0xa40/0xa40 [ 315.500126] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 315.505985] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 315.511238] ? __check_object_size+0x8b/0x530 [ 315.515720] ? kasan_unpoison_shadow+0x35/0x50 [ 315.520281] ? __might_sleep+0x95/0x190 [ 315.524234] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 315.529055] ? __might_fault+0x188/0x1d0 [ 315.533091] ? kasan_check_write+0x14/0x20 [ 315.537300] ? _copy_from_user+0x99/0x110 [ 315.541424] do_ip6t_set_ctl+0x370/0x5f0 [ 315.545466] ? translate_compat_table+0x1c50/0x1c50 [ 315.550471] ? mutex_unlock+0xd/0x10 [ 315.554164] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 315.559420] nf_setsockopt+0x67/0xc0 [ 315.563116] ipv6_setsockopt+0x10b/0x130 [ 315.567155] tcp_setsockopt+0x82/0xd0 [ 315.570944] sock_common_setsockopt+0x95/0xd0 [ 315.575420] SyS_setsockopt+0x189/0x360 [ 315.579372] ? SyS_recv+0x40/0x40 [ 315.582806] ? move_addr_to_kernel+0x60/0x60 [ 315.587194] ? do_syscall_64+0xb6/0x940 [ 315.591147] ? SyS_recv+0x40/0x40 [ 315.594574] do_syscall_64+0x280/0x940 [ 315.598438] ? __do_page_fault+0xc90/0xc90 [ 315.602647] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.607118] ? finish_task_switch+0x1c1/0x7e0 [ 315.611594] ? syscall_return_slowpath+0x550/0x550 [ 315.616498] ? syscall_return_slowpath+0x2ac/0x550 [ 315.621404] ? prepare_exit_to_usermode+0x350/0x350 [ 315.626395] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.631740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.636568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.641729] RIP: 0033:0x453d69 [ 315.644899] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.652581] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 315.659825] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000015 [ 315.667069] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 315.674314] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff 2018/02/26 20:09:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0xbfc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000edffffffffffffff00000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000004200000000000000000000000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000010000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000002000000000000800000000feffffff00000000e95556ab2e3055844e2e701c49b58ae18595eaac92e8c784f11bad579f164b30eb067769450cec258244c71213af085d94cad335df28711c6c327104d6ab5ff444f715ce3bb4eaff2dba146321b2f54f12aa177fd9ee6fdae5ddb5dd73eb9323109389099a69346fedec5b7bc82c9d4f779beee9b876dabaab1d91e17a60e2a67b621a5ef59d0bb147247df164d5cfc4b04f21c784ff48a18d38bf078f061c0ac59eea4cb671bc5582b9c9d99e4127a80c562a0a1265e5ad69000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x4}) ioctl$TIOCCBRK(r1, 0x5428) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000606010000000000000000006b474b570000000000000000eb7093923b2272dc4e4f7589cac33d7e652970a5a75354a8f41f7b38c3882c585d7862ab224b996619d474d47b300d59004e", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:33 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f000061b000)=0x1f6) [ 315.681560] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:33 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) set_thread_area(&(0x7f0000000000)={0x84d, 0x0, 0x0, 0x9fe, 0x2, 0x5, 0x7, 0x4, 0x81, 0x9}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="010000009494000000000a00000000000000ff010000000000000000000000000001000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b79d5c473cb667840179f00000000000000000000000000000000000000000000000000000000000000006636000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 315.723285] syz-executor5: vmalloc: allocation failure: 16630153216 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 315.735197] syz-executor5 cpuset=/ mems_allowed=0 [ 315.740106] CPU: 0 PID: 10496 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 315.747452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.756781] Call Trace: [ 315.759349] dump_stack+0x194/0x24d [ 315.762958] ? arch_local_irq_restore+0x53/0x53 [ 315.767600] ? idr_get_free+0xfd0/0xfd0 [ 315.771556] ? kernel_text_address+0x102/0x140 [ 315.776121] warn_alloc+0x19a/0x2b0 [ 315.779728] ? zone_watermark_ok_safe+0x400/0x400 [ 315.784562] ? save_stack+0xa3/0xd0 [ 315.788166] ? save_stack+0x43/0xd0 [ 315.791766] ? kasan_kmalloc+0xad/0xe0 [ 315.795626] ? __kmalloc_node+0x47/0x70 [ 315.799575] ? kvmalloc_node+0x99/0xd0 [ 315.803446] __vmalloc_node_range+0x4f0/0x650 [ 315.807926] ? xt_alloc_entry_offsets+0x21/0x30 [ 315.812568] __vmalloc_node_flags_caller+0x50/0x60 [ 315.817472] ? xt_alloc_entry_offsets+0x21/0x30 [ 315.822122] kvmalloc_node+0x82/0xd0 [ 315.825812] xt_alloc_entry_offsets+0x21/0x30 [ 315.830282] translate_table+0x235/0x1690 [ 315.834410] ? lock_release+0xa40/0xa40 [ 315.838358] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 315.844216] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 315.849466] ? __check_object_size+0x8b/0x530 [ 315.853936] ? kasan_unpoison_shadow+0x35/0x50 [ 315.858499] ? __might_sleep+0x95/0x190 [ 315.862450] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 315.867270] ? __might_fault+0x188/0x1d0 [ 315.871308] ? kasan_check_write+0x14/0x20 [ 315.875518] ? _copy_from_user+0x99/0x110 [ 315.879647] do_ip6t_set_ctl+0x370/0x5f0 [ 315.883688] ? translate_compat_table+0x1c50/0x1c50 [ 315.888694] ? mutex_unlock+0xd/0x10 [ 315.892382] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 315.897638] nf_setsockopt+0x67/0xc0 [ 315.901333] ipv6_setsockopt+0x10b/0x130 [ 315.905385] tcp_setsockopt+0x82/0xd0 [ 315.909166] sock_common_setsockopt+0x95/0xd0 [ 315.913642] SyS_setsockopt+0x189/0x360 [ 315.917595] ? SyS_recv+0x40/0x40 [ 315.921034] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 315.926550] ? do_syscall_64+0xb6/0x940 [ 315.930503] ? SyS_recv+0x40/0x40 [ 315.933933] do_syscall_64+0x280/0x940 [ 315.937794] ? __do_page_fault+0xc90/0xc90 [ 315.942005] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.946480] ? finish_task_switch+0x1c1/0x7e0 [ 315.950953] ? syscall_return_slowpath+0x550/0x550 [ 315.955859] ? syscall_return_slowpath+0x2ac/0x550 [ 315.960767] ? prepare_exit_to_usermode+0x350/0x350 [ 315.965762] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.971107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.975931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.981093] RIP: 0033:0x453d69 [ 315.984344] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.992027] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 315.999272] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000018 [ 316.006517] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 316.013759] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff 2018/02/26 20:09:34 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)=0x1) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:34 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x84200, 0x0) fcntl$addseals(r0, 0x409, 0x6) r1 = semget(0x1, 0x0, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000200)=""/200) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0xffffffffffff8001) r4 = dup3(r3, r2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x6, 0x4) [ 316.021003] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0xdca, 0xfffffffffffff800, 0x3f}, 0x1b4) fcntl$addseals(r0, 0x409, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="6e040000000000000a004e21183b530b00000000000000000000ffff00000000250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e2309000000fe8000000000000000000000000000aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2408000000fe80000000000000000000000000000d830100000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220700000000000000000000000000000000000000dc02992e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20ff7f0000fe800000000000000000000000000016090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033b2fd3235d3fac20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000000000000000000000000ffffac1414aa03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2104000000ff01000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2289000000ff020000000000000000000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) [ 316.050223] nla_parse: 17 callbacks suppressed [ 316.050228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 316.086707] syz-executor5: vmalloc: allocation failure: 16642998272 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 316.098621] syz-executor5 cpuset=/ mems_allowed=0 [ 316.103539] CPU: 0 PID: 10521 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 316.111501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.120846] Call Trace: [ 316.123434] dump_stack+0x194/0x24d [ 316.127064] ? arch_local_irq_restore+0x53/0x53 [ 316.131724] ? idr_get_free+0xfd0/0xfd0 [ 316.135703] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 316.141587] warn_alloc+0x19a/0x2b0 [ 316.145195] ? zone_watermark_ok_safe+0x400/0x400 [ 316.150019] ? up_read+0x1a/0x40 [ 316.153368] ? __do_page_fault+0x3d6/0xc90 [ 316.157578] ? __schedule+0x90d/0x2070 [ 316.161446] ? mm_fault_error+0x2c0/0x2c0 [ 316.165582] __vmalloc_node_range+0x4f0/0x650 [ 316.170051] ? do_page_fault+0xee/0x730 [ 316.174002] ? __do_page_fault+0xc90/0xc90 [ 316.178221] ? xt_alloc_entry_offsets+0x21/0x30 [ 316.182865] __vmalloc_node_flags_caller+0x50/0x60 [ 316.187770] ? xt_alloc_entry_offsets+0x21/0x30 [ 316.192416] kvmalloc_node+0x82/0xd0 [ 316.196110] xt_alloc_entry_offsets+0x21/0x30 [ 316.200581] translate_table+0x235/0x1690 [ 316.204715] ? retint_kernel+0x10/0x10 [ 316.208590] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 316.213414] ? _copy_from_user+0x99/0x110 [ 316.217539] do_ip6t_set_ctl+0x370/0x5f0 [ 316.221582] ? translate_compat_table+0x1c50/0x1c50 [ 316.226588] ? mutex_unlock+0xd/0x10 [ 316.230276] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 316.235534] nf_setsockopt+0x67/0xc0 [ 316.239228] ipv6_setsockopt+0x10b/0x130 [ 316.243268] tcp_setsockopt+0x82/0xd0 [ 316.247051] sock_common_setsockopt+0x95/0xd0 [ 316.251526] SyS_setsockopt+0x189/0x360 [ 316.255480] ? SyS_recv+0x40/0x40 [ 316.258918] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 316.264431] ? do_syscall_64+0xb6/0x940 [ 316.268383] ? SyS_recv+0x40/0x40 [ 316.271810] do_syscall_64+0x280/0x940 [ 316.275757] ? __do_page_fault+0xc90/0xc90 [ 316.279966] ? _raw_spin_unlock_irq+0x27/0x70 [ 316.284446] ? finish_task_switch+0x1c1/0x7e0 [ 316.288932] ? syscall_return_slowpath+0x550/0x550 [ 316.293842] ? syscall_return_slowpath+0x2ac/0x550 [ 316.298761] ? prepare_exit_to_usermode+0x350/0x350 [ 316.303762] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 316.309109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.313939] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.319104] RIP: 0033:0x453d69 [ 316.322267] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.329950] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 316.337193] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 316.344438] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 2018/02/26 20:09:34 executing program 2: r0 = socket$inet(0x2, 0x806, 0xfffffffffffffffd) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a074f6660e59e88905f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0xf2, &(0x7f0000000040)=0x4) [ 316.351683] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 316.358926] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 316.366295] warn_alloc_show_mem: 2 callbacks suppressed [ 316.366297] Mem-Info: [ 316.374136] active_anon:73457 inactive_anon:61 isolated_anon:0 [ 316.374136] active_file:3751 inactive_file:9338 isolated_file:0 [ 316.374136] unevictable:0 dirty:60 writeback:0 unstable:0 [ 316.374136] slab_reclaimable:12540 slab_unreclaimable:93858 [ 316.374136] mapped:24376 shmem:86 pagetables:740 bounce:0 [ 316.374136] free:1406793 free_pcp:477 free_cma:0 [ 316.407805] Node 0 active_anon:293828kB inactive_anon:244kB active_file:15004kB inactive_file:37352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97504kB dirty:240kB writeback:0kB shmem:344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 53248kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 316.435944] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.462463] lowmem_reserve[]: 0 2864 6373 6373 [ 316.467084] Node 0 DMA32 free:2934324kB min:30292kB low:37864kB high:45436kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:996kB local_pcp:312kB free_cma:0kB [ 316.494779] lowmem_reserve[]: 0 0 3509 3509 [ 316.499137] Node 0 Normal free:2673068kB min:37120kB low:46400kB high:55680kB active_anon:297896kB inactive_anon:244kB active_file:15004kB inactive_file:37352kB unevictable:0kB writepending:240kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4896kB pagetables:2960kB bounce:0kB free_pcp:760kB local_pcp:232kB free_cma:0kB [ 316.528925] lowmem_reserve[]: 0 0 0 0 [ 316.532763] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 316.546408] Node 0 DMA32: 5*4kB (UM) 2*8kB (M) 1*16kB (M) 2*32kB (M) 1*64kB (M) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 714*4096kB (M) = 2934324kB [ 316.555922] syz-executor5: vmalloc: allocation failure: 16642998272 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 316.562044] Node 0 Normal: 55*4kB (UME) 60*8kB (ME) 259*16kB (UME) 1417*32kB (UME) 1054*64kB (UM) 173*128kB (UM) 28*256kB (UM) 24*512kB (UM) 25*1024kB (UM) 28*2048kB (UME) 596*4096kB (UM) = 2683404kB [ 316.573968] syz-executor5 cpuset= [ 316.591786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 316.591788] / mems_allowed=0 [ 316.595231] 13174 total pagecache pages [ 316.595240] 0 pages in swap cache [ 316.603802] CPU: 1 PID: 10535 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 316.603808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.606816] Swap cache stats: add 0, delete 0, find 0/0 [ 316.610743] Call Trace: [ 316.610759] dump_stack+0x194/0x24d [ 316.610776] ? arch_local_irq_restore+0x53/0x53 [ 316.614206] Free swap = 0kB [ 316.621525] ? idr_get_free+0xfd0/0xfd0 [ 316.621555] warn_alloc+0x19a/0x2b0 [ 316.630887] Total swap = 0kB [ 316.636215] ? zone_watermark_ok_safe+0x400/0x400 [ 316.636236] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 316.638796] 1965969 pages RAM [ 316.642419] __vmalloc_node_range+0x4f0/0x650 [ 316.647059] 0 pages HighMem/MovableOnly [ 316.650052] ? xt_alloc_entry_offsets+0x21/0x30 [ 316.650063] __vmalloc_node_flags_caller+0x50/0x60 [ 316.654029] 329725 pages reserved [ 316.657606] ? xt_alloc_entry_offsets+0x21/0x30 [ 316.657622] kvmalloc_node+0x82/0xd0 [ 316.657635] xt_alloc_entry_offsets+0x21/0x30 [ 316.708512] translate_table+0x235/0x1690 [ 316.712649] ? retint_kernel+0x10/0x10 [ 316.716523] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 316.721349] ? _copy_from_user+0x99/0x110 [ 316.725475] do_ip6t_set_ctl+0x370/0x5f0 [ 316.729515] ? translate_compat_table+0x1c50/0x1c50 [ 316.734523] ? mutex_unlock+0xd/0x10 [ 316.738213] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 316.743473] nf_setsockopt+0x67/0xc0 [ 316.747167] ipv6_setsockopt+0x10b/0x130 [ 316.751211] tcp_setsockopt+0x82/0xd0 [ 316.754998] sock_common_setsockopt+0x95/0xd0 [ 316.759479] SyS_setsockopt+0x189/0x360 [ 316.763435] ? SyS_recv+0x40/0x40 [ 316.766861] ? selinux_file_fcntl+0xec/0x140 [ 316.771249] ? security_file_fcntl+0x89/0xb0 [ 316.775636] ? do_syscall_64+0xb6/0x940 [ 316.779587] ? SyS_recv+0x40/0x40 [ 316.783024] do_syscall_64+0x280/0x940 [ 316.786888] ? _raw_spin_unlock_irq+0x27/0x70 [ 316.791359] ? finish_task_switch+0x1c1/0x7e0 [ 316.795832] ? syscall_return_slowpath+0x550/0x550 [ 316.800739] ? syscall_return_slowpath+0x2ac/0x550 [ 316.805643] ? prepare_exit_to_usermode+0x350/0x350 [ 316.810634] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 316.815979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.820803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.825966] RIP: 0033:0x453d69 [ 316.829130] RSP: 002b:00007fae81ac0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.836813] RAX: ffffffffffffffda RBX: 00007fae81ac16d4 RCX: 0000000000453d69 [ 316.844055] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 2018/02/26 20:09:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="00000017538a8d79aa03dd627784438b0000000000"]) 2018/02/26 20:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x40, "534353debee7217c4543976cab4b019640bb99e40c95a47ac828d3f0bfd07b744c14de6ec5f707f3712440ab436d5325d50326ce0b8467eae46912913acca269"}, &(0x7f0000000080)=0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x70000000000, 0xc, 0x401, 0x4027, r3}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x9, 0x20a, 0x7, 0xfffffffffffffffe, 0x8, 0x9, 0x1, r4}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02036f00", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:35 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x401, 0x0) fanotify_mark(r0, 0x8, 0x0, r2, &(0x7f0000000040)='./file0\x00') r3 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x9, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, &(0x7f00007fafd0), {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffff}, {0x7fffffff}}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'erspan0\x00', {0x3, 0x0, 0x42, 0x0, 0x0, 0x3ff, 0x2, 0x80000000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xffffff65) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:35 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2001, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0xf3, "b349219e7b0f6dc7f698fe25456a2d1eb33c4c8277a5e5ca3ca9f8fba16441fbce0b414520a119145213200ce153d727fb7b31a802eec9af49d4d579a02bcced296ad428c1482f43c63f98628326f4c1c406504240e15e6803cdb1c352de2e61af5b133122c6a8418f37f7c7a56c6f4cf1f5cb6e6a44d2bc1018712ee8fe155129b4a5c1e5c0f0f85a1fd141cdb42c2084e7afa9e73afc8e663603d7bac245c56ad469bcb82fc45983513f29d8f2c204d83cdd428a8aeef49c0b1298c3c5a4021118845d7d17dcc190ea8bc9101413a813898d2e88d016ff70cb77577dd01f59024cdca8c809c60d221be4da08393bfa0f46ca"}) 2018/02/26 20:09:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)="5392b514") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:35 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = semget$private(0x0, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000410000)=0x6) semtimedop(r1, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000200)={0x5}, 0x4) r3 = epoll_create(0x20) dup3(r3, r0, 0x0) getsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000240), &(0x7f0000000280)=0x4) 2018/02/26 20:09:35 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x4, 0x40, 0xccd1, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0xfffffffffffffffa}, &(0x7f0000000280)=0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r2, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r2, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x180, 0x5, 0x1, 0x6, 0x5, &(0x7f00000001c0)='tunl0\x00', 0x6, 0x6b07, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r2, 0xc) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r2, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) [ 316.851298] RBP: 000000000072c010 R08: 0000000000000004 R09: 0000000000000000 [ 316.858544] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 316.865786] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000002 2018/02/26 20:09:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000000000000000000000f5ff00000000000000000000001c090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x0, 0x80) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, &(0x7f00000004c0)="67f20f01bc002311000064f30f5c5188640f01caf00fb3867768ba400066edbaf80c66b8f4501c8e66efbafc0ced0f01dff466b9360800000f320f01df", 0x3d}], 0x1, 0x30, &(0x7f0000000580)=[], 0x0) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/02/26 20:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd40300000000000000cff7f852dbd9d90eb8b1352944028dec0600000000000000a40f8f5a51c76d441721b03e5f1f14f6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf9286f3387879b7e20a762f4eb73bf25fb7b44"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 316.930391] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 316.943064] syz-executor5 cpuset=/ mems_allowed=0 [ 316.947957] CPU: 1 PID: 10549 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 316.955318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.964667] Call Trace: [ 316.967259] dump_stack+0x194/0x24d [ 316.970896] ? arch_local_irq_restore+0x53/0x53 [ 316.975553] ? idr_get_free+0xfd0/0xfd0 [ 316.979508] ? kernel_text_address+0x102/0x140 [ 316.984077] warn_alloc+0x19a/0x2b0 [ 316.987687] ? zone_watermark_ok_safe+0x400/0x400 [ 316.992521] ? save_stack+0xa3/0xd0 [ 316.996126] ? save_stack+0x43/0xd0 [ 316.999735] ? kasan_kmalloc+0xad/0xe0 [ 317.003593] ? __kmalloc_node+0x47/0x70 [ 317.007540] ? kvmalloc_node+0x64/0xd0 [ 317.011411] __vmalloc_node_range+0x4f0/0x650 [ 317.015885] ? lock_release+0xa40/0xa40 [ 317.019838] ? xt_alloc_entry_offsets+0x21/0x30 [ 317.024486] __vmalloc_node_flags_caller+0x50/0x60 [ 317.029389] ? xt_alloc_entry_offsets+0x21/0x30 [ 317.034036] kvmalloc_node+0x82/0xd0 [ 317.037727] xt_alloc_entry_offsets+0x21/0x30 [ 317.042200] translate_table+0x235/0x1690 [ 317.046327] ? lock_release+0xa40/0xa40 [ 317.050279] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 317.056143] ? __check_object_size+0x8b/0x530 [ 317.060625] ? __might_sleep+0x95/0x190 [ 317.064575] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 317.069400] ? kasan_check_write+0x14/0x20 [ 317.073613] ? _copy_from_user+0x99/0x110 [ 317.077740] do_ip6t_set_ctl+0x370/0x5f0 [ 317.081791] ? translate_compat_table+0x1c50/0x1c50 [ 317.086780] ? flock_lock_inode+0x4b5/0xc90 [ 317.091090] ? mutex_unlock+0xd/0x10 [ 317.094781] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 317.100038] nf_setsockopt+0x67/0xc0 [ 317.103733] ipv6_setsockopt+0x10b/0x130 [ 317.107776] tcp_setsockopt+0x82/0xd0 [ 317.111567] sock_common_setsockopt+0x95/0xd0 [ 317.116041] SyS_setsockopt+0x189/0x360 [ 317.119993] ? SyS_recv+0x40/0x40 [ 317.123434] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 317.128946] ? fput+0xd2/0x140 [ 317.132115] ? do_syscall_64+0xb6/0x940 [ 317.136069] ? SyS_recv+0x40/0x40 [ 317.139500] do_syscall_64+0x280/0x940 [ 317.143365] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 317.148878] ? syscall_return_slowpath+0x550/0x550 [ 317.153784] ? syscall_return_slowpath+0x2ac/0x550 [ 317.158693] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 317.164042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.168870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.174032] RIP: 0033:0x453d69 2018/02/26 20:09:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000540)=""/142, &(0x7f0000000480)=0x8e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e300000000000000000000000000000000000000000000000000000000000000000000000000000001de500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000015abaf085675a212a7dba1253480937bc212390772459fc36f7874328169873746dd148610ac5ee4788d0805efe6450e4e4b588a29f33286b55b34d56841aa705af469a131140a5fc346fa654113cad7e06f9e37903f6f91b7cffaea294609512c263148d85889181af596608321e44868edf335"], 0x468) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = semget(0x3, 0x4, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000940)=0x8000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000a00)={[0x9, 0x0, 0x3, 0x3f, 0x4, 0xbf9, 0x4, 0x100000000, 0x81, 0x4, 0xffffffff, 0x1, 0x1ff, 0x7, 0xfff, 0x7], 0x4000, 0x14080}) mknodat(r4, &(0x7f0000000900)='./file0\x00', 0xc020, 0x1) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_dccp_int(r4, 0x21, 0x14, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) getgroups(0x2, &(0x7f0000000800)=[0x0, 0xffffffffffffffff]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000840)={{0x2, r2, r3, r5, r6, 0x1d8, 0x6}, 0x80, 0xfff, 0x6}) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 317.177198] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.184883] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 317.192126] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 317.199373] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 317.206617] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 317.213946] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 2018/02/26 20:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) ioctl$KVM_SMI(r2, 0xaeb7) pipe(&(0x7f0000000000)) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, r0, 0x1}) accept$netrom(r1, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:35 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x40, 0x1ff, 0x3, 0xffff, 0x44, 0x1, 0x7, 0xdd834f9, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000000000c00010000000000000000000000", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/02/26 20:09:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x6, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0xff, r1, r2}, {0x10001, 0x3, 0xfffffffffffffffb, 0x2, 0x9, 0x7fff, 0x81, 0x1}, {0x6, 0x40, 0x0, 0x1}, 0x1000, 0x0, 0x3, 0x1, 0x3, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d6, 0x3f}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x1a}, 0x3501, 0x0, 0x0, 0x77, 0x4, 0x761c000, 0xfffffffffffff000}}, 0xe8) r3 = memfd_create(&(0x7f00000004c0)='GPL\x00', 0x2) sendmsg$netrom(r3, &(0x7f00000009c0)={&(0x7f0000000500)=@full={{0x3, {"4fcc684e155008"}, 0xffffffffffffffc0}, [{"93cb1eaf50a826"}, {"643ca92fcb719a"}, {"71012a209cb3da"}, {"d65bdde70f0eb5"}, {"3a91b6fc7113ad"}, {"3fa684b96d6b2e"}, {"c2a81f7e52fce0"}, {"26cba17b76e30a"}]}, 0x48, &(0x7f00000006c0)=[{&(0x7f0000000580)="063b82f508d235ae7c5c2b4f749cfb4dcb989e753f621569d801e4b7b300a02511a3652fdc65be86ef46f7b61109da03dd66ac57e8cb8c1be0a92ae5a48b51fddd641c067741413d85cffd05f57802bb2e5e5b4232694836518d6d37ab4d88c84d9e58b448517bb6168b", 0x6a}, {&(0x7f0000000600)="cbee9f4f7e7315c0954efcbd7632241045715555f5b8659522757e964dc206a9ab41d35dfd6690760e65ffa2f96bc170e981e8f89546527ad9f6f30bdb58972fd32df25fc9367eb397444a2bbf7c3c9d15951b499c8cc5f9f182c53aab524693b4177f4f9b2c2fd5b89fe42b75850a33fede8aa0e049c44dc704cc6ca3cf645709d655c95580d3bbd550b9190c68460b6ec534edb8e199267a88091b81c54d9598d1ec8abadd5db01893ee94555663936eb66b31616f1f79eea4fd659d", 0xbd}], 0x2, &(0x7f0000000700)=[{0xb0, 0x119, 0x100000001, "4b35e1a628ca01f64854bba2be7245d13faf8f0571e121c2f9d958774ea7d61dc1a2a388229ec0af53bae475d0ab3369c9a37a871eff9ad806b1c1f9df3a7ebc9e8c1279feb2b494bacb15773459427a65b81926250051dd82a1435f2c1425954dd8097715d52e8a8ec6eb6d25ce19e7aa2b59c9226c0425c20bbf36b6f612a11c4726951f251dddac626e25933b761a01545d9e3dee09c67a"}, {0x28, 0x115, 0x7f, "cb2c2cd7cfcb04b0328fa65a7165a4dcc987f85d591b"}, {0xb8, 0x11e, 0x1ff, "be176ad0dc6cd7167bc4a96fbf269e17c7b9d691e9cfa08908d3e602f7c4634287b0c4f3ceb143b38b4830b2eeff44124918707ed40105a638f65371dbe543b874a521d355a4c5489c671adaa34f484853f22981d378e53ee64cb693990ed94c28fe7cce614a83565379ecf117241eeb8b47f22f24d8e6150c6bad5b2e87bf25ac7c6be19e5e9dc06e0395432382d9b591fa6622fe42c0752324909ebeb276fe2e42"}, {0x60, 0x112, 0x5, "ddfeef18905ce8e9081ed66d046a7518630416aa3451c31bc0078732ad292c8404f284be759b50c223047390f9ed4c2564a3109243ff7fdf59d90813c9111a7db6fe579e8a293e604113"}, {0x70, 0x10b, 0x4, "b17f8ea4ab96feb4996e7118c3cd3a9f0fb96bf4961e6821b603d5f70047855542e8b4547ed0826b94db355b197ab60e43b2deb4df99ac6d956e28105263b1cd8ae5f292dcbe46d9cd714a075bab7bb13b0d0ef579dca8a55dde5505ad"}, {0x60, 0x113, 0x3, "fc5b8101bfac9a4b2b6bfa6406055b2ce7f43918aba9dd7f60ce8f4f4dfb666b1ec9d54bb280d57ff1f3cf6706d84d56397acd360ca4e43c6cee84cffee5b509e1708792b4d3b4950f9fd439f8079a16"}], 0x2c0, 0x40081}, 0xc851) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x4, @loopback={0x0, 0x1}, 0xfffffffffffffffb}, {0xa, 0x4e21, 0x101, @mcast1={0xff, 0x1, [], 0x1}, 0x644}, 0x245b, [0xfa, 0x1, 0x20, 0x7ff, 0x2, 0xfffffffffffffe2d, 0x6, 0x7]}, 0x5c) [ 317.228010] validate_nla: 2 callbacks suppressed [ 317.232892] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/02/26 20:09:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000000c0)={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000100)={0x1, 0x8}) 2018/02/26 20:09:35 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffffff03000000", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000004200000000363d1bd2ecca4fe403000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) sendto$inet6(r1, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000004c0)={r2, 0x4}) 2018/02/26 20:09:35 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) epoll_create(0x40000000000985) 2018/02/26 20:09:35 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x3, 0x452a0aa3d5948e65) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000380)=0x3f, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000006060100000000000000000052e0679afdcb883199482fb414d20083bc1e1ddc33e5656826c0c868bcaa0d6ce6ae81af53ad91b04b97421c89226df8381709cd34eba86f9cb1f2f7e1ee0142462b746fc3f05e4c79c4befc96cdbc687b9ed55602fa89608b872ffaa24deece421d00000000000000000000000000000000000000", @ANYRES32], 0x20}, 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)=0x90) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000200)=""/131, &(0x7f0000000040)=0x83) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000002c0)=0xf3f, &(0x7f0000000300)=0x2) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000003c0)=0x1) 2018/02/26 20:09:35 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000000000/0x1000)=nil, 0x5, 0x4, 0x82, &(0x7f0000ffd000/0x2000)=nil, 0x9}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x101, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000300)=""/34) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7dbe7a5baa46faa57d01f62a1483ab0c384dd34a2c073bce765e328f4ab92a86c10668020df9f7d5305729c2da5bb2f36fdb7bdc976ab3e6ac455370ada5e8585a437ad9a2f1b39646bbf3e2379ec57d18cb79a63e43bd358d3f", 0x5a}, {&(0x7f0000000080)="384552255efccb2842", 0x9}, {&(0x7f00000000c0)="08df5553cf283f4037f8395ad53bcb54e61842159c9c4050ddab6bdbc2886445d839103403e019a1f69335fc4bc3e116c1e353e46758bd5792543ecdee1ed366439163be13272be378c0450cf78aed30656d6a7c64ac63112c8968d5d5c04a4174cccee530c31c631ac13e78b09004ef36c91a74e9cbdce7de4c95ac71fc16d0cf01aa891967864d3665461886faa3992b736502f9ad3c3f31dd15cfc8789a9d2cca3915a2e674fb1857c7841088be0b69ea8dbad0bcd124e07dcc9622ce1e", 0xbf}, {&(0x7f0000000180)="1e103b269d2b02055215f254a0eae4915cc5f954fea8a51bb4b0cbd7fbd726641b38cc60efd924a93792a6e4b0a4fb3ce951ade6ab17112ebc5e27674aa4dcc04fa2a2cc9070ffb7b2e477b37d2403a6a10710959547e64f058bb84d8ff10257d5802bb86f781f22e49fd2aa09e1f55598fef1ff7803816ba6da51e763420fc2eb5fb0d609e20fdefb0e13205bfc8469e63edf283441355cf69af00f79fe81c4f4b6a4df28786e1c5625e1aa9a3415a8ed0ce6840b805f8d2e2702f5649eb3461d25de114f3b387fbc0fc0b0c48fcbe4a018db1917ce1e7213b9bc544add4b7da424502a19bdf29d64fe93d35ff0b3", 0xef}], 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000808c5550c42c51890800000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x10, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffc}}}, 0x108) 2018/02/26 20:09:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) accept4$inet(r0, &(0x7f0000000080)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10, 0x800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@local}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x4, {{0xa, 0x3, 0x0, @loopback={0x0, 0x1}}}}, 0xffffffffffffff66) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:35 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r2 = epoll_create(0x40000000000985) dup3(r2, r0, 0x0) 2018/02/26 20:09:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @empty, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2=0xe0000002, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1}, 0x4e22, 0x7fff, 0x4e20, 0xffffffffffffffff, 0x2, 0x20, 0x80, 0xff, r1, r2}, {0x1, 0x7, 0x5, 0x5, 0x4, 0x7, 0xe37, 0x1}, {0x8, 0x8, 0x7fff, 0x7}, 0x6, 0x6e6bbf, 0x0, 0x0, 0x1}, {{@in=@loopback=0x7f000001, 0x4d2, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x13}, 0x3503, 0x3, 0x1, 0x200, 0xffffffffffffffc0, 0x100, 0x7fff}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x18000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000500)="a82e2413a22eb39b5c5a6b697fa2f0670fbd32ddaad6583e27f167970a9e851d2a8ff8af17b75e8842d2e318787f4107cff8ad86e56d645ae3eccca7fe6eb5b61363438cdeb7538ceaa4b54efd17e0a662b4a86dd8", 0x55, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) 2018/02/26 20:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f0000000000)='7', 0xffffffffffffff6b, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) [ 317.391880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/26 20:09:35 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0xfe3d) 2018/02/26 20:09:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_addrs={0x2, 0x4e22, @broadcast=0xffffffff}}) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x10001, 0x400) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0xfffffffffffffff9}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000006060100001e23006c000000000000000c000100001f0000313998bcc610e0880510af2f8dbdc5024c6fa91759bf29e6810cb03bdf43989b9e79ceb4d2405dacca5689b46386f023024301b9a5d9b73141b49794f5b702e133b637458d370cb915164be61f30f5b1e379a7498af565abc1e8073189ff6d44c832d9c9d0a6332d7078e82cf5b018bcebffb1babf8c08d712dd75d4f6f0bc0bcd0f76c7670f332f6cd2b6381a6ea5283c849347a667c97794d42752bbb435b188cd4561dbe393f81a3293ae67b078751f9f113ca6fa55da7fcca06f6f0cf8d5be7d672d7b262a38007a84cdbbfc554835d297caeb9bd836e65e56fcb638cca1483c0942ed22a601e16a13a48dbd1d56241812ceb3b41f39d9005202b97920c99d8ffbf919f4fe3cbfd82864e683278bf11da751cb5c83bcc06c48b61409dcc73a500f", @ANYRES32], 0x20}, 0x1}, 0x0) connect$ipx(r0, &(0x7f00000000c0)={0x4, 0xa2b, 0x9, "6463e58f0c45", 0x8}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) 2018/02/26 20:09:35 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x1a}, @mcast2={0xff, 0x2, [], 0x1}, 0x401, 0x0, 0x1000, 0x100, 0x6, 0x0, r1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) [ 317.438508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 2018/02/26 20:09:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00000002c0)=""/168, &(0x7f0000000380)=0xa8) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x4f20, 0x1, 0x3, 0x2, 0x10}, &(0x7f0000000200)=0xa0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) chroot(&(0x7f0000000400)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) [ 317.495857] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 317.516930] audit: type=1400 audit(1519675775.786:174): avc: denied { connect } for pid=10621 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 317.522365] netlink: 'syz-executor4': attribute type 1 has an invalid length. 2018/02/26 20:09:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ppoll(&(0x7f00000005c0)=[{r0, 0x10}], 0x1, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={0x7ff}, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x400, 0x0) connect$nfc_raw(r3, &(0x7f0000000580)={0x27, 0x6, 0x7fff, 0x1}, 0x10) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x210, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@empty, @remote={0xfe, 0x80, [], 0xbb}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 'eql\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x8, 0x2, 0x1, 0x4}, 0x0, 0xa8, 0xd0, 0x0, {}, []}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x0, 0x2}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'bridge0\x00', 'ipddp0\x00', {0xff}, {0xff}, 0x1d, 0x726, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x10}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x1000, 0x3, 0x1, [0x9, 0x100, 0x4, 0x7f, 0x4, 0x7, 0x2, 0x1d507f47, 0x4, 0x5, 0x7f, 0x269b, 0x5, 0x80000000, 0x8], 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'vlan0\x00', 'vlan0\x00', {0xff}, {}, 0x2, 0x0, 0x2, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x0, 0x6, 0x1, [0xfff, 0xa576, 0x6, 0x8, 0x4, 0x7, 0x7, 0x1ff, 0x36f30bfc, 0x2, 0x1000, 0x1ff, 0x7f, 0x82c4, 0x2, 0x9], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000000400000000000000000000000000000000000000000000"]) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, []}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 2018/02/26 20:09:39 executing program 7: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) mq_notify(r0, &(0x7f0000000200)={0x0, 0xd, 0x3, @tid=r1}) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r3 = epoll_create(0x40000000000985) r4 = dup3(r3, r3, 0x0) ioctl$void(r4, 0x5451) 2018/02/26 20:09:39 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x10000000005, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0167bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b441c3c11a3da648b089f381be18d6b5c08b66e4a4e6f218a30909cc5c4522354e21bb7d6eeaf7fcfbcb09a83c9011589"], 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:39 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x4, 0x0, @thr={&(0x7f0000000040)="a6f36cfde5399e5808bdd19523244072569d625605413d09ddad3446921399220de5b55846f8719e4cbcd24f5bbc9015457d2a018fd118a7bf2367119f5bda1d8a759740494b2368ed613dd7fcadf5d6bf21a8dbf7875348bbc75e0106a24ff9fe0008ec39c82b362f76b0e649be6901c619db4371", &(0x7f00000000c0)="0bc864344fc782d9d1e4447de51f763d3fc53839f3ea8742de3265658c4fe93d72ab6c5cc7b91da266a9e88af4c94f9d468b06fbf5a5aefc1e5a8528daa018d9cf156fb6b81980e15161d9d22001a582e66c2b67207fecee6d45f6bda76cb7b01cffeb74cb3046f1331c559e83b30c9efb2137abc802fc28ece58a2ed56e4530509400e2491b14aad79610fa72666cd0ee04d97f"}}, &(0x7f0000000200)=0x0) timer_delete(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r0, r2, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) 2018/02/26 20:09:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000bdc1a496dcae4fca000000000000000000000c0001008e2fdf74", @ANYRES32], 0x20}, 0x1}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x1, @loopback=0x7f000001}}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f00000001c0)=@nl=@kern, 0xc, &(0x7f0000001400)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/28, 0x1c}, {&(0x7f00000013c0)=""/18, 0x12}], 0x5, &(0x7f0000001480)=""/169, 0xa9, 0x80}, 0x5}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)=""/127, 0x7f}, {&(0x7f00000016c0)=""/37, 0x25}], 0x3, &(0x7f0000001740)=""/135, 0x87, 0x2bc}}, {{&(0x7f0000001800)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x32, &(0x7f0000002b80)=[{&(0x7f0000001840)}, {&(0x7f0000001880)=""/59, 0x3b}, {&(0x7f00000018c0)=""/79, 0x4f}, {&(0x7f0000001940)=""/231, 0xe7}, {&(0x7f0000001a40)=""/68, 0x44}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/147, 0x93}], 0x7, 0x0, 0x0, 0xbb}, 0x6b1a}, {{&(0x7f0000002c00)=@in={0x0, 0x0, @loopback}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/3, 0x3}], 0x1, &(0x7f0000002cc0)=""/82, 0x52, 0x8}, 0x100000000}, {{&(0x7f0000002d40)=@alg, 0x58, &(0x7f0000003280)=[{&(0x7f0000002dc0)=""/243, 0xf3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000002f80)=""/253, 0xfd}, {&(0x7f0000003080)=""/70, 0x46}, {&(0x7f0000003100)=""/160, 0xa0}, {&(0x7f00000031c0)=""/81, 0x51}, {&(0x7f0000003240)=""/53, 0x35}], 0x7, 0x0, 0x0, 0x6}, 0x5}], 0x5, 0x0, &(0x7f0000003440)) keyctl$assume_authority(0x10, r2) 2018/02/26 20:09:39 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x400085, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00009d3000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14}}}}]}, 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"], 0x2e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, &(0x7f00000003c0)=""/170, 0xaa, 0x401}, 0x40000100) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x400000) getpeername$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) ioctl(r2, 0x3, &(0x7f0000000200)="fd06bea56148c5e64efd2b8376199c11877eff4b8159") recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000500), &(0x7f0000000540)=0x4) fcntl$setstatus(r1, 0x4, 0x400) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x1, r4, 0x400000000007) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001800)=ANY=[@ANYBLOB="030000000000000001d00000000000000010000000000000", @ANYPTR=&(0x7f0000003080)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005551f735021a00004b9cc0b1569fc4c41bb6ee434206a59e768989262945da5482fe57fa"], @ANYBLOB="00000000000000000420000000000000a700000000000000", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004600000000000000010000000000000", @ANYPTR=&(0x7f0000002080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003499ce1f09b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 2018/02/26 20:09:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000040000000000000000000000000000000000000000000000000000090000000300000008040000d0000000ffffffffffffffffd0000000ffffffff38030000ffffffffffffffff38030000ffffff5d137308a4", @ANYPTR=&(0x7f00007fafd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001ffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000268020000000000000000000000000000000000000000000000005801686173686c696d697400000000000000000000000000000000000000000365727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000420000000000000000000000ff03000002000000000000800000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020900000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x468) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)="f018a9c14d06c0264a7fca67d28033b2631ccb17a68d3144c2cc16c9e1aad456ce8a85204fdca9463bee272f6a0a1ca89156246ff082cbe529cc07bd99d1f676ac992ebc0fade1e01f0ed96e189f93c5", 0x50}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e00)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$getflags(r0, 0x3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x30102, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000700)) ioctl$int_in(r1, 0x5421, &(0x7f00000004c0)=0x9) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000640)) [ 321.335767] audit: type=1400 audit(1519675779.609:175): avc: denied { read } for pid=10645 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 321.338964] warn_alloc: 7 callbacks suppressed [ 321.338975] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 321.376276] syz-executor5 cpuset=/ mems_allowed=0 [ 321.381181] CPU: 1 PID: 10649 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 321.388530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.397869] Call Trace: [ 321.400447] dump_stack+0x194/0x24d [ 321.404067] ? arch_local_irq_restore+0x53/0x53 [ 321.408739] ? idr_get_free+0xfd0/0xfd0 [ 321.412708] ? kernel_text_address+0x102/0x140 [ 321.417293] warn_alloc+0x19a/0x2b0 [ 321.420915] ? zone_watermark_ok_safe+0x400/0x400 [ 321.425762] ? save_stack+0xa3/0xd0 [ 321.429384] ? save_stack+0x43/0xd0 [ 321.432996] ? kasan_kmalloc+0xad/0xe0 [ 321.436865] ? __kmalloc_node+0x47/0x70 [ 321.440826] ? kvmalloc_node+0x64/0xd0 [ 321.444714] __vmalloc_node_range+0x4f0/0x650 [ 321.449208] ? lock_release+0xa40/0xa40 [ 321.453177] ? xt_alloc_entry_offsets+0x21/0x30 [ 321.457831] __vmalloc_node_flags_caller+0x50/0x60 [ 321.462747] ? xt_alloc_entry_offsets+0x21/0x30 [ 321.467410] kvmalloc_node+0x82/0xd0 [ 321.471118] xt_alloc_entry_offsets+0x21/0x30 [ 321.475601] translate_table+0x235/0x1690 [ 321.479750] ? retint_kernel+0x10/0x10 [ 321.483642] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 321.488481] ? _copy_from_user+0x99/0x110 [ 321.492625] do_ip6t_set_ctl+0x370/0x5f0 [ 321.496684] ? translate_compat_table+0x1c50/0x1c50 [ 321.501685] ? SyS_ioprio_set+0x1de/0xe10 [ 321.505842] ? mutex_unlock+0xd/0x10 [ 321.509544] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 321.514814] nf_setsockopt+0x67/0xc0 [ 321.518523] ipv6_setsockopt+0x10b/0x130 [ 321.522579] tcp_setsockopt+0x82/0xd0 [ 321.526376] sock_common_setsockopt+0x95/0xd0 [ 321.530864] SyS_setsockopt+0x189/0x360 [ 321.534833] ? SyS_recv+0x40/0x40 [ 321.538283] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 321.543811] ? do_syscall_64+0xb6/0x940 [ 321.547782] ? SyS_recv+0x40/0x40 [ 321.551227] do_syscall_64+0x280/0x940 [ 321.555108] ? __do_page_fault+0xc90/0xc90 [ 321.559327] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.563810] ? finish_task_switch+0x1c1/0x7e0 [ 321.568296] ? syscall_return_slowpath+0x550/0x550 [ 321.573214] ? syscall_return_slowpath+0x2ac/0x550 [ 321.578131] ? prepare_exit_to_usermode+0x350/0x350 [ 321.583135] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 321.588498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.593341] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.598513] RIP: 0033:0x453d69 [ 321.601685] RSP: 002b:00007fae81b02c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.609382] RAX: ffffffffffffffda RBX: 00007fae81b036d4 RCX: 0000000000453d69 [ 321.616638] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000014 [ 321.623897] RBP: 000000000072bea0 R08: 0000000000000004 R09: 0000000000000000 [ 321.631152] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 321.638406] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000000 [ 321.645821] warn_alloc_show_mem: 2 callbacks suppressed [ 321.645824] Mem-Info: [ 321.653673] active_anon:79130 inactive_anon:61 isolated_anon:0 [ 321.653673] active_file:3752 inactive_file:9356 isolated_file:0 [ 321.653673] unevictable:0 dirty:89 writeback:0 unstable:0 [ 321.653673] slab_reclaimable:12530 slab_unreclaimable:93636 [ 321.653673] mapped:24363 shmem:87 pagetables:786 bounce:0 [ 321.653673] free:506614 free_pcp:357 free_cma:0 [ 321.686869] Node 0 active_anon:318568kB inactive_anon:244kB active_file:15008kB inactive_file:37424kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97452kB dirty:356kB writeback:0kB shmem:348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 43008kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 321.714923] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.741113] lowmem_reserve[]: 0 2864 6373 6373 [ 321.745759] Node 0 DMA32 free:1975924kB min:30292kB low:37864kB high:45436kB active_anon:22532kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2935320kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:680kB local_pcp:616kB free_cma:0kB [ 321.773824] lowmem_reserve[]: 0 0 3509 3509 [ 321.778195] Node 0 Normal free:46992kB min:37120kB low:46400kB high:55680kB active_anon:281620kB inactive_anon:244kB active_file:15008kB inactive_file:37424kB unevictable:0kB writepending:356kB present:4718592kB managed:3593748kB mlocked:0kB kernel_stack:4896kB pagetables:2996kB bounce:0kB free_pcp:700kB local_pcp:96kB free_cma:0kB [ 321.788940] syz-executor5: vmalloc: allocation failure: 17178820608 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 321.807733] lowmem_reserve[]: 0 0 0 0 [ 321.819565] syz-executor5 cpuset= [ 321.823343] Node 0 DMA: [ 321.826793] / [ 321.826795] 1*4kB (U) [ 321.829461] mems_allowed=0 [ 321.829472] CPU: 0 PID: 10663 Comm: syz-executor5 Not tainted 4.16.0-rc3+ #330 [ 321.831171] 0*8kB [ 321.833625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.833629] Call Trace: [ 321.833646] dump_stack+0x194/0x24d [ 321.833662] ? arch_local_irq_restore+0x53/0x53 [ 321.836570] 0*16kB [ 321.843887] ? idr_get_free+0xfd0/0xfd0 [ 321.843899] ? kernel_text_address+0x102/0x140 [ 321.843922] warn_alloc+0x19a/0x2b0 [ 321.846043] 1*32kB [ 321.855367] ? zone_watermark_ok_safe+0x400/0x400 [ 321.855393] ? save_stack+0xa3/0xd0 [ 321.857950] (U) [ 321.861542] ? save_stack+0x43/0xd0 [ 321.861551] ? kasan_kmalloc+0xad/0xe0 [ 321.861559] ? __kmalloc_node+0x47/0x70 [ 321.866209] 2*64kB [ 321.868407] ? kvmalloc_node+0x64/0xd0 [ 321.868433] __vmalloc_node_range+0x4f0/0x650 [ 321.872383] (U) [ 321.876932] ? lock_release+0xa40/0xa40 [ 321.876949] ? xt_alloc_entry_offsets+0x21/0x30 [ 321.880551] 1*128kB [ 321.882752] __vmalloc_node_flags_caller+0x50/0x60 [ 321.882762] ? xt_alloc_entry_offsets+0x21/0x30 [ 321.882775] kvmalloc_node+0x82/0xd0 [ 321.887596] (U) [ 321.891190] xt_alloc_entry_offsets+0x21/0x30 [ 321.891200] translate_table+0x235/0x1690 [ 321.891213] ? lock_release+0xa40/0xa40 [ 321.893167] 1*256kB [ 321.896756] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 321.896768] ? __check_object_size+0x8b/0x530 [ 321.896790] ? __might_sleep+0x95/0x190 [ 321.900651] (U) [ 321.904592] ? alloc_counters.isra.10+0x7e0/0x7e0 [ 321.904608] ? kasan_check_write+0x14/0x20 [ 321.906824] 0*512kB [ 321.910674] ? _copy_from_user+0x99/0x110 [ 321.910692] do_ip6t_set_ctl+0x370/0x5f0 [ 321.915168] 1*1024kB [ 321.917115] ? translate_compat_table+0x1c50/0x1c50 [ 321.917146] ? mutex_unlock+0xd/0x10 [ 321.921095] (U) [ 321.925981] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 321.925998] nf_setsockopt+0x67/0xc0 [ 321.928312] 1*2048kB [ 321.933213] ipv6_setsockopt+0x10b/0x130 [ 321.933229] tcp_setsockopt+0x82/0xd0 [ 321.937876] (M) [ 321.941561] sock_common_setsockopt+0x95/0xd0 [ 321.941578] SyS_setsockopt+0x189/0x360 [ 321.943535] 3*4096kB [ 321.947999] ? SyS_recv+0x40/0x40 [ 321.948019] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 321.948032] ? do_syscall_64+0xb6/0x940 [ 321.952161] (M) [ 321.956103] ? SyS_recv+0x40/0x40 [ 321.956114] do_syscall_64+0x280/0x940 [ 321.958420] = 15908kB [ 321.964264] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.964275] ? finish_task_switch+0x1c1/0x7e0 [ 321.964287] ? syscall_return_slowpath+0x550/0x550 [ 321.968761] Node 0 [ 321.972697] ? syscall_return_slowpath+0x2ac/0x550 [ 321.972708] ? prepare_exit_to_usermode+0x350/0x350 [ 321.972720] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 321.974677] DMA32: [ 321.979491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.979512] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.983722] 5*4kB [ 321.986003] RIP: 0033:0x453d69 [ 321.986008] RSP: 002b:00007fae81a9fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.986018] RAX: ffffffffffffffda RBX: 00007fae81aa06d4 RCX: 0000000000453d69 [ 321.986024] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000016 [ 321.986029] RBP: 000000000072c0c8 R08: 0000000000000004 R09: 0000000000000000 [ 321.986036] R10: 0000000020001fde R11: 0000000000000246 R12: 00000000ffffffff [ 321.990168] (UM) [ 321.994182] R13: 000000000000050b R14: 00000000006f79a8 R15: 0000000000000003 [ 322.159448] 2*8kB (M) 1*16kB (M) 4*32kB (UM) 3*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 4*2048kB (M) 479*4096kB (M) = 1976052kB [ 322.173025] Node 0 Normal: 36*4kB (ME) 108*8kB (UME) 25*16kB (UE) 574*32kB (UME) 391*64kB (UM) 15*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46720kB 2018/02/26 20:09:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d7a000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @fd}]}, 0x20}, 0x1}, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@can, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) r3 = getuid() getgroups(0x1, &(0x7f0000000280)=[0xffffffffffffffff]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000025c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002600)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002700)=0xe8) getgroups(0x2, &(0x7f0000002740)=[0xffffffffffffffff, 0xffffffffffffffff]) r8 = getpgid(0xffffffffffffffff) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000028c0)=0x0, &(0x7f0000002900), &(0x7f0000002940)) r12 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002980)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000029c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002ac0)=0xe8) fstat(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002b80)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002c80)=0xe8) fstat(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002f00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002f40)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000003040)=0xe8) r21 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003080)={0x0}, &(0x7f00000030c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003100)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003200)=0xe8) getresgid(&(0x7f0000003240)=0x0, &(0x7f0000003280), &(0x7f00000032c0)) r25 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003300)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000003400)=0xe8) r27 = getegid() r28 = getpgrp(0x0) r29 = getuid() getgroups(0x5, &(0x7f0000005ac0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r31 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005b00)={0x0, 0x0}, &(0x7f0000005b40)=0xc) r33 = getegid() r34 = gettid() r35 = getuid() r36 = getegid() socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000005f40)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x8, &(0x7f0000000200)=[{&(0x7f0000000180)="7b9603c2cb05673101342f3974c74186c273b9b3d925eb9a8cc3be6eb0d3a02b1ffb316bb2a1b60c38f864ad5ca58129900cea62a3a433a07e2ed6593907aaa25f0f67dffe88132c217701763544a006519630b04af6107ffabdf7ceec78d3e4690f12a53b9c869fce1e367c8828b0d2859e5ff1", 0x74}], 0x1, &(0x7f00000002c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x38, 0x1}, {&(0x7f0000000300)=@abs={0x0, 0x0, 0x40}, 0x8, &(0x7f0000002540)=[{&(0x7f0000000340)="451737ed5b7a5421c8b42d5b76cdbb54", 0x10}, {&(0x7f0000000380)="480e4dc8e7e52109594e4d8b3e5b6482a4bfb644d05f8db8614ec07b101fdee010a9d5ee9a144601721ecb0de1bb0317240125fc1c48d10418dd25f319a9792f7a15803c3be50d09576d9072e9049d31379c76e49eeea6f1b74ab7e205de688404eea95a3d64e3b3960f052db80fcb1524c93896c086a78a0a35df5af8a4565c218bbb00a2412d13355eeca22002592e3906a2f26a818700486ce1345fe4e32849e9e78405cfce31cd629c86ce37ed1e3978188bf3f0858adf5b099b5fccd9247d15a8edc4dff3ec410dd6b4b6faf105886e2829f88833b873ee6c15715c36c646b067848f61a6f3691bb42cedf5b19588a5966f9eee370524f80836c3df053f0e2cce65e5114893d0946daa3e65ef1fbd578851f574e5c1ebe7e53952bdcb8ace874782bb5fcaa1fe1f964fdae27905667235b227c050ea517f06df51bf52bfab183ba4cec42f1cbeea433189685abe91a7242f77e6e85f9faadf4a8e2f9f1afb59c5d48feb3c5123753d809cccdc43caf68fa4ab419a42a67a8cdaaca8a8da1c7995b40b40e2c443b59873ca4a58318c4eb7aef162ab8cd01a0e9bacf3e9331e7ace918ddefc1e040b38e79b90e51857835daec58b9241eb813cc27268c4b0dca728eb2c1f0f81bb4b0dab526c04d1882b714d6eed6fffd6a3b17ae7577820dbe2a730d39be8422052ecf5289e7daec7bde6ac2596b33c231965ab3d6df06f8c56920f4282584718ca34a5bc63ae24768bb4f716b896e6f3c123d29a63453cfc28ac63300695de7c00092a8ccab5afd0b97c0bf62d441134107e4e4e46aca7eb6a3bed0a8711c48f1b12bbef97d689ad069290c697795c7835b7ff85548aa2ccdf700c1599f042aeec351da6f3b243d9b19d95331da49ea0e4f14ea07aacededa0e52ab9f2420c6072876e96afbfcddb4276b1fddc45fba169a8b21d4379d3460d8af293fe6b02fa608df89f4a2521cf955f6d7f34d0b368bbed3dc60414ea0600dd9b13a93e2851f1aef4d13d7de87a153de971d3aa1ab79aa60550a8c9265d442b148e9b01a55dc345d17d4085b1267dd512b15b9c31af01874cd90cc6c797af41eb7bf3c8819fc0a033e32b8c29e7a5e186ffc80c38a32165947295872b391f7879d709a4d8f3ca75d9cd8c68ceab2551a4ec63be09cde8157a87c290fb60373e0c6d9c20ad2ce93d6c4400db344d82d9d9dc428c35bc9752d69af5d7e5b57c6c77a10f2a49f1e5e0f564757348f955306681fb5adb2a932688db717e80ca203459f5febea2be3734cc311980125f22520cea0add948c6751d92de86f6be517e744762cf803e5e59a311b77010b7a6b3d02d97c5e0baddaab1c273e65207a9469ef59bc86f429a63c890aa247dfe196a589dcadebe5a3decc5b9d79189a610fca482a5498eecf500e7150a8d9567415f21d763a28d1c06c5ef2c46673a42cf50f63f1ad79a03ce8e923dcbf241e4af45d07760e35b303db82129ca7dc69d110900ea60f4ac884b0cdb70177671056ab6ce66746087b7ba5455d3046ac44b05355243fd4a6df5cbadd3e18057058b846e364a221d844c791947bda346f678adf911c5b3589a5fff13d0e3948194e706a74822f38f51e0a14b87a58a9b17070a6b8606c16d9d7db33beb25290214e3a472c2a87390ff3b23d858312ddc16c7c9b105c93fcce6cb09e22407004721d7177a7aedbef8870399ce42085a519ceeaeb78529bcabf0cf8e3f7520fda823ed2172a9c0cfd5b26d81bf5dc04b690357fc6c05f7b1fb94c572b4c620b5c46f4ddd8c1c7256f4f395778022bb4ca7c2063fe07861ce23d23324d64fe3de98743398b628f98c161e15c2a26af27f1a92b1f288f70b0b53787a4b1d05350198f567e0efa02e1502902622ab61d5fca9dc55481c0fb8268ec663ec176c29eb6f7d2c186650680db0655e1e306b74adfcc0707f9325f576aa2770567c577a6665e570c6c6591e5686d2cc76585afa4c174536de9e44b8cd410e9e880ee8606c1775d95c14ba5c42b1fa7c0f1ae4674e28b8285795399c6a7e73bddf0aac983ee110eee5674ed9e20318a040274bd3548e92899deee49bd06397a5619924995f9ed13241a51f94df6a5e9a01e6bd2c48e5b4c5f0771209acb9f1a5e0ce726f584c8ef58d1d2ab6958b346b3a9047a4a7bc82b0cc41c37f31d73341ff2a91ea3b6d5f78ba001e1037aeeeafdde698c3da20a01d8a37abb4c1eb58a8898b430526fd18ac1c4b16b1d9b9ada65700d6dcd69b4f16648572457793ff952709b07c6392111da479f3635aa3aacd39db43b29125a24c7d1ea56b3f97c423eca07e3776ffd17fb6501a96d8d1ea553877a611f82cf2f679d7a0ba02f30f2dd941c86270cd1caffdad04b92954f8c8e2ddd1fccb30528b0eae68b7a6a0a7b619e2fc64be53b44c968ddf5ba9fecaecd726b84fef2559bee8073d02228c5317c4111ae064f965a920d611e81b224448f0f93ebf3476a5ebadd7bbe0f27ce811d5ed1bd63e6dc96938b31f85aaabf5258e48ffa04b7f0458b682d66a737c464e4d6ea757fbd9839a3b373f8277c8eacd103122fc3bc85c0e203f39cabc286e6cdf5307966bfe1dc19023f87b8a8458ea67e74b8e6e2a5505082242d8ad7e8f205b2d318ca145d91ca270f7c94a6b39671559c50d143598410e2cebb1972cd6cf9379bf224b05594b02960821815dbd86c647a2ed5209a1c3f8bd6b15ea415c25723dbca7bafd94d3e61a05b5cca31931c94b27c51c4d1264cbfd652b47efb8e4e04f07cd5c485c7af15f1666780c0eb5f67557aa618ec423efbc835605d17f11693e911ea5d4962075411583990548d9701f1b56f7aa303447759edf2919b0dc47d959aac6aa4ff2005823fe92fce8e72cca446a0ef68620fe725f89f42e69c4302ae13e815c5df9bff56cc87d9c2c966599420be69e5321892fc30fe60f6e5c5634da828b1d0a9da34fd419351ac260538c8f507c20c41e38a23da5258c2a39b8ea46a3dafd2fd21232d8d853e1d9b9b0a2d1e9392406956e65f029a07dbd2891a733f07a73ae52511c4d135075dca4b63c4d9952fb22d372be5ada0ce9f63702094cc9ea6ab5ce1f1f6f44df87f7a336590a93330a140969686f7d59bc38403b89b79b572d6ab6eebf60cfdef2ace2b023f198e2fe84d99996ca460e3c2feb5664acceaa32fe8a83fa435c37e036a7990f50994ba8cb100825fb28869823221b38818c14145a2dd14c2eb82421d293aa29d624db29354ea0690fca9f4ab2f2ca293f02bdb3332caeddcdf988cf0b30eae86ac053eb1b45f0ed078f54d0b3e0a77089a6f54c3784079b07ee223a486f5594f40ef920f8a8756f20c6861d3ca85d6f62bdbe358a0cc15827d8411ab1a882b88a9222ef55d664f8ad4c44aa202718580acdb2ccbe31dc9de877e29b4acd69c4937fc8d671ce918ae7094bced2abf7bdc2a98760bcc3076b29d55e65c46e1e5d97aaf43f6fcde051e81cb35ea852d077e5abd91c16b68a5131a9e893234daa0096dbc0ff6e78e3da60f7eca5b2406c7f564c9e4c49977fa1b85b93bbb2f622f951fed85bf6f747ef102dad8415a8d555b70b86e08cb12a1ddbc7cbafc9fc6d430d9dc92689161b36677697ed16b2e2a1e7226d37a426adc6df77d69df0a97821d3908181e712d92233c3daf7e0747f8c071094ea1b908716709084adaa240fb2d7815125708ef9966a20f7e3069048bf4fcab93922f900995dc3c37ef45962a1d961a44456887f10e22bf6aaeee1c363e71bee80e905dbc1c12ae8713085c05a53e15c05ee3751afadde8750f7910244472e9cd374250e65941c141e2f3638771e3eda5b7ef56545105f61889f8d48650162a824017200b92a4c0e9d1858f5a2512ecfdfb1851c7a7ae21795bbb4f4de01114f6f41cf9520edb16dc95a687caa18a947c11fbc45ca7bc53599f2c50f6fc34c598e2a1606b733efb595375bf1efe8fa159ae9e619899b358403e0057614de54bb33ed77c57bf6466934dfc6e6e43aca20f2114dcd681cddb3f679571e14e08dc3801c6b0d2c8e6ba401af7973c01552c96ffa23b6824ef738b7cfc55c814eeba5ab4351cb284e9e52da86b0ba1ed41ae3ee87d3620063fd0e7671be8291a48714d76105663d1a6afb01ebc9ca3e244af709c6d9f2e341160b9c51e8064a01593d9389e5d2598dd008cfb04d35f643305f857be9843f3c2a3940b68ca5ab34cc745458405d9d1d516a13211235d2f72451fe0a667abe057ef62ec420b1007003eb8e018e2304f26d7d52632579985dc9e7c13de34a7c2a3970407552264f539009f48427276fafda2b0a081112971ac77bc95c0a67fec3f74e5de807c3d78bb2062c4164374b2373c8a7418a161cf0af5429acd1423663e2ec2b854c463d30d9066a8980ef75c3a09966fcac507013c8d9ca77545a1d5a2bffc9ba84cf2adb9c3346112431924a0a9702a42d186a1f08122ec16e98329ed68b699d7952914141529815259a41883a9aff2fe9e066323608fbea4a379a00f562db765b45d15ec925129a4df07373d5b3a5b061aaddcb627ebe12737c3c8a85b30f6008fc75b0fc79828e7c82e1f2ff992daa292e7f0cd900dadcd7613fc9140c4904f4762ceee5a53b03d6283bd8edf026b4848b04f1dc09c9c5533dc0e379ce64f36569c0c6ea9d5be64c48ee984e47af86bdd9347e2dfb88f9f96c37cf0152ba8740862409b2eb8d3b5cc3923ac28456b6edba14f64b81c7b16deeb22d4b09846c4668172e301ea5e931f23fe7d1bc4693f1e65ee678aa2616df5b6b3af94a9c2bfc0c23bc7d46f3d08e0b8e0d0fb12715bc64b824e1372d2c3abdccc7ce0e87082a41e6ceda4c0fa686ea9e79081b5b30845d9d6b623363d5e29da72f3c3114464e0ec0e3f5b61566f766c605b4f71244fa2b6b2418392f3650d03f6abc8d737b1ce2e9b9610dc20fddabcadadd6049b01a17d090a4eaf165f08ce6def1761aec3ccad30621b071e043147baab425e812df32aa67e5ef6c1506b97941d48a521ebace9c5e2f6f93bf97bccb90ec498eb2396bbcf1167019356a7b7508c18f0e3c2c590e00f28253c947968999292483dccd138d485ba0e5f3b60ad90120f1488767ee2a18e1d99355d472e12faaad6cb9d5dec5e105f14c8933be2c79681221a8ca3149fee07d3e4d4e3efb3565f352ad4e8316eb3836a30e387cdf754b6da93ed993e06a3b1d88916385e140907550012e37329612f3e8d0f8bd5e816523909786c19e7671dcccf4c5585157b8a32db0a6be2289cdb03d79b104b0e2057ea19714250707576e5a5367e31a4a01bf31a0837701f1db9fdf30a8103a915646fdb312ab5911f34d0026f032052179f09604cca2fd090f2daabc27dd15611d8fac4368a091739cf889ba057a3d4ef58a3ab3b99899fedced72173bd4474153fba987aeaf2ca97aa90e95b85c7e74a1ff39275aab65e711dd6f2b2a876fad9572297852ea0262fd96a4cc2be1e3c6f157a5dd127ceff622bb9ee683a5565aee0f90d2239695a08e61e798d212467ab11798df71febf77fa796737b9760e0c98208a9333629cc9c6b571ffd1daa7a1f9a21486e8ee9a3bfbf2dee67015a32c4a14d19679356572a4b8ed2ad328a5203dabb7928dd5a8072097e39c4020935aa254df19bcca7a9fd0c190bb753f01c0a32c945dfbcc49f83e848a850134bae85888c76bf27a35ec3ddb46561b468932acb1777210b016cb555722e2c4a75141528e46e4039d96f2bf24949212ede2da682fd4967ec3c4a9bccc2eea8", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="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", 0xfa}, {&(0x7f0000002480)="8f426f763c82eef8f5c8acc422edc024ad30fb0c0ffd88481664115ab4ff6257df3b93617d773e80401e09028c1ebb3d8ca3babe9b3b3751159d9a692f812fcf3f665239a892553685bafb6103bff7c9fa765ae5216fb619", 0x58}, {&(0x7f0000002500)="457bf65d4b9940f702835f4b0a19dceb9528201e5f226778f87a02550b4b46d55777", 0x22}], 0x6, &(0x7f0000002d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002084380000000000010000000200ee00", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0xee529ad1a12509cb}, {&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e21}, 0x8, &(0x7f0000002ec0)=[{&(0x7f0000002e80)="7ee4c1b6468c76e3488adbaef79bc0ec6d8ff998f04ed931fb1f4d046291cb", 0x1f}], 0x1, &(0x7f0000003440)=[@rights={0x10, 0x1, 0x1, []}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}], 0x70, 0x1}, {&(0x7f00000034c0)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000005a00)=[{&(0x7f0000003500)="3a91c98e4c0c6e0ea454c465be999adce8cc9187de5f32ef353d01d47cee2e", 0x1f}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="c6ab703a1f12b7ee3e5db1c54e733524cb1f6a9b23504f38c45528c4f99c4a6bd80d51283bafc59b1ade23b7e9f7f59ebdbb2512bc634e5eda29db055ea4ddb07d438482f75f16dff9da49bf9a06b5ad068f818524d49e9fe01cc07cad7b5882c5e4c9746879f50b9370811515d4dd2e6dcd5afccc49dac4a8915f685aafe1b8ad8a3f099c1fc0c7b8ec8a2214866096597f8707602f16b288b05f85c076cdb20541532a88bb46fc9d65cc17d81283e193e2d34fe09ce5f2760c09b9c9b135e19d13f7b5ac07ff1745ae41853c", 0xcd}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="d41a5c435d246d5a6639e6b95579b80f34059d0138ad6fbeeb674029e907ae7d6c1b", 0x22}, {&(0x7f0000005680)="765eba462ce1d5978bc545ebb5285f2dbc94513920c68beea4e436655588c67246cbaec36ef22001cb0701dd487c811588e98ca16b5dc2ab1f7055d5611f24e33452363eff3289700e0d87c7eaa0b9ab2f03a64db45aa7ddb1eeee424097e7f230e6f0ec497125c648ee7d933218ce55b0ed7fc5139df97af2c36915b33c3c3853a918fba4b4684ac635bd0a98c43289702fc830f4e0dea597016cfd3e04f14d56dcfb03784e411cb63688ce490268881593888401f7e62098e3d6268c96e035666f2c8662ff803f08acd80771a03e7f9e084ed534c4d40db07c5d0b9430baa35779862b5b907cb7b979586b", 0xec}, {&(0x7f0000005780)="a217b22bddeda2ae2f9e17f6fee7a09a4983c8f061216c667f9ab818d4cc944fedb5f472beaba196b16926433f31b237e91ba86d3c27371b26253ad8be56692ef59ed4a2", 0x44}, {&(0x7f0000005800)="5c12f0e0d195605172724eea7cf5e382668cda0891b62395d1589cfb1db2bdb999de39dbb4b0c0770535ea1f89c33415f02fc8c7962e660135b5de3ae00220993c890ce292074af8", 0x48}, {&(0x7f0000005880)="0892d124bcd882c76ec40fd15720b9dc8e47cf66cfcf26049d46b562ca37366553db22a176bc7250c8d9d6be8dbcba8abfb07d663f685d01816ffafb99063a24cf6f6e444893e643ada0057691491454c822dc", 0x53}, {&(0x7f0000005900)="a647540bb02be730cb059d2cc60e654f85d8831c65aad30e0b4e5ced2ec5738a757dd16f8c9e6a5a99c03879ae605696c8447b8bdf6da6640a1dab984f9ced711e37f0b433829617b527489fc37f29a2afeca8b8766b7ec392992109f74d5350baa2650026d8f7fb9270c57252c341fd9c8142cc46598aa594570f748697ebb3cfe9a6b6c40f40348fb17f441359d7f8ea9b6e76c5a1f99b75a06562a6b3dbfc54db7c1e6dabcc94bc8afb2825068ec58f8b5c8ad7ea93e49374f969917c5dc5283545738d3565a6b840debfc39a06a5ce01b074ac543d29b5d8ef1082dec8ef2b16192e7ac8c500cd54a17df0", 0xed}], 0xa, &(0x7f0000005b80)=[@cred={0x20, 0x1, 0x2, r28, r29, r30}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0xa8, 0x800}, {&(0x7f0000005c40)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000005f00)=[{&(0x7f0000005c80)="9d895665c73ecbcdffd773c0b668f2c88958c254c46070d37fac4b1e1dbaa0306227d613dc247da02e9f4bb0e1e33c5772452ea1923d77f90c203569416edce40dc9de9f353986188399814dd79c09e12b4dad8a800b14f002346f", 0x5b}, {&(0x7f0000005d00)="58466922fdeb7f99fcc73cd622a27c3c5c6d4ae55706c3e3e6865fdf2cb4104d044458fb7810ddd9dd7558c03eac3b8c285c14b52feac20e9a4613dddf5bdfe0c4a82fc7358332dc5df2b7078f12e5665ad0a9700620279b4ba41ac68d229fa4cc70bb8f452015995d829bc4a795f8f75534b020272de213493e6d9307952f90ff72f4d38bd7d0f128ab4a29d404442ee9215c2d73c86b982fd48a7cc1db6ccba1", 0xa1}, {&(0x7f0000005dc0)="8de1456820bd83ac6fbb282a685ba41026a226832cd5a31b53d75b8f26613c00d4d8b5b0838ad4fb49fc7ebbabbb25faca225f50c23d7a1469731bd6904e8aa1628ff0c6f02f2ae8174410ea9dc404f49934117e", 0x54}, {&(0x7f0000005e40)="6228c86f4239c3421bcc73c46fb781cd5e65aba49a70297a4f41fc93c25dd15c3ec5d858656fc296e613df3c667b4a7ad13a2fc9d36ad45d4578e7acf755f133b46e425bac22002d22f78a55944d68c2754267b95c794c8c913dec5131ab58e2ecb74793ec9dbd50edb53ce5ff89b917a86a42fcd2952dd9321774d023e0d934642869c6570aa44b935e65f8173d65f1112e98a921c3a958c572c2282c55c08896fed30258cc0e8d61b0284c7c42ebf61cdee5ae", 0xb4}], 0x4, &(0x7f0000005f80)=[@rights={0x20, 0x1, 0x1, [r37, r0, r0, r0]}], 0x20, 0x10}], 0x5, 0x80) 2018/02/26 20:09:40 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x9, 0x6, 0x80000001}, {0xbe09, 0x1, 0x2, 0x4}, {0x81, 0xac95, 0x1, 0x429}, {0x1, 0x2, 0x8, 0x9}, {0x800, 0xb7, 0xffffffffda9d68ed, 0x100000000}, {0x10000, 0x3, 0x6, 0x1}]}) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="8a0200a8aa00", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) sendmsg(r0, &(0x7f0000d01000)={&(0x7f0000647f80)=@generic={0x0, "997b960f999b390cd4968eadfd04bcc54ccff7f852dbd9d90eb8b1352944028dec5a286bdb131d7a9fa40f8f5a51c76d441721b03e5f1f0df6a44178adf388e64b0147bcfb8ee634718d3ca0ed9e434eefc17b39154425252c74dd3516ba5633f8ed995419e9b7ceff84518ef9347cfe1e3ec6d24183dcf928bf25fb7b44"}, 0x80, &(0x7f00006d2fb0)=[], 0x0, &(0x7f0000000000)=[]}, 0x0) 2018/02/26 20:09:40 executing program 6: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f45c00000000000000000000000000000000000000000000000000000000000000000000000000000064310000000000000000000000000000000000ffffac1400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3df36db62b3e7903a9f089c588622c5d3bfd1c400aafabf539273a849696404204a57a8f852cdb1840757c309d63a14e1c985585bd745f325d89eabc59339941928d702528c760f37143306f8af38938e38a11512b27872087592635aa8cf1888c049d6b06e8770910756faf71fc8939763f006f5586426dfa8f2e76989e0b38302080c0c44291996f9618dbd738c40ae6c3df85e87ca3407e2c73fa4bef8591a13b9525279b57a68c1a66bcfcea34f4dc57eb94d9fff1dde24ba1a33c2c2ba3f9b3ab95adcf04b0435a54daa2188ca20191ecd1411d708e63d4af54bd89718de85c99c00000000000000000000"], 0x190) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00002e9000)={0x1, {{0xa, 0xfffffffffffffffe, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff9}}]}, 0x110) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$TCSETA(r2, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffe, 0x3, 0x8, 0xffff, 0xfffffffffffffffe, 0x4, 0x5276, 0xff, 0x5, 0x1}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000e6e000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x392) 2018/02/26 20:09:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x20002000000000, 0x101, 0x755, 0x84}, 0x10) recvfrom$inet(r0, &(0x7f0000f14fae)=""/82, 0xfffffffffffffd89, 0x800100, 0x0, 0x1d7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0xfffffffffffffffc}, 0xfffffffffffffef0) mlockall(0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4) sendto$inet(r0, &(0x7f0000000040)="a8", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 2018/02/26 20:09:40 executing program 7: semget(0x1, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/200) r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"643071300000000000000020001600", @ifru_map={0x2}}) r1 = epoll_create(0x40000000000985) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f00000002c0)=0x6d49) ioctl$TUNSETLINK(r0, 0x400454cd, &(0x7f0000000280)=0x8) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x4001) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0xfffffc0000000000, 0x4) timerfd_gettime(r2, &(0x7f0000000300)) getsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 322.187760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 322.196360] 13195 total pagecache pages [ 322.200348] 0 pages in swap cache [ 322.203825] Swap cache stats: add 0, delete 0, find 0/0 [ 322.209194] Free swap = 0kB [ 322.212235] Total swap = 0kB [ 322.215259] 1965969 pages RAM [ 322.218378] 0 pages HighMem/MovableOnly [ 322.222357] 329725 pages reserved 2018/02/26 20:09:40 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x10010, r2, 0x0) sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00008e7000), &(0x7f000061b000)=0x4) [ 333.611807] Buffer I/O error on dev loop0, logical block 0, async page read [ 492.511379] INFO: task syz-executor7:4237 blocked for more than 120 seconds. [ 492.518780] Not tainted 4.16.0-rc3+ #330 [ 492.523380] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.531353] syz-executor7 D22160 4237 1 0x00000004 [ 492.537029] Call Trace: [ 492.539644] __schedule+0x905/0x2070 [ 492.543387] ? __sched_text_start+0x8/0x8 [ 492.547553] ? mutex_spin_on_owner+0x427/0xb50 [ 492.552153] ? check_noncircular+0x20/0x20 [ 492.556407] ? retint_kernel+0x10/0x10 [ 492.560328] ? find_held_lock+0x35/0x1d0 [ 492.564414] schedule+0xf5/0x430 [ 492.567793] ? __mutex_lock+0xaa8/0x1a80 [ 492.571871] ? __schedule+0x2070/0x2070 [ 492.575870] ? lock_release+0xa40/0xa40 [ 492.579877] ? memset+0x31/0x40 [ 492.583169] ? do_raw_spin_trylock+0x190/0x190 [ 492.587771] ? debug_mutex_free_waiter+0x1b0/0x1b0 [ 492.592705] ? mutex_destroy+0x1d0/0x1d0 [ 492.596803] schedule_preempt_disabled+0x10/0x20 [ 492.601571] __mutex_lock+0xaad/0x1a80 [ 492.605479] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 492.610684] ? xt_find_table_lock+0x3e/0x3e0 [ 492.615113] ? __bfs+0x700/0x750 [ 492.618496] ? mutex_lock_io_nested+0x1900/0x1900 [ 492.623365] ? __is_insn_slot_addr+0x1fc/0x330 [ 492.627962] ? lock_downgrade+0x980/0x980 [ 492.632142] ? check_noncircular+0x20/0x20 [ 492.636389] ? find_held_lock+0x35/0x1d0 [ 492.640503] ? __might_fault+0x110/0x1d0 [ 492.644593] ? find_held_lock+0x35/0x1d0 [ 492.648686] ? check_noncircular+0x20/0x20 [ 492.652936] ? avc_has_perm_noaudit+0x355/0x520 [ 492.657629] ? lock_downgrade+0x980/0x980 [ 492.661799] ? lock_release+0xa40/0xa40 [ 492.665800] ? __might_fault+0x188/0x1d0 [ 492.669878] ? find_held_lock+0x35/0x1d0 [ 492.673977] ? __might_fault+0x110/0x1d0 [ 492.678059] ? lock_downgrade+0x980/0x980 [ 492.682240] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 492.688158] mutex_lock_nested+0x16/0x20 [ 492.692237] ? mutex_lock_nested+0x16/0x20 [ 492.696489] xt_find_table_lock+0x3e/0x3e0 [ 492.700757] xt_request_find_table_lock+0x28/0xc0 [ 492.705625] get_info+0x154/0x690 [ 492.709111] ? do_ip6t_set_ctl+0x5f0/0x5f0 [ 492.713364] ? lock_downgrade+0x980/0x980 [ 492.717533] ? avc_has_perm+0x283/0x680 [ 492.721520] ? lock_downgrade+0x980/0x980 [ 492.725700] ? selinux_capable+0x36/0x40 [ 492.729784] ? security_capable+0x8e/0xc0 [ 492.733962] ? ns_capable_common+0xcf/0x160 [ 492.738312] do_ip6t_get_ctl+0x159/0xaf0 [ 492.742399] ? find_held_lock+0x35/0x1d0 [ 492.746480] ? get_info+0x690/0x690 [ 492.750134] ? __might_fault+0x110/0x1d0 [ 492.754208] ? lock_downgrade+0x980/0x980 [ 492.758385] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 492.764294] ? mutex_unlock+0xd/0x10 [ 492.768081] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 492.773381] nf_getsockopt+0x6a/0xc0 [ 492.777132] ipv6_getsockopt+0x1d5/0x2c0 [ 492.781211] ? do_ipv6_getsockopt.isra.5+0x30c0/0x30c0 [ 492.786529] tcp_getsockopt+0x82/0xd0 [ 492.790349] sock_common_getsockopt+0x95/0xd0 [ 492.794869] SyS_getsockopt+0x178/0x340 [ 492.798865] ? SyS_setsockopt+0x360/0x360 [ 492.803048] ? move_addr_to_kernel+0x60/0x60 [ 492.807475] ? do_syscall_64+0xb6/0x940 [ 492.811475] ? SyS_setsockopt+0x360/0x360 [ 492.815637] do_syscall_64+0x280/0x940 [ 492.819805] ? __do_page_fault+0xc90/0xc90 [ 492.824056] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 492.829613] ? syscall_return_slowpath+0x550/0x550 [ 492.834572] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 492.839962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.844836] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 492.850041] RIP: 0033:0x45683a [ 492.853236] RSP: 002b:0000000000a3e3b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 492.860966] RAX: ffffffffffffffda RBX: 0000000000a3e3e0 RCX: 000000000045683a [ 492.868249] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000013 [ 492.875539] RBP: 00000000006fd720 R08: 0000000000a3e3dc R09: 0000000000004000 [ 492.882817] R10: 0000000000a3e3e0 R11: 0000000000000246 R12: 0000000000000000 [ 492.890108] R13: 0000000000000013 R14: 0000000000000029 R15: 00000000006fb560 [ 492.897428] [ 492.897428] Showing all locks held in the system: [ 492.903777] 2 locks held by khungtaskd/794: [ 492.908326] #0: (rcu_read_lock){....}, at: [<00000000f2e23315>] watchdog+0x1c5/0xd60 [ 492.916431] #1: (tasklist_lock){.+.+}, at: [<00000000e9297713>] debug_show_all_locks+0xd3/0x3d0 [ 492.925500] 1 lock held by rsyslogd/4040: [ 492.929666] #0: (&f->f_pos_lock){+.+.}, at: [<0000000082cca4c6>] __fdget_pos+0x12b/0x190 [ 492.938113] 2 locks held by getty/4162: [ 492.942106] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 492.950803] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 492.960123] 2 locks held by getty/4163: [ 492.964106] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 492.972811] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 492.982119] 2 locks held by getty/4164: [ 492.986113] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 492.994811] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 493.004131] 2 locks held by getty/4165: [ 493.008109] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 493.016817] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 493.026129] 2 locks held by getty/4166: [ 493.030116] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 493.038809] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 493.048126] 2 locks held by getty/4167: [ 493.052108] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 493.060811] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 493.070120] 1 lock held by syz-executor7/4237: [ 493.074715] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.083500] 1 lock held by syz-executor4/4242: [ 493.088097] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.096876] 1 lock held by syz-executor6/4244: [ 493.101998] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.110803] 1 lock held by syz-executor5/4245: [ 493.115406] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.124185] 1 lock held by syz-executor1/4247: [ 493.128785] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.137574] 1 lock held by syz-executor2/23072: [ 493.142255] #0: (&xt[i].mutex){+.+.}, at: [<0000000005236191>] xt_find_table_lock+0x3e/0x3e0 [ 493.151041] 2 locks held by getty/32490: [ 493.155155] #0: (&tty->ldisc_sem){++++}, at: [<000000005f2fb7f7>] ldsem_down_read+0x37/0x40 [ 493.163853] #1: (&ldata->atomic_read_lock){+.+.}, at: [<0000000004c165f9>] n_tty_read+0x2ef/0x1a00 [ 493.173178] 1 lock held by syz-executor3/10669: [ 493.177852] #0: (&xt[i].mutex){+.+.}, at: [<00000000f378abbd>] xt_find_target+0x44/0x1e0 [ 493.186299] 1 lock held by syz-executor3/10671: [ 493.190980] #0: (&xt[i].mutex){+.+.}, at: [<00000000f378abbd>] xt_find_target+0x44/0x1e0 [ 493.199449] [ 493.201090] ============================================= [ 493.201090] [ 493.208115] NMI backtrace for cpu 0 [ 493.211776] CPU: 0 PID: 794 Comm: khungtaskd Not tainted 4.16.0-rc3+ #330 [ 493.218686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.228026] Call Trace: [ 493.230601] dump_stack+0x194/0x24d [ 493.234222] ? arch_local_irq_restore+0x53/0x53 [ 493.239049] ? debug_show_all_locks+0x2f3/0x3d0 [ 493.243711] ? nmi_cpu_backtrace+0x1be/0x210 [ 493.248114] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 493.252595] nmi_cpu_backtrace+0x1d2/0x210 [ 493.256824] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 493.261303] nmi_trigger_cpumask_backtrace+0x122/0x180 [ 493.266573] arch_trigger_cpumask_backtrace+0x14/0x20 [ 493.271748] watchdog+0x90c/0xd60 [ 493.275210] ? reset_hung_task_detector+0xa0/0xa0 [ 493.280038] ? complete+0x62/0x80 [ 493.283491] ? __schedule+0x2070/0x2070 [ 493.287450] ? do_wait_intr_irq+0x3e0/0x3e0 [ 493.291758] ? __lockdep_init_map+0xe4/0x650 [ 493.296154] ? do_raw_spin_trylock+0x190/0x190 [ 493.300725] ? lockdep_init_map+0x9/0x10 [ 493.304772] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 493.309862] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.314868] ? trace_hardirqs_on+0xd/0x10 [ 493.319003] ? __kthread_parkme+0x175/0x240 [ 493.323318] kthread+0x33c/0x400 [ 493.326670] ? reset_hung_task_detector+0xa0/0xa0 [ 493.331492] ? kthread_stop+0x7a0/0x7a0 [ 493.335454] ret_from_fork+0x3a/0x50 [ 493.339277] Sending NMI from CPU 0 to CPUs 1: [ 493.343825] NMI backtrace for cpu 1 [ 493.343831] CPU: 1 PID: 6909 Comm: syz-executor0 Not tainted 4.16.0-rc3+ #330 [ 493.343834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.343843] RIP: 0010:match_held_lock+0xcb/0x880 [ 493.343846] RSP: 0018:ffff8801af8ef4f8 EFLAGS: 00000046 [ 493.343850] RAX: 0000000000000003 RBX: 1ffff10035f1dea4 RCX: 0000000000000006 [ 493.343853] RDX: 0000000000000000 RSI: ffffffff86f42800 RDI: ffff8801d4ff2c9a [ 493.343855] RBP: ffff8801af8ef5e8 R08: 1ffff10035f1dea7 R09: 0000000000000000 [ 493.343858] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d4ff2400 [ 493.343860] R13: ffff8801d4ff2c78 R14: 0000000000000000 R15: ffff8801af8ef5c0 [ 493.343864] FS: 000000000138c940(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 493.343867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.343869] CR2: 00007fbde502e000 CR3: 00000001cdb7c003 CR4: 00000000001626e0 [ 493.343874] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 493.343877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 493.343878] Call Trace: [ 493.343886] ? check_noncircular+0x20/0x20 [ 493.343891] ? print_irqtrace_events+0x270/0x270 [ 493.343896] ? find_held_lock+0x35/0x1d0 [ 493.343904] __lock_is_held+0xb6/0x140 [ 493.343910] lock_is_held_type+0x118/0x210 [ 493.343914] ? mark_held_locks+0xaf/0x100 [ 493.343921] ___might_sleep+0x35e/0x470 [ 493.343926] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 493.343930] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.343936] ? htable_selective_cleanup+0x289/0x3d0 [ 493.343940] ? trace_hardirqs_on+0xd/0x10 [ 493.343947] ? __local_bh_enable_ip+0x121/0x230 [ 493.343952] ? esp_mt+0x3d0/0x3d0 [ 493.343956] htable_selective_cleanup+0x29c/0x3d0 [ 493.343961] ? htable_remove_proc_entry+0x27e/0x3c0 [ 493.343966] ? hashlimit_ipv6_mask+0x3b0/0x3b0 [ 493.343973] htable_put+0x1de/0x300 [ 493.343978] ? hashlimit_net_exit+0x420/0x420 [ 493.343985] ? free_percpu+0x22e/0x830 [ 493.343990] ? htable_put+0x300/0x300 [ 493.343994] hashlimit_mt_destroy+0x56/0x70 [ 493.344000] cleanup_match+0x14e/0x220 [ 493.344009] ? icmp6_checkentry+0x80/0x80 [ 493.344015] ? __lock_is_held+0x4a/0x140 [ 493.344024] cleanup_entry+0xef/0x380 [ 493.344031] ? cleanup_match+0x220/0x220 [ 493.344036] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 493.344042] ? find_last_bit+0xca/0xd0 [ 493.344049] __do_replace+0x7ac/0xa70 [ 493.344058] ? compat_table_info+0x4a0/0x4a0 [ 493.344065] ? kasan_check_write+0x14/0x20 [ 493.344069] ? _copy_from_user+0x99/0x110 [ 493.344075] do_ip6t_set_ctl+0x40f/0x5f0 [ 493.344081] ? translate_compat_table+0x1c50/0x1c50 [ 493.344092] ? mutex_unlock+0xd/0x10 [ 493.344099] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 493.344105] nf_setsockopt+0x67/0xc0 [ 493.344113] ipv6_setsockopt+0x10b/0x130 [ 493.344120] tcp_setsockopt+0x82/0xd0 [ 493.344128] sock_common_setsockopt+0x95/0xd0 [ 493.344134] SyS_setsockopt+0x189/0x360 [ 493.344139] ? SyS_recv+0x40/0x40 [ 493.344146] ? mm_fault_error+0x2c0/0x2c0 [ 493.344150] ? move_addr_to_kernel+0x60/0x60 [ 493.344158] ? do_syscall_64+0xb6/0x940 [ 493.344163] ? SyS_recv+0x40/0x40 [ 493.344167] do_syscall_64+0x280/0x940 [ 493.344172] ? __do_page_fault+0xc90/0xc90 [ 493.344177] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 493.344182] ? syscall_return_slowpath+0x550/0x550 [ 493.344187] ? syscall_return_slowpath+0x2ac/0x550 [ 493.344194] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 493.344200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 493.344206] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 493.344210] RIP: 0033:0x45685a [ 493.344212] RSP: 002b:0000000000a3e3b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 493.344216] RAX: ffffffffffffffda RBX: 0000000000a3e3e0 RCX: 000000000045685a [ 493.344218] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000013 [ 493.344221] RBP: 00000000006fd720 R08: 00000000000002e8 R09: 0000000000004000 [ 493.344223] R10: 00000000006fc940 R11: 0000000000000206 R12: 0000000000000000 [ 493.344225] R13: 0000000000000013 R14: 0000000000000029 R15: 00000000006fc9a0 [ 493.344231] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 9d 04 00 00 66 41 f7 45 22 f0 ff <0f> 84 f9 01 00 00 48 8d 7e 08 48 b8 00 00 00 00 00 fc ff df 48 [ 493.344828] Kernel panic - not syncing: hung_task: blocked tasks [ 493.754981] CPU: 0 PID: 794 Comm: khungtaskd Not tainted 4.16.0-rc3+ #330 [ 493.761887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.771223] Call Trace: [ 493.773803] dump_stack+0x194/0x24d [ 493.777425] ? arch_local_irq_restore+0x53/0x53 [ 493.782089] ? vsnprintf+0x1ed/0x1900 [ 493.785885] panic+0x1e4/0x41c [ 493.789067] ? refcount_error_report+0x214/0x214 [ 493.793823] ? nmi_trigger_cpumask_backtrace+0xef/0x180 [ 493.799184] watchdog+0x91d/0xd60 [ 493.802643] ? reset_hung_task_detector+0xa0/0xa0 [ 493.807495] ? complete+0x62/0x80 [ 493.810950] ? __schedule+0x2070/0x2070 [ 493.814911] ? do_wait_intr_irq+0x3e0/0x3e0 [ 493.819215] ? __lockdep_init_map+0xe4/0x650 [ 493.823621] ? do_raw_spin_trylock+0x190/0x190 [ 493.828189] ? lockdep_init_map+0x9/0x10 [ 493.832239] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 493.837330] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.842333] ? trace_hardirqs_on+0xd/0x10 [ 493.846469] ? __kthread_parkme+0x175/0x240 [ 493.850783] kthread+0x33c/0x400 [ 493.854138] ? reset_hung_task_detector+0xa0/0xa0 [ 493.858975] ? kthread_stop+0x7a0/0x7a0 [ 493.862941] ret_from_fork+0x3a/0x50 [ 493.867374] Dumping ftrace buffer: [ 493.870989] (ftrace buffer empty) [ 493.874672] Kernel Offset: disabled [ 493.878271] Rebooting in 86400 seconds..