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"], 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {0xffffffff, 0xfc3}}, 0x10) 2018/04/30 11:31:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f00000063fa1375616948d7d9a7cec5476c90ed0ffe80bfdccd1ff552000000000000") setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000000)={@rand_addr=0x5f, @dev={0xac, 0x14, 0x14, 0x1e}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) fsetxattr(r0, &(0x7f0000000680)=@known='user.syz\x00', &(0x7f0000002140)='em0*.]keyring!\x00', 0x0, 0x0) 2018/04/30 11:31:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='memory.events\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x400000, 0x92) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/140, 0x8c}], 0x1, &(0x7f0000000200)=""/117, 0x75, 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/231, 0xe7}, {&(0x7f00000008c0)=""/84, 0x54}], 0x9, &(0x7f0000000a00)=""/181, 0xb5, 0x4}, 0x3}], 0x2, 0x121, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000b40)="f69a4c56656968effa4e6de049c0a6f877c52c4e7b8f81f0f98aaac03fc76d290bc1fbba34b51f292b6550da65b2878180fdd4f7eb491a6f18ed651a38fb90801911ebbd2607a93d65b66ee04df13bac2b57452c7b0e4a6de792555845b0678cd5971db9840209dbce29e84e8e61f6b79d1534514cad904339289080e585819fb805aeef22e402bbcbe88517c8f6367be8c6a0c0f1b4e46349ad5cf0934c51a65991ec19721db68b05db19d830c5881e658118a9afefd2cea688b2484d7c00ff5cb62a59bc9cef882e8c18475f9afd5c1ec599ee5899e50f84c3125834069b2906f3b407e21d3cec55c806", 0xeb) 2018/04/30 11:31:50 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7001) 2018/04/30 11:31:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @rand_addr}, {0x200000000, @random="87253169f6ee"}, 0xfffffffffefffffc, {0x2, 0x0, @loopback=0x7f000001}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400100, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) 2018/04/30 11:31:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004380)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0xc90d}, 0x6}, {{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/201, 0xc9}, 0x9}, {{&(0x7f0000001500)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001580)=""/128, 0x80}, {&(0x7f0000001600)=""/140, 0x8c}, {&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001740)=""/108, 0x6c}, {&(0x7f00000017c0)=""/4, 0x4}], 0x5, &(0x7f0000001880)=""/15, 0xf, 0x8}, 0x80000000}, {{&(0x7f00000018c0)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/220, 0xdc}], 0x1, 0x0, 0x0, 0xc7e}, 0x7}, {{&(0x7f0000001a80)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b00)=""/170, 0xaa}, {&(0x7f0000001bc0)=""/126, 0x7e}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/82, 0x52}, {&(0x7f0000001d00)=""/108, 0x6c}, {&(0x7f0000001d80)=""/89, 0x59}], 0x6, &(0x7f0000001e80)=""/245, 0xf5, 0x1e}, 0x8}, {{&(0x7f0000001f80)=@ax25, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)=""/143, 0x8f}, {&(0x7f00000020c0)=""/146, 0x92}, {&(0x7f0000002180)=""/9, 0x9}, {&(0x7f00000021c0)=""/80, 0x50}], 0x4, &(0x7f0000002280)=""/128, 0x80, 0x8}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002300)=""/204, 0xcc}, {&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/73, 0x49}], 0x4, &(0x7f00000025c0)=""/254, 0xfe, 0x7}, 0x100000001}, {{&(0x7f00000026c0)=@rc, 0x80, &(0x7f0000002900)=[{&(0x7f0000002740)=""/51, 0x33}, {&(0x7f0000002780)=""/9, 0x9}, {&(0x7f00000027c0)=""/167, 0xa7}, {&(0x7f0000002880)=""/83, 0x53}], 0x4, &(0x7f0000002940)=""/147, 0x93, 0x1ff}, 0xffffffff}, {{&(0x7f0000002a00)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002a80)=""/136, 0x88}, {&(0x7f0000002b40)=""/177, 0xb1}, {&(0x7f0000002c00)=""/54, 0x36}, {&(0x7f0000002c40)=""/130, 0x82}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/176, 0xb0}, {&(0x7f0000003dc0)=""/221, 0xdd}, {&(0x7f0000003ec0)=""/215, 0xd7}], 0x8, &(0x7f0000004040)=""/85, 0x55, 0xd3b1}, 0x6}, {{&(0x7f00000040c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000004140)=""/255, 0xff}], 0x1, &(0x7f0000004280)=""/234, 0xea}, 0x8}], 0xa, 0x40002001, &(0x7f0000004600)={0x77359400}) 2018/04/30 11:31:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:51 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x80000) r1 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r0, r0) write$eventfd(r2, &(0x7f0000000080)=0x1, 0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000280)=0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1}) 2018/04/30 11:31:51 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:51 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 2018/04/30 11:31:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) readahead(r0, 0x6, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) fcntl$getown(r0, 0x9) sendto$inet(r0, &(0x7f00000000c0)='C', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="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", 0x5b1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/30 11:31:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) unshare(0x8000400) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 2018/04/30 11:31:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000cdfffc), 0x0) sendmmsg$alg(r1, &(0x7f000064d000)=[{0x0, 0x0, &(0x7f0000162000)}], 0x1, 0x4008000) accept$alg(r0, 0x0, 0x0) 2018/04/30 11:31:51 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000d73ff0)='/dev/input/mice\x00', 0x0, 0x82) ioctl$int_in(r0, 0x5450, &(0x7f0000000000)=0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0xd9}, 0x10) write(r0, &(0x7f0000000080), 0x0) 2018/04/30 11:31:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 114.487846] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:31:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0x237}], 0x2b5) 2018/04/30 11:31:51 executing program 2: r0 = gettid() getpgrp(r0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:31:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x900, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/30 11:31:51 executing program 6: chroot(&(0x7f0000000000)='./file0\x00') r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) getpeername$packet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x14) bind(r0, &(0x7f00000003c0)=@can={0x1d, r1}, 0x3c0) close(r0) mount(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='efivarfs\x00', 0x8, &(0x7f0000000240)="12f2ee2fe3a90a621c942ba1d34c81e90ee810021805ce010fe7bb17f33abc62a1f4619eeec78c204f47206181b0bcfa02ec574fb04a7c903a1e9b2b2c3505ee85f55a2f1dd4eed1958f0964a060d84b2ef7dc5da918fb8666f1") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x500, 0x70bd2d, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x308a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20000804) 2018/04/30 11:31:51 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001d00000028bd7000fddbdf250a000000", @ANYRES32=r1, @ANYBLOB="e0000c0308000102000000000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="26000000110047f181ff050143000000fffffffdc200000000000000092201e6050019000000", 0x26) 2018/04/30 11:31:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) readahead(r0, 0x6, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) fcntl$getown(r0, 0x9) sendto$inet(r0, &(0x7f00000000c0)='C', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="12cd58d42f59908651b8c93cb8a9a02a578d44d4bd5c3d22913ab9d96a66bd6b408fc253e03ae94a716e4e516fd221ca9d8e596b440ac402e12c0d843298bdb86b5d54c89784bd26922ac5ab16d52638cad559ce9d04ce2b21be66b80d6d4b1b008e4e00f7eee48b832299b9cf1ec5ab2f9b378073aea6a96c6c82de99ba01da85a62492b792ce5038b9062e473da3cfc431e2482afd7f9f228f7f1f6690455e636b21fcf084e7297dfe14b66d3e162b3006a32b7e8842cbf2ac4a2ad98ea41c5829da827785e5503fdd01404a4106088c9de0269fcc956d15292ae9479830eb553a2bf0a208a755698aaecc571c97634ccb2350e7ac5e9b84db0ff60b1fe0d406237877d9a2e822c29651bc430b89171ea990c2677d3233eb04ae6688673a4b4d738dc40917de993ded723d676b7c7dae15f1a6015bf1b5e6933d381d1022cfc70616d13dd4709d8885976bb50bb52ebef92a3aa4461576edae8ed91585e7c0a5753fa3bef51853ffe3e3ffbcde785eda2e38e584814d6d9231b7102a7cc750787c9a6be5bc3f9fea353ed880e01b196bf4b3642264d621ea3d0e7de772ff4d85bcafc8aa3e806224821e6a31b92f4b6f4a3f84593a0a6df2f5eb031afb00b91c6cdc4c7b4f2ef7f1b8ca98a0ada7b250bafe0e7111761f83909f76915adbbf3d72058f2f3f229ece54c21deaa28976d1a9129e3deaa4fc0edfe5f34d9cdf438510ba6fb8d3fee09ccb8f6419030d65134e08f2ebeb703e0b692534d9f976d2d875d39ca182e614637abe23e1edb7a5167cdebb29aa2b5b7399074a7b2df83dd3b1e50438edb0958b3ab36868d97118912dfd8b4354837f3f1148383fe8d0c8fc17cd599434cd672eb6eb4783b5b03f4eea49fc00fb18aa8db8bd4e657a49b8ee9d81181f6ecbbfdce18327e34c4664ded2e8de76aabf21cbf8ba71703d988776bfbd4be8e08b694bafe925520eaaca22de8b4ccc7969a2218b3a2bd77dd530d9be4b36733dc58d908baeba22dfa6305454ec4ffb22f99a6373976352a1872d59744db6a03f61aed889bee7b4342aa0f020ba308dafdf442d4e7428ad3000ece1f3a50223251421fa2396533263c81049283b38f8fb9ef08de6f569f2be20658eedd08077d03cb01c0daa6f75df010370b99c726837effb3e8d6305bc11d90cdf416c81c3d1ff94e622655e6713904408f602cdb0978835719b31bf8748ae773b0aa5d72e2c77451591cd8c43c800ee728cd934d7c668b86bdd1d73afbe00fdb2dbae5314de955597fff624b9e2f7f8cddf4383731124b2521a19a037051b0e6bf5a425b3e64847a763646f7c256c5781a1f96192fd567817da89feab3acf503f62824942e5cd6985048af70a4fdcb05e11a3d0b8c0aa58be489cd937e92f1facefc0d10c3ac1e3d0a24b17436ebbf2220dd8701b77614cebe706a659b382af5d9fe8656e0d1204c74cb8a6e2dd7c70372077ff3c2d920716e526b04e321de47c2575b78726f290a9577e96169a7170208dfb4291edf0bf40bc843bc9519f3f757548cbb28bd5be5000aa4ea84588aab5f1e0a96c68cd0e74cc16b3fb47571555c266baa0af78240101ff4ac394adc1c544fd90c29f6a83af3bc5a685ba9ad96345297ab7bddacb332901fe61666317799096d8fe403a09ee9e4a7252b21fcbaab3e47c7024a7b0ec0682817aa81dad3c6981e87a37668758f09ca3574cee686e4efa8d965f65852f03210db35b791d3b895f82455a8f5a224253f0715408ca4de02ac33f84808739426f7f257e4d0ef194ce367bcb5c8ddc8a13bc54dcf531b2df58c150a6e0adfcd50c59b4047da48de8ecb5ded7af338f01789024b80e562f8257ea3c02bb2392c5a04890f4637239697470da81c1550340bbd0389ec8cae46d449c81f29cc848ffa33870f3f18f5f2fa5d67b91d0030cc429587fa8316a9e5bf303ce8089c7310b1f4817c358a03e91fa5fb53fa0050bf66af209e3fa3caf95c47460ff4f86905aaa3a8687bd0b9200b892b1a6b81958972ebd103a724259e6125aa9fdd4202c54fdb286e2f727c1", 0x5b1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/30 11:31:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:51 executing program 5: r0 = epoll_create1(0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a8c000)) epoll_create(0xd17) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000016000)) 2018/04/30 11:31:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x8206, 0x100000001, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0xb, 0x4, 0x3, r2}, &(0x7f0000000140)=0x10) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 115.010314] syz-executor1 (8540): /proc/8539/oom_adj is deprecated, please use /proc/8539/oom_score_adj instead. 2018/04/30 11:31:52 executing program 2: r0 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff8000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x12b2be0ff7613317) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x10000) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:31:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x900, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 2018/04/30 11:31:52 executing program 6: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x80802) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x90, 0x3, 0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r1, &(0x7f00000012c0), &(0x7f0000001300)=""/161}, 0x18) r2 = gettid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r5 = fcntl$getown(r1, 0x9) r6 = getuid() accept4(r0, 0x0, &(0x7f0000000040), 0x80000) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="456f2b1049e17308434a9576954d7f6dfb8de3c5b2449f44ec23a5b8d1440dd5fc0beb69ee18cfae68f072d90e02bbdb744748acff689846bcfe222ebfadcb88f92563281572951f0b9689f92c114a7aa930963872008aaa573b8de3e78815b132eb2d9d4164a6599c3146389f0119b31202f1e7562c2822b13837c6da1180b2ec65a49b54b26cf8bf510f21f4b818d4d609235df1d7f021fcfa4736861f14eabd0c729528c911f26b7d82e96763ff7f21582dd974", 0xb5}, {&(0x7f00000002c0)="ce4523cde812f57e83f028e86ceb34c0135eda48e14a571459752ed12fe2d45d3688f01b514d9d668e57841dd1c8a560714fcc8aadaee47620f685738382e7bbd0ee23c0f059f6b9804dd76ef8677f7cb9299e53ac890be2f8272f1b9ba08f600c2aefadd9a703ce8e5a12746f4ea3bb8a0bc2693b0f70a5a050f114b47474f8bfae0dcc1905c7ad", 0x88}, {&(0x7f0000000080)}, {&(0x7f0000001400)="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", 0x1000}], 0x4, &(0x7f0000000540)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0xf0, 0x40000}, 0xc0) 2018/04/30 11:31:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) readahead(r0, 0x6, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) fcntl$getown(r0, 0x9) sendto$inet(r0, &(0x7f00000000c0)='C', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="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", 0x5b1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/30 11:31:52 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x8206, 0x100000001, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0xb, 0x4, 0x3, r2}, &(0x7f0000000140)=0x10) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:52 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:52 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xfffffffffffffff7, 0x57f, 0xffffffffffffff00, 0xd99c, 0x0, 0x4, 0x408, 0x8, 0x40, 0xffff, 0x2, 0x1afb487c, 0x2, 0x87, 0x8, 0xe05, 0x223, 0x10001, 0x5, 0x0, 0x5, 0x0, 0x9e23, 0x6, 0x514f, 0x42c, 0x7f, 0x7f, 0xd8, 0x2, 0x4, 0x7, 0x5, 0x4, 0xa5, 0x8, 0x0, 0x6, 0x2, @perf_config_ext={0x7a, 0x5}, 0x0, 0x40, 0x4000000000000, 0x4, 0x3, 0x4, 0x5}, r2, 0xf, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4df7) 2018/04/30 11:31:52 executing program 0: r0 = epoll_create(0x7) flistxattr(r0, &(0x7f0000000000)=""/73, 0x49) fcntl$lock(r0, 0x26, &(0x7f0000f66000)={0x2, 0x0, 0x0, 0x2000000000}) 2018/04/30 11:31:52 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4c000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x1, 0x0, 0x580}, 0x4, 0x6, 0x6}) 2018/04/30 11:31:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) readahead(r0, 0x6, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) fcntl$getown(r0, 0x9) sendto$inet(r0, &(0x7f00000000c0)='C', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="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", 0x5b1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/30 11:31:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x8206, 0x100000001, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0xb, 0x4, 0x3, r2}, &(0x7f0000000140)=0x10) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:53 executing program 0: r0 = socket$inet6(0xa, 0x806, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x7fffffff, 0x6dba00ba, 0xfffffffffffff7cb, 0x6, 0x2}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)={r2, 0x6}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x27, @empty, 0x5}}, 0x6e7, 0x2, 0x5, 0x5, 0x3}, &(0x7f0000000140)=0x98) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000440)={0x2, 0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x3, @loopback={0x0, 0x1}, 0xaf}}, 0x9, 0x4300f602, 0x9, 0x3, 0x48}, 0x98) r4 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763892c38ac6568b3e891941f02f1265047502f6c2dd9f65572005da7147991090bef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c379723f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a4503c1c147cc5172df09c10eea22b1fcfb05ab850fb1fa7d86e5d217d4a59a70ba6ccaa8343014d5cbdf9cec8b13073ffe66b7490e5dc8a2ff8d0bc42cf8a84fdee6") mount(&(0x7f00000002c0)='.', &(0x7f0000000180)='.', &(0x7f0000000280)='ramfs\x00', 0x0, &(0x7f0000000440)) flock(r4, 0x1) unshare(0x8000400) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x1) fcntl$setlease(r4, 0x400, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000300)=""/55, &(0x7f0000000340)=0x37) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/04/30 11:31:53 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x2, 0x16, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240), 0x11) 2018/04/30 11:31:53 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0xb, 0x4, @buffer={0x0, 0x26, &(0x7f0000000040)=""/38}, &(0x7f0000000080)="095c457f3be5d337be47c7", &(0x7f00000000c0)=""/20, 0xc898, 0x30, 0xffffffffffffffff, &(0x7f0000000100)}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000240)="80108f395d2c82f7d87884ed925eebdf54ac712049bf1877c4434f643a05a26aedd8d72dd0521a9340cc023f6a94bb977594a264e31294006de8b90c9f5b2ed68ccb080b667db3774e1e71f28bf914b0a141afa95c38db3818779758978116a6eb90fda71ff75f612e6324518b185e6f9036e2988a6557982ec3a0d6f1068107b4f2d477d69323685577e201db3ed9f1431b5b502b85c90dff664642872532db249524b60b83af888a3b0a8bab6b1b2dc0165b9b341e9eb9733beaa35f13f4f40748387eb14923915a00b00088e1403711200e4fd8d9b5e09f14126ed1c518192b8a25f9267e2bdc884bd8fb31f25d49282eeddce5", &(0x7f0000000340)="741e5646a1357adf12b1848ad9c15b463962b5c1b291b4e8e1f24d7e296088b8e6b5dcddf3b1ca57da210c32225116655a88469a47512e0c40cfd7d17d12cfce65dc", 0x3}, 0x20) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0xe3, &(0x7f0000000200)=0x1) 2018/04/30 11:31:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x8206, 0x100000001, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0xb, 0x4, 0x3, r2}, &(0x7f0000000140)=0x10) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:53 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4c000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x1, 0x0, 0x580}, 0x4, 0x6, 0x6}) 2018/04/30 11:31:53 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:53 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:53 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x100008007000) 2018/04/30 11:31:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001800190d00000000000000000a000000007e3d8daab098baa000000008001500000000000800160004ea2b003ae7e067f8f9f26f7154c1c39c26fea8a3dd7b1b69bdb6"], 0x1}, 0x1}, 0xfffffffffffffffe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x420240, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'bdevcgroup^-eth1em0@}'}], 0xa, "7fc88f17f4326ce3ca81946830dd9173751fecaa8b3f7fdee6fcffa1034db639f8225609ea68fe47878ed1868ca11c11d394c419513350f1596a7cbe92711f6ea152672091f43feb1e8fcf4446d294c78f485a9a81507d9c8a93508d9f1a6e8f851d92830065c283fce83389376a908067278024f09fc77a798a3cf2cef3195d1c8f54e4691bcadff649a63322357215cab28841718079befe1e9b088aa941f5ba51a4299c85cdd34914bd9a64cbc10465f9d2ee8c9371dff65e29fddadc938ba6ca6b045a40242ed46d1ff5b3c9ec10c1e8a6ec"}, 0xf5) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x3, 0x400}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x80000000, 0x1, 0x8, 0xff, 0x9}, 0xc) 2018/04/30 11:31:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sysfs$3(0x3) fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$PIO_UNISCRNMAP(r1, 0x80047456, &(0x7f0000000080)="2142958c75a772128fd21bbd51b0735ee5ab722058f8984722acd6b56f5aebbafa9248becd3ce178daf4a754fe9eb726f134d48b45252bb90056bcbd3da687b550e06c1547d5122778177bcf93f0726913ec2ae46ee1ce7dcb1f38dc06c7007009958d34daa64578dde5cee0a238b49fcfa9c6012a8a9d01faaf3e4bea61c1ff1c95f2cd3ab1cd78776824681ccc") socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @local={0xfe, 0x80, [], 0xaa}, 0xa1f7, 0x6f8d0a12, 0x6fdc000000, 0x400, 0x33, 0x940000, r4}) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000140)={0x8c200000000000}) 2018/04/30 11:31:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x8206, 0x100000001, 0xfff}, &(0x7f00000000c0)=0x10) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:53 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x123200, 0x171) socketpair(0x8, 0x7, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) socket$unix(0x1, 0x7, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='oomV_score') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bond\x00', 0x10) [ 116.426934] random: crng init done 2018/04/30 11:31:53 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1f) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x81, 0x2040) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000140)={0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xfffffffffffffff7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r3}) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x800000000007000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x80, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0xe6, 0x6}, 0xc) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff81, 0x40) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000040)) 2018/04/30 11:31:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r1, 0xfc3}}, 0x10) [ 116.554204] IPVS: ftp: loaded support on port[0] = 21 [ 116.746124] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:31:53 executing program 3: unshare(0x20000000000400) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000080)=0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f0000000000)="f6ffffffff07000018") r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r3, 0x8, 0x70bd26, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xdc}, 0x1}, 0x10) 2018/04/30 11:31:53 executing program 5: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="081ef89ba0adca5dc4a205495994eb4318be9b2b914d5dc1887e59e359ec6563e176a3ce75d528732ebbe63585d6b4c97faa86423dc3fd987d01", 0x3a}, {&(0x7f0000000200)="d71e38aadd028c878b6402f53f5db4c6831527b34151a979a11653dc5b2a21bbf6197886cf87d9ae1468aa208bcbe80d0dccec2f1811b531e946f33a84cb26a7ac709726d2710e0778feb4b810f64192e885abfc68d8bb48cdf22f0a2a7d8c0da44871dc96fd629487db847016e47303275204d7d49a787d0d137412b86d53dd2ca6fb0f60ce76d640df07babc29b108660fbf4723219ff7be1e61b071d3a173a407452ad4cd6a99c9afd6eec38cf83346c7d9a3308e72323884aad4450ec206ce0c139d1b6c", 0xc6}, {&(0x7f0000000300)="17ba361bf818a055b3e6fe3adff9905c422e53a7ae0e48fea0a126e5894ffaa164770ea68e72c934124bbdca02b3bb7d60b300530b2e47342d20401eb84cbb0d7deeedf9adc54b86bfc82ea5ae9b651715e51b2ebd88d02913d14ba58fad2ee52c98982a068476b5d2ae142ec7a97ae199e7a844da8dee455fc9c6a299baf0404a1ad65495fc790f49613bb042ccddcf", 0x90}], 0x3) 2018/04/30 11:31:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r1, 0xfc3}}, 0x10) 2018/04/30 11:31:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:53 executing program 6: r0 = memfd_create(&(0x7f0000000280)="6465762046a80d01bed3c1e1c85fe2dbef94a677a99248217280a42d688043cc913ddb112187ee23355083fc8a1eed8f3d1a468b405da49550403420a5685e12afb758b1bfcf91d09bfe61b023e1b04f2f8e23a38e1ef575997d875079d8275500cf932de25ff116808e0097e9a30f89ffec73d758337ba4ecfe26e0709dceb3bc100af911f29826293f7e6d4cbbb7fa03189e2fd5b9461150c1f6c46be2eddd2f84ce8136164ee052fdf7c5919654885d693f6c70f42b0eef3f33160056b93855cb84bf62730fd9afe77c1b8d7b0b9dcc2a7566f6067be13c15bbbc440e796acc56b204c7f48fcdfa2e84e52a95", 0x3) write(r0, &(0x7f0000000240)='v', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfffe) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x200) fremovexattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='O']) dup(r0) 2018/04/30 11:31:53 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) 2018/04/30 11:31:53 executing program 0: mkdir(&(0x7f000057a000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)="72616d667300bbc5a8a158c27467d9e1b53ce400e20399bd908d0483de95bbc916e17b0cc90852814e5607acbfbe05e0fefa12ed9ac83cfef95e7d672dbf3da0a97ced10c0b77a15237c74dca9f536c84c5ae51f55c80301203079c1410b9b1b2514ca1f59ce7e94c1ec81fc509cc6f3497c54ec14a07b8cc9a4c3c5ad531fe9d9a3f3eb84dc802c394d88c41737b7104d60b56ddb2681420527e84852b59177fc12c2e4d7b0cdec4a5028e635696c2c8f205a6ddb074f61", 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x60, 0x4) write$eventfd(r0, &(0x7f0000824ff8), 0x1cc270f5) 2018/04/30 11:31:53 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 116.931540] autofs4:pid:8666:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967286.2047), cmd(0x0000937e) [ 116.945192] autofs4:pid:8666:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 2018/04/30 11:31:54 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x480001, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000640)={0x799c82f8}, 0x4) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:31:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r1, 0xfc3}}, 0x10) 2018/04/30 11:31:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioperm(0x81, 0x2, 0xff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 117.020719] autofs4:pid:8676:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967286.2047), cmd(0x0000937e) [ 117.034255] autofs4:pid:8676:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 2018/04/30 11:31:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:55 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x8, @empty, 0x7fffffff}, {0xa, 0x4e22, 0x1f, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x7ff, [0x200, 0x7ff, 0x2, 0x5, 0x0, 0x6, 0x6, 0x3]}, 0x5c) r1 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) shmctl$SHM_UNLOCK(r1, 0xc) 2018/04/30 11:31:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x480001, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000640)={0x799c82f8}, 0x4) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:31:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getpeername$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) r1 = socket(0xa, 0x6, 0x0) getsockopt(r1, 0xfffffffffffffffd, 0xffffffffffffff00, &(0x7f0000000240)=""/8, &(0x7f0000000200)=0x8) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)=""/67, 0x43) 2018/04/30 11:31:55 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:55 executing program 5: nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="081ef89ba0adca5dc4a205495994eb4318be9b2b914d5dc1887e59e359ec6563e176a3ce75d528732ebbe63585d6b4c97faa86423dc3fd987d01", 0x3a}, {&(0x7f0000000200)="d71e38aadd028c878b6402f53f5db4c6831527b34151a979a11653dc5b2a21bbf6197886cf87d9ae1468aa208bcbe80d0dccec2f1811b531e946f33a84cb26a7ac709726d2710e0778feb4b810f64192e885abfc68d8bb48cdf22f0a2a7d8c0da44871dc96fd629487db847016e47303275204d7d49a787d0d137412b86d53dd2ca6fb0f60ce76d640df07babc29b108660fbf4723219ff7be1e61b071d3a173a407452ad4cd6a99c9afd6eec38cf83346c7d9a3308e72323884aad4450ec206ce0c139d1b6c", 0xc6}, {&(0x7f0000000300)="17ba361bf818a055b3e6fe3adff9905c422e53a7ae0e48fea0a126e5894ffaa164770ea68e72c934124bbdca02b3bb7d60b300530b2e47342d20401eb84cbb0d7deeedf9adc54b86bfc82ea5ae9b651715e51b2ebd88d02913d14ba58fad2ee52c98982a068476b5d2ae142ec7a97ae199e7a844da8dee455fc9c6a299baf0404a1ad65495fc790f49613bb042ccddcf", 0x90}], 0x3) 2018/04/30 11:31:55 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x40}}}, &(0x7f0000000140)=0x84) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000740)={@remote={0xfe, 0x80, [], 0xbb}, 0x19, r1}) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000180)=""/242, &(0x7f0000000280)=0xf2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400200, 0x0) ioctl$KDGKBLED(r2, 0xc08c5114, &(0x7f0000000000)) fdatasync(r0) 2018/04/30 11:31:55 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x406281, 0x0) r1 = dup(0xffffffffffffff9c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x10001) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r2, 0x29, 0x1b, &(0x7f0000000040)=0x3e6, 0x4) 2018/04/30 11:31:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, {&(0x7f0000957ff0)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x20}], 0x2, 0x0) 2018/04/30 11:31:55 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x1fffffffd) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0x391, &(0x7f0000000000)=""/101, 0x0, 0x3}}, 0xffe7) 2018/04/30 11:31:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:55 executing program 6: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000ff0000/0xb000)=nil, 0xb000, 0x0) getpid() mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0xc000, 0x3, &(0x7f0000ff1000/0xc000)=nil) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24}}, 0x6, 0x3f, 0x1, "11c74f8c139f8987f322e12306ce674d61e2d0463f1c46482e29d5aced0b22d5f6078962a922c52a19941992b2b309ef0af0c9e7a7221a7b00e91883afde938616a2c582bc2099df9d977095981a9d4d"}, 0xd8) mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0) shmget(0x0, 0x2000, 0xc40, &(0x7f0000ff1000/0x2000)=nil) madvise(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x400000000008) 2018/04/30 11:31:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2008000011000300000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00d59bfdff133263"], 0x20}, 0x1}, 0x0) 2018/04/30 11:31:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:55 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101400, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c0, 0x0, 0x248, 0x0, 0x380, 0x138, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, &(0x7f0000000040), {[{{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0xff, 0xffffffff], 'sit0\x00', 'tunl0\x00', {}, {0xff}, 0x11, 0x9, 0x7, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, 0x3, 0x28, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1=0xe0000001, @ipv6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x6, 0x17, 0x40}}}, {{@ipv6={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'bond_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0x8, 0x2, 0x10}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @ipv4, 0x3e, 0x31, 0xfffffffffffffffd}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xc, 0x100000000, 0x6414, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x100000001, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e24}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x720) openat$urandom(0xffffffffffffff9c, &(0x7f0000000800)='/dev/urandom\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000840)=0x101) 2018/04/30 11:31:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:55 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip_vti0\x00', 0x2400}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/160, &(0x7f00000000c0)=0xa0) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000100)=0xfffffffffffffd65) setsockopt$inet_int(r0, 0x0, 0x40000000000d1, &(0x7f0000000080), 0x0) 2018/04/30 11:31:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x100000000}, 0x49) 2018/04/30 11:31:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x100000000000005, 0x84) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000180)={"623a6964622630000000f5ff004000", @ifru_names='syzkaller0\x00'}) recvmmsg(r1, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00), 0x0, &(0x7f0000004a40)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x50f55267, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}, 0x6aec}}, [0x6, 0x8, 0x7, 0x6d60f081, 0x1000, 0x2, 0x4, 0xffff, 0x7fff, 0x5, 0x6, 0x2, 0xffff, 0x80000000000000]}, &(0x7f00000006c0)=0x100) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000700)={r4, 0x2}, 0x8) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000000000000400100004001000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="0fbf0d17d47e97034700180099d74a6d000000000000000000000000000000000000000000000000f7ffff0600000000ad4673000000000000000000000009000000000000000700000000000000000000000000"], @ANYBLOB="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"], 0x4a8) [ 119.086785] IPVS: length: 160 != 24 [ 119.128219] IPVS: length: 160 != 24 2018/04/30 11:31:56 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x40, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1b) 2018/04/30 11:31:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:56 executing program 2: exit_group(0x5) r0 = gettid() prctl$setptracer(0x59616d61, r0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:31:56 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1ff, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0xffff, 0x9, 0x0, 0x3, 0xfdc, @random="3224d90c43b3"}, 0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc0189436, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x40003}) 2018/04/30 11:31:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x0) ioctl(r0, 0x2289, &(0x7f0000000fff)) ioctl(r0, 0x55e, &(0x7f0000000040)="12bde2dea5296753ff5e56ae46a6008cb3fff11b912bafae7c5e140ac4689aa559b61500c108956c2b5b7c15210ecdd5a0ed0f0b4d4aaadea8662a966e7f8feb5824352ee6348e45a26707939423fb4fe078155009ac835e2c4290e6321bd6ed67de8d37210ad202ae9f8700f3dad438e890ee5fcc243c8c46793d3982212aab0c302021d22210e15938c14ca606816f5116e4a160d592e50aa51ac7be6477d0a13f58d34039b9769567e7f6fa3719a88a058c5756b6cc44bbfa6b71237e6d8ca0e310a0efb57963a441c00e73201289815b1a55daab84d8f88a1fcaa04e") 2018/04/30 11:31:56 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)) read(r0, &(0x7f0000000440)=""/143, 0x8f) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x200040) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) 2018/04/30 11:31:56 executing program 7: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x101}) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:56 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8004800", @ANYRES16=r1, @ANYBLOB="000929bd7000fddbdf250800000008000600ff01000008000500ffffffff080005000000000034000100080009003100000008000b007369700008000200ff0000000800080009000000080004004e23000008000600666f000008000400000000001c0003000800050000000000080004000400000008000500ac1414aa2c000100080001000a00000008000b0073697000080004004e2100000800050001000000080004004e20000040000300080003000300000008000500ac1414bb080007004e230000080001000000000008000500ac1414aa1400020076657468315f746f5f7465616d0000000800050004000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 2018/04/30 11:31:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040), 0x800400000ff) 2018/04/30 11:31:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:56 executing program 3: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$netlink(0x10, 0x3, 0x1004000000004) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)="580000001400191a40a14b80fd0d8c560a0700080000e076000543d8d8fe5800040024ca7f4f643e89ffff0000635a000510f5100002000000000000001c04ed5dfffff500002f000d000100bf9ccf5d9fa291bc09000005", 0x58}], 0x305) 2018/04/30 11:31:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_names='tunl0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000100)='net\x00') r3 = dup3(r0, r1, 0x80000) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0x10001, 0x7, 0x3, 0x6}) listen$netrom(r3, 0x0) 2018/04/30 11:31:57 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x40, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}}, 0x1b) 2018/04/30 11:31:57 executing program 2: socketpair(0x1b, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x9, &(0x7f0000000080)=0xfffffcf3) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x7, 0x10000, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x100000001, {{0x2, 0x4e23, @rand_addr=0x40}}}, 0x88) 2018/04/30 11:31:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x0) 2018/04/30 11:31:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = geteuid() r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="a5b76fa62120e37d8d5607e9e507c89e3184e058926d6af83b054abbaa9c8d08fb4e5eec3fffd757bf066bfb6bd24414361825e1570f43e9fac3e29e6007c23cc9d4a5b3e33a04224d2871f5341ed5c8afc1a7171ea1938101f59663b35068fb4d98ec4cd108360e68469ae4d6e77d21d4507249c4982d79f8cb24e6233e1b43e7325569e2e694ed057eb66bc43512a158fa581ca7d4f9f30e3555d294126f506c6e87a019bf80", 0xa7, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r1, r2) [ 120.519752] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:31:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x101, 0x40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0)={{0xfffffffffffffff7, 0x6}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x2f5) 2018/04/30 11:31:57 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) 2018/04/30 11:31:57 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) getpgid(0x0) sendfile(r1, r0, 0x0, 0x1) tkill(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) 2018/04/30 11:31:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @loopback}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x2000000000000002) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) 2018/04/30 11:31:57 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x0) 2018/04/30 11:31:57 executing program 6: syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') socketpair(0x5, 0x2, 0x9, &(0x7f0000000040)) mbind(&(0x7f0000653000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000), 0x1, 0x0) 2018/04/30 11:31:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x0) 2018/04/30 11:31:57 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) sendto$ipx(r0, &(0x7f0000000180)="e5834705680d349a04cbd0f79812bad060ed07902b869b8575810f285a64feac8ed5e8f9b443a742234f535e56d46ee8f1f089ab574efad0c88ef9df99fd4eab1915c19aa8b87aed962ca72282dbd9d2b2", 0x51, 0x40000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0xc117, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in6={0xa, 0x4e21, 0x101, @loopback={0x0, 0x1}, 0x5}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @broadcast=0xffffffff}], 0x68) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7ff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x362f, 0x10000}, 0x8) shmget(0x3, 0x2000, 0x78000080, &(0x7f0000ffb000/0x2000)=nil) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10140, 0x0) 2018/04/30 11:31:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x977a, 0x3c, "a778ec11857a44f2389905b171ca8da356635545c50bfce0ce1062a40cdc18b7d365032509e3fb879205322d79a5d68e6df570fb3696826404ff88a6"}) pread64(r0, &(0x7f0000000040)=""/8, 0x8, 0x100100) 2018/04/30 11:31:57 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7ff, 0x2, [0xe13, 0x8]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x8, 0x8000}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="000000000000000373005eaf1af7d1f5ebefafb7083568646292c2afcd7ce872587e077e4c792344702356bc3b04c126b68cd1dddc29ad72e0b54fdfc58b6547d2f0e3a997d1bdddd4099f40c2378d58b7636122eedd076ed5fa525b5298b9ba86e15d2767001ba37803672b8c1fe2fda4fd59ce84345cde") getdents64(r2, &(0x7f0000000000)=""/115, 0x62) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000200)) getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) 2018/04/30 11:31:57 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r0, 0x0) r4 = fcntl$getown(r3, 0x9) r5 = getuid() r6 = getuid() sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c010000180020002cbd7000fbdbdf250700000008005a00", @ANYRES32=r3, @ANYBLOB="0400580008003200", @ANYRES32=r4, @ANYBLOB="f400930029deb0d4dc2c6d6189c9960a74c07e6c2e4bea001000003692ab0f122ef97c90e5680d37b003aa3a47e6c6e37d1631900d81176873a844549db713e7537aaa2f3950ae2c9d053c59a99905b954d7bd835203afc21de3d3dfca9f700500626534396c130350f7e5ef1d33bc1e6e00082d83db4f69a6ab06e0fa9fece2f81128a9ac3e6e15e18079f592c19264db0abe9b00c1d92220c9100aa57100d862ec096e4b65b6f005ebe4f40f6d8e1407f45c91a712423642a41d6f53cf85e520a032b76ed5feec85848e08ebf529070bb508002400ffffffff08006500", @ANYRES32=r5, @ANYBLOB="0c003600090000000000000008009100", @ANYRES32=r6, @ANYBLOB="0000004f0ee59ff6ed8a2ef9dbfc70fb2c3887d76d45a770a18ba80b283330a20da22406b27a1b86dcacd234d82dab5047f175fa1a6359d124db7492d3f8ca4c7be68d3e6ec52ea4f308006300", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000540)={{0x1000, r6, r8, r5, r9, 0xa0, 0x8}, 0x0, 0xfffffffffffffffd, 0xad, 0x80000000, r4, r4, 0xfffffffffffffffd}) r10 = getgid() setgid(r10) getpeername$unix(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x0, 0xfffffffffffffffc}]) 2018/04/30 11:31:57 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 121.057795] FAULT_INJECTION: forcing a failure. [ 121.057795] name failslab, interval 1, probability 0, space 0, times 0 [ 121.069246] CPU: 1 PID: 8905 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 121.076123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.085517] Call Trace: [ 121.088170] dump_stack+0x185/0x1d0 [ 121.091907] should_fail+0x87b/0xab0 [ 121.095743] should_failslab+0x279/0x2a0 [ 121.099882] __kmalloc+0xc2/0x350 [ 121.103395] ? kmsan_set_origin_inline+0x6b/0x120 [ 121.108297] ? alloc_pipe_info+0xb8/0x8c0 [ 121.112518] alloc_pipe_info+0xb8/0x8c0 [ 121.116556] ? splice_direct_to_actor+0x65/0x1040 [ 121.121448] ? do_splice_direct+0x335/0x540 [ 121.125828] ? splice_direct_to_actor+0xdb/0x1040 [ 121.130727] splice_direct_to_actor+0xe23/0x1040 [ 121.135545] ? do_splice_direct+0x540/0x540 [ 121.139929] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 121.145351] ? security_file_permission+0x28f/0x4b0 [ 121.150735] ? rw_verify_area+0x35e/0x580 [ 121.154940] do_splice_direct+0x335/0x540 [ 121.159203] do_sendfile+0x1067/0x1e40 [ 121.163211] SYSC_sendfile64+0x1b3/0x300 [ 121.167398] SyS_sendfile64+0x64/0x90 [ 121.171296] do_syscall_64+0x309/0x430 [ 121.175247] ? SYSC_sendfile+0x320/0x320 [ 121.179366] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 121.184595] RIP: 0033:0x455979 [ 121.187814] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 121.195573] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 121.202881] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 121.210192] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 121.217499] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 121.224808] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000000 [ 121.412609] sctp: [Deprecated]: syz-executor5 (pid 8861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.412609] Use struct sctp_sack_info instead [ 121.465736] sctp: [Deprecated]: syz-executor5 (pid 8922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.465736] Use struct sctp_sack_info instead 2018/04/30 11:31:58 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 2018/04/30 11:31:58 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101000, 0x0) r1 = syz_open_dev$urandom(&(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x40000) r2 = dup3(r0, r1, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000400)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2}}}, 0x108) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) 2018/04/30 11:31:58 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x1) ioctl$int_in(r0, 0x5473, &(0x7f0000000080)=0x7) 2018/04/30 11:31:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:58 executing program 3: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f00003dc000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00001bb000/0x4000)=nil], &(0x7f00003dc000), &(0x7f00004e55fe), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000080)={{0x1, 0x8, 0x61, 0x3, 0x9, 0x9}, 0x9fe, 0x9, 0x0, 0x0, 0x1f, "a04bd85b260f253073c954f46350ad073be4d33020db7f0a989a97e551f598be3e70d437448141a86e59c17862a6c67d3a422ea2101d6a6adb6cae18731832fba5884064bcf5a0611dfc3f29109bed59c3ae4329101d65275905264cb06e0245fd1dcdc5d6e082797537f82ad4c29587884e2ddbc8da83be0d2d0d13dc119dcd"}) 2018/04/30 11:31:58 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:31:58 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:31:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f0000835000)={&(0x7f00006c1000)=@ipv6_newroute={0x24, 0x18, 0x501, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x8, 0x8, "04"}]}, 0x24}, 0x1}, 0x0) [ 121.645135] FAULT_INJECTION: forcing a failure. [ 121.645135] name failslab, interval 1, probability 0, space 0, times 0 [ 121.646523] Unknown ioctl 19312 [ 121.656598] CPU: 1 PID: 8939 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 121.656614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.656626] Call Trace: [ 121.656673] dump_stack+0x185/0x1d0 [ 121.656717] should_fail+0x87b/0xab0 [ 121.686242] should_failslab+0x279/0x2a0 [ 121.690380] __kmalloc+0xc2/0x350 [ 121.693882] ? kmsan_set_origin_inline+0x6b/0x120 [ 121.695607] Unknown ioctl 19312 [ 121.698774] ? alloc_pipe_info+0x560/0x8c0 [ 121.698805] ? alloc_pipe_info+0x38f/0x8c0 [ 121.698840] alloc_pipe_info+0x560/0x8c0 [ 121.698880] splice_direct_to_actor+0xe23/0x1040 [ 121.698919] ? do_splice_direct+0x540/0x540 [ 121.698952] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 121.698992] ? security_file_permission+0x28f/0x4b0 [ 121.734315] ? rw_verify_area+0x35e/0x580 [ 121.738547] do_splice_direct+0x335/0x540 [ 121.742820] do_sendfile+0x1067/0x1e40 [ 121.746841] SYSC_sendfile64+0x1b3/0x300 [ 121.751008] SyS_sendfile64+0x64/0x90 [ 121.754911] do_syscall_64+0x309/0x430 [ 121.758859] ? SYSC_sendfile+0x320/0x320 [ 121.762978] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 121.768197] RIP: 0033:0x455979 [ 121.771413] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 121.779166] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 121.786468] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 2018/04/30 11:31:58 executing program 2: shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x1019, &(0x7f0000ff5000/0x2000)=nil) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0xf2, 0x4) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7002) [ 121.793856] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 121.801161] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 121.808580] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000001 2018/04/30 11:31:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)=""/241) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x540b, 0x3) syz_open_pts(r0, 0x501001) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) 2018/04/30 11:31:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00005a5000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000189000)="59c39b3ffda32e60e3b3f0575061f1f2085409d2f6bc043a5e70350c450a2bc0436bfc1f2246192dd89214ba7b10c1a0b74caf5bf66ba628084b20051b2d011e0d1c84512180ae36180285db43c2cbfa85f04d1bbcf99fa457733e315b5f0e3dd33dccf77a87e15bf02c16be41b28c26", 0x70, 0x8000, &(0x7f0000581000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7fa9, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0x3}) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x105, 0x4) 2018/04/30 11:31:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:31:59 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') prctl$seccomp(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_alloc(0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x41) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r0, r0, 0x0, 0x2000000000000044) 2018/04/30 11:31:59 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x101) [ 122.234281] audit: type=1326 audit(1525087919.232:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8975 comm="syz-executor6" exe="/root/syz-executor6" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 2018/04/30 11:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x20000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x9, 0x0, "d04c42a90dd1bca0a5f74a865420f747baaa086177dd9a170bf6c4f07ab2078e921e96c6a8d2d94f0a1605fecdcfa5434882348f9c5c7dc8241a781eaf1e9d50d7b873ef426476e496cc2b5fb11029ec"}, 0xd8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/04/30 11:32:00 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1}, {0x6, 0xfffffffffffffffc}]}) r0 = semget$private(0x0, 0x0, 0x10) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000280)=""/186) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000180)=""/242) 2018/04/30 11:32:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x28995, &(0x7f0000000100)={"79616d300000000000000019000002c4", @ifru_addrs=@ax25={0x3, {"8681b8a8da6aaa"}, 0x5e}}) 2018/04/30 11:32:00 executing program 2: shmget(0x3, 0x2000, 0x220, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000001, 0x200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x3, r1}) r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmget(0x2, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @rand_addr=0x20}, 0x4, 0x1, 0x2, 0x1}}, 0x2e) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x101000) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x1000) 2018/04/30 11:32:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:00 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:00 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:00 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="df030000000000000063c1d9bf32895906"]) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, &(0x7f0000ae2fff)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x3, 0x8, 0x2}) [ 123.141163] audit: type=1326 audit(1525087920.139:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8975 comm="syz-executor6" exe="/root/syz-executor6" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 123.192316] audit: type=1326 audit(1525087920.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8987 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 123.240002] FAULT_INJECTION: forcing a failure. [ 123.240002] name failslab, interval 1, probability 0, space 0, times 0 [ 123.251525] CPU: 0 PID: 9002 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 123.258414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.267811] Call Trace: [ 123.270465] dump_stack+0x185/0x1d0 [ 123.273522] IPVS: ftp: loaded support on port[0] = 21 [ 123.274144] should_fail+0x87b/0xab0 [ 123.274187] should_failslab+0x279/0x2a0 [ 123.274221] __kmalloc_node+0x22e/0x1190 [ 123.274259] ? kmsan_set_origin_inline+0x6b/0x120 [ 123.296193] ? kvmalloc_node+0x1a1/0x2e0 [ 123.300353] ? sanity+0x2ef/0x8a0 [ 123.303885] kvmalloc_node+0x1a1/0x2e0 [ 123.307834] iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 123.312916] default_file_splice_read+0x2b9/0x1120 [ 123.317935] ? __fsnotify_parent+0x132/0x560 [ 123.322443] ? security_file_permission+0x473/0x4b0 [ 123.327553] ? rw_verify_area+0x35e/0x580 [ 123.331766] ? SYSC_tee+0x13d0/0x13d0 [ 123.335613] splice_direct_to_actor+0x4c6/0x1040 [ 123.340449] ? do_splice_direct+0x540/0x540 [ 123.344824] ? security_file_permission+0x28f/0x4b0 [ 123.349910] ? rw_verify_area+0x35e/0x580 [ 123.354114] do_splice_direct+0x335/0x540 [ 123.358383] do_sendfile+0x1067/0x1e40 [ 123.362507] SYSC_sendfile64+0x1b3/0x300 [ 123.366720] SyS_sendfile64+0x64/0x90 [ 123.370638] do_syscall_64+0x309/0x430 [ 123.374584] ? SYSC_sendfile+0x320/0x320 [ 123.378692] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 123.383912] RIP: 0033:0x455979 [ 123.387122] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.394880] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 123.402185] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 123.409489] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 123.416795] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 123.424104] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000002 2018/04/30 11:32:00 executing program 3: fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r0) unshare(0x8000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0x8000, 0x4) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="c6623216823bbf24767801e46d28f185b948dd5283476ac2a33b89f5ef7fed8a84576fc9e77cb5b7660bd718a8113459bbfb63c19d91b141567ae9b964d0875af76f0529fe5852b1d6fe94f004eb98a800f8a70b479570980b9a46d687d446efc4a86fdbeb1b5f15da468807a6d03345a71a3e3e98ce61935611727da00535db88bbf780af54242330be5f026027ccc0bb66b7a2ce877b01615a6ed41c3117ccf925ddf7e2816d2c768aa5e2427b47a0e23389219a2855b60e75") setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040), 0xc) socket(0x11, 0x3, 0x2bd2) [ 123.447614] Unknown ioctl 19270 2018/04/30 11:32:00 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0x20}) shmget(0x0, 0x1000, 0x40, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x1, 0x1000, 0x5, &(0x7f0000ffe000/0x1000)=nil) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/145) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0xed61b8d015994092) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/net\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/125) 2018/04/30 11:32:00 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x4) 2018/04/30 11:32:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:00 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:00 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:00 executing program 5: r0 = socket(0x11, 0x807, 0xbe8) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000440)=0x2, 0x4) syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x1, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400)={0x5}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r1 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xfff, 0x80000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000d71075ff56f87c6bab71467fbb000300000000000000f8ffffffffffffff06000000000000000080000000000000ebfb03f10000000000000000180000000000000000000000000000000000fbff2cf3ffffffff1f00000000000000390c000000000000fbea8ede98609f5200000000000000000000000000000000000100000000000000000000400000000900040000000000000004ffffffffff04e1ffffff0000000000077f0000000000000000000000000000000000000000"]) write(r0, &(0x7f00000001c0)="53d8706ea29d8989787f3c33f6e4105cb50cf4e3390859f8dd808f095d3d36ecfca662b1a7231af1cb9a4aa9934772b97bbbe53bca17b70ee3e862206e2adf65cbc84def637fb0a05e56126df574a8d88b27a622989b962cc0f5237ba4403a3293abce74cd56de7a7cb296ba9900000000000000000000", 0xcdfd4718bddf7641) ioctl$void(r0, 0xc0045c77) r2 = signalfd(r1, &(0x7f0000000100)={0x2}, 0xffffff74) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0x101000) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x4, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000280)={r3, 0x3}) [ 123.773595] FAULT_INJECTION: forcing a failure. [ 123.773595] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.785618] CPU: 0 PID: 9039 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 123.792497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.801890] Call Trace: [ 123.804536] dump_stack+0x185/0x1d0 [ 123.808224] should_fail+0x87b/0xab0 [ 123.812014] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 123.816860] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 123.822274] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 123.827588] ? kmsan_kmalloc+0x94/0x100 [ 123.831617] ? __kmalloc_node+0xdec/0x1190 [ 123.835904] ? kvmalloc_node+0x1a1/0x2e0 [ 123.840010] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 123.845254] ? default_file_splice_read+0x2b9/0x1120 [ 123.850406] ? splice_direct_to_actor+0x4c6/0x1040 [ 123.855388] ? do_splice_direct+0x335/0x540 [ 123.859760] ? do_sendfile+0x1067/0x1e40 [ 123.863882] ? SYSC_sendfile64+0x1b3/0x300 [ 123.868164] ? SyS_sendfile64+0x64/0x90 [ 123.872191] ? do_syscall_64+0x309/0x430 [ 123.876313] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 123.881801] ? kmsan_set_origin_inline+0x6b/0x120 [ 123.886715] ? __msan_poison_alloca+0x15c/0x1d0 [ 123.891446] ? should_failslab+0x279/0x2a0 [ 123.895749] ? kmsan_set_origin_inline+0x6b/0x120 [ 123.900837] ? memcg_kmem_put_cache+0x40/0x280 [ 123.905483] alloc_pages_current+0x6b5/0x970 [ 123.910003] push_pipe+0x680/0xca0 [ 123.913668] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 123.918755] default_file_splice_read+0x2b9/0x1120 [ 123.923783] ? __fsnotify_parent+0x132/0x560 [ 123.928294] ? security_file_permission+0x473/0x4b0 [ 123.933416] ? rw_verify_area+0x35e/0x580 [ 123.937620] ? SYSC_tee+0x13d0/0x13d0 [ 123.941467] splice_direct_to_actor+0x4c6/0x1040 [ 123.946276] ? do_splice_direct+0x540/0x540 [ 123.950647] ? security_file_permission+0x28f/0x4b0 [ 123.955722] ? rw_verify_area+0x35e/0x580 [ 123.959929] do_splice_direct+0x335/0x540 [ 123.964807] do_sendfile+0x1067/0x1e40 [ 123.968891] SYSC_sendfile64+0x1b3/0x300 [ 123.973074] SyS_sendfile64+0x64/0x90 [ 123.977022] do_syscall_64+0x309/0x430 [ 123.980996] ? SYSC_sendfile+0x320/0x320 [ 123.985122] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 123.990353] RIP: 0033:0x455979 [ 123.993571] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 124.001326] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 124.008626] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 124.015948] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x218) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:01 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="d7b1ddc870224eabdf4900d9c0f421625015eb4026678efdcfc7e9ea03285f30bd89082d852d6e932f4d8bcb2070bf3fb1bdfd8fd55d050e55036bb794fbcb8a95b7efe687c2f88a968f9ac5ca23180154f6b33d0ab1043cce43ef13b0ab9231f6c54a78fee1db9e82350fd729d5a710c552d4449b151c88b7e892540d40457c3c244d30154d10546fefe14dc91fc180058eef222e8c4a9be6075a1a401b", 0x9e, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="d2182f0411d718c2ef9638c28d687bfbf8dcae9cc184aee93e1c876a774b377cb703659b4b2b01d9e4ec63cc9f28344be297ad7b2be496248f8ba184575632f59bc4ee", 0x43, 0xfffffffffffffffe) r4 = add_key(&(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)="986fecac8615db00f008c4c738cf0bfcf9330e470a7910a3827e2ffab9cd73468b1fb7cf5e2489970452e657e8a0e357c4ff82bbe9bbcda8cebb6ca427db5f079374cc9154192876bfa57533962603a2fd8057c9aed09a13f663396a2ad1cfdf0dccf0f5a725e86514da0e07a2921194c77e06fbaf951db98c5228c7d9e3a0d57a74154cd625f5293ef9f95ad68dd189b61671cb531a259d22888f28c1b21b1b4ab4b6d2b0a325cd6f69c20bac3e03e151cc7b132242cb33a6953e386d1577dbec5bb0bf3e2de0a8dac91d1e2b5f2a5df95bb22ce3629019ad40", 0xda, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r2, r3, r4}, &(0x7f0000000480)=""/140, 0x8c, &(0x7f0000000580)={&(0x7f0000000540)={'sm4\x00'}}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x6c, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x4, 'dh\x00', 0x1, 0x5, 0x25}, 0x2c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'tunl0\x00', 0x1000}) [ 124.023249] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 124.031425] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000003 [ 124.096777] audit: type=1326 audit(1525087921.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8987 comm="syz-executor6" exe="/root/syz-executor6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 124.234934] could not allocate digest TFM handle sm4 [ 124.296280] could not allocate digest TFM handle sm4 2018/04/30 11:32:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101902) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, "6df1733d7a8a242fd899e0633f5fcea8fb5a550ed80ebba4d909c7a124d8ac39add13dc93a80f22ff9fd35a844f3e8b5ade4e5935137af6fe251190634435dca", "6aaba7a936009867bd21673a08478220febadc5ca0c0caf1f4833b9ff18a89a285f049691fdaee090426b5018b54096bdaacf1e7a2fb27febc2e8d7b46599493", "ecd2881042e088581e6e599a5591e6c882e32e7ea6697b93d32112b2bc83d72a"}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x10000, 0x50e8ea0b, 0x10000, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}) 2018/04/30 11:32:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000020000100000000e2a40000000200140000000000000000000400000008000200ffffffff08000b0000000000"], 0x30}, 0x1}, 0x0) 2018/04/30 11:32:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') sendmsg$rds(r1, &(0x7f0000001400)={&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/109, 0x6d}], 0x4, 0x0, 0x0, 0x4044001}, 0x8000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x63a702b, 0xffffffff, 0x8}, &(0x7f0000000080)=0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="030001000500405bd43402000000000000563d0500000099c34453c2a70889fc40d4355f7dd03f9a6f25d91812d9456683c1c823a39347e056f9ecb746473b60ae23a2bd9997dae8270000000000000000000000000000f28f6178bf56b142b0e8c878e744b5508151879375bb054d0c64b83794780873be2114027925281020e542b31eef8ab73d272f12ad80a9cf36fe32f7d67a9b6b3c76848c3c6568c4eb81f66e9245c7dfaa7d6251e64631f17edd7eb22f3e832a22a0ab3e9315483b405cc8b372520da70d369ec783c1e0ef8429e398866bf9524124ae44a29e00936948afa08db4b65f289976b417418995f46e84c106e1aef85072090e91a729e1b4"], 0xa) dup2(r4, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), 0x4) 2018/04/30 11:32:01 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x218) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:01 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x9, 0x7, 0x400800, 0x5}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x181, &(0x7f00007dc000)}, 0xb) 2018/04/30 11:32:01 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:01 executing program 2: r0 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7003) pipe2(&(0x7f0000000040), 0x800) [ 124.581845] FAULT_INJECTION: forcing a failure. [ 124.581845] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.595754] CPU: 1 PID: 9069 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 124.602689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 124.612056] Call Trace: [ 124.614662] dump_stack+0x185/0x1d0 [ 124.618400] should_fail+0x87b/0xab0 [ 124.622190] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 124.626982] ? kernel_poison_pages+0x40/0x360 [ 124.631499] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 124.636884] ? kernel_poison_pages+0x1a0/0x360 [ 124.641484] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 124.646955] ? get_page_from_freelist+0xab28/0xb600 [ 124.651996] ? save_stack_trace+0xa5/0xf0 [ 124.656160] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 124.661628] ? update_stack_state+0x885/0xa40 [ 124.666140] ? update_stack_state+0x885/0xa40 [ 124.670667] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 124.675617] ? kernel_text_address+0x34d/0x3a0 [ 124.680221] ? __kernel_text_address+0x34/0xe0 [ 124.684830] ? kmsan_set_origin_inline+0x6b/0x120 [ 124.689715] ? __msan_poison_alloca+0x15c/0x1d0 [ 124.694420] kmsan_alloc_page+0x82/0xe0 [ 124.698514] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 124.703290] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 124.708674] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 124.713973] ? kmsan_kmalloc+0x94/0x100 [ 124.717969] ? __kmalloc_node+0xdec/0x1190 [ 124.722226] ? kvmalloc_node+0x1a1/0x2e0 [ 124.726305] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 124.731525] ? default_file_splice_read+0x2b9/0x1120 [ 124.736644] ? splice_direct_to_actor+0x4c6/0x1040 [ 124.741588] ? do_splice_direct+0x335/0x540 [ 124.745925] ? do_sendfile+0x1067/0x1e40 [ 124.749996] ? SYSC_sendfile64+0x1b3/0x300 [ 124.754244] ? SyS_sendfile64+0x64/0x90 [ 124.758227] ? do_syscall_64+0x309/0x430 [ 124.762300] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 124.767680] ? kmsan_set_origin_inline+0x6b/0x120 [ 124.772543] ? __msan_poison_alloca+0x15c/0x1d0 [ 124.777254] ? should_failslab+0x279/0x2a0 [ 124.781855] ? kmsan_set_origin_inline+0x6b/0x120 [ 124.786913] ? memcg_kmem_put_cache+0x40/0x280 [ 124.791513] alloc_pages_current+0x6b5/0x970 [ 124.796044] push_pipe+0x680/0xca0 [ 124.799613] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 124.805001] default_file_splice_read+0x2b9/0x1120 [ 124.810044] ? __fsnotify_parent+0x132/0x560 [ 124.814483] ? security_file_permission+0x473/0x4b0 [ 124.819617] ? rw_verify_area+0x35e/0x580 [ 124.823789] ? SYSC_tee+0x13d0/0x13d0 [ 124.827611] splice_direct_to_actor+0x4c6/0x1040 [ 124.832383] ? do_splice_direct+0x540/0x540 [ 124.836723] ? security_file_permission+0x28f/0x4b0 [ 124.841772] ? rw_verify_area+0x35e/0x580 [ 124.845945] do_splice_direct+0x335/0x540 [ 124.850120] do_sendfile+0x1067/0x1e40 [ 124.854213] SYSC_sendfile64+0x1b3/0x300 [ 124.858302] SyS_sendfile64+0x64/0x90 [ 124.862126] do_syscall_64+0x309/0x430 [ 124.866054] ? SYSC_sendfile+0x320/0x320 [ 124.870140] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 124.875350] RIP: 0033:0x455979 2018/04/30 11:32:01 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x140, 0x0) close(r1) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x40600) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000002000/0x4000)=nil, 0x4000}) getpeername$netrom(r1, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48) 2018/04/30 11:32:01 executing program 5: rt_sigsuspend(&(0x7f0000000000)={0x9}, 0x8) r0 = socket(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f000000d000)=[0x6, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x8) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1c1200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={r1, 0x6, 0x1, 0x101, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) 2018/04/30 11:32:01 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3f, 0x180) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) rt_sigprocmask(0x2, &(0x7f0000000040)={0x2}, &(0x7f0000000080), 0x8) [ 124.878549] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 124.886274] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 124.894951] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 124.902263] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 124.909545] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 124.916825] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000004 2018/04/30 11:32:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f0000000180)=""/30, 0x1e) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e20, @rand_addr=0x2}}) getdents(r0, &(0x7f0000001000)=""/24, 0x18) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0x5, 0x0, 0x80, 0x30, "02b6ff5e8437b51bc9711e8a218adf6a1d9cf2be80d2b872239e41720ac4c09b9e25558e810b942e794f3179", 0x2}, 0x0, 0x0, 0x3, r1, 0x101, 0x80000001, "469c5b280da56f39ed16d00975d8ef35a2c4bf6f5dae85dcf68855d06da0dedd9ca35164f506134f215afddb6f67a654a8acdf86c2caf6e263d848d7b1b28f09", &(0x7f0000000040)='selflo.cgroup\\md5sum[\x00', 0x16, [], [0x85, 0x7, 0x9, 0x800]}) getegid() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xff, 0x81, 0x3f}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8) 2018/04/30 11:32:02 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2ec1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x218) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:02 executing program 6: fstat(0xffffffffffffffff, &(0x7f0000000100)) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$sock_ipx_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={"766500003060000400", {0x4, 0x3, 0x8001, "1652bc2f1526", 0x10000000006a3a}}) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x401, 0x80002) epoll_wait(r0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x5, 0xd6) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x2000000003) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) write(r1, &(0x7f0000000380)="2700000014000707030e0000120f0a0011000127bbb57a3e0e49d6a90600d6ec0000f600000000", 0x27) 2018/04/30 11:32:02 executing program 1 (fault-call:2 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:02 executing program 3: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000022a000)=0x100008001, 0x4) bind$inet6(r0, &(0x7f0000002000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}}, 0x1c) socketpair$inet6(0xa, 0x2, 0x2, &(0x7f0000000000)) [ 125.257346] FAULT_INJECTION: forcing a failure. [ 125.257346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.269296] CPU: 1 PID: 9113 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 125.276153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.285514] Call Trace: [ 125.288124] dump_stack+0x185/0x1d0 [ 125.291775] should_fail+0x87b/0xab0 [ 125.295518] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 125.300301] ? kernel_poison_pages+0x40/0x360 2018/04/30 11:32:02 executing program 2: fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) uselib(&(0x7f00000001c0)='./file0\x00') getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x10003, 0x0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x4000) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x4}, 0x1c) setresgid(r0, r1, r2) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40402) connect$bt_rfcomm(r4, &(0x7f0000000180)={0x1f, {0x9, 0x40, 0x20, 0x800, 0x3}, 0xff}, 0xa) [ 125.304825] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 125.310207] ? kernel_poison_pages+0x1a0/0x360 [ 125.314814] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 125.320379] ? get_page_from_freelist+0xab28/0xb600 [ 125.325421] ? save_stack_trace+0xa5/0xf0 [ 125.329594] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 125.335071] ? update_stack_state+0x885/0xa40 [ 125.339596] ? update_stack_state+0x885/0xa40 [ 125.344221] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 125.349267] ? kernel_text_address+0x34d/0x3a0 [ 125.353876] ? __kernel_text_address+0x34/0xe0 [ 125.358487] ? kmsan_set_origin_inline+0x6b/0x120 [ 125.363359] ? __msan_poison_alloca+0x15c/0x1d0 [ 125.368058] kmsan_alloc_page+0x82/0xe0 [ 125.372065] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 125.376843] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 125.382225] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 125.387517] ? kmsan_kmalloc+0x94/0x100 [ 125.391508] ? __kmalloc_node+0xdec/0x1190 [ 125.395758] ? kvmalloc_node+0x1a1/0x2e0 [ 125.399829] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 125.405032] ? default_file_splice_read+0x2b9/0x1120 [ 125.410153] ? splice_direct_to_actor+0x4c6/0x1040 [ 125.415093] ? do_splice_direct+0x335/0x540 [ 125.419430] ? do_sendfile+0x1067/0x1e40 [ 125.423507] ? SYSC_sendfile64+0x1b3/0x300 [ 125.427752] ? SyS_sendfile64+0x64/0x90 [ 125.431737] ? do_syscall_64+0x309/0x430 [ 125.435809] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 125.441192] ? kmsan_set_origin_inline+0x6b/0x120 [ 125.446053] ? __msan_poison_alloca+0x15c/0x1d0 [ 125.450835] ? should_failslab+0x279/0x2a0 [ 125.455092] ? kmsan_set_origin_inline+0x6b/0x120 [ 125.460046] ? memcg_kmem_put_cache+0x40/0x280 [ 125.464651] alloc_pages_current+0x6b5/0x970 [ 125.469073] push_pipe+0x680/0xca0 [ 125.472650] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 125.477864] default_file_splice_read+0x2b9/0x1120 [ 125.482815] ? __fsnotify_parent+0x132/0x560 [ 125.487248] ? security_file_permission+0x473/0x4b0 [ 125.492281] ? rw_verify_area+0x35e/0x580 [ 125.496449] ? SYSC_tee+0x13d0/0x13d0 [ 125.500265] splice_direct_to_actor+0x4c6/0x1040 [ 125.505028] ? do_splice_direct+0x540/0x540 [ 125.509365] ? security_file_permission+0x28f/0x4b0 [ 125.514402] ? rw_verify_area+0x35e/0x580 [ 125.518566] do_splice_direct+0x335/0x540 [ 125.522744] do_sendfile+0x1067/0x1e40 [ 125.526662] SYSC_sendfile64+0x1b3/0x300 [ 125.530741] SyS_sendfile64+0x64/0x90 [ 125.534559] do_syscall_64+0x309/0x430 [ 125.538454] ? SYSC_sendfile+0x320/0x320 [ 125.542530] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 125.547722] RIP: 0033:0x455979 [ 125.550918] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/04/30 11:32:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x21a) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x14, 0x2, 0x1, 0x800000001, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/30 11:32:02 executing program 6: mkdir(&(0x7f0000800ff8)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_vif\x00') mknodat(r0, &(0x7f0000000200)='./file0\x00', 0x28, 0x8) mount(&(0x7f0000879ff8)='./file0\x00', &(0x7f0000106ff8)='./file0\x00', &(0x7f00008d2ffa)='ramfs\x00', 0x0, &(0x7f000063bffe)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0x100000, &(0x7f0000ce3000)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r3, r4}, 0xc) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2018/04/30 11:32:02 executing program 2: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ff9000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000040)="2535662edaffe923e772f631d6adb773872c21049f6ae5affa1a84196c21dd6ad21479b5ad1f85319c191cb1122940c172dad70392a37c0ef124366f", 0x3c) [ 125.558638] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 125.565919] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 125.573287] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 125.580565] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 125.588031] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000005 2018/04/30 11:32:02 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x14, 0x2, 0x1, 0x800000001, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/04/30 11:32:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x21a) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 125.875375] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:03 executing program 5: r0 = socket$inet(0xa, 0x6, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x81, 0x0) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc) connect$netlink(r0, &(0x7f0000000200)=@kern={0xa, 0x0, 0x0, 0xfc}, 0x57) 2018/04/30 11:32:03 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:03 executing program 1 (fault-call:2 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:03 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:03 executing program 3: r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000022a000)=0x100008001, 0x4) bind$inet6(r0, &(0x7f0000002000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}}, 0x1c) socketpair$inet6(0xa, 0x2, 0x2, &(0x7f0000000000)) 2018/04/30 11:32:03 executing program 6: fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) uselib(&(0x7f00000001c0)='./file0\x00') getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x10003, 0x0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x4000) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x4}, 0x1c) setresgid(r0, r1, r2) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40402) connect$bt_rfcomm(r4, &(0x7f0000000180)={0x1f, {0x9, 0x40, 0x20, 0x800, 0x3}, 0xff}, 0xa) 2018/04/30 11:32:03 executing program 0: acct(&(0x7f0000000140)='./file0\x00') ioctl$sock_proto_private(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)="660d90d234201400605d267ef6501857405abe0686bcc9dd2db31b539a1653d11b8e9e032f932178e7594685add097600cd84410545b9a33089bd904897c31fd9567d1e0e33bdd8ad781bc3d643cfca421aa12e67ac04b4cf55b6e716f9935527decf191b89704b1687f2231e7b40562e03850ad402ad04dbe4988e55c986b307d44645f544b2cce9f399fc57c239df7cfde552fd661c4c5ebaa67742473cb95737b0b917c4528fa4efbede0c1be0564245fbf31f19a5a8571c2004aeb014679f5018aa0b8be3e0b7cef7ab84ff3d3b50b81edc0f6a3f385f424f22a0c7a414f70c763e7aff3cf3da4d5a4") r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000489ff8)={0x9, 0x7fff}, 0x31a) close(r0) 2018/04/30 11:32:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x21a) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 126.216469] FAULT_INJECTION: forcing a failure. [ 126.216469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.228689] CPU: 0 PID: 9182 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 126.235554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.244936] Call Trace: [ 126.247593] dump_stack+0x185/0x1d0 [ 126.251295] should_fail+0x87b/0xab0 [ 126.255093] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 126.259962] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 126.265407] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 126.270737] ? kmsan_kmalloc+0x94/0x100 [ 126.274810] ? __kmalloc_node+0xdec/0x1190 [ 126.279152] ? kvmalloc_node+0x1a1/0x2e0 [ 126.283346] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 126.288605] ? default_file_splice_read+0x2b9/0x1120 [ 126.293775] ? splice_direct_to_actor+0x4c6/0x1040 [ 126.298804] ? do_splice_direct+0x335/0x540 [ 126.303225] ? do_sendfile+0x1067/0x1e40 [ 126.307340] ? SYSC_sendfile64+0x1b3/0x300 [ 126.311670] ? SyS_sendfile64+0x64/0x90 [ 126.315703] ? do_syscall_64+0x309/0x430 [ 126.319876] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 126.325349] ? kmsan_set_origin_inline+0x6b/0x120 [ 126.330250] ? __msan_poison_alloca+0x15c/0x1d0 [ 126.335329] ? should_failslab+0x279/0x2a0 [ 126.339643] ? kmsan_set_origin_inline+0x6b/0x120 [ 126.344571] ? memcg_kmem_put_cache+0x40/0x280 [ 126.349241] alloc_pages_current+0x6b5/0x970 [ 126.353761] push_pipe+0x680/0xca0 [ 126.357388] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 126.362548] default_file_splice_read+0x2b9/0x1120 [ 126.367616] ? __fsnotify_parent+0x132/0x560 [ 126.372234] ? security_file_permission+0x473/0x4b0 [ 126.377370] ? rw_verify_area+0x35e/0x580 [ 126.381588] ? SYSC_tee+0x13d0/0x13d0 [ 126.385445] splice_direct_to_actor+0x4c6/0x1040 [ 126.390262] ? do_splice_direct+0x540/0x540 [ 126.394729] ? security_file_permission+0x28f/0x4b0 [ 126.399816] ? rw_verify_area+0x35e/0x580 [ 126.404047] do_splice_direct+0x335/0x540 [ 126.408330] do_sendfile+0x1067/0x1e40 [ 126.412356] SYSC_sendfile64+0x1b3/0x300 [ 126.416560] SyS_sendfile64+0x64/0x90 [ 126.420477] do_syscall_64+0x309/0x430 [ 126.424440] ? SYSC_sendfile+0x320/0x320 [ 126.428586] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 126.433818] RIP: 0033:0x455979 [ 126.437053] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 126.444813] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 126.452137] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 126.459464] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:03 executing program 2: set_thread_area(&(0x7f0000000000)={0x3, 0x0, 0x6000, 0x9, 0x6, 0xffffffff, 0x7, 0x7, 0x6, 0x2a75}) syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x400) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:03 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="22000000150007010009d6f400010004020800000100000009000100000100000115", 0x22) fstat(r0, &(0x7f0000000040)) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x6c, 0x7, 0x0, 0xa82, 0x8}, 0x9}, 0xa) 2018/04/30 11:32:03 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000100000800000000000006000000000000000000000000000000e0000001000000000000000000000000feff0000000000000000000000000000030006000000000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000d53aab116e343274a1c6500da7477485f381b0dce0fa6924a9f06f1cc42944de8d397e0bcc132d685b21841bd8c09565e684eb53389ec5b38be2e0e077ad8a588bd578fd69e9867b6c7da5bee347366e5ea2bb9faac8ad623bc53490a94926aa90b3a0e8f6781b02dcbe50c51876bf92a57597a8bc944db3364b7e2948a42ca7b2447bbd646470b4fdd4caab7bc22fc06ee4444c82b5a896487ff51944abaaad5fb30b69eee8fa0b05c005c9b8100dcac3528f6fec0123fc8d57c7a9383993c5348d5e2dd48a641d654fe9350f8a7986e2e2068343193d0ab8306f5f995a7794fec"], 0x80}, 0x1}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x7138, 0x4) 2018/04/30 11:32:03 executing program 6: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'ifb0\x00', &(0x7f0000000040)=@ethtool_regs={0x4}}) [ 126.466915] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 126.474312] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000006 [ 126.560338] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/30 11:32:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x21b) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 126.630274] netlink: 'syz-executor0': attribute type 1 has an invalid length. 2018/04/30 11:32:04 executing program 5: unshare(0x3fc) r0 = creat(&(0x7f0000000ff8)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000180)={0x8d, 0x7, 0x800, 0xbe, &(0x7f0000000000)=""/190, 0x99, &(0x7f00000000c0)=""/153, 0x1000, &(0x7f0000001000)=""/4096}) 2018/04/30 11:32:04 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2840, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x1, 0x4) 2018/04/30 11:32:04 executing program 3: r0 = getpid() sched_getaffinity(r0, 0x8, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x64270832) getsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 2018/04/30 11:32:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1ffa4096a2dac5c28858216a626ce1989b2a33f051f24e9ccf0f4800ffe4e2cdd5"], &(0x7f00000002c0)) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/04/30 11:32:04 executing program 0: r0 = add_key(&(0x7f000014affb)='user\x00', &(0x7f00008f9ffb)={0x73, 0x79, 0x7a}, &(0x7f0000ac7000)="8f", 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffff9c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0x30000, 0x5, 0x8, 0x4}, 0x14) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/48, 0x30) 2018/04/30 11:32:04 executing program 1 (fault-call:2 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:04 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x21b) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 127.268987] FAULT_INJECTION: forcing a failure. [ 127.268987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.280875] CPU: 0 PID: 9228 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 127.280881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.280903] Call Trace: [ 127.299692] dump_stack+0x185/0x1d0 [ 127.303347] should_fail+0x87b/0xab0 [ 127.307090] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 127.311870] ? kernel_poison_pages+0x40/0x360 [ 127.316397] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 127.316413] ? kernel_poison_pages+0x1a0/0x360 [ 127.316430] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 127.316444] ? get_page_from_freelist+0xab28/0xb600 [ 127.316456] ? __kernel_text_address+0x34/0xe0 [ 127.316471] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 127.316487] ? __save_stack_trace+0x90d/0xb00 [ 127.316513] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 127.316528] ? push_pipe+0x680/0xca0 [ 127.316538] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 127.316550] ? default_file_splice_read+0x2b9/0x1120 [ 127.316563] ? do_sendfile+0x1067/0x1e40 [ 127.316574] ? SyS_sendfile64+0x64/0x90 [ 127.316586] ? do_syscall_64+0x309/0x430 [ 127.316602] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 127.316615] ? __kernel_text_address+0x34/0xe0 [ 127.316632] ? kmsan_set_origin_inline+0x6b/0x120 [ 127.316646] ? __msan_poison_alloca+0x15c/0x1d0 [ 127.316664] kmsan_alloc_page+0x82/0xe0 [ 127.316681] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 127.316693] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 127.316706] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 127.316716] ? kmsan_kmalloc+0x94/0x100 [ 127.316727] ? __kmalloc_node+0xdec/0x1190 [ 127.316740] ? kvmalloc_node+0x1a1/0x2e0 [ 127.316751] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 127.316761] ? default_file_splice_read+0x2b9/0x1120 [ 127.316771] ? splice_direct_to_actor+0x4c6/0x1040 [ 127.316781] ? do_splice_direct+0x335/0x540 [ 127.316791] ? do_sendfile+0x1067/0x1e40 [ 127.316800] ? SYSC_sendfile64+0x1b3/0x300 [ 127.316808] ? SyS_sendfile64+0x64/0x90 [ 127.316841] ? do_syscall_64+0x309/0x430 [ 127.469881] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 127.475276] ? kmsan_set_origin_inline+0x6b/0x120 [ 127.480142] ? __msan_poison_alloca+0x15c/0x1d0 [ 127.484840] ? should_failslab+0x279/0x2a0 [ 127.489098] ? kmsan_set_origin_inline+0x6b/0x120 [ 127.493969] ? memcg_kmem_put_cache+0x40/0x280 [ 127.498576] alloc_pages_current+0x6b5/0x970 [ 127.503003] push_pipe+0x680/0xca0 [ 127.506558] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 127.511595] default_file_splice_read+0x2b9/0x1120 [ 127.516565] ? __fsnotify_parent+0x132/0x560 [ 127.520988] ? security_file_permission+0x473/0x4b0 [ 127.526024] ? rw_verify_area+0x35e/0x580 [ 127.530193] ? SYSC_tee+0x13d0/0x13d0 [ 127.534001] splice_direct_to_actor+0x4c6/0x1040 [ 127.538764] ? do_splice_direct+0x540/0x540 [ 127.543098] ? security_file_permission+0x28f/0x4b0 [ 127.548135] ? rw_verify_area+0x35e/0x580 [ 127.552295] do_splice_direct+0x335/0x540 [ 127.556463] do_sendfile+0x1067/0x1e40 [ 127.560374] SYSC_sendfile64+0x1b3/0x300 [ 127.564454] SyS_sendfile64+0x64/0x90 [ 127.568273] do_syscall_64+0x309/0x430 [ 127.572177] ? SYSC_sendfile+0x320/0x320 [ 127.576259] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 127.581461] RIP: 0033:0x455979 [ 127.584658] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.592401] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 127.599681] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 127.606980] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:04 executing program 2: shmget(0x1, 0x2000, 0x8, &(0x7f0000ffa000/0x2000)=nil) seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x7}, {0x6}]}) r0 = shmget$private(0x0, 0x2000, 0x32, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6ffc) 2018/04/30 11:32:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) [ 127.614260] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 127.621537] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000007 [ 127.644005] audit: type=1326 audit(1525087924.642:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9245 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 127.752951] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:05 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 2018/04/30 11:32:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa00000000000000", @ANYPTR=&(0x7f0000003380)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x21b) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x401) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) getsockname$netrom(r1, &(0x7f00000000c0)=@full, &(0x7f0000000140)=0x48) socket$inet6(0xa, 0x5, 0xfffffffffffffff7) 2018/04/30 11:32:05 executing program 1 (fault-call:2 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:05 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:05 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f00000006c0)=""/246) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4010744d, &(0x7f0000001000)=""/174) 2018/04/30 11:32:05 executing program 6: mmap(&(0x7f0000000000/0xdc8000)=nil, 0xdc8000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f00009b5000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/57, &(0x7f0000000040)=0x39) 2018/04/30 11:32:05 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1}, 0xa00000400, 0xfffffffdffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 128.536937] audit: type=1326 audit(1525087925.535:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9245 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455979 code=0x0 [ 128.629795] FAULT_INJECTION: forcing a failure. [ 128.629795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.641652] CPU: 1 PID: 9273 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 128.648501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.657867] Call Trace: [ 128.660482] dump_stack+0x185/0x1d0 [ 128.664133] should_fail+0x87b/0xab0 [ 128.667885] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 128.672672] ? kernel_poison_pages+0x40/0x360 [ 128.677194] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 128.682585] ? kernel_poison_pages+0x1a0/0x360 [ 128.687201] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 128.692683] ? get_page_from_freelist+0xab28/0xb600 [ 128.697786] ? __kernel_text_address+0x34/0xe0 [ 128.702405] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 128.707891] ? __save_stack_trace+0x90d/0xb00 [ 128.712423] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 128.717459] ? push_pipe+0x680/0xca0 [ 128.721189] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 128.726393] ? default_file_splice_read+0x2b9/0x1120 [ 128.731511] ? do_sendfile+0x1067/0x1e40 [ 128.735596] ? SyS_sendfile64+0x64/0x90 [ 128.739588] ? do_syscall_64+0x309/0x430 [ 128.743669] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 128.749054] ? __kernel_text_address+0x34/0xe0 [ 128.753659] ? kmsan_set_origin_inline+0x6b/0x120 [ 128.758524] ? __msan_poison_alloca+0x15c/0x1d0 [ 128.763216] kmsan_alloc_page+0x82/0xe0 [ 128.767217] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 128.771987] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 128.777370] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 128.782664] ? kmsan_kmalloc+0x94/0x100 [ 128.786653] ? __kmalloc_node+0xdec/0x1190 [ 128.790368] IPVS: ftp: loaded support on port[0] = 21 [ 128.790916] ? kvmalloc_node+0x1a1/0x2e0 [ 128.800159] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 128.805369] ? default_file_splice_read+0x2b9/0x1120 [ 128.810516] ? splice_direct_to_actor+0x4c6/0x1040 [ 128.815465] ? do_splice_direct+0x335/0x540 [ 128.819807] ? do_sendfile+0x1067/0x1e40 [ 128.823888] ? SYSC_sendfile64+0x1b3/0x300 [ 128.828143] ? SyS_sendfile64+0x64/0x90 [ 128.832140] ? do_syscall_64+0x309/0x430 [ 128.836220] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 128.841606] ? kmsan_set_origin_inline+0x6b/0x120 [ 128.846478] ? __msan_poison_alloca+0x15c/0x1d0 [ 128.851188] ? should_failslab+0x279/0x2a0 [ 128.855460] ? kmsan_set_origin_inline+0x6b/0x120 [ 128.860345] ? memcg_kmem_put_cache+0x40/0x280 [ 128.864964] alloc_pages_current+0x6b5/0x970 [ 128.869402] push_pipe+0x680/0xca0 [ 128.872977] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 128.878025] default_file_splice_read+0x2b9/0x1120 [ 128.882984] ? __fsnotify_parent+0x132/0x560 [ 128.887419] ? security_file_permission+0x473/0x4b0 [ 128.892461] ? rw_verify_area+0x35e/0x580 [ 128.896635] ? SYSC_tee+0x13d0/0x13d0 [ 128.900460] splice_direct_to_actor+0x4c6/0x1040 [ 128.905239] ? do_splice_direct+0x540/0x540 [ 128.909611] ? security_file_permission+0x28f/0x4b0 [ 128.914665] ? rw_verify_area+0x35e/0x580 [ 128.918841] do_splice_direct+0x335/0x540 [ 128.923031] do_sendfile+0x1067/0x1e40 [ 128.926961] SYSC_sendfile64+0x1b3/0x300 [ 128.931048] SyS_sendfile64+0x64/0x90 [ 128.934885] do_syscall_64+0x309/0x430 [ 128.938796] ? SYSC_sendfile+0x320/0x320 [ 128.942885] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 128.948089] RIP: 0033:0x455979 [ 128.951288] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 128.959034] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 128.966316] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 128.973600] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:05 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffd04, 0x400) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7) r1 = shmget(0x3, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x40, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x2) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 2018/04/30 11:32:05 executing program 5: r0 = add_key$user(&(0x7f0000000c00)='user\x00', &(0x7f0000000c40)={0x73, 0x79, 0x7a}, &(0x7f0000000c80)='B', 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x3) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/83, 0x53) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 2018/04/30 11:32:05 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) 2018/04/30 11:32:06 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) [ 128.980877] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 128.988158] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000008 [ 129.007522] rpcbind: RPC call returned error 22 [ 129.055914] rpcbind: RPC call returned error 22 2018/04/30 11:32:06 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x0) getsockname$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0xcf9) sendmmsg(r0, &(0x7f0000ad9000), 0xec, 0x0) 2018/04/30 11:32:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000240)=0x84) sendto$inet(r0, &(0x7f0000000000)="0db3ffa00b8dad5811168de81f867a2a970c317f72ab82a15e7be36f5ad704171623e4d2f1527636a8532b8c1ed3e0aaf2119e5b5f1b1fc14253b21dc6acb99fbc133fb4338e36e0e1728319b69470b946ddcdc73d281495d7821b4ed8a59428f6a5cebd36fffc459aac", 0x6a, 0x20040041, &(0x7f0000000080)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/04/30 11:32:06 executing program 6: r0 = socket$nl_generic(0xa, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x39, &(0x7f0000000000)={0x40000}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x8, 0x0, 0x9, 0x3, 0x6, 0x85, 0x30f, 0x40, 0x2ac, 0x7, 0x0, 0x38, 0x2, 0x380000000000000, 0x0, 0x4}, [{0x0, 0xa000000000000000, 0x100000000, 0x0, 0xffff, 0x10001, 0xd95b, 0x2}, {0x7, 0x20, 0x9, 0x1, 0x27db, 0x5, 0x80000001, 0x9}], "ac583193e2f7b5ff632b091dcdff295d8f6f740962f5ce8ca7e642fcb4aeb938d1ab64862540b17f8e809d74741642236c9356d83cd15ed9827ea42d1d5c72732458834c395c564b347ff2cc3a7ef8aff2bedc289f0fbc97e4c82f"}, 0x10b) 2018/04/30 11:32:06 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0x4000000000000a, 0x4, 0xfff) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x58, 0x0, 0x4}, 0x665a1ae479507877) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80000000, 0x7}, 'port1\x00', 0x80, 0x40034, 0x10001, 0x8, 0x400, 0xfffffffffffffbff, 0x387, 0x0, 0x7, 0x1f}) r2 = shmget$private(0x0, 0xc000, 0x208, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x454d}, 'port0\x00', 0x3, 0x80000000000000}) 2018/04/30 11:32:06 executing program 2: r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="cd69876e31934f2f721c9f002662bc274d352d6078686a30e887655460a79dc938dabb49063567914870cc542a8891ddd6285017fc45a995e0c30a53bdd2e3b27ce4e1948ac996a43354304d608d467284a4dbdbd07765029550f34f6882935ec09a7b690b96f45fe2db4042b93f410d2156bd921d606b4d2ce3fa912ce46702194e6a625e5f69894751e50f18ccfc8e62cacf12715827e41bbbb647f4", 0x9d, 0xfffffffffffffff8) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(r2, 0x2, 0x1) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000300)=""/219, &(0x7f0000000400)=0xdb) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0xc0000, 0x0) keyctl$clear(0x7, r0) socket$inet_dccp(0x2, 0x6, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x200, 0x0) userfaultfd(0x800) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x7e, "294304c65bb52bfe992ad17593d0a13d55832b8befc8d466639a9ddf8cf7394ee690caf1cf8637aee753a7c8b76496ddf465918c0247f0a407098f206412d28feeee626cbb91bded6a83dd6d7ccee3833d1f0f0536c481ddd503dcdf035f9d9aa013ba83b21404a6562defa80f5c776e277ff0a420e62789f0b77e17c32e"}, &(0x7f0000000240)=0xec) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x10000, 0x0) 2018/04/30 11:32:06 executing program 1 (fault-call:2 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 129.404812] FAULT_INJECTION: forcing a failure. [ 129.404812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.416874] CPU: 0 PID: 9324 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 129.423746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.433144] Call Trace: [ 129.435789] dump_stack+0x185/0x1d0 [ 129.439481] should_fail+0x87b/0xab0 [ 129.443275] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 129.448116] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 129.453534] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 129.458865] ? kmsan_kmalloc+0x94/0x100 [ 129.462905] ? __kmalloc_node+0xdec/0x1190 [ 129.467193] ? kvmalloc_node+0x1a1/0x2e0 [ 129.471307] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 129.476550] ? default_file_splice_read+0x2b9/0x1120 [ 129.481706] ? splice_direct_to_actor+0x4c6/0x1040 [ 129.486723] ? do_splice_direct+0x335/0x540 [ 129.491137] ? do_sendfile+0x1067/0x1e40 [ 129.495253] ? SYSC_sendfile64+0x1b3/0x300 [ 129.499575] ? SyS_sendfile64+0x64/0x90 [ 129.503597] ? do_syscall_64+0x309/0x430 [ 129.507747] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 129.513212] ? kmsan_set_origin_inline+0x6b/0x120 [ 129.518107] ? __msan_poison_alloca+0x15c/0x1d0 [ 129.522824] ? should_failslab+0x279/0x2a0 [ 129.527119] ? kmsan_set_origin_inline+0x6b/0x120 [ 129.532027] ? memcg_kmem_put_cache+0x40/0x280 [ 129.536669] alloc_pages_current+0x6b5/0x970 [ 129.541180] push_pipe+0x680/0xca0 [ 129.544846] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 129.549928] default_file_splice_read+0x2b9/0x1120 [ 129.554947] ? __fsnotify_parent+0x132/0x560 [ 129.559444] ? security_file_permission+0x473/0x4b0 [ 129.564565] ? rw_verify_area+0x35e/0x580 [ 129.568766] ? SYSC_tee+0x13d0/0x13d0 [ 129.572609] splice_direct_to_actor+0x4c6/0x1040 [ 129.577426] ? do_splice_direct+0x540/0x540 [ 129.581799] ? security_file_permission+0x28f/0x4b0 [ 129.586942] ? rw_verify_area+0x35e/0x580 [ 129.591156] do_splice_direct+0x335/0x540 [ 129.595418] do_sendfile+0x1067/0x1e40 [ 129.599434] SYSC_sendfile64+0x1b3/0x300 2018/04/30 11:32:06 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x102, 0x58) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000080)=""/233}) 2018/04/30 11:32:06 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1052eed28832080045000007000000000088907800000000ffffffff08009078000400edb37216522f1c0b54a5f2b5242d131cc5c3f93af2033f5c779f9341bb1614a064eac4ab2deff72742b568f66a120c390a5da5593a9d7b225cd875c583c06a570455e1db5722f475108c7e2a2a7f788d8657cfa6a7b1ee0280d3c422a0ff9dc3d3acaba90d4717817e52eaf2eb40f6d1c29c4aab829256a94d1392a846e329c8f2ebcc3f"], &(0x7f0000375ff4)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200001, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/04/30 11:32:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400114a90d7d95e0548864f470868c80a0700000000000000000001000000"], 0x14}, 0x1}, 0x0) [ 129.603601] SyS_sendfile64+0x64/0x90 [ 129.607509] do_syscall_64+0x309/0x430 [ 129.611466] ? SYSC_sendfile+0x320/0x320 [ 129.615590] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 129.620819] RIP: 0033:0x455979 [ 129.624044] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 129.631803] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 129.639115] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 129.646422] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:06 executing program 3: r0 = getpgrp(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vsock\x00', 0x8000000000001fff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x48, "8561ce24f734561f5daf82c88533b12902ca402456c4d7fcce78ed836f0bb464d90673307b49c1f2ea7221609b2cf0bf5479019dd2c16bf4ae69942b2c59f8300068cf03a418b054"}, &(0x7f0000000540)=0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000008c0)={r2, @in6={{0xa, 0x4e23, 0x8, @mcast1={0xff, 0x1, [], 0x1}}}, 0x7f, 0x3f}, &(0x7f0000000580)=0x90) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r3, 0x1f, &(0x7f00000005c0)={0x0, 0x0, 0x1}) r4 = syz_open_procfs(r0, &(0x7f0000000000)='net/netstat\x00') sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="8a20d944b0fad790ed82f554bb020b915f8ffb4cc0c287b92ea0af3fa86d4dfa9ba1c14d61e4ecf2a523388f9d89a7aca4", 0x31}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000080)="4b1c387b918e402a6dc011ec3fbf97e6f97668dbde8db78b8a3840a0d98b0b9bf483d6b76b2ec9812a6298198a037fcc04bff6b44b0d360d2fa7ee241469ae941717872c321cc7d7a5b523fde45b4f02759dcb82d6a5467ff633af1aee32882fbc475ee43ad7b74f80a4fed328db50454e6113f82ed51a28863d73cec061fe636f1f8459ae8adada7432e34e4bea7adcce337c2c9f6d3302ed557494c1531dfbef976e8a3179229d87067b8dc11d8c931ab3ce86d61c82a6ed2409588a3dcf75edce7e9895129be7a8ddd35693e768ecb08eed8b879137b682c0d299e2bfdd40377890c3b22dbdae7dea3a6fd0187e351bad869537fb", 0xf6}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000000180)="872705426ae6c34a4e361d69829b3892608070aa880eb54458f465e05eba15e12afac69f075b78a0b44d9ab8c1b7ed8e3b63669ada1768c1e2159bc0ceed18cd633e5fae86470251545d75fafc0745cdcf278ade057a8db7749364e48461b2bd32a5f803968141a5f493fcabf7e36ef008594bac8389399aa7d92e8afdba933b3d71f838d3520ac175f56404551780433b6a00f45d69cc626765a871e46dff9b6884f34ca09b84682b4c54b3142fc56cfa", 0xb1}, {&(0x7f0000000240)="358c655756b63a0e20fdca8c83be1a59a09a7a4f58ac863b04030ea22a1767a076a019a94a44ffbb5690f1e0e27aaf175c355f85e783002b6e2dd0bae64b948a714f3cd1c0a547dcbb32766b8b63e3d2cffdc2c18cb7d29d9e19f92f038afca8542778043275581e123972a99ef1f26b7ec4152fbb9986836cb84cc76acf8f84c03f6e870d68d0fa1d260e5d80d5a382", 0x90}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000000300)="22ec9bd610490f7f9b16", 0xa}, {&(0x7f0000000340)="c83a394adfe23b08b201460a2f38180768a38bb8177d1ca22e4ec5f476fd25f4e600e637f9608f995e019423d59793f892c3", 0x32}], 0x9, &(0x7f0000000600)=[{0x10, 0x117, 0x7}, {0x20, 0x0, 0x33, "1815a32088dcd5d8163752"}, {0x60, 0x1bf, 0x1ff, "39c47308838c6e8d7c7b25c3465dba36ea0dc15e3430fbdae4bcac48d07f848e3ba68ea1b63e80885e5b3b0fa273e7c932b5a76d6f8a78626a3a7ece8db143493dac99a0f5b0c6940a"}, {0x38, 0xff, 0x5, "98badbfbf4d220e80d516f11d247ec4fe53696b4f1dc48d56532f39d4f2439930b90bb2da1c3"}, {0x18, 0x117, 0x0, "cf"}, {0x50, 0x111, 0x80000000, "02f4c2f39307ae1dfb77f2e33500cee22dfd69a3fee05a3229d2235b7a93102b6c6162bec22c2b0f3faaa3da7e3b44972110ba8a5f3ae3ee052142af"}, {0xb8, 0x11f, 0x601, "74657a58293625ba3fc23aead433b1cbb5c0ec81aa45c0032ebbcc4c9e3b34f6955406e05a027012eaf88af21460b4f1758a9626342eea866660f86fbb7a4dee6b2c045ff28d3712fb361a34e1a2319edce5b5a6c5369b7ae1996afa8e4a1fa54235b9d0b640021199dc4f3a1fe584ea33c14d9cd040f44c090eeee3a5100a3a480279c89d7c139eb35f6c935a81e4f5d4bb1f3cabf2980240f0e01de091386b1d1afe8523f132"}, {0xb0, 0x11f, 0x20, "63c8a266bdd58cf2ceb5b88f2ead7ae63cda7b00707ce560733d168065e5ba6b7616e9f5a3dc6809bd8672c6de93ee06f25a19d8bc860ddde963a9e53bb5f27de16b4d52188c21e69c4dd29aa60e03e7eb790cb21776a0e2843b8656a0830b2a7c2fe977db425277be6ae232dd8faff80bb4792be0c0329e216cf0f6e49f3e5c9793e7818c8385d8790f7befd22e3f5d16adc82ec82a1255cb32ee"}], 0x298, 0x10}, 0x4008004) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r5, &(0x7f0000b0a000)=""/128, 0x80) [ 129.653728] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 129.661039] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000009 2018/04/30 11:32:06 executing program 3: 2018/04/30 11:32:06 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/30 11:32:06 executing program 6: 2018/04/30 11:32:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:07 executing program 3: 2018/04/30 11:32:07 executing program 0: 2018/04/30 11:32:07 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:07 executing program 5: 2018/04/30 11:32:07 executing program 1 (fault-call:2 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:07 executing program 6: 2018/04/30 11:32:07 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x20400) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB], 0x10) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 130.356001] FAULT_INJECTION: forcing a failure. [ 130.356001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.367862] CPU: 1 PID: 9381 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 130.374741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.384100] Call Trace: [ 130.386699] dump_stack+0x185/0x1d0 [ 130.390347] should_fail+0x87b/0xab0 [ 130.394079] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 130.398848] ? kernel_poison_pages+0x40/0x360 [ 130.403364] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 130.408739] ? kernel_poison_pages+0x1a0/0x360 [ 130.413340] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 130.418805] ? get_page_from_freelist+0xab28/0xb600 [ 130.423832] ? __kernel_text_address+0x34/0xe0 [ 130.428434] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 130.433901] ? __save_stack_trace+0x90d/0xb00 [ 130.438427] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 130.443381] ? push_pipe+0x680/0xca0 [ 130.447102] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 2018/04/30 11:32:07 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x134, r1, 0x1, 0x70bd2a, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x80c1) [ 130.452302] ? default_file_splice_read+0x2b9/0x1120 [ 130.457419] ? do_sendfile+0x1067/0x1e40 [ 130.461490] ? SyS_sendfile64+0x64/0x90 [ 130.465472] ? do_syscall_64+0x309/0x430 [ 130.469544] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 130.474921] ? __kernel_text_address+0x34/0xe0 [ 130.479523] ? kmsan_set_origin_inline+0x6b/0x120 [ 130.484376] ? __msan_poison_alloca+0x15c/0x1d0 [ 130.489064] kmsan_alloc_page+0x82/0xe0 [ 130.493052] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 130.497820] ? kmsan_internal_poison_shadow+0x14e/0x1b0 2018/04/30 11:32:07 executing program 2: shmget$private(0x0, 0x4000, 0x802, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) [ 130.503213] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 130.509035] ? kmsan_kmalloc+0x94/0x100 [ 130.513022] ? __kmalloc_node+0xdec/0x1190 [ 130.517273] ? kvmalloc_node+0x1a1/0x2e0 [ 130.521353] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 130.526548] ? default_file_splice_read+0x2b9/0x1120 [ 130.531664] ? splice_direct_to_actor+0x4c6/0x1040 [ 130.536601] ? do_splice_direct+0x335/0x540 [ 130.540950] ? do_sendfile+0x1067/0x1e40 [ 130.545715] ? SYSC_sendfile64+0x1b3/0x300 [ 130.549960] ? SyS_sendfile64+0x64/0x90 2018/04/30 11:32:07 executing program 0: [ 130.553946] ? do_syscall_64+0x309/0x430 [ 130.558024] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 130.563409] ? kmsan_set_origin_inline+0x6b/0x120 [ 130.568272] ? __msan_poison_alloca+0x15c/0x1d0 [ 130.572959] ? should_failslab+0x279/0x2a0 [ 130.577215] ? kmsan_set_origin_inline+0x6b/0x120 [ 130.582085] ? memcg_kmem_put_cache+0x40/0x280 [ 130.586687] alloc_pages_current+0x6b5/0x970 [ 130.591111] push_pipe+0x680/0xca0 [ 130.594668] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 130.599707] default_file_splice_read+0x2b9/0x1120 [ 130.604658] ? __fsnotify_parent+0x132/0x560 [ 130.609086] ? security_file_permission+0x473/0x4b0 [ 130.614118] ? rw_verify_area+0x35e/0x580 [ 130.618272] ? SYSC_tee+0x13d0/0x13d0 [ 130.622075] splice_direct_to_actor+0x4c6/0x1040 [ 130.626838] ? do_splice_direct+0x540/0x540 [ 130.631171] ? security_file_permission+0x28f/0x4b0 [ 130.636220] ? rw_verify_area+0x35e/0x580 [ 130.640382] do_splice_direct+0x335/0x540 [ 130.644562] do_sendfile+0x1067/0x1e40 [ 130.648467] SYSC_sendfile64+0x1b3/0x300 [ 130.652534] SyS_sendfile64+0x64/0x90 2018/04/30 11:32:07 executing program 2: shmget(0x3, 0x400000, 0x310, &(0x7f0000c00000/0x400000)=nil) r0 = shmget(0x3, 0x2000, 0x294, &(0x7f0000c1d000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1007003) fcntl$getown(0xffffffffffffffff, 0x9) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) 2018/04/30 11:32:07 executing program 0: [ 130.656345] do_syscall_64+0x309/0x430 [ 130.660239] ? SYSC_sendfile+0x320/0x320 [ 130.664305] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 130.669504] RIP: 0033:0x455979 [ 130.672689] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 130.680404] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 130.687683] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 130.694965] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:07 executing program 3: 2018/04/30 11:32:07 executing program 6: 2018/04/30 11:32:07 executing program 5: 2018/04/30 11:32:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB], 0x10) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 130.702242] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 130.709520] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000a 2018/04/30 11:32:07 executing program 6: 2018/04/30 11:32:08 executing program 0: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30, 0x7fff}, &(0x7f00000000c0)=0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@local}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) sendmsg$netlink(r0, &(0x7f0000000700)={&(0x7f0000000200)=@kern={0x10}, 0xc, &(0x7f0000000380), 0x0, &(0x7f00000005c0)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}, @rights={0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}], 0x68, 0x20000080}, 0x8000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsync(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000aff8)) recvmsg(0xffffffffffffffff, &(0x7f000000e000)={0x0, 0x0, &(0x7f000008b000), 0x0, &(0x7f000000c000), 0xfc13}, 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x800, 0x800) fallocate(r2, 0x3, 0x0, 0xffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={0x0, 0x0, 0x5}, &(0x7f0000000a00)=0xc) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, @dev}, &(0x7f00000006c0)=0x1c) 2018/04/30 11:32:08 executing program 2: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x3000, 0x9fe, &(0x7f0000ffd000/0x3000)=nil) getrandom(&(0x7f0000000000)=""/191, 0xbf, 0x0) 2018/04/30 11:32:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB], 0x10) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:08 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x8000, &(0x7f0000000300)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="ae", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/30 11:32:08 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(0xffffffffffffffff) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:08 executing program 1 (fault-call:2 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:08 executing program 3: 2018/04/30 11:32:08 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\b']}) [ 131.224079] FAULT_INJECTION: forcing a failure. [ 131.224079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.235930] CPU: 0 PID: 9432 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 131.242824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.252198] Call Trace: [ 131.254798] dump_stack+0x185/0x1d0 [ 131.258443] should_fail+0x87b/0xab0 [ 131.262176] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 131.266942] ? kernel_poison_pages+0x40/0x360 2018/04/30 11:32:08 executing program 3: dup(0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000000aff8)) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, @dev}, &(0x7f00000006c0)=0x1c) [ 131.271445] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 131.276820] ? kernel_poison_pages+0x1a0/0x360 [ 131.281416] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 131.286879] ? get_page_from_freelist+0xab28/0xb600 [ 131.291905] ? __kernel_text_address+0x34/0xe0 [ 131.296502] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 131.301964] ? __save_stack_trace+0x90d/0xb00 [ 131.306481] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 131.311505] ? push_pipe+0x680/0xca0 [ 131.315222] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 2018/04/30 11:32:08 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00006c7ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 131.320418] ? default_file_splice_read+0x2b9/0x1120 [ 131.325529] ? do_sendfile+0x1067/0x1e40 [ 131.329603] ? SyS_sendfile64+0x64/0x90 [ 131.333583] ? do_syscall_64+0x309/0x430 [ 131.337654] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 131.343035] ? __kernel_text_address+0x34/0xe0 [ 131.347633] ? kmsan_set_origin_inline+0x6b/0x120 [ 131.352484] ? __msan_poison_alloca+0x15c/0x1d0 [ 131.357171] kmsan_alloc_page+0x82/0xe0 [ 131.361159] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 131.365932] ? kmsan_internal_poison_shadow+0x14e/0x1b0 2018/04/30 11:32:08 executing program 5: timer_create(0x3, &(0x7f0000000080), &(0x7f00000000c0)) timer_settime(0x0, 0x4, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000180)={r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000140)) [ 131.371313] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 131.376604] ? kmsan_kmalloc+0x94/0x100 [ 131.380596] ? __kmalloc_node+0xdec/0x1190 [ 131.384874] ? kvmalloc_node+0x1a1/0x2e0 [ 131.388946] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 131.394146] ? default_file_splice_read+0x2b9/0x1120 [ 131.399260] ? splice_direct_to_actor+0x4c6/0x1040 [ 131.404206] ? do_splice_direct+0x335/0x540 [ 131.408542] ? do_sendfile+0x1067/0x1e40 [ 131.412616] ? SYSC_sendfile64+0x1b3/0x300 [ 131.416859] ? SyS_sendfile64+0x64/0x90 [ 131.420847] ? do_syscall_64+0x309/0x430 [ 131.424919] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 131.430297] ? kmsan_set_origin_inline+0x6b/0x120 [ 131.435156] ? __msan_poison_alloca+0x15c/0x1d0 [ 131.439842] ? should_failslab+0x279/0x2a0 [ 131.444085] ? kmsan_set_origin_inline+0x6b/0x120 [ 131.448946] ? memcg_kmem_put_cache+0x40/0x280 [ 131.453545] alloc_pages_current+0x6b5/0x970 [ 131.457968] push_pipe+0x680/0xca0 [ 131.461533] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 131.466575] default_file_splice_read+0x2b9/0x1120 [ 131.471514] ? __fsnotify_parent+0x132/0x560 [ 131.475945] ? security_file_permission+0x473/0x4b0 [ 131.480983] ? rw_verify_area+0x35e/0x580 [ 131.485148] ? SYSC_tee+0x13d0/0x13d0 [ 131.488955] splice_direct_to_actor+0x4c6/0x1040 [ 131.493714] ? do_splice_direct+0x540/0x540 [ 131.498049] ? security_file_permission+0x28f/0x4b0 [ 131.503086] ? rw_verify_area+0x35e/0x580 [ 131.507241] do_splice_direct+0x335/0x540 [ 131.511400] do_sendfile+0x1067/0x1e40 [ 131.515305] SYSC_sendfile64+0x1b3/0x300 [ 131.519380] SyS_sendfile64+0x64/0x90 [ 131.523190] do_syscall_64+0x309/0x430 [ 131.527085] ? SYSC_sendfile+0x320/0x320 [ 131.531163] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 131.536360] RIP: 0033:0x455979 [ 131.539549] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 131.547263] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 131.554540] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 131.561823] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:08 executing program 3: mkdir(&(0x7f00006d0ff8)='./file0\x00', 0x0) chroot(&(0x7f000095aff8)='./file0\x00') chdir(&(0x7f000020292c)='..') mount(&(0x7f0000153000)='./file0\x00', &(0x7f0000317ffe)='..', &(0x7f0000646ffa)='ocfs2\x00', 0x84000, &(0x7f0000f67f9b)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x1, &(0x7f0000000180)="39cd8075ce7a1043aa041476d338fdf25e49f111b7cde1a43b206ad579a0a7348d05b0f8e7f7ceca7091a5c8872719b3e2700a39ceb21b0c07717504fd409769badabe64e0f2aeb2e6b658ffc3fb12133964d37d") [ 131.569104] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 131.576377] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000b 2018/04/30 11:32:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x112) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x12402, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x100, @tick=0x2, 0x4, {0x5, 0x1}, 0x4, 0x3, 0x3}) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7008) bind(r0, &(0x7f00000000c0)=@sco={0x1f, {0x1, 0xffffffff, 0x10000, 0x5, 0x4, 0x5}}, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7fff, 0x639d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0x1000, "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"}, &(0x7f0000001200)=0x1008) 2018/04/30 11:32:08 executing program 3: unshare(0x724b03739e67ca1f) r0 = syz_open_procfs(0x0, &(0x7f0000044000)='ns/mnt\x00') setns(r0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) clone(0x3ef6a30f5168d923, &(0x7f00002c9000), &(0x7f0000000040), &(0x7f00001cc000), &(0x7f0000000080)) setns(r0, 0x10000000) 2018/04/30 11:32:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x112) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 131.846984] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29d789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89cfe3fda3c4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x8) lseek(r0, 0x0, 0x0) 2018/04/30 11:32:09 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a3c000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00006c7ffc)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) 2018/04/30 11:32:09 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) 2018/04/30 11:32:09 executing program 1 (fault-call:2 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x112) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x183202, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@broadcast=0xffffffff, 0x4e23, 0x200, 0x4e21, 0x100000000, 0x2, 0x20, 0x80, 0x0, r1, r2}, {0x9, 0x7, 0xfffffffffffffffb, 0x3, 0xfffffffffffffffc, 0x2, 0x79, 0x1}, {0x1, 0x8, 0x1, 0xe03}, 0x4, 0x6e6bbb, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast2=0xe0000002, 0x4d6, 0xff}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3502, 0x7, 0x0, 0x1ff, 0x7, 0x4, 0x8}}, 0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000ffc)=@fragment, 0x8) 2018/04/30 11:32:09 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(0xffffffffffffffff) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 132.450879] FAULT_INJECTION: forcing a failure. [ 132.450879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.463015] CPU: 1 PID: 9494 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 132.469891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 132.479284] Call Trace: [ 132.481941] dump_stack+0x185/0x1d0 [ 132.485621] should_fail+0x87b/0xab0 [ 132.489417] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 132.494262] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 132.499675] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 132.505013] ? kmsan_kmalloc+0x94/0x100 [ 132.509035] ? __kmalloc_node+0xdec/0x1190 [ 132.513363] ? kvmalloc_node+0x1a1/0x2e0 [ 132.517474] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 132.522714] ? default_file_splice_read+0x2b9/0x1120 [ 132.527867] ? splice_direct_to_actor+0x4c6/0x1040 [ 132.532871] ? do_splice_direct+0x335/0x540 [ 132.537273] ? do_sendfile+0x1067/0x1e40 [ 132.541388] ? SYSC_sendfile64+0x1b3/0x300 [ 132.545694] ? SyS_sendfile64+0x64/0x90 [ 132.549704] ? do_syscall_64+0x309/0x430 [ 132.553849] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 132.559308] ? kmsan_set_origin_inline+0x6b/0x120 [ 132.564240] ? kmsan_set_origin_inline+0x6b/0x120 [ 132.569122] ? __msan_poison_alloca+0x15c/0x1d0 [ 132.573826] ? should_failslab+0x279/0x2a0 [ 132.578102] ? kmsan_set_origin_inline+0x6b/0x120 [ 132.582994] ? memcg_kmem_put_cache+0x40/0x280 [ 132.587628] alloc_pages_current+0x6b5/0x970 [ 132.592129] push_pipe+0x680/0xca0 [ 132.595773] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 132.600846] default_file_splice_read+0x2b9/0x1120 [ 132.605866] ? __fsnotify_parent+0x132/0x560 [ 132.610376] ? security_file_permission+0x473/0x4b0 [ 132.615488] ? rw_verify_area+0x35e/0x580 [ 132.619679] ? SYSC_tee+0x13d0/0x13d0 [ 132.623522] splice_direct_to_actor+0x4c6/0x1040 [ 132.628336] ? do_splice_direct+0x540/0x540 [ 132.632704] ? security_file_permission+0x28f/0x4b0 [ 132.638044] ? rw_verify_area+0x35e/0x580 [ 132.642243] do_splice_direct+0x335/0x540 [ 132.646507] do_sendfile+0x1067/0x1e40 [ 132.650518] SYSC_sendfile64+0x1b3/0x300 [ 132.654682] SyS_sendfile64+0x64/0x90 [ 132.658576] do_syscall_64+0x309/0x430 [ 132.662527] ? SYSC_sendfile+0x320/0x320 [ 132.666636] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 132.671854] RIP: 0033:0x455979 [ 132.675080] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 132.682831] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 132.690137] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 132.697440] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 132.704744] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 132.712054] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000c [ 133.123254] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:10 executing program 5: timer_create(0x3, &(0x7f0000000080), &(0x7f00000000c0)) timer_settime(0x0, 0x4, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000180)={r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000140)) 2018/04/30 11:32:10 executing program 2: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x4) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x88001) 2018/04/30 11:32:10 executing program 6: unshare(0x40600) pipe(&(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001640)={0x344, @time={r1, r2+10000000}, 0x4d1, {0xffffffffffff0000, 0x8}, 0x7, 0x0, 0x4}) fcntl$setpipe(r0, 0x407, 0x80000000) recvmsg$netrom(r0, &(0x7f00000015c0)={&(0x7f0000000080)=@full={{0x3, {"a7083481bc4def"}, 0xffffffffffffffdb}, [{"ae116fe9b3aab6"}, {"cc29c681c1ef4f"}, {"1a5cc17bfbb148"}, {"b63fdd7d7305e4"}, {"2c3bfe85e588b2"}, {"a4a542d358e277"}, {"0843267fa8124b"}, {"7ea4488a9877be"}]}, 0x48, &(0x7f0000000480)=[{&(0x7f0000000100)="ea859b8d75e6c6725bf206c7c4f6b1711f4bf50fbd09ff733c9a95049f68b870975919a3bd4dc60635175bf81c03cc3c216f192b2020eac3fd1769bf1d0c1c87c39a3bdf25068d991a8f7034044f1ef3ccaeca627f098c0bad73bdd36d315e6420e8a095", 0x64}, {&(0x7f0000000180)="2a3d4af491825c0ce9f56385552b9850f4c766a3504543728f71569aa1b4fcde2a0687a492f2345646ec49fc1757a58d3a74c61ff1a38b316f7a2d4b5a669a2d42adaf3bc879e56ab15e6a2128f165292e097ae523c782c96c0cf47a01322540037249e47313536e2b63581d1142ef8e5e7caf2c8f21eb0e770c28352fcc62ec28fa1d12c5855636ecb041d7051ba558fde52cc1fad1c5f00f6c099c5b20c7e37deb288f8f362ee59d3918a36b1c56", 0xaf}, {&(0x7f0000000240)="e8256a439579395db7d170f3f79be798a33c1bcb22a0ec5df4edf54c5d102d9146aa5941f81d65dbcbf7f893db1e310782530c70a18b898b0d410b41cdbb67faee8913221eda5757a54e7906fbf56201420a119fc7f13a3087c1b057159e5fa5f9c9f2dbd4", 0x65}, {&(0x7f0000000000)="bba22e3531b9b2bd90a546f523eeb9b7", 0x10}, {&(0x7f00000002c0)="94c22ef78c39af89df0923362051b3b85f6e559ba3dfe991c0fa9ee470c5b0682a1f09368f393dfe459404f7b8629d1741e85212ed865eb898f1c322fa9414fce3ced9067bab8f4a7bb1ac7db2b9128734574578f48c2dc6be50ac8fc2d8521664f5dfdd5fd10127e2bc840108fd3e2132fe25f5ba8a6288eea29ad48b3adabd7d79860ecb7eed8be4f4b955b8efd4edf1c73d8578182461996ee004772f793a344475d843b686c4df3ba1b1aa53dda5d5929b8f31680f08834cb54a3b44e584de437942489dd5500ceb832eb805ee7593", 0xd1}, {&(0x7f00000003c0)="b6b381d956e190dbe6158cc976f14489c404f5d53ddc9f153f2fa9abc8e1da5415636465da1025eaf8d74b4ddd12476151da9d818ebcafb441fbd63f4b6bd0a254fe1ad2ca184f3e27863e447f6629d0d4a530ea96057ece0c15cf2ad050cab406e6ba7687f3d7166004a158019d9614eb62e14ec55be936069489056a978582d5e4a5b217ee0da4e0d4f9a55c834caeeb052f01f3e5b0f438", 0x99}], 0x6, &(0x7f0000000500)=[{0x70, 0x11f, 0xfffffffffffffffb, "f08b1ee893dc6d116a1d9df747cf377facab4fcef1376f58080cc4e4522d0b03092d14d795d38e298fcc12ef3ba1706311d8c46cb1a3d7a4c1f7e897041f7cdbad41e72e4e3cca7d1d7a3b4ab0ef2039644125c688fde09c22b1"}, {0x1010, 0x10a, 0x3, "1869ffc02425542072439ae6e43c25ac9c981158a8c2b62c8d9e99be2e386442f4ab0f33521d085db21645d5a5228082e21fd59a2d5140cb86e38057ac9d5dbbf9085cde3a6e197fdde493f96d25c536a673f5a8a545c0474557eb81a7e053658cb3407aceab9471c0448636ce4fc6a9f38694bb7fd7efbd1d5a992dc67c0f0f942f91201143c43287b205cad9e752caefc1c2ed849465fd71997c9e6bf5ebb3489fc54567a3eecb08d19d92956ddd127da02ccd313464b1b2f42b9d10862757df186ce81cd6bac6d76b8785507bfdb9419d54243bb852a46405a0964f4170aac59394605ba5c9f527b8361da2d068cc4ab73cde6451a8b516082e68a6482fbf12516df299f2daa1e9442fcd56847208837a036da1299d8499ad78df5cbc7fdc3261774dfa596c090a32742b59be69cc51fc2e5be89d594c4236f5884ee76b1d57322cc11e5c0945b9fb775df06250df944fe9ecb92183a54853d5d882322aba0be34f95bde47569f20d38c6d5bc43b7cb66c46665c782dfbe9d56cd982029632b8143446fc0d2c5fc68c569cf1a7b2ae15f47e15e39c9037607192f9bad8d83b586c640bc90a9342742e9475372dba529d0929c5bc8a89023096e33a681d0be6043fc150437c8edb61d8cb020e66bcc0af607798dfdaab46b33efd3333b812dbb34830418737983f7e3675ef2c94d122977f74096c4118351d0fc910e2eef515f26244e4882ef9ffce540ae145298fdb04ac1c6faa6b6bff4164f32d68398499d57082cfd6d3c8cc03a1ddbf03480ec8dd6381c0ef141040d29af4fd99ba6981a8dc6ac7963d8a4fd31562fec8f0c31a65512c8e3cf706084bf147556e0c1694994100e110e41f5e9e33ab915a7dec7531d3cf758741102088bcb67ff39fe3763db9a17846d2535f60373fbf019a20b83011c7095b08b59a97cc072072dd674323d3d824f78b8a7e70a01865460e433f6ab2e6b857cd7ef8b13c39128a6d767596a4b6147f03968d4aa403c836c2bc345f5fe7cedf3f5e648504a522d2ff600fb9c1719bd512f326670fec8bb860670ee7d2207987d70eb1c7382d353dd7c96b2eebc5fe485901a55ee6292feeb406cf28cf45582ad33a193278351343baa78161d32dd9cb56c8d2a7b9ba0aed43ddae6f17b43e54f12a19260d16d1d61de4680223694c2d8e769bc4447521f4167f04f576c2bfe2118eeac2b9afd781b4f1f821447abbabe7159a4b38d6bfac8e945e34d01b138af92dba361c2977695831128cb6b3651c47e1b357cb7252568065034913783b5ddba686beb8cc2e35b36fa3dafc23acd9ef6455520d9b1d5580d6bc31c29f6a4d31d01fbbde384b97f1bf0164540ec50fae6cafcc4da994e6b5da3ce1ed1b029cad0f8062b78d95cacd0564588396e3cc0b9f14e0eba1a6da859d75f437d76538754a63a7f9f99764809bbf6b5bedf9741b2982d06bbd5452f83a667458a18278c15b424c3210913cfaaa0afeea1f88d4b9beabf1fd7a3389f08b46f1e97bfda4669d7c11a4fcfdb2f01f80e69f594b65fd20984f9bec3366b7408bd7762cd59d35c3839b9d555800e92c61673a6b5adedc015d4ecd9af501018006943da4251707d6570f4e664ee9211869cec79ff1f743b5216c03db3ccf68111e861e77a2893c88b45e4cb90c0cb0021defb3eb0e68d81b79ac21b7851ef8ddd505077a50a3dff7a056996309297c156ffd32a3b04e6c906e43576f82b97466f0e533d996062fdee55c82bd9d34da2c07e6835551e4effc6fc792768f2ffb8535762f9ce1ec819636e0f80c148431c8c149cc6cdee0c2e3cb13b05f4fa5a7cff662421445b6f313eabf098e37b1c97dc11b2a6d20861f5ea5e6500a4763f93ef96ad6a8fec8231e33a0a7205d32ea00450863754110a79cf48bfe20b56e1a0f07631718e12274aef7d07cc12a1b30126f77ad64752e9edb1269c4bd441c07b85530ac92862e18f543c573d0debfa892f1d9c2176f7bdfea8e10b9495382b6cf878172f5f4f3115cdb2e72e5a14ab3d01341ff6a9530ffc85cf8d36ebd127bb50794a263cd1ff7c2ee234c09393a10f0ff297fb31647b97a42e92d490f87bdca5a3018562ea97c16c67a6cdec8dafa96f3a79898e5ede7d326b0ded5142d99dd752b5eceb33d8b66ab2883c0ac429faf6031a9cc76d150e6e8448c0551955aee0a83e936aa00c0d29f994bfbf73164b9245a711713f413a2d02858ae64fd9c065fae262cf9cd85afb16d63e5d514696d878cf1ba74fa67380f1f424dfad2d05ff48cdfd8bdc65b0b34ee85959535f9d96a5351009d0c4bf78f638dc12412459686b8292fed3689d127548a55fa3eb612a73f4035674fdcb4e7314fb75adf3aef84db45cfcbd6095bfc230db70c53a247b626eace6bf223a9ac771ab65c589b3fb7897ec4f7daf48363fa5e3b6f964eed2c31fffd42a9114511bbce310a4aca17953ccd94ca2e2e0079815f7c3230a0179911d00a4d626e9d72ca55999e30ec191d122f4b122276ac317369dae1d42fb7bd29065d378b48f502dce008dfa52064a467ac0a6056c8f13d81b7852eddbabadb4d37997506912f15f6f8deb56ba8559e5834072d43c308ff62e5f5d33f29a3ece3037801e9c9f57753d3f315d099aee3b729d3a706909e29072b66c22caba1a9c0f9beb970ba261ef54dd53b3cf5f03bbc6796c7801026b698e1c582fd8016a1a12549b5fc953fc7776ed1b9e36dbf7d8de84efd9a6e10559e519cea44ef8fe7f85096d063630de7fa53b3152652b9badd3fcbe0d0911b7a194844c18c7afab764fde3f386b606fd38a79247775e941dd8d4862b5b9e651a859cacf0a2ddbbe167543d10aa08ac2122daa30ef90037a90c17c4fd5ecf39cbf5bff6e44210ff6b0c7cc47c11ead3a504d216fd5d99274c6f8cc36d2f5e27285ed61942f0961f9e241ac24229c11bea6adab71cdc9814faf3936642e12d57a982d5c1a9b0029c0d36f129e50516f9b9de47fa136d1c9edf3ba1b6a58d40652dfb148045a58009d08d7390b4f7ed88e2b50c8cfc2d1ab62582f793cf8a4359bf6ae135069ff62a5abcc38b9adb22f05f1f3746b31ef3efc4c7de1f174b9c469d3b5d43f62340f54c6f486d3954d26d3fa7dc5c7fca94d41cc7c10e5d3b7ea7ec6d8ff8f90effbd1d1bddccc83cd8108f07da6c571712f1a2d084db2a8d67dd6b878ea1c10d8a05d36e0e4bc5f81085a66a4cf78c2b925297372710032a0604df2ee9d6f6b140b66e83da73b710f86bb0e6ac0c5f7f81d888d9d164af70a55ecdf34041bd4c4ab5693c5cdf6c8e746fe2e69fd0540d083b5c5bc8e4e0603a3a9d39d70cf7ccf42136cafde0d8a18ea021ff2c640295d91fae3c72134c5bb1586d23a929ce4324d9b7d598e941fe8253420e03f425661a24618c87e3e78df92b0a9a4a3b5ab6d7f5f36d2c7caa50a96940b839a6a0bef584828ec3f0cf6de4225345050a85ecc2d0c2d84fe008d14103aa712e73149fd224ac7642ff73c9f2fb745b0eae792b6c3ea506868a7f07619d9d2a32cb35ff0f3b7984b2955cd8539ea960dd6d59e72dc4a2c82a4ac7bfbd3f44ca5948852eccf783cbad0bd6241876140807273c6bbb7a4af7ce07837627ee0f32e1fefd596b0b839e4fbb54583c7274f92b7d88ca7a393d76bdc4fb55879287658597b91be0589e4db2782b0ae38ef57f83808321c8f992a088d99ef91c5b6d67ecd605f8049d3d4e9ffb3f97eb5a95d1f610b62395342c2af0fe35373f665d4f4a9687677a613944a90608a025aaa2182756f4cb85a8588c4eca0db899e385e5516717f2dbd2e996c36f6dc7b852fc2689e366a34b02bb73a8b905e6579df09b4f1877a27b921c748ef57d59467f0ecef174189499b2b2101707f75142d5a070d80adb93d191c1ac9a4604c25111088e6f495b2c1969e84d004d708fc8b2ade0b7908c4dc6e29c80e7319664064a6aa20e5f7bd6141966cc28d660a891481df05476f1c14fc8421bf62b43021e044b8f2bdb0dfd167817616b07e83c78bb7a5f558284abcc2d09c241d8426332e31a161756a53311b3c6ac8988704b9099f932670fbc15846020c9c09bf3950deb7a474ee38746be631107c2570c37f39c3131de459037fc1e0dfd9fa06eda85fd59ad8107e2c21ce3ad961415848d10088141e87b53fcf6d20411613f3a37e3371d5cf249240c14029dd7779c00ec67ea52188a8c793fc2f93f3d86f514b73ec4b1a9c51d6b9c8c2377a55dd0e3ffac887d12c316da32c8fb3f3a03fe85e08c5d7feabc32c1a389d4feee1944a6be3ba1c932350ff850a0abe8bc3ddfab54b22bf7b2eb4d7d4f2e99baec60e012d777a0bb991522ef4e0ab08fb9cb9ca063a405a31caedd925dffe4cec8967532a49fbb3e8e5a51ca0d288ffcca06c7e04bcb222c47bcbf69a2606ee5240d1987ff9287bd736e9c85623a958f63a86fac98b1b491f069936b679fdf57eec154021b730d1e5c364c3ce242420160c316bf48aa78855caf67100a712984cbb29af5e67d0d62ef353a13c32abb21501e4f20781c157814c26bad2ce689829cfaf0284683409f0a22f84138a951413dd2b723ec370dcc482940b00e63ef24302bcc2c441d9c040c404c74d5fdb56810ab668119aa5ea09469b7d26fdb11778e0401b72fd40232c141c4259d86637bb24d771c5f0127c843159ba343536c1f916533c5f2f2b2c736cb52efe8e13b0e49d1ee495956867fbd0d3dc778f0bcd096b1b2fde33954868b177a6173ffb181690e9b4783c598399dc7a57de37710dd0d077747b90e6902d3d838fd30950cefdc65937d9e4a0d39bbc2da72997ba161a84a19184dd0cfa4e6776b54bb3fd1eb5e0a1456202fbe9c3a373439436a59a37c68bb4327f424c7eaef3402dc278aebd6a404fe38c997237a45da6d2576e157bae89e8ab1020557df147e81318d07435328fe8526220d97ddfdba4effabca690384deef2788784faa9db988ac1c71dcb3d08a96b23177398504230e81b9ab5b7c363fe391122b90991fcdb4c941ef32e8bd3e499a56e15f351a75c04990144ae35e5e638449533052df8ecb764c8299a69679fb04b7b45c8c4426ff6c1c58e06c2ac5dde5e1c39942c3e76080743fe6e49547a37a40b93f32bdd92dfb48eeafaabda54973358eda7e9dc0061e8f6fcd0aecb2dbf9d4f61bfe2145882bda4fe950cc787af54f05965eeea2287d59fb5b2d44fa7cbc5383dc53b419b9549ffeaa71d33cc8f5db5e4ce69c014151d36723aa3459070e5a206c849a58d6734b1caef8e03c0490b0770a8216cb3ca7cb0655001a95273c65a3f5b1628fe61100e4f614a73b1a08334069ce1a2aac8131ad2b3c2a342789a00dd4ff01bdc3f9c5a14d9f5ed66103cf94666ebf17e6393cdb0b79bb56b7ffa69a3062f4cceaab52c47c3de8e584dceae5fb823d5bbe799ae1422daa824a9a8205ab69a38f9d3f5570b2b562c2be08a0bbb09cc8b90cfd2174799bc2abdf78448267f30aa6474ba1ebbdfaf64c67778c837a80f6d366a46ec4a0fd11ca045a9b0dd1f00a4113598aaef1224eb2b5ceac9c3ce751013e6966e899cb3f05d1c17bbeb2a38ca62b192a3a921ce042edb600da0ef3ce258da9162167b91d1ac08e9e14fc049c09e4b862a0643b118c0205776d0444cd97996b703af9149c6dca5e9dfa32dd5c8964b8492cbeaf1922d307fc1a8a6d1cc73b15f2ec330038fd6b49b6cf8a9102537e06ead52993e77d6c2bae77e8b4231499eb74b187e1a45d0f2a9ae31eac391c3d6d2a949"}, {0x28, 0x3a, 0x10001, "5fe77a2a617a53c7e0ba6ea72c3e94c7c4b5a3403f4d6fc8"}], 0x10a8, 0x50}, 0x40) 2018/04/30 11:32:10 executing program 1 (fault-call:2 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed"], 0x193) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:10 executing program 3: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5c5242e283536f05dfcf3c925d43c6cf1eb17fde04dfbf2b3", 0x19}], 0x1) write(r0, &(0x7f0000805000)="346bd71b3c015b53c0833e97df6312f9b0659db5b29837caa9", 0x19) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r1, &(0x7f000063e000), 0x76bdaf4) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0x1000000000000173, &(0x7f00001e1e78)}], 0x1, 0x0) 2018/04/30 11:32:10 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(0xffffffffffffffff) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x2200, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000300)=""/162) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000140)={{0x6, 0x0, 0x0, 0x0, "439c234f1c61cf0672b148414094f66a2aadaf12be8ed1d155512e9d80d0da48898def5e6b20fd368c36cfa1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4abb4b235d793aa12c5dea4c1ee5883aa3cb4d3d8b23d03b6e4af5cdf89e5bcbb2bb5ffe6c24e62ea38179b5045dd37356cb4fe5139e04c637872744aa82cfce", &(0x7f0000000100)='/dev/snd/controlC#\x00', 0x13}) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}) [ 133.246123] FAULT_INJECTION: forcing a failure. [ 133.246123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.257979] CPU: 1 PID: 9527 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 133.264823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 133.274184] Call Trace: [ 133.276789] dump_stack+0x185/0x1d0 [ 133.280429] should_fail+0x87b/0xab0 [ 133.284233] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 133.289138] ? kernel_poison_pages+0x40/0x360 2018/04/30 11:32:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x193) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 133.293653] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 133.299029] ? kernel_poison_pages+0x1a0/0x360 [ 133.303649] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 133.309547] ? get_page_from_freelist+0xab28/0xb600 [ 133.314574] ? __kernel_text_address+0x34/0xe0 [ 133.319171] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 133.324637] ? __save_stack_trace+0x90d/0xb00 [ 133.329158] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 133.334104] ? push_pipe+0x680/0xca0 [ 133.337922] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 2018/04/30 11:32:10 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={r1, 0x4}, 0x8) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x107, 0x2, 0x3415, 0x10f, 0x37e, 0x1, 0x2ec, 0x1ca}, "60ac36dae5910defc0d4605e3da0bfc44a08738a4bfe63b90bbe93d5ba21d29bec981cb8bc10760e43e2086d3923806f800af83b492f73df003b5ff4e108caad3985a8b5bafcfd3da0fb0e951363e9433b0bc827a268136f1152e7b5716fdc66390e1d70639cf62ddcd106a8e72f54e19fa1c455f0b8021d38696990d44f981c965e11cf892bcd7e3ede53a07e88756a22c412611c9b6a4bb433f9607bd632f2019cb24761e089379727618c2c2fde7556de93bf7e1f49e01d63528c94", [[], [], []]}, 0x3dd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e23, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, 0x80000001, 0x8000, 0x8, 0x1, 0x62}, &(0x7f0000000140)=0x44a) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x9, 0xfffffffffffffffc, 0xa6}, 0x10) [ 133.343131] ? default_file_splice_read+0x2b9/0x1120 [ 133.348255] ? do_sendfile+0x1067/0x1e40 [ 133.352333] ? SyS_sendfile64+0x64/0x90 [ 133.356315] ? do_syscall_64+0x309/0x430 [ 133.360392] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 133.365779] ? __kernel_text_address+0x34/0xe0 [ 133.370382] ? kmsan_set_origin_inline+0x6b/0x120 [ 133.375242] ? __msan_poison_alloca+0x15c/0x1d0 [ 133.379933] kmsan_alloc_page+0x82/0xe0 [ 133.383931] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 133.388695] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 133.394077] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 133.399367] ? kmsan_kmalloc+0x94/0x100 [ 133.403370] ? __kmalloc_node+0xdec/0x1190 [ 133.407618] ? kvmalloc_node+0x1a1/0x2e0 [ 133.411691] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 133.416897] ? default_file_splice_read+0x2b9/0x1120 [ 133.422017] ? splice_direct_to_actor+0x4c6/0x1040 [ 133.426979] ? do_splice_direct+0x335/0x540 [ 133.431508] ? do_sendfile+0x1067/0x1e40 [ 133.435583] ? SYSC_sendfile64+0x1b3/0x300 [ 133.439860] ? SyS_sendfile64+0x64/0x90 2018/04/30 11:32:10 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$int_out(r0, 0x5462, &(0x7f0000000280)) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) r1 = memfd_create(&(0x7f0000000200)='vboxnet0\x00', 0x3) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240)=0x7, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {r2, r3/1000+30000}, {0x200000, 0x0, 0x7fffffff}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94fd6b5277f577ee"}}, 0x48}, 0x1}, 0x20040000) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x1e, 0x208200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300)=0x9, 0x4) r4 = socket$inet(0x2, 0x80c, 0x7fff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'erspan0\x00', 0x3}, 0x18) [ 133.443850] ? do_syscall_64+0x309/0x430 [ 133.447922] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 133.453305] ? kmsan_set_origin_inline+0x6b/0x120 [ 133.458173] ? __msan_poison_alloca+0x15c/0x1d0 [ 133.462860] ? should_failslab+0x279/0x2a0 [ 133.467112] ? kmsan_set_origin_inline+0x6b/0x120 [ 133.471970] ? kmsan_kmalloc+0xc6/0x100 [ 133.475957] alloc_pages_current+0x6b5/0x970 [ 133.480377] push_pipe+0x680/0xca0 [ 133.483948] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 133.488992] default_file_splice_read+0x2b9/0x1120 [ 133.493942] ? __fsnotify_parent+0x132/0x560 [ 133.498374] ? security_file_permission+0x473/0x4b0 [ 133.503448] ? rw_verify_area+0x35e/0x580 [ 133.507785] ? SYSC_tee+0x13d0/0x13d0 [ 133.511598] splice_direct_to_actor+0x4c6/0x1040 [ 133.516369] ? do_splice_direct+0x540/0x540 [ 133.520711] ? security_file_permission+0x28f/0x4b0 [ 133.525756] ? rw_verify_area+0x35e/0x580 [ 133.529920] do_splice_direct+0x335/0x540 [ 133.534094] do_sendfile+0x1067/0x1e40 [ 133.538008] SYSC_sendfile64+0x1b3/0x300 [ 133.542092] SyS_sendfile64+0x64/0x90 2018/04/30 11:32:10 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0x80800) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0xfffffffffffff62a}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x46149528, 0xa000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0x2, 0x3, 0x0, 0x4, 0x8000, 0x7ff, 0x42}, &(0x7f0000000080)=0x20) [ 133.545935] do_syscall_64+0x309/0x430 [ 133.549845] ? SYSC_sendfile+0x320/0x320 [ 133.553934] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 133.559318] RIP: 0033:0x455979 [ 133.562519] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 133.570236] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 133.577516] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 133.584791] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:10 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f0000000000)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x900, 0x4) r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533}) ioctl(r1, 0x2285, &(0x7f0000007000)='S') [ 133.593148] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 133.600431] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000d 2018/04/30 11:32:10 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x84800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000365000/0x4000)=nil, 0x4000}, 0x3}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000200), &(0x7f0000012ffc)=0x4) mmap(&(0x7f0000423000/0x4000)=nil, 0x4000, 0x3, 0x32, r2, 0x0) pkey_alloc(0x0, 0x2) dup3(r1, r0, 0x0) 2018/04/30 11:32:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed"], 0x193) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:10 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffd) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000040)=""/33) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x145200, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x4) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) [ 133.794669] sd 0:0:1:0: [sg0] tag#2103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 133.803541] sd 0:0:1:0: [sg0] tag#2103 CDB: Test Unit Ready [ 133.809431] sd 0:0:1:0: [sg0] tag#2103 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.818434] sd 0:0:1:0: [sg0] tag#2103 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.827468] sd 0:0:1:0: [sg0] tag#2103 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 133.836451] sd 0:0:1:0: [sg0] tag#2103 CDB[30]: 00 00 00 2018/04/30 11:32:11 executing program 1 (fault-call:2 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:11 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 2018/04/30 11:32:11 executing program 6: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) write(r0, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) 2018/04/30 11:32:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1d4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:11 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x15, 0x73, &(0x7f00000000c0)="f1ba2b9c01a6cd02226255f19ccf2a6b78899d4165ec34d67663cb88822e6506b8d6f7844be8245ade5bca181ef8beac317649bfcbeed43f3bdcf9bb02b2f7f5f399b09145e5b2cdc9d3338d2a5005f1f889dfaf7cd5c8aa5645912ca2d43061ed710d1b9845c543bbcef65487ecccd815bc91"}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x78, 0x0, 0x7, 0x2}, &(0x7f0000000240)=0x18) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000280)={0x0, 0x200, 0x4, 0x11, &(0x7f0000ffd000/0x1000)=nil, 0xcc}) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/psched\x00') sendmsg$nl_crypto(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@upd={0x100, 0x12, 0x100, 0x70bd28, 0x25dfdbfe, {{'ctr-cast6-avx\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0xffffffffffffff00}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0xff}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000010) r4 = accept$inet(r3, &(0x7f00000004c0)={0x0, 0x0, @local}, &(0x7f0000000500)=0x10) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000540)={0x7, 0xffffffff}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000005c0)={0x5, 0x3a, &(0x7f0000000580)="e58b49f3486afaa98dbb52918a299c2ceff0c04d92681dc574f7351e0d393e37b53450517aaeceffa46dfd5beb95d30297286ca6556d746d4d58"}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1b, 0x10, "28d5aeb200f1e31c41058e6b91228ff3418212d9e6971f13e192c874d10bb0269f1428e3f735418ad494f2634ba34f2c3b27607e06e84dad2e8b10c79fa07fa3", "93938ae70842ea84c4e55224eab9e9d4a2a33adcc48f1bc8b5b98147f811dfde", [0x7, 0x6]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cuse\x00', 0x0, 0x0) connect$llc(r4, &(0x7f0000000740)={0x1a, 0x204, 0x3, 0x3ff80000, 0x9db, 0x1f, @random="fee404d88a1a"}, 0x10) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000780)={0x7, 0x6}) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000007c0)=""/160) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000880)={'filter\x00'}, &(0x7f0000000900)=0x44) r6 = syz_open_dev$midi(&(0x7f0000000940)='/dev/midi#\x00', 0x2, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000980)='/dev/input/mice\x00', 0x0, 0x80) ioctl$KDGETLED(r5, 0x4b31, &(0x7f00000009c0)) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f0000000a00)) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000e00)=@broute={'broute\x00', 0x20, 0x3, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x54, 0x8835, 'eql\x00', 'ip6gre0\x00', 'ip6tnl0\x00', 'sit0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1000}}}}, {{{0x11, 0x3, 0x0, 'rose0\x00', 'bridge_slave_0\x00', 'bond_slave_0\x00', 'teql0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0xa0, 0xe8}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"8be8c446c1831be7a10e3163aa2f25a22ee9a2d74e31822c5ff7d71d5cd5"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xf, 0x40, 0x18, 'nr0\x00', 'team_slave_1\x00', 'bridge0\x00', 'syzkaller1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x94bc2659e79f0c6f, 0x0, 0xff, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x70, 0xe8, 0x118}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x2, 0x100000001, 0x1, 0x0, "93b6cb5d7bd0dcf48a735bc3f897f76d3176f9b5c0730184f85b97b9f0d1657d8588c1a8840e131bfeee70a87d15a250bdef6e02b049786872ac08153cec5e7a"}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}]}, 0x3d8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000e80)=@assoc_id=r1, 0x4) truncate(&(0x7f0000000ec0)='./file0\x00', 0xb8f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000f00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000f40)=0x10) accept4$nfc_llcp(r7, &(0x7f0000000f80), &(0x7f0000001000)=0x60, 0x80800) 2018/04/30 11:32:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xd83e72222ac16440, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/35) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001640), 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x9) syz_emit_ethernet(0x2f, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, @random="885ff9b0b522", [], {@ipx={0x8137, {0xffff, 0x21, 0x2, 0x4, {@broadcast=0xffffffff, @current, 0x2}, {@random, @current, 0x4}, "8a8482"}}}}, 0x0) sendfile(r2, r3, &(0x7f0000b89000), 0x3e96) 2018/04/30 11:32:11 executing program 0: r0 = creat(&(0x7f0000000480)='\x00', 0x8c) r1 = socket(0x1f, 0x80007, 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = geteuid() r5 = getegid() r6 = syz_open_dev$vcsn(&(0x7f0000001900)='/dev/vcs#\x00', 0xe47f, 0x402000) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001980)={&(0x7f0000001940)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000001b40)=0xe8) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = timerfd_create(0x3, 0x80800) r13 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/vhost-net\x00', 0x2, 0x0) r14 = inotify_init1(0x80000) r15 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000001c80)) sendmsg$netlink(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000005c0)={0x12e4, 0x29, 0x700, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x14, 0x84, @str='selfeth1ppp0\x00'}, @generic="6028a100e3155c56716451006e6232b85ce6a56bf5f8124ae1dfd6b7eed123fc648756573d06633a616a425074f551863e1afc946c9f75132429367f9cf6fefa41af68fffe9f1286bfd67e5ebcf880e68ee94bdc76ee8d49677193f5f5e256bc103a416f", @nested={0x1100, 0x23, [@typed={0xc, 0x15, @str='wlan1\x00'}, @typed={0x8, 0x13, @fd=r1}, @typed={0x8, 0x67, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="97ed8aa60e1af1a2e5b2ff613cf8c95b411dfdc3a0260bd9bcb2e987e008f81d544f50ee0a0662454f6284d952b4562f7439ca62bed1e79afbfc68c141b1b9b1855299c061e0f97764fae9a0fa29b8803b19a74992656bcf095cb3c3c176d3b53a06b0482c9a40091384fccbf1c62bab2fcd359f5bcdf1be278743d1b8de09d57c85ab0823f8aa21023df447681be6", @generic="475c90d9888c3518cc940c74ac8e5161dd590d27dda7a3c39dd90e2d5bbb752f779968bee633da977d", @generic="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", @generic="a3c00d173b8f58a6c8f36f58cf9f6b315f20a6c42ee2e4ff4a0ab3c2fb825b4451fb7e82bf27fa"]}, @generic="bb57c0390b3afd1416e6a49d453622a37d70204bdaf99a500b4bb51400df9076d51175dad5d2bee4054ad1d59ee0eae5d969c8e2c07c6a0e920886ceaf59c7d0716060bf6daf0ee236b961de77e7d2c2cd31fdd823fc800f0c588261f5b9bcc4849bf8b0d612e50bd2aa419f5388aafee2757797bdb158e80b7705ec4c9d3218ff0299a14b50d765f138762ccab5d5be9d604cb8dd6e525c6b284efb60", @typed={0x8, 0x7f, @str='^]\x00'}, @nested={0xb4, 0x74, [@typed={0x8, 0x6f, @fd=r2}, @typed={0x80, 0x1f, @binary="f998f0406a5b9001da64fefbfa3adddc317ad21e0aade4807a28edf99b1f727a398ebafc8600ee480144f3be80db704bc12a0bc8e77c3d2d65ab355bc6b04cf95f016053bf364909a1da5f878a9870cd5db64defab7af5dee193ad8f233292947938c9df7adac5a27e05e34e958b52d9471b448a416d48f01d"}, @typed={0x14, 0x91, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x14, 0x9, @ipv6}]}]}, 0x12e4}], 0x1, &(0x7f0000001cc0)=[@rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r6, r7, r8]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x20, 0x1, 0x1, [r12, r13, r14, r15]}], 0x90}, 0x0) io_submit(0x0, 0x96485e9842301d6f, &(0x7f0000b4b000)) 2018/04/30 11:32:11 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 134.211564] FAULT_INJECTION: forcing a failure. [ 134.211564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.217668] netlink: 125 bytes leftover after parsing attributes in process `syz-executor6'. [ 134.223411] CPU: 0 PID: 9586 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 134.223419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 134.223423] Call Trace: [ 134.223447] dump_stack+0x185/0x1d0 [ 134.223464] should_fail+0x87b/0xab0 2018/04/30 11:32:11 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x101000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x1, 0x1c, [0x101, 0x7, 0x18f377e9, 0x5, 0x0, 0x3, 0x5]}) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x80000000) [ 134.223499] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 134.262918] ? kernel_poison_pages+0x40/0x360 [ 134.267432] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 134.272809] ? kernel_poison_pages+0x1a0/0x360 [ 134.277413] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 134.280336] netlink: 125 bytes leftover after parsing attributes in process `syz-executor6'. [ 134.282873] ? get_page_from_freelist+0xab28/0xb600 [ 134.282888] ? __kernel_text_address+0x34/0xe0 [ 134.282907] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 134.282924] ? __save_stack_trace+0x90d/0xb00 2018/04/30 11:32:11 executing program 5: pipe(&(0x7f00000fb000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8001, 0x0) tee(r0, r2, 0x8004, 0x0) poll(&(0x7f0000000280)=[{r2, 0x80}], 0x1, 0x10001) write(r1, &(0x7f00000000c0), 0xffdd) socket$inet_smc(0x2b, 0x1, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 134.282952] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 134.282967] ? push_pipe+0x680/0xca0 [ 134.282993] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 134.324940] ? default_file_splice_read+0x2b9/0x1120 [ 134.330055] ? do_sendfile+0x1067/0x1e40 [ 134.334127] ? SyS_sendfile64+0x64/0x90 [ 134.338107] ? do_syscall_64+0x309/0x430 [ 134.342175] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 134.347551] ? __kernel_text_address+0x34/0xe0 [ 134.352151] ? kmsan_set_origin_inline+0x6b/0x120 [ 134.357008] ? __msan_poison_alloca+0x15c/0x1d0 [ 134.361730] kmsan_alloc_page+0x82/0xe0 [ 134.365756] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 134.370550] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 134.375940] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 134.381230] ? kmsan_kmalloc+0x94/0x100 [ 134.385215] ? __kmalloc_node+0xdec/0x1190 [ 134.389458] ? kvmalloc_node+0x1a1/0x2e0 [ 134.393611] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 134.398808] ? default_file_splice_read+0x2b9/0x1120 [ 134.403921] ? splice_direct_to_actor+0x4c6/0x1040 2018/04/30 11:32:11 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/239, 0xef}], 0x1, 0xfffffffffffffffd) read$eventfd(r1, &(0x7f0000000100), 0x8) ioctl$KDSETLED(r1, 0x4b32, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0xffffffff, 0x1, 0xffffffff, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, 'sit0\x00'}) [ 134.408869] ? do_splice_direct+0x335/0x540 [ 134.413195] ? do_sendfile+0x1067/0x1e40 [ 134.417258] ? SYSC_sendfile64+0x1b3/0x300 [ 134.421492] ? SyS_sendfile64+0x64/0x90 [ 134.425477] ? do_syscall_64+0x309/0x430 [ 134.429545] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 134.434925] ? kmsan_set_origin_inline+0x6b/0x120 [ 134.439852] ? __msan_poison_alloca+0x15c/0x1d0 [ 134.444532] ? should_failslab+0x279/0x2a0 [ 134.448774] ? kmsan_set_origin_inline+0x6b/0x120 [ 134.453641] ? memcg_kmem_put_cache+0x40/0x280 [ 134.458325] alloc_pages_current+0x6b5/0x970 2018/04/30 11:32:11 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) r2 = getpgid(0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @multicast1}, &(0x7f0000000200)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001540)=0x14) sendmsg$nl_route(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f00000014c0)={&(0x7f00000002c0)=@ipv6_newroute={0x11e8, 0x18, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x10, 0x30, 0x9, 0xfc, 0x3, 0xfe, 0x6, 0x2300}, [@RTA_IIF={0x8, 0x1, r1}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_EXPIRES={0x8, 0x10, 0x101}, @RTA_ENCAP={0x1180, 0x16, @nested={0x117c, 0x7f, [@typed={0x8, 0x39, @pid=r2}, @generic="ffaaf2d07082f8aeb1caefdf3e22f6215ccfca0242bb876cdb3a2f43e70d2f4f4b9d870b0ad10ffeb520b4c0c5e5fd5df2bc5a14a8885fa21f03d4ee8385c5d5159d5f7bc832cdfa05a2395756f4dba8887eb4f70ac2703f82887059a059710602c45ba567877a93bad4893a756339d0dc850adef6b5a017049dbb8997594eb5207f682cef1d64455ad5b6", @generic="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", @generic="5cbfc89a3691ec45c43d9b2ee8dbc8745d94dad156227c24f6023f040989ed7b2535a53ffd0b4af5c030241362c3b1846f9b85257af2856f1796c97083588035b1c19b3a846606b90f866ce8c6fc1502ce49fbc882ec8abbd5f2794c65874b7a23b352489229f526b2294a02d5abac8ecd7b3f07d42c7ddc83621c2476bac47992fc089ece5a8105a6df02c5f9e05fe01a4fb7fdd11647fabe0f7b5090bd28d8980f7656475c7fabaef2b4f694a88c5ff4e8e7ed139e09f32fea41fd5bed060fc94e0bdcfbb70b58349f660795bf863582ea565394e69e8135f622b4b390b7da819ed13e"]}}, @RTA_IIF={0x8, 0x1, r3}, @RTA_IIF={0x8, 0x1, r4}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_GATEWAY={0x14, 0x5, @mcast1={0xff, 0x1, [], 0x1}}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) [ 134.462747] push_pipe+0x680/0xca0 [ 134.466306] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 134.471336] default_file_splice_read+0x2b9/0x1120 [ 134.476277] ? __fsnotify_parent+0x132/0x560 [ 134.480700] ? security_file_permission+0x473/0x4b0 [ 134.485732] ? rw_verify_area+0x35e/0x580 [ 134.489978] ? SYSC_tee+0x13d0/0x13d0 [ 134.493785] splice_direct_to_actor+0x4c6/0x1040 [ 134.498543] ? do_splice_direct+0x540/0x540 [ 134.502876] ? security_file_permission+0x28f/0x4b0 [ 134.507914] ? rw_verify_area+0x35e/0x580 [ 134.512107] do_splice_direct+0x335/0x540 [ 134.516271] do_sendfile+0x1067/0x1e40 [ 134.520207] SYSC_sendfile64+0x1b3/0x300 [ 134.524280] SyS_sendfile64+0x64/0x90 [ 134.528085] do_syscall_64+0x309/0x430 [ 134.531980] ? SYSC_sendfile+0x320/0x320 [ 134.536062] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 134.541252] RIP: 0033:0x455979 [ 134.544443] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 134.552161] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 2018/04/30 11:32:11 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x401, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x36}]}, 0x28}, 0x1}, 0x4090) [ 134.559437] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 134.566714] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 134.573988] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 134.581260] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000e 2018/04/30 11:32:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xe916557afdadab07, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', r1}) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) 2018/04/30 11:32:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1d4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000001f8001f000000000049007a7d000000000000047e000081d9"}}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x80800) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8cd, 0x2000) sendto$llc(r3, &(0x7f0000000200)="81fb5776ce30aa2882dc0e03889cb702c6a13e519a93196deaba776f3497a7e482c8f61ca1318116a78b60adfd", 0x2d, 0x40, 0x0, 0x0) futex(&(0x7f0000000100)=0x1, 0x3, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x2, 0x2) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) accept$unix(r3, 0x0, &(0x7f0000000240)) 2018/04/30 11:32:12 executing program 3: exit(0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000300)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000480)=@resolve_ip={0x3, 0x0, 0xfa00, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xe009}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0xfda35d99) 2018/04/30 11:32:12 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x401, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x36}]}, 0x28}, 0x1}, 0x4090) 2018/04/30 11:32:12 executing program 1 (fault-call:2 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:12 executing program 5: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r2, &(0x7f0000000100), 0x9) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10}, 0x370, &(0x7f0000000300)={&(0x7f0000000000)={0x2fb, 0x8000027, 0x1ff307543bf68163, 0x0, 0x0, {0x5}}, 0x325}, 0x1}, 0x0) 2018/04/30 11:32:12 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x1f80000000000, 0x9, 0x40, 0x3, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x2c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x2}, {r1, 0x2001}, {r2, 0x4}, {r3, 0x10}, {r4, 0x20}, {r5, 0x20}, {r6, 0x400}, {r7, 0x1}], 0x8, &(0x7f00000001c0)={r8, r9+10000000}, &(0x7f0000000200)={0x5}, 0x8) 2018/04/30 11:32:12 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 135.412556] FAULT_INJECTION: forcing a failure. [ 135.412556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.424549] CPU: 1 PID: 9644 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 135.431425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.439239] IPVS: ftp: loaded support on port[0] = 21 [ 135.440811] Call Trace: [ 135.440858] dump_stack+0x185/0x1d0 [ 135.440896] should_fail+0x87b/0xab0 [ 135.440949] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 135.441020] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 135.466256] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 135.471583] ? kmsan_kmalloc+0x94/0x100 [ 135.475612] ? __kmalloc_node+0xdec/0x1190 [ 135.479943] ? kvmalloc_node+0x1a1/0x2e0 [ 135.484044] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 135.489286] ? default_file_splice_read+0x2b9/0x1120 [ 135.494443] ? splice_direct_to_actor+0x4c6/0x1040 [ 135.499444] ? do_splice_direct+0x335/0x540 [ 135.503846] ? do_sendfile+0x1067/0x1e40 [ 135.507953] ? SYSC_sendfile64+0x1b3/0x300 [ 135.512265] ? SyS_sendfile64+0x64/0x90 [ 135.516281] ? do_syscall_64+0x309/0x430 [ 135.520427] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 135.525882] ? kmsan_set_origin_inline+0x6b/0x120 [ 135.530779] ? __msan_poison_alloca+0x15c/0x1d0 [ 135.535504] ? should_failslab+0x279/0x2a0 [ 135.539796] ? kmsan_set_origin_inline+0x6b/0x120 [ 135.544702] ? memcg_kmem_put_cache+0x40/0x280 [ 135.549351] alloc_pages_current+0x6b5/0x970 [ 135.553855] push_pipe+0x680/0xca0 [ 135.557457] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 135.562798] default_file_splice_read+0x2b9/0x1120 [ 135.567821] ? __fsnotify_parent+0x132/0x560 [ 135.572328] ? security_file_permission+0x473/0x4b0 [ 135.577452] ? rw_verify_area+0x35e/0x580 [ 135.581653] ? SYSC_tee+0x13d0/0x13d0 [ 135.585492] splice_direct_to_actor+0x4c6/0x1040 [ 135.590285] ? do_splice_direct+0x540/0x540 [ 135.595267] ? security_file_permission+0x28f/0x4b0 [ 135.600348] ? rw_verify_area+0x35e/0x580 [ 135.604555] do_splice_direct+0x335/0x540 [ 135.608828] do_sendfile+0x1067/0x1e40 2018/04/30 11:32:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x28800, 0x0) r1 = accept(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0x89, 0x2, 0xe4de, 0xffffffff}, 0x14) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000180)=0x26001) readahead(r1, 0x74723997, 0xf025) 2018/04/30 11:32:12 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x44000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 135.612861] SYSC_sendfile64+0x1b3/0x300 [ 135.616990] SyS_sendfile64+0x64/0x90 [ 135.620842] do_syscall_64+0x309/0x430 [ 135.624784] ? SYSC_sendfile+0x320/0x320 [ 135.628896] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 135.634133] RIP: 0033:0x455979 [ 135.637354] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 135.645113] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 135.652414] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 135.659721] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 135.667027] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 135.674343] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000000f [ 135.692415] netlink: 743 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/30 11:32:12 executing program 6: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x1f80000000000, 0x9, 0x40, 0x3, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x2c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x2}, {r1, 0x2001}, {r2, 0x4}, {r3, 0x10}, {r4, 0x20}, {r5, 0x20}, {r6, 0x400}, {r7, 0x1}], 0x8, &(0x7f00000001c0)={r8, r9+10000000}, &(0x7f0000000200)={0x5}, 0x8) 2018/04/30 11:32:12 executing program 0: socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x84132, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) 2018/04/30 11:32:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000048affd)=[{&(0x7f0000000080)="2900000020001900013c00101b0000f60200001615de0005000000040d0013000517000000560a0000", 0x29}], 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x0, @empty, 0x4e24, 0x2, 'fo\x00', 0x8, 0x5, 0xf}, {@empty, 0x4e20, 0x2, 0x5, 0xffffffffffff76c1, 0x1200000000000000}}, 0x44) 2018/04/30 11:32:13 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80001, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f000039a000)={0x5, 0x100, 0x100, 0x2}, 0x2c) ioctl$void(r1, 0xc0045c77) bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018000000000000009500000000000000"], &(0x7f000039cff6)="7379e66b616c6c657200", 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xd4, 0x40) pipe2(&(0x7f0000000000), 0x4000) 2018/04/30 11:32:13 executing program 1 (fault-call:2 fault-nth:16): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:13 executing program 6: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) dup(r0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:13 executing program 2: shmget(0x0, 0x4000, 0x320, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x1200, &(0x7f0000ffe000/0x1000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000040)=""/124) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1ffc) 2018/04/30 11:32:13 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004a3000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000380), 0x2, 0x0) msync(&(0x7f0000116000/0x1000)=nil, 0x1000, 0x4) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x7fe, 0x4, 0x1) r0 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffa) keyctl$reject(0x13, r0, 0x4, 0x3, r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x10104, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'team_slave_0\x00'}) 2018/04/30 11:32:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1d4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:13 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 136.866464] FAULT_INJECTION: forcing a failure. [ 136.866464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.878322] CPU: 1 PID: 9693 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 136.885172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.894532] Call Trace: [ 136.897136] dump_stack+0x185/0x1d0 [ 136.900773] should_fail+0x87b/0xab0 [ 136.904497] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 136.909261] ? kernel_poison_pages+0x40/0x360 2018/04/30 11:32:13 executing program 5: unshare(0x400) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x80280) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x100000001, &(0x7f0000000080)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'veth1_to_bridge\x00', 0x0}) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1f}, 0x101}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000ec0)={@local={0xfe, 0x80, [], 0xaa}, 0x2c, r2}) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)="89d26aa1ad27c6a90430caee7d10e7c3fdfa2f20e27d06ed791569959897025481d63662751ef3579389a8f6e615247414c26ee5acfb3540c120bfb7d2ee3316f4bcf37898b46a7d375c5e0d61d70d2b44cd7688a46cac5ca51c424a792c9eabb706806acc1488d4a5cbc0128eb7198edaa48eb0e9adbbcb841533b4ca3dc202a134371dbbcc87bd91ad4d46e685e5e410987cf3e376b2aae28067a592f6cde52dbe5f668d63e8d230d1", 0xaa, 0xfffffffffffffff9) clock_gettime(0x2000000000000000, &(0x7f0000000580)={0x0, 0x0}) sync() sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000020100000900000008000000000000003da2cc9fd27902782fe59f2d34233ae16be55f5cb758589ee863ee5120e49521", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r5, @ANYRES64=r6/1000+30000, @ANYBLOB="0000009901000000030000c02a0100007daa0561362bf753f2098dc8ee242e37496b11534bc7047884df7292ddf1d2b6ad72498083b918966691678932631f00000000000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x10) keyctl$search(0xa, r3, &(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, r4) [ 136.912458] IPVS: ftp: loaded support on port[0] = 21 [ 136.913762] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 136.913778] ? kernel_poison_pages+0x1a0/0x360 [ 136.913795] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 136.913812] ? get_page_from_freelist+0xab28/0xb600 [ 136.913825] ? __kernel_text_address+0x34/0xe0 [ 136.913840] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 136.913855] ? __save_stack_trace+0x90d/0xb00 [ 136.913879] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 136.913905] ? push_pipe+0x680/0xca0 2018/04/30 11:32:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x1, 0x5, 0x6, 0x28b, 0x2, 0x1f}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000000140)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[{0x9100, 0x0, 0x0, 0x3}], {0x8100, 0x1, 0x100000, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0xc0d]}) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/14, 0xe}], 0x2) [ 136.962599] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 136.967802] ? default_file_splice_read+0x2b9/0x1120 [ 136.972917] ? do_sendfile+0x1067/0x1e40 [ 136.976990] ? SyS_sendfile64+0x64/0x90 [ 136.980965] ? do_syscall_64+0x309/0x430 [ 136.985031] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 136.990402] ? __msan_poison_alloca+0x15c/0x1d0 [ 136.995083] ? __switch_to+0x2b3/0x420 [ 136.998981] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.003844] ? __msan_poison_alloca+0x15c/0x1d0 [ 137.008545] kmsan_alloc_page+0x82/0xe0 [ 137.012542] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 137.017320] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 137.022726] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 137.028022] ? kmsan_kmalloc+0x94/0x100 [ 137.032016] ? __kmalloc_node+0xdec/0x1190 [ 137.036272] ? kvmalloc_node+0x1a1/0x2e0 [ 137.040353] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 137.045552] ? default_file_splice_read+0x2b9/0x1120 [ 137.050664] ? splice_direct_to_actor+0x4c6/0x1040 [ 137.055603] ? do_splice_direct+0x335/0x540 [ 137.059938] ? do_sendfile+0x1067/0x1e40 [ 137.064013] ? SYSC_sendfile64+0x1b3/0x300 [ 137.068265] ? SyS_sendfile64+0x64/0x90 [ 137.072248] ? do_syscall_64+0x309/0x430 [ 137.076335] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 137.081719] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.086551] ? __msan_poison_alloca+0x15c/0x1d0 [ 137.091209] ? should_failslab+0x279/0x2a0 [ 137.095428] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.100259] ? memcg_kmem_put_cache+0x40/0x280 [ 137.104827] alloc_pages_current+0x6b5/0x970 [ 137.109227] push_pipe+0x680/0xca0 [ 137.112759] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 137.117769] default_file_splice_read+0x2b9/0x1120 [ 137.122684] ? __fsnotify_parent+0x132/0x560 [ 137.127083] ? security_file_permission+0x473/0x4b0 [ 137.132084] ? rw_verify_area+0x35e/0x580 [ 137.136218] ? SYSC_tee+0x13d0/0x13d0 [ 137.140000] splice_direct_to_actor+0x4c6/0x1040 [ 137.144746] ? do_splice_direct+0x540/0x540 [ 137.149052] ? security_file_permission+0x28f/0x4b0 [ 137.154056] ? rw_verify_area+0x35e/0x580 [ 137.158364] do_splice_direct+0x335/0x540 [ 137.162498] do_sendfile+0x1067/0x1e40 [ 137.166395] SYSC_sendfile64+0x1b3/0x300 [ 137.170442] SyS_sendfile64+0x64/0x90 [ 137.174230] do_syscall_64+0x309/0x430 [ 137.178103] ? SYSC_sendfile+0x320/0x320 [ 137.182152] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 137.187322] RIP: 0033:0x455979 [ 137.190496] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 137.198186] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 137.205444] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 2018/04/30 11:32:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1f4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 137.212696] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 137.219948] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 137.227200] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000010 [ 137.257581] netlink: 'syz-executor0': attribute type 19 has an invalid length. 2018/04/30 11:32:14 executing program 2: shmget(0x3, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget(0x1, 0x1000, 0xc, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f00000013c0)=@ethtool_channels={0x3d, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x80, 0x10001, 0x10000, 0x7ff}}) [ 137.314183] netlink: 'syz-executor0': attribute type 19 has an invalid length. 2018/04/30 11:32:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1f4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 137.369467] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:14 executing program 0: set_mempolicy(0x4003, &(0x7f0000000080)=0x2, 0x9) syz_emit_ethernet(0x32, &(0x7f0000000140)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) r0 = gettid() sched_setparam(r0, &(0x7f0000000000)=0x10001) 2018/04/30 11:32:14 executing program 5: mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x20200) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x67, 0x20003) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_buf(r0, 0x0, 0x2000000000480, &(0x7f0000059fe8)=""/24, &(0x7f0000c5dffc)=0xfdc0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000100)=0x6, 0x4) 2018/04/30 11:32:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x1f4) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:14 executing program 2: r0 = getpid() capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x7, 0x2, 0x100000000, 0xfffffffffffff001, 0x8, 0x85c}) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:14 executing program 1 (fault-call:2 fault-nth:17): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 137.640075] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) [ 137.686825] FAULT_INJECTION: forcing a failure. [ 137.686825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.698683] CPU: 0 PID: 9744 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 137.705533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.714893] Call Trace: [ 137.717495] dump_stack+0x185/0x1d0 [ 137.721131] should_fail+0x87b/0xab0 [ 137.724857] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 137.729620] ? kernel_poison_pages+0x40/0x360 [ 137.734127] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 137.739495] ? kernel_poison_pages+0x1a0/0x360 [ 137.744094] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 137.749556] ? get_page_from_freelist+0xab28/0xb600 [ 137.754579] ? __kernel_text_address+0x34/0xe0 [ 137.759172] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 137.764631] ? __save_stack_trace+0x90d/0xb00 [ 137.769144] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 137.774168] ? push_pipe+0x680/0xca0 [ 137.777888] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 137.783081] ? default_file_splice_read+0x2b9/0x1120 [ 137.788190] ? do_sendfile+0x1067/0x1e40 [ 137.792259] ? SyS_sendfile64+0x64/0x90 [ 137.796240] ? do_syscall_64+0x309/0x430 [ 137.800311] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 137.805681] ? __kernel_text_address+0x34/0xe0 [ 137.810371] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.815224] ? __msan_poison_alloca+0x15c/0x1d0 [ 137.819913] kmsan_alloc_page+0x82/0xe0 [ 137.823903] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 137.828663] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 137.834038] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 137.839321] ? kmsan_kmalloc+0x94/0x100 [ 137.843302] ? __kmalloc_node+0xdec/0x1190 [ 137.847540] ? kvmalloc_node+0x1a1/0x2e0 [ 137.851607] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 137.856803] ? default_file_splice_read+0x2b9/0x1120 [ 137.861915] ? splice_direct_to_actor+0x4c6/0x1040 [ 137.866855] ? do_splice_direct+0x335/0x540 [ 137.871271] ? do_sendfile+0x1067/0x1e40 [ 137.875336] ? SYSC_sendfile64+0x1b3/0x300 [ 137.879570] ? SyS_sendfile64+0x64/0x90 [ 137.883545] ? do_syscall_64+0x309/0x430 [ 137.887607] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 137.892973] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.897814] ? __msan_poison_alloca+0x15c/0x1d0 [ 137.902487] ? should_failslab+0x279/0x2a0 [ 137.906722] ? kmsan_set_origin_inline+0x6b/0x120 [ 137.911605] ? memcg_kmem_put_cache+0x40/0x280 [ 137.916202] alloc_pages_current+0x6b5/0x970 [ 137.920627] push_pipe+0x680/0xca0 [ 137.924178] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 137.929210] default_file_splice_read+0x2b9/0x1120 [ 137.934139] ? __fsnotify_parent+0x132/0x560 [ 137.938534] ? security_file_permission+0x473/0x4b0 [ 137.943534] ? rw_verify_area+0x35e/0x580 [ 137.947839] ? SYSC_tee+0x13d0/0x13d0 [ 137.951619] splice_direct_to_actor+0x4c6/0x1040 [ 137.956373] ? do_splice_direct+0x540/0x540 [ 137.960673] ? security_file_permission+0x28f/0x4b0 [ 137.965669] ? rw_verify_area+0x35e/0x580 [ 137.969798] do_splice_direct+0x335/0x540 [ 137.973934] do_sendfile+0x1067/0x1e40 [ 137.977807] SYSC_sendfile64+0x1b3/0x300 [ 137.981869] SyS_sendfile64+0x64/0x90 [ 137.985648] do_syscall_64+0x309/0x430 [ 137.989516] ? SYSC_sendfile+0x320/0x320 [ 137.993559] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 137.998725] RIP: 0033:0x455979 [ 138.001891] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 138.009578] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 138.016845] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 138.024099] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:15 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:15 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x5, 0x3, 0xfff}, 0x0, 0x7, 0x6}) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) 2018/04/30 11:32:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x204) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:15 executing program 0: shmget(0x3, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget(0x1, 0x1000, 0xc, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f00000013c0)=@ethtool_channels={0x3d, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x80, 0x10001, 0x10000, 0x7ff}}) 2018/04/30 11:32:15 executing program 6: unshare(0x10000000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) 2018/04/30 11:32:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x977, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x6, 0x81, 0x9, 0x8000, 0x1000}, 0x14) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000200)={0x3, r4}) unshare(0x400) r5 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x2000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0xcb, 0x4) ioctl(r0, 0x2276, &(0x7f00000000c0)) [ 138.031897] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 138.039146] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000011 2018/04/30 11:32:15 executing program 1 (fault-call:2 fault-nth:18): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 138.233653] FAULT_INJECTION: forcing a failure. [ 138.233653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.245770] CPU: 0 PID: 9773 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 138.252644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 138.262037] Call Trace: [ 138.264685] dump_stack+0x185/0x1d0 [ 138.268373] should_fail+0x87b/0xab0 [ 138.272172] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 138.277005] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 138.282424] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 138.287744] ? kmsan_kmalloc+0x94/0x100 [ 138.291862] ? __kmalloc_node+0xdec/0x1190 [ 138.296191] ? kvmalloc_node+0x1a1/0x2e0 [ 138.300304] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 138.305541] ? default_file_splice_read+0x2b9/0x1120 [ 138.310696] ? splice_direct_to_actor+0x4c6/0x1040 [ 138.315700] ? do_splice_direct+0x335/0x540 [ 138.320100] ? do_sendfile+0x1067/0x1e40 [ 138.324198] ? SYSC_sendfile64+0x1b3/0x300 [ 138.328503] ? SyS_sendfile64+0x64/0x90 [ 138.332508] ? do_syscall_64+0x309/0x430 [ 138.336654] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 138.342112] ? kmsan_set_origin_inline+0x6b/0x120 [ 138.347002] ? __msan_poison_alloca+0x15c/0x1d0 [ 138.351708] ? should_failslab+0x279/0x2a0 [ 138.356070] ? kmsan_set_origin_inline+0x6b/0x120 [ 138.360964] ? memcg_kmem_put_cache+0x40/0x280 [ 138.365601] alloc_pages_current+0x6b5/0x970 [ 138.370145] push_pipe+0x680/0xca0 [ 138.373813] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 138.378915] default_file_splice_read+0x2b9/0x1120 [ 138.383947] ? __fsnotify_parent+0x132/0x560 [ 138.388452] ? security_file_permission+0x473/0x4b0 [ 138.393577] ? rw_verify_area+0x35e/0x580 [ 138.397956] ? SYSC_tee+0x13d0/0x13d0 [ 138.401799] splice_direct_to_actor+0x4c6/0x1040 [ 138.406618] ? do_splice_direct+0x540/0x540 [ 138.410980] ? security_file_permission+0x28f/0x4b0 [ 138.416043] ? rw_verify_area+0x35e/0x580 [ 138.420233] do_splice_direct+0x335/0x540 [ 138.424503] do_sendfile+0x1067/0x1e40 [ 138.428758] SYSC_sendfile64+0x1b3/0x300 [ 138.432933] SyS_sendfile64+0x64/0x90 [ 138.436864] do_syscall_64+0x309/0x430 [ 138.440815] ? SYSC_sendfile+0x320/0x320 [ 138.444937] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 138.450159] RIP: 0033:0x455979 [ 138.453376] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 138.461135] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 138.468442] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 138.475749] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 138.483063] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 138.490385] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000012 2018/04/30 11:32:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0xfffffffffffffd06) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x80000002) 2018/04/30 11:32:15 executing program 2: munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0"], 0x204) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:15 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff468e, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="28f20600000000000000"]) 2018/04/30 11:32:15 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x40000000000088) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x4000000000001, 0xfffffffffffffffd}, {{@in=@loopback=0x7f000001, 0x0, 0x2b}, 0x0, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) r1 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x180) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000001380)={r2, &(0x7f0000000380)=""/4096}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x80) accept$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/04/30 11:32:15 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:15 executing program 1 (fault-call:2 fault-nth:19): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x18, 0x84400) fstatfs(r0, &(0x7f0000000000)=""/27) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2000000000191000, 0x0) unshare(0x2405fe) ftruncate(r1, 0x0) [ 138.972195] FAULT_INJECTION: forcing a failure. [ 138.972195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.984048] CPU: 0 PID: 9796 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 138.990891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.000249] Call Trace: [ 139.002856] dump_stack+0x185/0x1d0 [ 139.006494] should_fail+0x87b/0xab0 [ 139.010228] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 139.014997] ? kernel_poison_pages+0x40/0x360 [ 139.019502] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 139.024879] ? kernel_poison_pages+0x1a0/0x360 [ 139.029477] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 139.034940] ? get_page_from_freelist+0xab28/0xb600 [ 139.039969] ? __kernel_text_address+0x34/0xe0 [ 139.044569] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.050051] ? __save_stack_trace+0x90d/0xb00 [ 139.054581] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 139.059527] ? push_pipe+0x680/0xca0 [ 139.063257] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 139.068482] ? default_file_splice_read+0x2b9/0x1120 [ 139.073973] ? do_sendfile+0x1067/0x1e40 [ 139.078051] ? SyS_sendfile64+0x64/0x90 [ 139.082038] ? do_syscall_64+0x309/0x430 [ 139.086117] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.091500] ? __kernel_text_address+0x34/0xe0 [ 139.096109] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.100970] ? __msan_poison_alloca+0x15c/0x1d0 [ 139.105661] kmsan_alloc_page+0x82/0xe0 [ 139.109657] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 139.114799] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 139.120195] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 139.125480] ? kmsan_kmalloc+0x94/0x100 [ 139.129467] ? __kmalloc_node+0xdec/0x1190 [ 139.134172] ? kvmalloc_node+0x1a1/0x2e0 [ 139.138240] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 139.143440] ? default_file_splice_read+0x2b9/0x1120 [ 139.148555] ? splice_direct_to_actor+0x4c6/0x1040 [ 139.153496] ? do_splice_direct+0x335/0x540 [ 139.157836] ? do_sendfile+0x1067/0x1e40 [ 139.161914] ? SYSC_sendfile64+0x1b3/0x300 [ 139.166161] ? SyS_sendfile64+0x64/0x90 [ 139.170147] ? do_syscall_64+0x309/0x430 [ 139.174222] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.179604] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.184470] ? __msan_poison_alloca+0x15c/0x1d0 [ 139.189158] ? should_failslab+0x279/0x2a0 [ 139.193406] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.198266] ? memcg_kmem_put_cache+0x40/0x280 [ 139.202872] alloc_pages_current+0x6b5/0x970 [ 139.207296] push_pipe+0x680/0xca0 [ 139.210863] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 139.215898] default_file_splice_read+0x2b9/0x1120 [ 139.220842] ? __fsnotify_parent+0x132/0x560 [ 139.225224] IPVS: ftp: loaded support on port[0] = 21 [ 139.225272] ? security_file_permission+0x473/0x4b0 [ 139.235474] ? rw_verify_area+0x35e/0x580 [ 139.239636] ? SYSC_tee+0x13d0/0x13d0 [ 139.243447] splice_direct_to_actor+0x4c6/0x1040 [ 139.248213] ? do_splice_direct+0x540/0x540 [ 139.252547] ? security_file_permission+0x28f/0x4b0 [ 139.257581] ? rw_verify_area+0x35e/0x580 [ 139.261741] do_splice_direct+0x335/0x540 [ 139.265906] do_sendfile+0x1067/0x1e40 [ 139.269814] SYSC_sendfile64+0x1b3/0x300 [ 139.273906] SyS_sendfile64+0x64/0x90 [ 139.277716] do_syscall_64+0x309/0x430 [ 139.281612] ? SYSC_sendfile+0x320/0x320 [ 139.285690] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.291223] RIP: 0033:0x455979 [ 139.294406] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.302120] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 139.309405] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 139.316681] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 139.324324] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 139.331607] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000013 2018/04/30 11:32:16 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f0000000080)='./control\x00', 0x20000, 0x108) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') removexattr(&(0x7f0000000040)='./control\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') close(r1) 2018/04/30 11:32:16 executing program 0: r0 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) mprotect(&(0x7f0000699000/0x3000)=nil, 0x3000, 0x0) clock_gettime(0x3, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x80, 0x6c, 0x2735, 0xff, @time={0x77359400}, {0x6, 0x7}, {0x13, 0x6}, @control={0x5, 0xffffffffffffff23, 0x81}}, {0x7fffffff, 0x6, 0x89ae, 0x621a, @time={r1, r2+30000000}, {0x1, 0xff}, {0x1, 0xff}, @addr={0x20000000, 0x3}}, {0x0, 0x17, 0xcb99, 0x800, @time={0x77359400}, {0x20, 0x4}, {0x2, 0x7fffffff}, @connect={{0x2, 0x400}, {0x100000000, 0x7}}}], 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2018/04/30 11:32:16 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x81, 0x3, 0x2, 0xffffffff, 0x9, 0x7}, 0xfff, 0xfffffffffffff800, 0x1}) 2018/04/30 11:32:16 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:16 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pkey_alloc(0x0, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r3, r4/1000+30000}}, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x223, 0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x100000, 0x1, 0x0, "27b50889c472bcc8767fadfe733eb0c56f1e202517e3f4d8a1960b4808eac3f8"}) 2018/04/30 11:32:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x204) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000100), &(0x7f0000000080)=0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 2018/04/30 11:32:16 executing program 1 (fault-call:2 fault-nth:20): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 139.548392] FAULT_INJECTION: forcing a failure. [ 139.548392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.560334] CPU: 0 PID: 9833 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 139.567177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.576539] Call Trace: [ 139.579140] dump_stack+0x185/0x1d0 [ 139.582780] should_fail+0x87b/0xab0 [ 139.586517] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 139.591299] ? kernel_poison_pages+0x40/0x360 [ 139.595802] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 139.601182] ? kernel_poison_pages+0x1a0/0x360 [ 139.605776] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 139.611239] ? get_page_from_freelist+0xab28/0xb600 [ 139.616347] ? __kernel_text_address+0x34/0xe0 [ 139.620949] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.626414] ? __save_stack_trace+0x90d/0xb00 [ 139.630937] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 139.635966] ? push_pipe+0x680/0xca0 [ 139.639691] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 139.644898] ? default_file_splice_read+0x2b9/0x1120 [ 139.650021] ? do_sendfile+0x1067/0x1e40 [ 139.654096] ? SyS_sendfile64+0x64/0x90 [ 139.658077] ? do_syscall_64+0x309/0x430 [ 139.662229] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.667627] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.672488] ? __msan_poison_alloca+0x15c/0x1d0 [ 139.677180] kmsan_alloc_page+0x82/0xe0 [ 139.681265] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 139.686042] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 139.691440] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 139.696732] ? kmsan_kmalloc+0x94/0x100 [ 139.700721] ? __kmalloc_node+0xdec/0x1190 [ 139.704969] ? kvmalloc_node+0x1a1/0x2e0 [ 139.709052] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 139.714435] ? default_file_splice_read+0x2b9/0x1120 [ 139.719554] ? splice_direct_to_actor+0x4c6/0x1040 [ 139.724501] ? do_splice_direct+0x335/0x540 [ 139.728845] ? do_sendfile+0x1067/0x1e40 [ 139.732925] ? SYSC_sendfile64+0x1b3/0x300 [ 139.737174] ? SyS_sendfile64+0x64/0x90 [ 139.741177] ? do_syscall_64+0x309/0x430 [ 139.745256] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.750643] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.755501] ? __msan_poison_alloca+0x15c/0x1d0 [ 139.760184] ? should_failslab+0x279/0x2a0 [ 139.764437] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.769303] ? memcg_kmem_put_cache+0x40/0x280 [ 139.773905] alloc_pages_current+0x6b5/0x970 [ 139.778323] push_pipe+0x680/0xca0 [ 139.781876] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 139.786907] default_file_splice_read+0x2b9/0x1120 [ 139.791851] ? __fsnotify_parent+0x132/0x560 [ 139.796276] ? security_file_permission+0x473/0x4b0 [ 139.801307] ? rw_verify_area+0x35e/0x580 [ 139.805467] ? SYSC_tee+0x13d0/0x13d0 [ 139.809279] splice_direct_to_actor+0x4c6/0x1040 [ 139.814057] ? do_splice_direct+0x540/0x540 [ 139.818394] ? security_file_permission+0x28f/0x4b0 [ 139.823429] ? rw_verify_area+0x35e/0x580 [ 139.827594] do_splice_direct+0x335/0x540 [ 139.831770] do_sendfile+0x1067/0x1e40 [ 139.835687] SYSC_sendfile64+0x1b3/0x300 [ 139.839773] SyS_sendfile64+0x64/0x90 [ 139.843591] do_syscall_64+0x309/0x430 [ 139.847499] ? SYSC_sendfile+0x320/0x320 [ 139.851578] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 139.856770] RIP: 0033:0x455979 [ 139.859975] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.867692] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 139.874974] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 139.882255] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 139.889536] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 2018/04/30 11:32:16 executing program 0: futex(&(0x7f0000000000)=0x1, 0xb, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setfsgid(r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2000, 0x0) sendmsg$alg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="7b879e8b7e450989f07c458506c23eda5a8b034acbbd19f5059ef3680ed8c4f1a383af35862f9181f66cc82bca7fa7db545a1161261fbe5bab4a92deec1dda7429fb52caebda284d676d5401b8edde0fde7c135cc53f00e3d1e9b480cd4b77cbdc705dbdd88abc21bd4090b18e6435e146460342fd83fc08dcb4b150dc0c97a33a974ee71c281639f1dd0c2ac8113f92f08ffca217ce26f0a21adb145329482cca05aac4a5623f83b1f879626274a9969c6328b091bc3d78b9b3a65ecd4668d05547713db7cd438ddb6d15a53c948c93a597ef574423f23748", 0xd9}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="8c717353fda3ee6827d8d073157f9d8bf319d5aaa24bf4a3a86acdef16e439ae899b9e212c41ca1584eabd933b9aa8ff87ae3621ae25778cc9d6fdf9e3c071cc78da5cfe306b502f9a4142528e8898b08d2795f34e7bc7576f654503f8e8f98b4592c2d989f924112a55e8ca0064dc348f30f6b41dea56723a0db7bc3770cd8b7f3dfcf31ae9d82edd01cd63ecf6047fb9522b8f1c616def1dd89abac4ea6b465aef794e7d15bbacf9e7fb10b1aa32508f8d3ef4a35822b9e0c10f1d8143e6f640cdb01e71a3431a8234d932a8f8501cd9a073", 0xd3}, {&(0x7f0000001400)="a6310ffb22645380adce6423d76ee91b3c9e9b93f5c353c160907ad64a73f0cfd58ec067d84eae82e3a03655b238100e330609eaef1e6ff5cdfe77d21fef8dee3a62e26a2c27761ed6d93c2231af24cbfc68444a5b2523e7e3f14f21a63823b69e78d6e5b4660a0d9b4e7dcbc77b762323aa593ed553a130f8a5ba28ee2f7471caeb81f79bfe44d343f4d776553fb0422fe1a235d7e7da734850eebc6d9249443fc96b268166c9e4d1a429c868ab7e52a8699c7bc4fd3302bc768fca5a9888f664b59548d2066b565505dc44aaf5ae3e52e79c809ece0682efb5eaed3544d35fdf3cdb6b559346a29097502b04", 0xed}, {&(0x7f0000001500)="466d44fce22e297d7183fbd4d54fab2d32cd68831b6605c3e728c69b94a47ce32aab7ebccb1de0a5e4313c329a051eb4ed5d3a22989bd1780512", 0x3a}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="8ab6d83309b2eb1afe5eff54ea6ce3", 0xf}, {&(0x7f0000002580)="b173e5cf18fbf90a8cc5282e225dae887a684d58f3babf1aec7b973d7d9420ade84cd38086de4893b18519fad9c043d641de56fa40d96229fabb247ea0efa2ffccdc037474bb63bfca827c543a6528b4752b685416ec3097be27524fa7399611dc2cdfa5149b78636625bd6d24fa3b1779a39d2bde69833b70f6510a021938fdc777045fe9519cf9e2eba4f2aa5e50dafa12ef4f632ba6d3c1bb3a1c76fc2e9422a8ae54c80e847422673a8d18d41b", 0xaf}], 0x9, &(0x7f0000002700)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffffffffff6d}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x9a}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x20000000}, 0x20000000) fcntl$getown(r1, 0x9) r2 = syz_genetlink_get_family_id$team(&(0x7f0000002800)='team\x00') getsockname$packet(r1, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000028c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000029c0)=0xe8) getsockname$packet(r1, &(0x7f0000007540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000007580)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000075c0)={'bridge0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000007600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000007640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000007780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000007800)={@multicast2, @broadcast, 0x0}, &(0x7f0000007840)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007880)={'bond_slave_1\x00', 0x0}) getsockname$packet(r1, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000008d80)=0x14) r12 = accept4(r1, &(0x7f0000008f00)=@can={0x0, 0x0}, &(0x7f0000008f80)=0x80, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000009000)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000009100)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000009200)={@broadcast, @dev, 0x0}, &(0x7f0000009240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000093c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000094c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000009500)={@broadcast, @local, 0x0}, &(0x7f0000009540)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000009b00)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000009ac0)={&(0x7f0000009580)={0x51c, r2, 0x804, 0x70bd2b, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa327}}}]}}, {{0x8, 0x1, r4}, {0x2ac, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}, {0x8, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x34, 0x4, [{0xff, 0x5, 0x8, 0x20}, {0x200, 0x4, 0x10001, 0xc21}, {0x2, 0x1000, 0xea8a, 0x3}, {0xefc, 0xfff, 0x2, 0x4}, {0x806, 0x0, 0xffff, 0x757}, {0xa8d, 0x0, 0x6, 0xfffffffffffffffd}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x0, 0x6, 0x2780, 0x10001}, {0x6f, 0x6c39, 0x9, 0x7}, {0xb1, 0x2, 0x8000, 0x3}, {0x5, 0x1, 0xd34, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1c0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x48}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7aee000000000}}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_netdev_private(r12, 0x89ff, &(0x7f0000009b40)="cb7537ec2218b1a1da633a35d64aac1c744df2c63639bc450d9fdc4c530896f423bdd2b22ee16120d4ac7dc6f6eee9c996855e5ee04e4475e8e501b69650408558cfb09dc5b0d0ca0995adcd103a85f3363550c91e0372bb8c84900fd44955850c01c828e2de795485a04419083f0a4202906d743d01aa3af97ba83e38578f12d7fc4113310f1055c69cd21ae6f550514103e245f88dc5f5f36d39ecc242d3c83145191ce46060bfb382ba56f4733c04ca164d64e95dcb5704a5eb79b61feb14397b1c667670db1b945be747a91ae0f793b7692a45202a5de6f6f945b5ec7f4514b8c974333c73fe414da7d4") getpeername$packet(r12, &(0x7f0000009c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000009c80)=0x14) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000009cc0)=0x7fffffff) execveat(r1, &(0x7f0000009d00)='./file0\x00', &(0x7f0000009fc0)=[&(0x7f0000009d40)='cgroupsecuritylo%](+#%\x00', &(0x7f0000009d80)='/dev/mixer\x00', &(0x7f0000009dc0)='enabled\x00', &(0x7f0000009e00)='\x00', &(0x7f0000009e40)='priority\x00', &(0x7f0000009e80)='bpf_hash_func\x00', &(0x7f0000009ec0)='lb_port_stats\x00', &(0x7f0000009f00)='lb_stats_refresh_interval\x00', &(0x7f0000009f40)='lb_tx_method\x00', &(0x7f0000009f80)='enabled\x00'], &(0x7f000000a080)=[&(0x7f000000a040)='enabled\x00'], 0x1000) gettid() ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f000000a0c0)="9668781c0a561e48d98e34e4355b86b7704a4b08b7d74eb225fd3237cf02c05fa435180f5503690b147f000b0cbeb43266543018d5347c8a2a636311a5c3ba418173fd265402da383f32a68b3f58fc231cb07b1352fbc4e16cd55dd96aa29bde3a1c4cdbcfc3d48d08") ioctl$VT_RELDISP(r1, 0x5605) ioctl$TIOCCBRK(r1, 0x5428) 2018/04/30 11:32:16 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) [ 139.896816] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000014 2018/04/30 11:32:17 executing program 0: r0 = memfd_create(&(0x7f0000000140)='/dev/random\x00', 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x7) r1 = syz_open_dev$random(&(0x7f00000017c0)='/dev/random\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) memfd_create(&(0x7f0000000200)='\x00', 0x2) select(0x40, &(0x7f0000000000)={0x19, 0x7fff, 0x3, 0x1, 0x8000, 0x9, 0x2, 0x41}, &(0x7f0000000040)={0x3, 0x9533, 0x7, 0x84, 0x3, 0x9, 0x7ff, 0x400000000000}, &(0x7f0000000080)={0x400, 0x0, 0x1, 0x0, 0x7ff, 0x400, 0xfffffffffffffffa, 0x101}, &(0x7f0000000100)={r2, r3/1000+30000}) 2018/04/30 11:32:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, &(0x7f0000000340)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x350) 2018/04/30 11:32:17 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0x7, 0x4, 0x1fc000000}, 0x6}) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2018/04/30 11:32:17 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f00008d6000)=0x800000003, 0xffffffffffffff60) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000ac5000), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@empty, r1}, 0x14) 2018/04/30 11:32:17 executing program 1 (fault-call:2 fault-nth:21): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:17 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mincore(&(0x7f0000013000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/67) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000005c0)={@empty, @multicast2}, &(0x7f0000000600)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 2018/04/30 11:32:17 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 140.505421] FAULT_INJECTION: forcing a failure. [ 140.505421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.517854] CPU: 1 PID: 9873 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 140.524725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.534114] Call Trace: [ 140.536753] dump_stack+0x185/0x1d0 [ 140.540427] should_fail+0x87b/0xab0 [ 140.544207] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 140.549037] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 140.554528] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 140.559836] ? kmsan_kmalloc+0x94/0x100 [ 140.563855] ? __kmalloc_node+0xdec/0x1190 [ 140.568178] ? kvmalloc_node+0x1a1/0x2e0 [ 140.572279] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 140.577506] ? default_file_splice_read+0x2b9/0x1120 [ 140.582648] ? splice_direct_to_actor+0x4c6/0x1040 [ 140.587653] ? do_splice_direct+0x335/0x540 [ 140.592043] ? do_sendfile+0x1067/0x1e40 [ 140.596141] ? SYSC_sendfile64+0x1b3/0x300 [ 140.600443] ? SyS_sendfile64+0x64/0x90 2018/04/30 11:32:17 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) times(&(0x7f0000000040)) 2018/04/30 11:32:17 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x0, r2}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_newrule={0x34, 0x20, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_1\x00'}]}, 0xfe76}, 0x1}, 0x0) [ 140.604451] ? do_syscall_64+0x309/0x430 [ 140.608583] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 140.614028] ? kmsan_set_origin_inline+0x6b/0x120 [ 140.618913] ? __msan_poison_alloca+0x15c/0x1d0 [ 140.623626] ? should_failslab+0x279/0x2a0 [ 140.627902] ? kmsan_set_origin_inline+0x6b/0x120 [ 140.632802] ? memcg_kmem_put_cache+0x40/0x280 [ 140.637432] alloc_pages_current+0x6b5/0x970 [ 140.641932] push_pipe+0x680/0xca0 [ 140.645577] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 140.650654] default_file_splice_read+0x2b9/0x1120 [ 140.655674] ? __fsnotify_parent+0x132/0x560 [ 140.660168] ? security_file_permission+0x473/0x4b0 [ 140.665279] ? rw_verify_area+0x35e/0x580 [ 140.669475] ? SYSC_tee+0x13d0/0x13d0 [ 140.673309] splice_direct_to_actor+0x4c6/0x1040 [ 140.678118] ? do_splice_direct+0x540/0x540 [ 140.682570] ? security_file_permission+0x28f/0x4b0 [ 140.687632] ? rw_verify_area+0x35e/0x580 [ 140.691822] do_splice_direct+0x335/0x540 [ 140.696084] do_sendfile+0x1067/0x1e40 [ 140.700091] SYSC_sendfile64+0x1b3/0x300 [ 140.704259] SyS_sendfile64+0x64/0x90 [ 140.708155] do_syscall_64+0x309/0x430 [ 140.712098] ? SYSC_sendfile+0x320/0x320 [ 140.716209] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 140.721426] RIP: 0033:0x455979 [ 140.724640] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 140.732388] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 140.739687] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 140.746990] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 140.754302] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 140.761622] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000015 2018/04/30 11:32:17 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400000) pwrite64(r0, &(0x7f00000000c0)="2134763cd13e0ed52f71a23bb691e30fd9234d754da6b851394949b3c16e0efa8caf89e8c0c089264ab2e414655f9abc056a1835a2e1c592895023c0c8d9b2cea8f2352559be71b681fc1714057cf1aa333174ca6cd58d29dfd5a18b06818b32752ba42973ed0f0d83d871bc1dbade74e7923d8516403f46eb75d610bd3027d28db2e203252ddd6f2affaf20bbb82cc85ae2a2e025ce663d4b5ea1b552e7cdfeac20240f34e65482fa67e3d25e7a8f3c33add4b67c3b2ef4b964490f155423df210ee30f1fa293e7b837b29e2d55f47bd3868754a4f4519fa09a3f85435f43b801c3909df67c6dcd", 0xe8, 0x0) 2018/04/30 11:32:17 executing program 3: r0 = open(&(0x7f0000000000)='./file0/file0/file0\x00', 0x400000, 0x0) mkdirat(r0, &(0x7f000003f154)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/37, 0x25) r2 = openat(r1, &(0x7f00008deff8)='./file0\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/zero\x00', 0x42000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003cc0)={&(0x7f0000003c40)='./file1/file0\x00', r3}, 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x280, 0x104) symlinkat(&(0x7f000001fff7)='./file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat(r2, &(0x7f0000da2fec)='./file0/file0/file0\x00', r2, &(0x7f0000000100)='./file0/file0/file0\x00') clock_gettime(0x0, &(0x7f0000003bc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=""/131, 0x83, 0x8}, 0xdf34}, {{&(0x7f00000013c0)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001440)=""/88, 0x58}, {&(0x7f00000014c0)=""/214, 0xd6}, {&(0x7f00000015c0)=""/21, 0x15}, {&(0x7f0000001600)=""/9, 0x9}, {&(0x7f0000001640)=""/58, 0x3a}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/11, 0xb}, {&(0x7f0000001780)=""/222, 0xde}, {&(0x7f0000001880)=""/133, 0x85}, {&(0x7f0000001940)=""/43, 0x2b}], 0xa, &(0x7f0000001a40)=""/72, 0x48, 0x1}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)=""/30, 0x1e}, {&(0x7f0000001b00)=""/239, 0xef}, {&(0x7f0000001c00)=""/183, 0xb7}], 0x3, 0x0, 0x0, 0x200}, 0x3}, {{&(0x7f0000001d00)=@sco, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d80)=""/195, 0xc3}, {&(0x7f0000001e80)=""/5, 0x5}, {&(0x7f0000001ec0)=""/114, 0x72}, {&(0x7f0000001f40)=""/120, 0x78}, {&(0x7f0000001fc0)=""/134, 0x86}, {&(0x7f0000002080)=""/219, 0xdb}], 0x6, &(0x7f0000002200)=""/4096, 0x1000, 0xf1ad}, 0x1ff}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003200)=""/4, 0x4}, {&(0x7f0000003240)=""/76, 0x4c}], 0x2, &(0x7f0000003300)=""/14, 0xe, 0x3}, 0x8}, {{&(0x7f0000003340)=@llc, 0x80, &(0x7f0000003900)=[{&(0x7f00000033c0)=""/102, 0x66}, {&(0x7f0000003440)=""/25, 0x19}, {&(0x7f0000003480)=""/68, 0x44}, {&(0x7f0000003500)=""/31, 0x1f}, {&(0x7f0000003540)=""/252, 0xfc}, {&(0x7f0000003640)=""/100, 0x64}, {&(0x7f00000036c0)=""/119, 0x77}, {&(0x7f0000003740)=""/34, 0x22}, {&(0x7f0000003780)=""/135, 0x87}, {&(0x7f0000003840)=""/170, 0xaa}], 0xa, &(0x7f00000039c0)=""/70, 0x46, 0x4d9d}, 0x8}], 0x6, 0x12100, &(0x7f0000003c00)={r4, r5+30000000}) 2018/04/30 11:32:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/245, 0x26e}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2, &(0x7f0000000400)=""/222, 0xde}, 0x0) r1 = dup(r0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004200d0acb904a446ba1f5ae25a84335ed6ab8a0000000000ac81c361727eff76728e8e34ee986866b2f2814c4c93c2d7d234cc17b3eb1dd9923b7ac9b23158a888b499b574d5b529b2dd5eeb440dd8b5b02c09bfcf10456e5deea825ab5f32733017625a8ce51ee066f6481f9323e53e7700b65c3090bc81dfdfb4cde4a4e664f35b6d3e9f8e84d2f0131ca7779670aa12942107000186829d537d71181d7fe737f993f0bf4303aa4700db5a3b942acef0ca9e8584f27ce428e006b74a"], 0x14}, 0x1}, 0x0) 2018/04/30 11:32:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:18 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000042c0)={&(0x7f0000000140)=@l2={0x1f}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)='r', 0x1}], 0x1, &(0x7f0000001280)}, 0x0) syz_emit_ethernet(0x195, &(0x7f0000ea7cfa)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c000e2", 0x3, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@echo_reply={0x81}}}}}}, 0x0) sendto(r0, &(0x7f0000000000)='A', 0x1, 0x0, 0x0, 0x0) 2018/04/30 11:32:18 executing program 2: r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1da, &(0x7f0000000000)=""/35) 2018/04/30 11:32:18 executing program 3: r0 = timerfd_create(0x7, 0x0) exit(0x1) timerfd_settime(r0, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) 2018/04/30 11:32:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x20c) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:18 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r1, 0x4) syz_emit_ethernet(0xa8, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x60, 0x7}], {0x8100, 0x0, 0x5, 0x2}}], {@llc={0x4, {@snap={0xab, 0xab, "6ab9", "468af4", 0x9100, "52b3bb1145faa58ae4d71dbe2392b22f723758db7e1eeb4d066bedbafe769c8af76ae437ba8ea6b7f445b624a10bb342f2c657f2c8b10edb56086de8bf21ed5b6f072e789c7b118eed0268334d4de44440ab3792b58d59e1a2c7afe8b01d5e4e9d5034872222544dd77781bc46686fe3c4c9d2d91e9a35d003e50177c64d2c2f9a720db84653182fca"}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x401, 0x504d5e21, 0xb8a, 0x56b]}) [ 141.217984] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:18 executing program 1 (fault-call:2 fault-nth:22): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 141.323525] FAULT_INJECTION: forcing a failure. [ 141.323525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.335380] CPU: 1 PID: 9925 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 141.342227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.351584] Call Trace: [ 141.354188] dump_stack+0x185/0x1d0 [ 141.357828] should_fail+0x87b/0xab0 [ 141.361560] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 141.366327] ? kernel_poison_pages+0x40/0x360 [ 141.370841] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 141.376213] ? kernel_poison_pages+0x1a0/0x360 [ 141.380801] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 141.386261] ? get_page_from_freelist+0xab28/0xb600 [ 141.391280] ? __kernel_text_address+0x34/0xe0 [ 141.395868] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 141.401325] ? __save_stack_trace+0x90d/0xb00 [ 141.405845] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 141.410782] ? push_pipe+0x680/0xca0 [ 141.414498] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 141.419692] ? default_file_splice_read+0x2b9/0x1120 [ 141.424796] ? do_sendfile+0x1067/0x1e40 [ 141.428858] ? SyS_sendfile64+0x64/0x90 [ 141.432828] ? do_syscall_64+0x309/0x430 [ 141.436890] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 141.442254] ? __kernel_text_address+0x34/0xe0 [ 141.446847] ? kmsan_set_origin_inline+0x6b/0x120 [ 141.451701] ? __msan_poison_alloca+0x15c/0x1d0 [ 141.456380] kmsan_alloc_page+0x82/0xe0 [ 141.460370] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 141.465130] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 141.470502] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 141.475782] ? kmsan_kmalloc+0x94/0x100 [ 141.479765] ? __kmalloc_node+0xdec/0x1190 [ 141.484008] ? kvmalloc_node+0x1a1/0x2e0 [ 141.488079] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 141.493281] ? default_file_splice_read+0x2b9/0x1120 [ 141.498393] ? splice_direct_to_actor+0x4c6/0x1040 [ 141.503315] ? do_splice_direct+0x335/0x540 [ 141.507629] ? do_sendfile+0x1067/0x1e40 [ 141.511682] ? SYSC_sendfile64+0x1b3/0x300 [ 141.515898] ? SyS_sendfile64+0x64/0x90 [ 141.519859] ? do_syscall_64+0x309/0x430 [ 141.523913] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 141.529260] ? kmsan_set_origin_inline+0x6b/0x120 [ 141.534098] ? __msan_poison_alloca+0x15c/0x1d0 [ 141.538760] ? should_failslab+0x279/0x2a0 [ 141.542976] ? kmsan_set_origin_inline+0x6b/0x120 [ 141.547826] ? memcg_kmem_put_cache+0x40/0x280 [ 141.552402] alloc_pages_current+0x6b5/0x970 [ 141.556800] push_pipe+0x680/0xca0 [ 141.560343] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 141.565362] default_file_splice_read+0x2b9/0x1120 [ 141.570298] ? __fsnotify_parent+0x132/0x560 [ 141.574720] ? security_file_permission+0x473/0x4b0 [ 141.579750] ? rw_verify_area+0x35e/0x580 [ 141.583907] ? SYSC_tee+0x13d0/0x13d0 [ 141.587709] splice_direct_to_actor+0x4c6/0x1040 [ 141.592462] ? do_splice_direct+0x540/0x540 [ 141.596788] ? security_file_permission+0x28f/0x4b0 [ 141.601819] ? rw_verify_area+0x35e/0x580 [ 141.605976] do_splice_direct+0x335/0x540 [ 141.610137] do_sendfile+0x1067/0x1e40 [ 141.614038] SYSC_sendfile64+0x1b3/0x300 [ 141.619934] SyS_sendfile64+0x64/0x90 [ 141.623742] do_syscall_64+0x309/0x430 [ 141.629462] ? SYSC_sendfile+0x320/0x320 [ 141.633533] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 141.638708] RIP: 0033:0x455979 [ 141.641888] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.649594] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 141.656943] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 141.664211] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 141.671471] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 141.678740] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000016 2018/04/30 11:32:19 executing program 6: r0 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)={r2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xc2, "eb883505f9d0b852273f095c994731e23d82978e1f3889f285691410b4866233a62c18ce3a43a42d2cd44a85a266d07888aebe5ca44fbb6d4fe3e1de0c1b94d5794f110e7ecb8f4666faab6812792c8378d628cf8d4bfec3e4da9a746bb4a825918113a9cb2def84665a65672441707b97297c8bdace4b6843742b95c4f9f92836e2332aad341e1076e7dc4b7137640edbc48e6a91ea30ed530308268deea1b50dc4c88673f625665bc068410f61649f251d06e56e635dd3798e95eab3d75e313c40"}, &(0x7f0000000340)=0xca) sendto$inet6(r0, &(0x7f0000000200)='-', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) signalfd(r1, &(0x7f0000000140)={0x1}, 0x8) 2018/04/30 11:32:19 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000070000)={0x18, 0x1c, 0x109, 0x0, 0x0, {0x40000001}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001740)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0xffffffffffffffcf}, 0x4, 0x2, 0x3}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000001c0)="7c253f94ce336867caf16176faa2b6629980a4172e684d56ff0b509bb1366ab717678c730684dbb261fafd9c2c4c39140837ff0fed543ca6e0e90cc78767a6df28ff4839eb7b45b28d64296a739f9b7159144592b29317d6d208328530161b96f6e23f9fcc4b648454", 0x69}, {&(0x7f0000000240)="7807deb71c5f862777c51303fde8ba0f01f1e7c6294f627c248b7492ed73db4edac28f5fd6fca105c1b5c867adf21c425ecd98b38931bf95e5adc8295b791081113073e3e49e9003bf7712879936", 0x4e}, {&(0x7f00000002c0)="c1a7f5015fe5dcb557648d1eaa26c7ffaf0f07244f6aebe50daac8541f08cd14205e08b4d1544349ae52c2f017c7bb6682460d", 0x33}, {&(0x7f0000000300)="4714463de3d60c030fe3cd7e4809c66ba68061b4dbd2a9fc65553641a47982e9b8", 0x21}, {&(0x7f0000000340)="549a7844fab328f4374cef2f8b6716637421e45da4e0c69ab6365475da9be532d11b0cd95c75bf01cf8cd8c49f8cd8023f79da1028eea3dd6c68ce7eacc1bca5d5dc1c7006e3fa2b51da89d5c81f0c1a69732d875f45e94bdd4a4022ba7ff81b8bb689d61540ae656a322afc0aec9e03b2ab99e3a38c90630534e6490512a47c6935707d031e40b152f27358daff868bfa696337047408629a4004fbb85a648b726b3e069c20ddfc6aa65295b7ed56c60e0cf685ed779c115086680ac7bf1e8942d20626be2c6bcf97cf7c7d15c821d9bc8949d858d81a5cae47eddf227ca748259650cb935b492beebd194790244668", 0xf0}, {&(0x7f0000000440)="cedddf861c1d56c48a0b415b87bbda13764646d2bae4ef71ff951222a66b1e58f2413a221f42a6012d080560b69c7fe1db269a6205bc09afaad185a931e0093da4bdc0447a65da940915396e8146946fdace448b6149f3b97037fbd10151730945843bf7447125f391eb6e49c32349d1c184866b9585fd13b4f83a220c6c220f923c3710", 0x84}, {&(0x7f0000000500)="92b76b3e0542ebaef006e73fc38c9957eb6ddac571045bde68e57a230b6748aa24f28ee4b1ef44193e8d813a090ca68d92b15c9af19b990458bed0c25a346e5503485e6ef43d14ce8b210ff36da8879e03374d91592a3c4314b665f49a997b4591272e537ab7cee38f84f0f6cb751b782947fb7610e2118df6eec0ac44a3dc5b5c62a1fde5202705dfe80c6713adbadec44bc6eaf11d11de206832206c0dd269f4f7954e00fd08b316e7ac124a073640a1aeb5fe5d49a964ef41d1f3ed55c8870317f3cc1899ef6fc4df4aa7cca311f9ade35b74bcbad035226719d63499c1a3ed6c3b5af07bc155ebec4e403764ec7cbe15221c5385ad38452e2f66644d064cbb51898f932054dd872ee9eeb2f7120cd76a7b0bcbdd442a27cb17102e666a05bfb9eb86872eaa31bb8456810606929985adc75604bd0aad8d6b15e07ff25784d8d3d3161ae9b625bae294e602099ad9882d45685b9240c7792505b27ffd0b8cd2e98052a4fea7a67984346813da4ace38058009520143c94df3bcf56bd4d7b5b92e42b4d1756e83f834f45dcc219f4701aef758eb3ce73512d66df9deb0be0a642c558daa10a753b1278ef04dd7dc6a397075ab1722d6c43c5fc005ea6564e5888e8dd87a0491cffb400d654e3781b7441d5e84f05f02c5f492bc292ee9c168be38ef9dd04376aa4898ad60a9ee7eb114ec014d7c96e6e0adde2e886357a6927deb1d287c09222c192054c9c86a0a0ffb66230e38c5005d1b2beca9322c5ceca1e080b5794c24d89a01995b9b90b05ebe30f1e757887f1d3b000891794b77b88d1699359fc8e1537f4ff09c4b147754978dcb0e382755d8354d1ecbf73f532c90f36c4baa464031cd6165c83f1855f7faacaff25700dc0f8bf3a840cf5b856ec0c6ea31f9971b8156ce2dc60112616a6615c9344f6a79c642c9f64f913b77a3905f1deb96ff0a735722c9dba1654ec141b1beaeb8e653bb0a161b2989c81c6e9168c4ef62e60565492d568b7a06dd8e2d83059dbb8c9188bdbbec52082b92dd1ae61b44a51865e1ad00fad0d7e8c785b38423e1bbe12296127ab9196e7b5872a8a93b024b8549fdc75af178909a97474033ea7b71266e116deb14421e91f10d27ef323ca72835c53d65d3b84d442509d0fd553c7049824740b4d8cdf55c339dcafa8ae26219de6b0a894140f565c835cdb033ecba4d002681aeb554e9516133a6201c5f2f8d04dd071e3cd1c3094c2b960cff3828ee7167fce571942faa1e15b1e633362001329794e175af4661f40b1c871defef0345a8ec6caeacb959963a3d3a2ce41e059034a8d6b0f9582b14ffd0d6c8787dd7c684995dd549d9adf220aac20463ad5f8dcd403f7e2e04d3965474117217f0a5af52580522c26051bb97bc7037d613290f8abcb218b974a873948b113e06808d4e77b71bf9d88095f22cb20811cdf26235d3bda16a06f04be592e31d5452242149865c875fdcddf57f20d6ce0c657f03f569517b5063799f49362b8574239baaed2958f98f01a20eade442c09a2580e6f4cae0ed1481bb740e4789cc48077849f98c4a3812a4979cf74521ebd8aff6dc791a47d6777ebef3615c99c92f542430ea2008f3c86ffe1ff6ee0b17c179854dc70c6995410d24df08dd45a2cd8abea01f6e989d73eefbbd198222b5bdbdb7d157c4f7dd08fac130ae2ec70949650b74dec582c7a2a739ab57a5f33d2173bfbd0894e6fe2515622ea4eccd59b45c64896f18c1e87f4d898942571b5f436bae0b26062186cb24d4c1bc22ac85a487418cf05253b301aaf5eb4c03f4a8fdd4068a00a69a81f69b3ece5734de71b7cab4461d40e9d8caf4ce0db977fba70db6392a8793b4b313dae2bb83ada3db6cc7f1118bb3243ecd598e0c7d631c46ca1a3c008c9a2952c966ea6a94606865a25507a37d0645990682fd13e6b7f1c5cf938cc246c1e63bb0a33e2fe438790c6649d564eee7055b189610b001884ccc05d77c59f52885dcac16b42429c7eb615332c3079407c041633769587cd3d8d0852fa49d0b29f7d9dd6953c3f3e73255a2780ab8f7d973ad32f14c2264544fe36878f21051e5e4be9965b085d6eeb1f37549613025047a589354bf804355d20090d55e962103fa3697c5af7e955ede394e336ff3b41372cf33847e6bfcf95dd869c38dd1c1982803ac59d50aeb1dd9bc207aabcc0e99036fcacf4831ef02f7e3d4642a41135d7f6807cfc765612e896dbefe5be87de099d775732c9e523f1ddbb27ff0019b47653df8410201a008755b4c4aa78b7844b5232b49fbdc964669793394b73d763aa7b09ff7cee3a6c9d44518f3b5d649a34946178e98be4fbb078571e54ccbcd406256be923659e62c0ec1f0a0816a824d2114de4e2561086c878587d418b7d274f5d4c31eab789f06a020d8fd789e2956610a7d75064b0915d20b04985584d23fafeb2bf1e4ad7ffd1d7e388da8dd305ad9ad2d9785a773e205726cfa97293d8f9abc65b834c85e89f89f8b4f757d04b9a06d249383c900b7149cf60504c7b8acf07acaf4b52c9ac303a63d74376b974360cbabe5052cafdf5afb2fdf38b361f59829842cfdec1dbc5cac3f38ee995ad446feb5905909bd7d8dcdd96c0a82ee9e6665fb4935e8c0ffc4c162f30ce053effb67e7ee2d4e0594b0722f52d4a73212c5acbe6a18531174b82044e7dad47d601372a46e04885ba171e1fc511d3c6afd565c20fa4a1b6bf397734c62f6d77ff27f2fb04d9eb3bd0372d8db2da10d04aca0eb7ac8b9b9c170d129da8e7795be170dfb57c132922f90cb6fb464c0bf5f0f9112adbca4ea8482213854dafc436bd89ac8823ba1e536ccc92356b5e69d05b53686c3e1bbaf6e5f4359a530022b31fdd1fdf3cf10b09b36597dcf2fec81a7fc937ed7785677b0330cb61501befca02b59226b16171980e9a76c1f2f8589517c01fa315b6bdb1b60d3d04591105eb8db4d2b7e44ad4141f0bcec819dcf0f9d540adec3650eee689bb6db004960be95616e9aea7ab532e21ed72d84efc5cd797cf3a8c0bdf8196bdf51d1eddb1fe34136818f7b079b075508578c856e29ed32fcc91a416cd465b6e40f2fe058399a1d03d5cbd04d989d5a88ce49f33d64921fe4307771b24f3fbc325ebf2282b81951bad0cb3576a54f002aea04be91cceed066c8adf225a5d85b04d6e362693b0962a856a9a1457af4a58c07931ea1a5c984ce2f585ab8958812458dbac3d71f69eb27ca14d5e943c41bf5e4ca2ebde8d49f26d2951c9f47afb73c56327b48cd15d7080711f3ddc45f8c823e114e6a85913b5016851350c497179e68e0f9c70db5e32b2a2f91b602dfbe21d33fcbdcbb4eed5298b2e3b20c0bca3a8f473bf71bd3c93ec22f71472e0fa57c38ace10510186a86db388e9fa64ff5e5c415a2bc5b5d10da479e8dc5eaa7f9c6da80b1258f80d8d95f06bc79f3b8c3b1b497c5740884c278fa7fab9a7691e243b1e89ceada28388468d1150635589c1f4a313dff1eb7811b4b17659e0154d36ca48e11f72aeb2c16668e354dc9b6c4b84b2eec9866494ee4d96c1cf7ad007acde6d3357fa6a507b80576a3eb61e6e73cff54f6147924bc03fddfa6f96c528b841d69e765e524168b1244dd8ea30434ed1fbe59a553a6ecad222a564f31774083ab0b973b072d25691bb4cd97c748e2aebb93eb4baef16ad61999c1b436fa63e1c1be96e065126b1ab1ee114d66713e027b7870cd07ed4bbe508b81f363a84124b75f772879c2d05dbc99a7c7bedf42b2324dae9f02b144c4a8474ea6b927399d51e4452745acda12d478faf9a10507cc961f12c283485c2605dd4a69bb35a8809e36359484a5d9cc56bee4b989de2d991fb232fda87089a61e524bca381777744dcf2002cd983375c30cd45db86c34243e916a31db6b21ada6e295d0551fbe1c45d19d1686994618fe1bd9f05d64e489fcc62b6e1ac3a9dc83d5c43b88bb6eb686f2925aa79809ec7b6f91f5382984e94340eba07e36dee65748ba82dda42f1ef2dd502693240cb45b154ffb278d7b17670d74d24469d57b13bcfa488b6dd4e941d934901432bf992f7452563d483ff19b8596b5495039352e86d75411826723cda93658a2a7131e536c2bc9a31ae4985632a7453e51cbd76eaf766c274b6181c481b834313d025b4abc98123dd1c5a17d4bab52dd28d70441662ffdd85f27db0c61fbcd10719bf4d8e88f5675856f38c8da2e50674de39bfcc80613c92f5a664600b7431513f665deadf2f1192efd3c89f08b7c60de727b1351d1be05b1330ea5efb7f9b1b34481b4635c898919d173b30a45a59a48114197a9b54f8240a7967299b00697524811ae99dcf99425dbb9e7c3f2b01229b35503e00e934a0c9629775538158bab4d45748c968438a25c7b4ddf76b76fe208e621770cfdfba25a61ea9c8d1a784c21dbf2b7a75b2e73aad43e37eeadb5d036bd78d56dbea9c8cd5d5a83ea7bda5fdc4c790b147a59466f86e2264e89fe8e543648aabb5c40e39e8fa3ed6dae7263bbe68c3c473eb509f91d14afcc66259b131bf40c71ce0da1b28760132b1064484388f253b3956e1761a2537c2f03bb5c30eb805adcf2ffb6aa27973f03a71238aaa035a48fc4f20be28db3f4a0baf559d89fac2d53ac1952cb4f20cf17d1283af047f30e4a72c40d7dca2eb8b13b420eda495efecd17be31996faae89ec94b731568007b633f2dafd9c748a496587621f96663f96314110c9a288808c6bf49469e7661d83ec6007e31d4bae1861380ac58f4280a5deba3f7bea24ceaf5fc50b6fa0601fa676961e02b5728150ba8de2129a5b1b6f330179d2931c7d1929546bebdb12c0acba6e72eb1109e452369b2b9453395348ef21e89646164324ce1ae0b43af4b98a6e3e9bcfb059d17c0b21748dfcea28684d3ac89f33af64840e199e43443904663ae174d924e0df6c974619e7d710fcaa8c517d53a2e4b89d4d1aacf7a8357ab247f0de34f015a3e8441f9de0f1950ac10b60f548ca60e6b28d2f7f7b4225b4540917ddef4499acb21f5f9ff3e32ad220b23d2ebe8892c2986c1acdd03b232ee55429d2e6a614ad83906172f0f1130068f2c6e87151fc800e8ac6c6d86d81356eb7d420e4824181484269dbbc1b1c732974477338dd7c372db38c7c52d0d578493e604746b72ac9190904562f791b0b74aeaaa09769df0d81ca2fb2633d73e8db08856f25611f4b982a4befa13c0923a9d15b27d572966d65bae1400febabf2bb8c6947b04b241dae9bcc4b6f164275895a285431ee5a22b3239fe3923d1864ae2b247565e3272e4f6f6b2d0a2ad18fd050c76e4aaedd2f772a4d43debf77d2345010b875c1c559a13d360ff05c22e13076463ac72f2efc8edf7a5b4c49b5598ebc5c00971a156dbd24e6d0b13a82fcc134d323066555cc5dc863d3c88318661b8793b338d3b055b2d411ddcc8830d0fe154f8475602a14d804c3ec2cf45b6c0cb81385015c91369badd05440c3305670204d00e5d68f330e5ad608e02b5bf12a55c51f4fdbb8f74ad1d47a10f8c0c249b52189ee4155b4b5adb045acaf70d14f6779983d0bf42873192c4f48c96d1a2a1c194f01bdf1aba79cbea5c717599d0009d94e452120bece9db5b6df426c41d175bbd531e509d37d73a73bebdf35f8fc2f782b19a46fbadd3115a28ded488797bf94f71872503047a3cb46f81ceb8e3a4ed3a28f54833f561245d1a70802b0b16648b70e9c04fa27cc1dfa3af515bd4f6f1205fb1100ab07a044084836722da6b974fb34367", 0x1000}, {&(0x7f0000001500)="bd6c33a14ea4ef927a2b9ac57f734c263a3d25bbae97fb2e26d04f7562d9c5da2dd7109860202f318fef374849b041268e792a4edb20f1c677dbd6c5f623353c3bb2d5ba67677845f880e3c557f7341425dfad9fc1b0d7cb3577473a7e29e5163659fa4a54427a6166388183002eed9451720b146cfbfd9c4064ffafa298c02b339e004acca0edbd20e4cfdc1434f39fe11786ac0e38", 0x96}], 0x8, &(0x7f0000001640)=[{0xc0, 0x18f, 0xfc, "58031cd028c5cae22dc71c9c6a506eaaa9796c00f94f8b1f1750ce378d001d623801d1eca6837cdf85a83836c830130956f8576b91515b1f8ea376245cd430abe4d2aadf8f222a9b395f4078d108d6aaf0767c353f44543b3de9793e635609b2048cb3eeade5b64cdf8c703dd54f67a2f49ef10f45b3516bbeca0f7a10b22cbb402f3158ab92b873d8ad8dd7165a8e333796f39baa3a39782e1d332eefea31b8dc8c37e447664cff088aa8"}, {0x30, 0x115, 0x9, "b4bd109b631c35d04711904571abd575838512575435c3ce6151"}], 0xf0, 0x40040}, 0x40000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x9, 0x1c, 0x5, "666ccedc4b8a31046c52b015877146ab1cbab43e20163d09cc7667615d82a02013f0d1b8911350aa14c3c424d1c004f995c207859d3759509395a73dcae409f3", "a45c48086affe31983994dc33f90fdfee0bf617273d2ff36c467666ce8f92dcf8540020f4e44a11d38de822efddc2476d3e8bac61c41e0bea4074a46e1d81905", "cce32829eb90de38d1a4baa1416ce25af09a8d318767b6632a28b7524dba45e9", [0x8581, 0x7]}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x2, "b82f"}, 0x3) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x4) 2018/04/30 11:32:19 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x204, 0x3, 0x9, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000100)=0x8) shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x208, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 2018/04/30 11:32:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x210) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:19 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = dup2(r0, r0) getrandom(&(0x7f0000000180)=""/4096, 0x1000, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 2018/04/30 11:32:19 executing program 1 (fault-call:2 fault-nth:23): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:19 executing program 0: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 142.124429] FAULT_INJECTION: forcing a failure. [ 142.124429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.136288] CPU: 0 PID: 9949 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 142.143130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.152493] Call Trace: [ 142.155102] dump_stack+0x185/0x1d0 [ 142.158741] should_fail+0x87b/0xab0 [ 142.162471] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 142.167238] ? kernel_poison_pages+0x40/0x360 2018/04/30 11:32:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) clone(0x80000, &(0x7f0000001200)="1d8db9b8cc57c6a582f52d3690b096a97b24478a785c8e919b2af83993898a34f64b8735c37463e34f088fbd4be9176192d95edff7ece66e2ff14ff3414fb81c3dccf256bd192f06a11761828c69cc83ee25ced4f51080654b4f09fc6838ed8aae018e34c9b927b70d088292c71044d22cabb8a6c0bf0a1448f0f57b0a363ab7ff128927b9c0e95f48dca97b9992015fa4aaaa6667dd6ca3e33d5dc09d5df14eab41836a48dbb62661a0aeccab6db0ceb25c695d8a89640b542e73d0f70db5d0b327604ad40adc516122fb8747e821b7962c1644b927b7225245105e45b1495012f77676121ed06d04c972cbf113f26beb", &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000001300)="04f4c42b03367107bfeab91cbe28e69ee64e316d80b3fccc4c2b1854c5cc326a4e12afb14bd8e1ccd9c0dabfc5ad91c8a08711f4a52d429859c0592c0437e37bbc6961e7e1e2c67a1e4c80d7b0caf98c516043387a3007c484c05802a339175f2dd187cb615f4a9f161b42dea23818d7ac33e0548e3d010035062707fed01d5f7ddcef6486ea803999f4229d2af00c11afeedf532efa8668f6316767ca7480f269dc86a48d46acd004e8d8328fe4769bbd820f5403138e4ff2e203c6f2") sendto$inet(r0, &(0x7f0000000100), 0x4c57, 0x44008000, 0x0, 0xfffffffffffffe45) r1 = msgget$private(0x0, 0x3a6) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000200)=""/4096) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x175) 2018/04/30 11:32:19 executing program 2: shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x6000) [ 142.171751] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 142.177129] ? kernel_poison_pages+0x1a0/0x360 [ 142.181726] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 142.187189] ? get_page_from_freelist+0xab28/0xb600 [ 142.192209] ? __kernel_text_address+0x34/0xe0 [ 142.196820] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 142.201862] ? SyS_sendfile64+0x64/0x90 [ 142.205850] ? do_syscall_64+0x309/0x430 [ 142.209930] ? kmsan_set_origin_inline+0x6b/0x120 [ 142.214787] kmsan_alloc_page+0x82/0xe0 [ 142.218779] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 142.223546] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 142.228922] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 142.234208] ? kmsan_kmalloc+0x94/0x100 [ 142.238194] ? __kmalloc_node+0xdec/0x1190 [ 142.242434] ? kvmalloc_node+0x1a1/0x2e0 [ 142.246497] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 142.251689] ? default_file_splice_read+0x2b9/0x1120 [ 142.256802] ? splice_direct_to_actor+0x4c6/0x1040 [ 142.261752] ? do_splice_direct+0x335/0x540 [ 142.266075] ? do_sendfile+0x1067/0x1e40 [ 142.270140] ? SYSC_sendfile64+0x1b3/0x300 [ 142.274377] ? SyS_sendfile64+0x64/0x90 [ 142.278354] ? do_syscall_64+0x309/0x430 [ 142.282424] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 142.287802] ? kmsan_set_origin_inline+0x6b/0x120 [ 142.292669] ? __msan_poison_alloca+0x15c/0x1d0 [ 142.297343] ? should_failslab+0x279/0x2a0 [ 142.301584] ? kmsan_set_origin_inline+0x6b/0x120 [ 142.306442] ? memcg_kmem_put_cache+0x40/0x280 [ 142.311034] alloc_pages_current+0x6b5/0x970 [ 142.315446] push_pipe+0x680/0xca0 [ 142.318998] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 142.324035] default_file_splice_read+0x2b9/0x1120 [ 142.328985] ? __fsnotify_parent+0x132/0x560 [ 142.333413] ? security_file_permission+0x473/0x4b0 [ 142.338524] ? rw_verify_area+0x35e/0x580 [ 142.342684] ? SYSC_tee+0x13d0/0x13d0 [ 142.346497] splice_direct_to_actor+0x4c6/0x1040 [ 142.351262] ? do_splice_direct+0x540/0x540 [ 142.355588] ? security_file_permission+0x28f/0x4b0 [ 142.360617] ? rw_verify_area+0x35e/0x580 [ 142.364779] do_splice_direct+0x335/0x540 [ 142.368977] do_sendfile+0x1067/0x1e40 2018/04/30 11:32:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x210) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 142.372901] SYSC_sendfile64+0x1b3/0x300 [ 142.376980] SyS_sendfile64+0x64/0x90 [ 142.380793] do_syscall_64+0x309/0x430 [ 142.384725] ? SYSC_sendfile+0x320/0x320 [ 142.388802] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 142.394009] RIP: 0033:0x455979 [ 142.397202] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.404918] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 142.412193] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 2018/04/30 11:32:19 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x0, 0x6}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xcbca, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/sctp\x00') ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 142.419467] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 142.426754] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 142.434039] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000017 2018/04/30 11:32:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="ba275dafa7e43e67cf0b93979994600e143ce31d5467078a086ff0822205a92790f428d58f8ef03e", 0x28}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r2, 0x5, 0x1, &(0x7f0000000040)="a7ca88c6c70be70bdf10fb4be933a4f43eab38aef23d2ddef44a74f518006fa5b54a24791c8ab8fae16739399a81c5d5a0eaf8c161c18affb6a6f290e8d87f2c9fbae32bb568af14e0e3625ffac30420c2926a78bd47efaa5f9065118ee0e8c972d63b783d1870d73fa4e0e6fbf982c5aef6d228436eb90c885e652ef151df10b9c3c8c2ec298f103c4fa46e11dfd9e9f27c5ba45853de86d1a23a9a1783ffe983a7f2b36e63ff520a10d2ad5d439d4c6a6b61ad75ea420884fd1c3cc20b7c844ac46c081bba30125e395d11a7d9a75df697a1f682d26c71c10eba091098d76289d0defb2f702db29399742f47c7", 0x1, 0x1, 0x2, 0x4, 0x1, 0x1, 0x7828, "f4"}) 2018/04/30 11:32:19 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2080, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0xac4366345de893c7) 2018/04/30 11:32:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x210) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:20 executing program 1 (fault-call:2 fault-nth:24): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x4d3}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="beca38d3b2dace10b331b77f5a2157d28d208568a54b85189fb2d3afd7358ba0981c6872d002494eea0eaac3", 0x2c) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="02078705d0321262dfdcb70b000000000000677a0cb5573f6181a5db96bf5497599782221d3366db57fec27c36ff50273594de0f31a781000a5767294fd56d3fb9baaf464f44249db657073b8af7d5c75aad4cccb0ec807ae7404451a3d078eba35a34eadcb4a25bb8abdc025bd24a217a5d1644b1e60948cc86659fca848427a39ee31b17cbdccb37bcb97b3c9199cb16d8050dfed3f597b492e2a20d3b5e676d456c8c4dc214"], 0x10}, 0x1}, 0x0) sendmsg(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000080)={@ipv4, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r3, &(0x7f0000000180)={0x11, 0xff, r5, 0x1, 0x2, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f0000000340)=""/122, 0x7a) bind$alg(r0, &(0x7f00001ee000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000300)={@multicast1=0xe0000001, @empty, @multicast1=0xe0000001}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r4}) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) faccessat(r4, &(0x7f0000000200)='./file0\x00', 0x10, 0xc00) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x7}, &(0x7f00000002c0)=0x10) epoll_pwait(r4, &(0x7f0000000480)=[{}, {}], 0x2, 0x9, &(0x7f00000004c0)={0x6015}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) 2018/04/30 11:32:20 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x81) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000003580)=[{{&(0x7f0000000d40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/83, 0x53}], 0x1, &(0x7f0000001140)=""/40, 0x28}}, {{&(0x7f0000001180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003480), 0x0, &(0x7f0000003500)=""/117, 0x75}}], 0x2, 0x40010021, &(0x7f0000003700)={0x0, 0x1c9c380}) 2018/04/30 11:32:20 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) munlockall() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r2 = socket$inet6(0xa, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x658, 0x218, 0x218, 0x430, 0x570, 0x570, 0x570, 0x4, &(0x7f0000000440), {[{{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:hald_var_lib_t:s0\x00'}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:chfn_exec_t:s0\x00'}}}, {{@arp={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffff00, 0xff000000, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@random="1c3ae15404f7", {[0xff, 0xff, 0xff, 0x0, 0xff]}, 0xa5, 0x101, 0x80, 0x6, 0x8000, 0x401, 'syz_tun\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x98}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="b55f97866d38", @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @dev={0xac, 0x14, 0x14, 0x18}, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x6a8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00') setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000b80)={0x3e00000000000000}, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000bc0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000c00)={0x5, 0x10001, 0xffffffffffffffe1}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000c80)={{0x32, @broadcast=0xffffffff, 0x4e23, 0x3, 'sh\x00', 0xc, 0xfffffffffffffff9, 0x44}, {@multicast2=0xe0000002, 0x4e24, 0x1, 0x1, 0x0, 0x3f}}, 0x44) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000d00)={r1, 0xa94d}, 0x8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x3000, 0x78000808, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000d80)={r1, 0x4}, &(0x7f0000000dc0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000e00)=@sack_info={r5, 0xd9f0, 0x7}, &(0x7f0000000e40)=0xc) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000e80)=0x8, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000ec0)={r1, 0x7}, &(0x7f0000000f00)=0x8) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000f40)=0x8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000f80)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000fc0)={0x2, 'rose0\x00'}, 0x18) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001000)={0x0, 0x22, 0x8, 0x5a, 0xa046, 0x8aae}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001040)={0x303, 0x33}, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001100)={@nl=@unspec, {&(0x7f0000001080)=""/18, 0x12}, &(0x7f00000010c0), 0x10}, 0xa0) 2018/04/30 11:32:20 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = getpgrp(r0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000b92000)={0x77359400}, &(0x7f0000264000)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) r3 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@in={0x0, 0x0, @rand_addr}, &(0x7f0000000200)=0x80) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x5, 0x7, 0x5, 0xd385}, &(0x7f0000000300)=0x14) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x40ed) 2018/04/30 11:32:20 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000a93000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) set_robust_list(&(0x7f00000000c0)={&(0x7f0000000000), 0x3, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x1, 0x0, 0x0, &(0x7f0000b20000/0x2000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000006000)}], 0xd5, 0x0) [ 143.491815] FAULT_INJECTION: forcing a failure. [ 143.491815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.503833] CPU: 1 PID: 10011 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 143.510795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.520181] Call Trace: [ 143.522825] dump_stack+0x185/0x1d0 [ 143.526506] should_fail+0x87b/0xab0 [ 143.526708] IPVS: ftp: loaded support on port[0] = 21 [ 143.530279] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 143.530348] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 143.530378] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 143.530403] ? kmsan_kmalloc+0x94/0x100 [ 143.530429] ? __kmalloc_node+0xdec/0x1190 [ 143.530509] ? kvmalloc_node+0x1a1/0x2e0 [ 143.563342] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 143.568591] ? default_file_splice_read+0x2b9/0x1120 [ 143.573752] ? splice_direct_to_actor+0x4c6/0x1040 [ 143.579644] ? do_splice_direct+0x335/0x540 [ 143.584050] ? do_sendfile+0x1067/0x1e40 [ 143.588158] ? SYSC_sendfile64+0x1b3/0x300 [ 143.592471] ? SyS_sendfile64+0x64/0x90 [ 143.596491] ? do_syscall_64+0x309/0x430 [ 143.600633] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 143.606085] ? kmsan_set_origin_inline+0x6b/0x120 [ 143.610980] ? __msan_poison_alloca+0x15c/0x1d0 [ 143.615695] ? should_failslab+0x279/0x2a0 [ 143.619977] ? kmsan_set_origin_inline+0x6b/0x120 [ 143.624877] ? memcg_kmem_put_cache+0x40/0x280 [ 143.629526] alloc_pages_current+0x6b5/0x970 [ 143.634035] push_pipe+0x680/0xca0 [ 143.637681] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 143.642764] default_file_splice_read+0x2b9/0x1120 [ 143.647786] ? __fsnotify_parent+0x132/0x560 [ 143.652896] ? security_file_permission+0x473/0x4b0 [ 143.658016] ? rw_verify_area+0x35e/0x580 [ 143.662218] ? SYSC_tee+0x13d0/0x13d0 [ 143.666059] splice_direct_to_actor+0x4c6/0x1040 [ 143.670883] ? do_splice_direct+0x540/0x540 [ 143.675257] ? security_file_permission+0x28f/0x4b0 [ 143.680329] ? rw_verify_area+0x35e/0x580 [ 143.684532] do_splice_direct+0x335/0x540 [ 143.688794] do_sendfile+0x1067/0x1e40 2018/04/30 11:32:20 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000280), &(0x7f0000000000)=0xff80) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'yam0\x00'}) [ 143.692807] SYSC_sendfile64+0x1b3/0x300 [ 143.696974] SyS_sendfile64+0x64/0x90 [ 143.700868] do_syscall_64+0x309/0x430 [ 143.704813] ? SYSC_sendfile+0x320/0x320 [ 143.708924] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 143.714145] RIP: 0033:0x455979 [ 143.717362] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 143.725119] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 143.732425] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 2018/04/30 11:32:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6"], 0x212) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 143.739733] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 143.747043] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 143.754355] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000018 2018/04/30 11:32:20 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000000)="7d0f69ba63d53fd4fa05bdc8d3a4646108e31c8a133e9c127c136a6ffd27ef891fc1fcede69f954f755b73a44d852fd03d3be1f23f4f724059bb8644eaf230082e2f03087f8ce4bc11bf7485b560ce2c26aabb947f9e582adcc935a4217ff397224e86538d541f67950eb314db0d307b12406313702846d39cc701e015a3d0d4e34d13fd034e368abd0a6f70d983610c6b168a488bba2c358e525d7115d217fa59e24bcceebd0f4424fa25c88043818535c86961ad2bc0982d460a670b91be11e68e90eb7887a90691ef4485edadb5358df20cbc10aad1a4841776ec0e19dfb42222ce2b327b52eb1d14350085b0c5c04b66ce6f07d77006ab736e0f85e02efe7999580e19e67089c5138adf02b57cb844325138502b8764e1c3705c77586438847ec9f1cea76695e9500883488d1cdb2c7b08105b20dcf08ad3082fb5156b99cc45f595164209728f7f59365e1de49c9a9e58bbf296ee58c776452962c72b6ba4d377c080001f925e6ce2e1724ac6efa094eb58d9331122eb", 0x111) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000280)=""/182) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/30 11:32:20 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {r0, 0x40}, {r0, 0x148}], 0x3, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x401}, 0x8) write(r0, &(0x7f0000000180), 0xff4d) 2018/04/30 11:32:20 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x422000, 0x20) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0x2c97, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x8, 0x1, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback=0x7f000001}], 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x6, 0x7, 0x6, 0x4, 0x2, 0x80000001, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x6859, @dev={0xfe, 0x80, [], 0x10}}}, 0x7fff, 0x4, 0x9d, 0x5, 0x9}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r3, 0xff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x2, 0xc, 0xe29, 0x3, r4}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x23e) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="05008c67", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x80000001, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) 2018/04/30 11:32:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x212) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x101, 0x5c82c12d8fd77891) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x7ff, 0x9}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x100, 0x8208, 0x7, 0x8, 0x9f, 0x3, 0x1, r3}, 0x20) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) sendto$inet(r0, &(0x7f0000000240)="695b3aaf7186f62e75de76ba68ad5bd0bc01c69738b5ded39dcca3ffd6c8e199427f2b5d853429a33eba3b3a911aeca63c318f0c19734232c8ba6c3db38e076b99da6d0268b92f3f077fb08519eea913249c32c4e4b36d879eff6fde2cb5f854b72b6cdaa73245e4b67ee26f8a3c946a8f90855c6b003347b4d53f293acd34a7b66f70d8d33c58dd2243f0d3a3a779106f6f1f2982852aab21121dc9afce7588682ed0ec4dd1a672b41196", 0xab, 0x20000011, &(0x7f0000000180)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) close(r1) 2018/04/30 11:32:21 executing program 0: unshare(0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80700, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/30 11:32:21 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500801c0000000000849078000000e4feffffff00009078e000000131b097933f9f13fb43099e37c14c9b9cf065fb933601b25a2463f96b29c2eeee09674fc97636633044374dd254876784c66faeba814e5dccf3d75e129750306dcdc7e6d2d73313cedc7106691f35b670b4a1d53ad250ad67df3e93a46282284bdd2982e2e2eac70786019574670afc88fe139eaa09492b87"], &(0x7f0000ea3000)) 2018/04/30 11:32:21 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) setns(0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 2018/04/30 11:32:21 executing program 1 (fault-call:2 fault-nth:25): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x212) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:21 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:21 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:21 executing program 6: mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000030c0), &(0x7f0000003100)) openat$vnet(0xffffffffffffff9c, &(0x7f0000039ff1)='/dev/vhost-net\x00', 0x2, 0x0) select(0xffffffffffffffeb, &(0x7f0000038fc0)={0x0, 0x0, 0x4000000000}, &(0x7f0000000200)={0x8, 0xffffffffffffffff}, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x800000000000000, 0x0, 0x0, 0x1}, &(0x7f000004c000)={0x77359400}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x105800, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x5, @empty, 0x5}}}, &(0x7f0000000180)=0x84) 2018/04/30 11:32:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d00)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='9:4\r#'], 0x5) 2018/04/30 11:32:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000140001000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="22049e"], 0x50}, 0x1}, 0x0) r1 = semget(0x2, 0x5, 0x400) semctl$GETPID(r1, 0x6, 0xb, &(0x7f0000000000)=""/236) [ 144.739754] FAULT_INJECTION: forcing a failure. [ 144.739754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.751605] CPU: 1 PID: 10088 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 144.758535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.767896] Call Trace: [ 144.770497] dump_stack+0x185/0x1d0 [ 144.774138] should_fail+0x87b/0xab0 [ 144.777872] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 144.782639] ? kernel_poison_pages+0x40/0x360 [ 144.787146] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 144.792528] ? kernel_poison_pages+0x1a0/0x360 [ 144.797124] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 144.802584] ? get_page_from_freelist+0xab28/0xb600 [ 144.807613] ? __kernel_text_address+0x34/0xe0 [ 144.812204] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 144.817666] ? __save_stack_trace+0x90d/0xb00 [ 144.822185] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 144.827135] ? push_pipe+0x680/0xca0 [ 144.830855] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 2018/04/30 11:32:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d00)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='9:4\r#'], 0x5) 2018/04/30 11:32:21 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000080), &(0x7f0000012000)=0xffffffffffffffb6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) accept$ax25(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 144.836053] ? default_file_splice_read+0x2b9/0x1120 [ 144.841164] ? do_sendfile+0x1067/0x1e40 [ 144.845247] ? SyS_sendfile64+0x64/0x90 [ 144.849224] ? do_syscall_64+0x309/0x430 [ 144.853296] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 144.858685] ? __kernel_text_address+0x34/0xe0 [ 144.863289] ? kmsan_set_origin_inline+0x6b/0x120 [ 144.868231] ? __msan_poison_alloca+0x15c/0x1d0 [ 144.872917] kmsan_alloc_page+0x82/0xe0 [ 144.876908] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 144.881676] ? kmsan_internal_poison_shadow+0x14e/0x1b0 2018/04/30 11:32:21 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), 0x4) delete_module(&(0x7f0000000140)='/dev/vcsa#\x00', 0xa00) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xe7, "e5afffdc278ee7254c22ddd0c86c85f2d1f9004dc3d2d65b7de0a148dd96878bc8ebe4b352457d65d870809e497bbdb7c5f81f27c2cc8edf08a9959ba2359ead66bd5548205ca59fb98f0b6dcdfed454269a92e55723fcbbb219deb4ed2be6a3ec9f6a0818480a215b34a50916baf31c6ee7f3ce32b008bc2f3f93fa0feff827c027cc87efa592169136b665a4941d0952ac63cf4377ced30d9c92f8d6ad06615f1028aa0a10399053f27ba8116b5eaa252978d74c222aed66ed1016682b14a1e49521346f5ff816325e84a2de24c43415daf9ea01e9f51de7f2569803fafa9c4ed3ec7e19edd8"}, &(0x7f0000000280)=0xef) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e20, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x800}}}, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x42000) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x2800000000000000, 0x20}) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f}, 0xa) [ 144.887053] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 144.892342] ? kmsan_kmalloc+0x94/0x100 [ 144.896337] ? __kmalloc_node+0xdec/0x1190 [ 144.900593] ? kvmalloc_node+0x1a1/0x2e0 [ 144.904666] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 144.909872] ? default_file_splice_read+0x2b9/0x1120 [ 144.914986] ? splice_direct_to_actor+0x4c6/0x1040 [ 144.919932] ? do_splice_direct+0x335/0x540 [ 144.924268] ? do_sendfile+0x1067/0x1e40 [ 144.928363] ? SYSC_sendfile64+0x1b3/0x300 [ 144.932610] ? SyS_sendfile64+0x64/0x90 [ 144.936595] ? do_syscall_64+0x309/0x430 [ 144.940670] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 144.946048] ? kmsan_set_origin_inline+0x6b/0x120 [ 144.950912] ? __msan_poison_alloca+0x15c/0x1d0 [ 144.955596] ? should_failslab+0x279/0x2a0 [ 144.959844] ? kmsan_set_origin_inline+0x6b/0x120 [ 144.964708] ? memcg_kmem_put_cache+0x40/0x280 [ 144.969311] alloc_pages_current+0x6b5/0x970 [ 144.973732] push_pipe+0x680/0xca0 [ 144.977292] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 144.982329] default_file_splice_read+0x2b9/0x1120 2018/04/30 11:32:22 executing program 2: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x27, 0x0, 0x70bd2a, 0x25dfdbff, {0x20}, [@generic="4bcbc030829549e0023f74825b4a0ee254718ad170636ed2395e8cf8dec5427f5f1ebc9efe2e85b01c91825e6301d9f6f6a54c23b31c1f4a90c55b78de3dce3dac287e64e844e33f638bd16aab16365784d9435c19fa7f3774cebcac19c31943eec9a9a0843bf61ed18c6190e9fa5bbb150365395f45d2", @typed={0x8, 0x87, @fd=r0}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2018/04/30 11:32:22 executing program 6: unshare(0x40100) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 144.987289] ? __fsnotify_parent+0x132/0x560 [ 144.991724] ? security_file_permission+0x473/0x4b0 [ 144.996766] ? rw_verify_area+0x35e/0x580 [ 145.000933] ? SYSC_tee+0x13d0/0x13d0 [ 145.004741] splice_direct_to_actor+0x4c6/0x1040 [ 145.009510] ? do_splice_direct+0x540/0x540 [ 145.013846] ? security_file_permission+0x28f/0x4b0 [ 145.018880] ? rw_verify_area+0x35e/0x580 [ 145.023057] do_splice_direct+0x335/0x540 [ 145.023079] do_sendfile+0x1067/0x1e40 [ 145.023103] SYSC_sendfile64+0x1b3/0x300 2018/04/30 11:32:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x213) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:22 executing program 7: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 145.023119] SyS_sendfile64+0x64/0x90 [ 145.023134] do_syscall_64+0x309/0x430 [ 145.023149] ? SYSC_sendfile+0x320/0x320 2018/04/30 11:32:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x213) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 145.023168] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 2018/04/30 11:32:22 executing program 6: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 145.023178] RIP: 0033:0x455979 [ 145.023185] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.023199] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 145.023206] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 145.023212] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 145.023220] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 145.023226] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000019 [ 145.473231] IPVS: ftp: loaded support on port[0] = 21 2018/04/30 11:32:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x4, 0x2) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='sit0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2004500001c000000000011907800000000e000000100004e2100089078"], 0x0) 2018/04/30 11:32:22 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x10f34a, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x1ff, 0x201}) write$sndseq(r0, &(0x7f00000000c0), 0x0) 2018/04/30 11:32:22 executing program 7 (fault-call:5 fault-nth:0): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:22 executing program 1 (fault-call:2 fault-nth:26): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:22 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = dup3(r0, r0, 0x20) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000080)}]) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x5}, 0x8) 2018/04/30 11:32:22 executing program 6: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=""/231}, 0x18) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7f, 0x200) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x67, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x2, 'rr\x00', 0x7709e7a704bae71a, 0x7fff, 0x25}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x2, 0x3, 0xb80, 0x8000}}, 0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000002c0)=r1) 2018/04/30 11:32:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x213) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 145.809407] FAULT_INJECTION: forcing a failure. [ 145.809407] name failslab, interval 1, probability 0, space 0, times 0 [ 145.820761] CPU: 1 PID: 10153 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 145.827728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.828992] FAULT_INJECTION: forcing a failure. [ 145.828992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.837119] Call Trace: [ 145.853089] dump_stack+0x185/0x1d0 [ 145.856751] should_fail+0x87b/0xab0 [ 145.860534] should_failslab+0x279/0x2a0 [ 145.865400] kmem_cache_alloc_node+0x151/0xc70 [ 145.870007] ? copy_process+0x6b0/0x9bb0 [ 145.874089] copy_process+0x6b0/0x9bb0 [ 145.878026] ? kstrtouint_from_user+0x373/0x410 [ 145.882708] ? kmsan_set_origin_inline+0x6b/0x120 [ 145.887586] ? kmsan_set_origin+0x9e/0x160 [ 145.891862] ? fsnotify+0x493/0x18f0 [ 145.895593] ? __msan_poison_alloca+0x91/0x1d0 [ 145.900193] _do_fork+0x311/0xf00 [ 145.903672] ? prepare_exit_to_usermode+0x149/0x3a0 [ 145.908736] SYSC_clone+0xf6/0x110 [ 145.912339] SyS_clone+0x77/0xa0 [ 145.915757] do_syscall_64+0x309/0x430 [ 145.919669] ? sys_vfork+0x70/0x70 [ 145.923235] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 145.928428] RIP: 0033:0x455979 [ 145.931616] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 145.939349] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 145.946621] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 145.953897] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 145.961359] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 145.968643] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000000 [ 145.975936] CPU: 0 PID: 10158 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 145.982872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.992234] Call Trace: [ 145.994843] dump_stack+0x185/0x1d0 [ 145.998484] should_fail+0x87b/0xab0 [ 146.002218] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 146.006986] ? kernel_poison_pages+0x40/0x360 [ 146.011497] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 146.016877] ? kernel_poison_pages+0x1a0/0x360 [ 146.021475] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 146.026938] ? get_page_from_freelist+0xab28/0xb600 [ 146.032751] ? __kernel_text_address+0x34/0xe0 [ 146.037352] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 146.042818] ? __save_stack_trace+0x90d/0xb00 [ 146.047337] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 146.052365] ? push_pipe+0x680/0xca0 [ 146.056084] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 146.061281] ? default_file_splice_read+0x2b9/0x1120 [ 146.066388] ? do_sendfile+0x1067/0x1e40 [ 146.070540] ? SyS_sendfile64+0x64/0x90 [ 146.074519] ? do_syscall_64+0x309/0x430 [ 146.078589] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.084071] ? __kernel_text_address+0x34/0xe0 [ 146.088674] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.093532] ? __msan_poison_alloca+0x15c/0x1d0 [ 146.098223] kmsan_alloc_page+0x82/0xe0 [ 146.102212] __alloc_pages_nodemask+0xf5b/0x5dc0 2018/04/30 11:32:23 executing program 6: 2018/04/30 11:32:23 executing program 6: r0 = socket$inet(0x2, 0x805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001340)='.', 0x1}], 0x1, &(0x7f00000000c0)=[@init={0x18, 0x84, 0x0, {0x800, 0x1ff, 0x2}}], 0x30}, {&(0x7f0000000000)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/47, &(0x7f0000000100)=0x2f) eventfd2(0x4, 0x1) r1 = dup3(r0, r0, 0x80000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0xfff, 0x89, 0x8}]}, 0x10) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x2}) 2018/04/30 11:32:23 executing program 7 (fault-call:5 fault-nth:1): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 146.106983] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 146.112362] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 146.117662] ? kmsan_kmalloc+0x94/0x100 [ 146.121915] ? __kmalloc_node+0xdec/0x1190 [ 146.126162] ? kvmalloc_node+0x1a1/0x2e0 [ 146.130230] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 146.135427] ? default_file_splice_read+0x2b9/0x1120 [ 146.140536] ? splice_direct_to_actor+0x4c6/0x1040 [ 146.145473] ? do_splice_direct+0x335/0x540 [ 146.149806] ? do_sendfile+0x1067/0x1e40 [ 146.153894] ? SYSC_sendfile64+0x1b3/0x300 [ 146.158135] ? SyS_sendfile64+0x64/0x90 [ 146.162374] ? do_syscall_64+0x309/0x430 [ 146.166440] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.171814] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.176670] ? __msan_poison_alloca+0x15c/0x1d0 [ 146.181362] ? should_failslab+0x279/0x2a0 [ 146.185700] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.187349] FAULT_INJECTION: forcing a failure. [ 146.187349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.190552] ? memcg_kmem_put_cache+0x40/0x280 [ 146.190573] alloc_pages_current+0x6b5/0x970 [ 146.190590] push_pipe+0x680/0xca0 [ 146.190610] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 146.190632] default_file_splice_read+0x2b9/0x1120 [ 146.190649] ? __fsnotify_parent+0x132/0x560 [ 146.190668] ? security_file_permission+0x473/0x4b0 [ 146.190687] ? rw_verify_area+0x35e/0x580 [ 146.190702] ? SYSC_tee+0x13d0/0x13d0 [ 146.190711] splice_direct_to_actor+0x4c6/0x1040 [ 146.190747] ? do_splice_direct+0x540/0x540 [ 146.251369] ? security_file_permission+0x28f/0x4b0 [ 146.256393] ? rw_verify_area+0x35e/0x580 [ 146.260801] do_splice_direct+0x335/0x540 [ 146.264969] do_sendfile+0x1067/0x1e40 [ 146.268855] SYSC_sendfile64+0x1b3/0x300 [ 146.272903] SyS_sendfile64+0x64/0x90 [ 146.276692] do_syscall_64+0x309/0x430 [ 146.280565] ? SYSC_sendfile+0x320/0x320 [ 146.284616] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.289891] RIP: 0033:0x455979 [ 146.293074] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 146.300773] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 146.308032] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 146.315292] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 146.322546] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 146.329809] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001a [ 146.337104] CPU: 1 PID: 10170 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 146.344072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.353455] Call Trace: [ 146.356096] dump_stack+0x185/0x1d0 [ 146.359772] should_fail+0x87b/0xab0 [ 146.363552] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 146.368365] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.373258] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.378165] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.383099] ? __msan_poison_alloca+0x15c/0x1d0 [ 146.387860] ? kmem_cache_alloc_node+0x86e/0xc70 [ 146.392672] ? memcg_kmem_put_cache+0x40/0x280 [ 146.397306] ? kmem_cache_alloc_node+0x86e/0xc70 [ 146.402149] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.407562] ? memcg_kmem_put_cache+0xe7/0x280 [ 146.412200] ? kmem_cache_alloc_node+0x943/0xc70 [ 146.417005] ? copy_process+0x6b0/0x9bb0 [ 146.421118] copy_process+0x778/0x9bb0 [ 146.425088] ? kstrtouint_from_user+0x373/0x410 [ 146.429810] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.434721] ? kmsan_set_origin+0x9e/0x160 [ 146.439033] ? fsnotify+0x493/0x18f0 [ 146.442794] ? __msan_poison_alloca+0x91/0x1d0 [ 146.447422] _do_fork+0x311/0xf00 [ 146.450926] ? prepare_exit_to_usermode+0x149/0x3a0 [ 146.456110] SYSC_clone+0xf6/0x110 [ 146.459742] SyS_clone+0x77/0xa0 [ 146.463189] do_syscall_64+0x309/0x430 [ 146.467131] ? sys_vfork+0x70/0x70 [ 146.470714] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.475926] RIP: 0033:0x455979 [ 146.479132] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.486884] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 146.494187] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 146.501487] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 2018/04/30 11:32:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000001580)=@rc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)=""/28}, {&(0x7f0000000040)=""/114}, {&(0x7f00000000c0)=""/208}, {&(0x7f00000001c0)=""/135}, {&(0x7f0000000280)=""/148}], 0x0, &(0x7f0000001b00)=""/186, 0xba}}], 0x7a9, 0x41, &(0x7f0000001c80)) 2018/04/30 11:32:23 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="f6", 0x1}], 0x1, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00009b1000), 0x0) 2018/04/30 11:32:23 executing program 2: r0 = socket(0x10, 0x802, 0x0) ioctl(r0, 0x6, &(0x7f0000000040)="1a3e7b4ae4a95456cc9b102e2c0c4eca14960595de125a416bbb5069433e68061dc5cdc28b924dc5803ecc2fd7f97200dfd44c2d294f28c0c68d23f2dbc6f93c84e1c043fffb2fa42023dbfcbdca859c1751a94261bcc63d81683e78b6d2572469866c49c1b6f75dbe268386efe8722cf489c879baee014feccf61ad13852e42c651485f91d4cc8bb2b0631e9c802e1414803a7948e70751ae98ea336dbacc32584377df826fdb917d07488fef5706f2f17b23cd20d4dcd31c39b2b46f1ec62ae98c29634fd7d963dc") socketpair(0xa, 0x5, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) write(r0, &(0x7f0000000000)="24000000200025f0006b0004200bfc0002ed00080110b5000010ff9e1f03ece4959b30b7", 0x24) [ 146.508794] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 146.516099] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000001 2018/04/30 11:32:23 executing program 1 (fault-call:2 fault-nth:27): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 146.692830] FAULT_INJECTION: forcing a failure. [ 146.692830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.704858] CPU: 1 PID: 10192 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 146.711818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.721206] Call Trace: [ 146.723841] dump_stack+0x185/0x1d0 [ 146.727515] should_fail+0x87b/0xab0 [ 146.731296] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 146.736135] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 146.741543] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 146.746863] ? kmsan_kmalloc+0x94/0x100 [ 146.750877] ? __kmalloc_node+0xdec/0x1190 [ 146.755152] ? kvmalloc_node+0x1a1/0x2e0 [ 146.759252] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 146.764483] ? default_file_splice_read+0x2b9/0x1120 [ 146.769625] ? splice_direct_to_actor+0x4c6/0x1040 [ 146.774623] ? do_splice_direct+0x335/0x540 [ 146.779006] ? do_sendfile+0x1067/0x1e40 [ 146.783130] ? SYSC_sendfile64+0x1b3/0x300 [ 146.787434] ? SyS_sendfile64+0x64/0x90 [ 146.791458] ? do_syscall_64+0x309/0x430 [ 146.795610] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.801061] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.805955] ? __msan_poison_alloca+0x15c/0x1d0 [ 146.810666] ? should_failslab+0x279/0x2a0 [ 146.814951] ? kmsan_set_origin_inline+0x6b/0x120 [ 146.819855] ? memcg_kmem_put_cache+0x40/0x280 [ 146.824501] alloc_pages_current+0x6b5/0x970 [ 146.829017] push_pipe+0x680/0xca0 [ 146.832682] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 146.837764] default_file_splice_read+0x2b9/0x1120 [ 146.842786] ? __fsnotify_parent+0x132/0x560 [ 146.847291] ? security_file_permission+0x473/0x4b0 [ 146.852421] ? rw_verify_area+0x35e/0x580 [ 146.856633] ? SYSC_tee+0x13d0/0x13d0 [ 146.860473] splice_direct_to_actor+0x4c6/0x1040 [ 146.865272] ? do_splice_direct+0x540/0x540 [ 146.869631] ? security_file_permission+0x28f/0x4b0 [ 146.874703] ? rw_verify_area+0x35e/0x580 [ 146.878917] do_splice_direct+0x335/0x540 [ 146.883194] do_sendfile+0x1067/0x1e40 [ 146.887209] SYSC_sendfile64+0x1b3/0x300 [ 146.891395] SyS_sendfile64+0x64/0x90 [ 146.895298] do_syscall_64+0x309/0x430 [ 146.899251] ? SYSC_sendfile+0x320/0x320 [ 146.903458] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 146.908683] RIP: 0033:0x455979 [ 146.911897] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 146.921379] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 146.928865] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 146.936178] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 146.943492] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 146.950807] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001b [ 147.004426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 147.055472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/30 11:32:24 executing program 7 (fault-call:5 fault-nth:2): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:24 executing program 0: r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x40000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:24 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002780)={0x0, @remote, @local}, &(0x7f00000027c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002800)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000002900)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002940)={{{@in=@rand_addr=0x4, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e20, 0x0, 0x4e21, 0x1c, 0x2, 0xa0, 0xa0, 0x2, r1, r2}, {0x9a73, 0x7, 0x400, 0x7fff, 0xb9, 0x400, 0xcb}, {0x7, 0xd1d, 0x50fa, 0x2}, 0x200, 0x6e6bb2, 0x3, 0x1, 0x2, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d4, 0x33}, 0xa, @in=@rand_addr, 0x3501, 0x7, 0x3, 0x45f, 0x79fd, 0x800, 0x3ff}}, 0xe8) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000002a40)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000002a80)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000002ac0)={0x5, 0x8, 0xffffffff}, 0xc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) r3 = add_key$keyring(&(0x7f0000003c00)='keyring\x00', &(0x7f0000003c40)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002b80)='user\x00', &(0x7f0000002bc0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002c00)="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", 0x1000, r3) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) accept4$unix(r0, 0x0, &(0x7f0000003c80), 0x800) clock_gettime(0x0, &(0x7f0000003cc0)={0x0, 0x0}) setitimer(0x3, &(0x7f0000003d00)={{r4, r5/1000+10000}}, &(0x7f0000003d40)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) getpeername$inet(r0, &(0x7f0000003d80)={0x0, 0x0, @local}, &(0x7f0000003dc0)=0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000003e00)=0x10001, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000003e40)=0xf, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000003e80)="4c2a91b269ab2d145ffc9f5c6f3c98b8", 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003ec0)='/dev/loop-control\x00', 0x200040, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000003f00)={'yam0\x00', @ifru_ivalue=0x239a686f}) add_key$keyring(&(0x7f0000003f40)='keyring\x00', &(0x7f0000003f80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r3) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000003fc0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000004080)={r7, &(0x7f0000004000)=""/120}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000040c0)={0x4, {{0xa, 0x4e20, 0x3ff, @mcast1={0xff, 0x1, [], 0x1}, 0xfc42}}, 0x0, 0x7, [{{0xa, 0x4e22, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, {{0xa, 0x4e21, 0x5, @empty, 0xa78f}}, {{0xa, 0x4e23, 0xfff, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}, {{0xa, 0x4e24, 0x7ff, @local={0xfe, 0x80, [], 0xaa}, 0x80000000}}, {{0xa, 0x4e23, 0x8c6, @mcast1={0xff, 0x1, [], 0x1}, 0x8001}}, {{0xa, 0x4e21, 0x1ff, @ipv4={[], [0xff, 0xff]}}}, {{0xa, 0x4e24, 0x2ba0, @local={0xfe, 0x80, [], 0xaa}, 0x929}}]}, 0x410) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000004500)=""/215) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000004600)={{0x9, 0x3e8cb1fe}, {0x7, 0x101}, 0xb460, 0x0, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000004680)={0x7, 0x5, 0x7, 0x5, 0x81, 0x3}) readv(r6, &(0x7f0000004b00)=[{&(0x7f0000004700)=""/32, 0x20}, {&(0x7f0000004740)=""/81, 0x51}, {&(0x7f00000047c0)=""/9, 0x9}, {&(0x7f0000004800)=""/217, 0xd9}, {&(0x7f0000004900)=""/128, 0x80}, {&(0x7f0000004980)=""/83, 0x53}, {&(0x7f0000004a00)=""/202, 0xca}], 0x7) 2018/04/30 11:32:24 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189101, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001940)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x2, [{{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, {{0x1fffffe, 0x0, @multicast2=0xe0000002}}]}, 0x190) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xf1, "859b911486aef59a39e377d0a67d87dc0e969dd346d8f96815ca0db85f492b9ffefa767c641406fd4775a78337ce66f5a0c5625447d397b6b7e37de5b4c449ec734cfc76c770d4d5a8417cabb0d22613b99a3bed02544cfd73151c3ba3da6dd3d945204f74368692e313900068cdf346f83f681749778529e1eb6500b74ea8badf76d22ec4d2247e9c267f694485df04c714c4d40514dde3564f016619743a15c172774863a470e354fc38726d30b47f65fd56be02bfeb97e66d15b23caaf97154fca83a5fdc382ce28049a4249a3fa40afbfb23af8c1537a4f2f79a5cfd9450b89260a537875902655d0988ef8a2d5705"}, &(0x7f00000001c0)=0xf9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x5, 0x2, 0x0, 0xb941, 0x7ff}, &(0x7f0000000240)=0x14) 2018/04/30 11:32:24 executing program 1 (fault-call:2 fault-nth:28): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:24 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="f6", 0x1}], 0x1, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f00009b1000), 0x0) 2018/04/30 11:32:24 executing program 2: migrate_pages(0x0, 0x2000000000, &(0x7f0000000140)=0x5, &(0x7f0000000000)) r0 = gettid() ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={&(0x7f0000000040)=""/168, 0xa8}) [ 147.723002] FAULT_INJECTION: forcing a failure. [ 147.723002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.734877] CPU: 0 PID: 10218 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 147.741815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.751188] Call Trace: [ 147.753799] dump_stack+0x185/0x1d0 [ 147.757458] should_fail+0x87b/0xab0 [ 147.761195] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 147.765976] ? kernel_poison_pages+0x40/0x360 [ 147.770496] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 147.775901] ? kernel_poison_pages+0x1a0/0x360 [ 147.780509] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 147.785981] ? get_page_from_freelist+0xab28/0xb600 [ 147.791014] ? __kernel_text_address+0x34/0xe0 [ 147.795624] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 147.801100] ? __save_stack_trace+0x90d/0xb00 [ 147.805625] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 147.810576] ? push_pipe+0x680/0xca0 [ 147.814311] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 2018/04/30 11:32:24 executing program 2: r0 = memfd_create(&(0x7f0000000040)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0xa001, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x501f, r0, 0x0) sendfile(r1, r0, 0x0, 0x40003) [ 147.819521] ? default_file_splice_read+0x2b9/0x1120 [ 147.824645] ? do_sendfile+0x1067/0x1e40 [ 147.828724] ? SyS_sendfile64+0x64/0x90 [ 147.832717] ? do_syscall_64+0x309/0x430 [ 147.836800] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 147.842209] ? kmsan_set_origin_inline+0x6b/0x120 [ 147.847073] ? __msan_poison_alloca+0x15c/0x1d0 [ 147.851770] kmsan_alloc_page+0x82/0xe0 [ 147.855763] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 147.860533] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 147.865917] ? kmsan_internal_poison_shadow+0xb8/0x1b0 2018/04/30 11:32:24 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$void(r0, 0x4020940d) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xa0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x6, 0x40}, 0x2) [ 147.871210] ? kmsan_kmalloc+0x94/0x100 [ 147.875208] ? __kmalloc_node+0xdec/0x1190 [ 147.879468] ? kvmalloc_node+0x1a1/0x2e0 [ 147.883546] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 147.888756] ? default_file_splice_read+0x2b9/0x1120 [ 147.894051] ? splice_direct_to_actor+0x4c6/0x1040 [ 147.898995] ? do_splice_direct+0x335/0x540 [ 147.903331] ? do_sendfile+0x1067/0x1e40 [ 147.907410] ? SYSC_sendfile64+0x1b3/0x300 [ 147.911845] ? SyS_sendfile64+0x64/0x90 [ 147.915838] ? do_syscall_64+0x309/0x430 [ 147.920963] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 147.926354] ? kmsan_set_origin_inline+0x6b/0x120 [ 147.931226] ? __msan_poison_alloca+0x15c/0x1d0 [ 147.936015] ? should_failslab+0x279/0x2a0 [ 147.939841] FAULT_INJECTION: forcing a failure. [ 147.939841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.940292] ? kmsan_set_origin_inline+0x6b/0x120 [ 147.956930] ? memcg_kmem_put_cache+0x40/0x280 [ 147.961522] alloc_pages_current+0x6b5/0x970 [ 147.965936] push_pipe+0x680/0xca0 [ 147.969475] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 147.974489] default_file_splice_read+0x2b9/0x1120 [ 147.979430] ? __fsnotify_parent+0x132/0x560 [ 147.983855] ? security_file_permission+0x473/0x4b0 [ 147.988866] ? rw_verify_area+0x35e/0x580 [ 147.993002] ? SYSC_tee+0x13d0/0x13d0 [ 147.996792] splice_direct_to_actor+0x4c6/0x1040 [ 148.001625] ? do_splice_direct+0x540/0x540 [ 148.005937] ? security_file_permission+0x28f/0x4b0 [ 148.011233] ? rw_verify_area+0x35e/0x580 [ 148.015371] do_splice_direct+0x335/0x540 [ 148.019513] do_sendfile+0x1067/0x1e40 [ 148.023397] SYSC_sendfile64+0x1b3/0x300 [ 148.027447] SyS_sendfile64+0x64/0x90 [ 148.032246] do_syscall_64+0x309/0x430 [ 148.036125] ? SYSC_sendfile+0x320/0x320 [ 148.040172] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 148.045345] RIP: 0033:0x455979 [ 148.048517] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 148.056211] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 148.063465] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 148.070717] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.077973] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 148.085228] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001c [ 148.092583] CPU: 1 PID: 10217 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 148.099527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.109010] Call Trace: [ 148.111623] dump_stack+0x185/0x1d0 [ 148.115379] should_fail+0x87b/0xab0 [ 148.119131] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 148.123913] ? kernel_poison_pages+0x40/0x360 [ 148.128440] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.130031] IPVS: ftp: loaded support on port[0] = 21 [ 148.133860] ? kernel_poison_pages+0x1a0/0x360 [ 148.133879] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.133897] ? get_page_from_freelist+0xab28/0xb600 [ 148.133922] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.133936] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.133952] ? memcg_kmem_charge+0x5dd/0xa30 [ 148.133968] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 148.133982] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 148.133995] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.134035] ? __save_stack_trace+0x90d/0xb00 [ 148.188849] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.193656] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.199047] ? memcg_kmem_charge+0x703/0xa30 [ 148.203490] kmsan_alloc_page+0x82/0xe0 [ 148.207493] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 148.212268] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.217138] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.222000] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.226856] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.231542] ? kmem_cache_alloc_node+0x86e/0xc70 [ 148.236319] ? memcg_kmem_put_cache+0x40/0x280 [ 148.240942] ? kmem_cache_alloc_node+0x86e/0xc70 [ 148.245717] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.251271] ? memcg_kmem_put_cache+0xe7/0x280 [ 148.255874] ? kmem_cache_alloc_node+0x943/0xc70 [ 148.260674] copy_process+0x778/0x9bb0 [ 148.264581] ? kstrtouint_from_user+0x373/0x410 [ 148.269271] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.274162] ? kmsan_set_origin+0x9e/0x160 [ 148.278422] ? fsnotify+0x493/0x18f0 [ 148.282175] ? __msan_poison_alloca+0x91/0x1d0 [ 148.286782] _do_fork+0x311/0xf00 [ 148.290342] ? prepare_exit_to_usermode+0x149/0x3a0 [ 148.295385] SYSC_clone+0xf6/0x110 [ 148.298940] SyS_clone+0x77/0xa0 [ 148.302321] do_syscall_64+0x309/0x430 [ 148.306228] ? sys_vfork+0x70/0x70 [ 148.309778] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 148.314975] RIP: 0033:0x455979 [ 148.318163] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 2018/04/30 11:32:25 executing program 1 (fault-call:2 fault-nth:29): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:25 executing program 3: r0 = socket$inet(0x2, 0x200000000000003, 0x9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x189101, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001940)={0x0, {{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x2, [{{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, {{0x1fffffe, 0x0, @multicast2=0xe0000002}}]}, 0x190) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xf1, "859b911486aef59a39e377d0a67d87dc0e969dd346d8f96815ca0db85f492b9ffefa767c641406fd4775a78337ce66f5a0c5625447d397b6b7e37de5b4c449ec734cfc76c770d4d5a8417cabb0d22613b99a3bed02544cfd73151c3ba3da6dd3d945204f74368692e313900068cdf346f83f681749778529e1eb6500b74ea8badf76d22ec4d2247e9c267f694485df04c714c4d40514dde3564f016619743a15c172774863a470e354fc38726d30b47f65fd56be02bfeb97e66d15b23caaf97154fca83a5fdc382ce28049a4249a3fa40afbfb23af8c1537a4f2f79a5cfd9450b89260a537875902655d0988ef8a2d5705"}, &(0x7f00000001c0)=0xf9) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x5, 0x2, 0x0, 0xb941, 0x7ff}, &(0x7f0000000240)=0x14) 2018/04/30 11:32:25 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x20000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) accept(r0, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f0000000100)=0x80) [ 148.325880] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 148.333245] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 148.340526] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 148.347810] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 148.355091] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000002 [ 148.431497] FAULT_INJECTION: forcing a failure. [ 148.431497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.443353] CPU: 1 PID: 10249 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 148.450283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.459647] Call Trace: [ 148.462249] dump_stack+0x185/0x1d0 [ 148.465889] should_fail+0x87b/0xab0 [ 148.469622] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 148.474385] ? kernel_poison_pages+0x40/0x360 [ 148.478895] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.484269] ? kernel_poison_pages+0x1a0/0x360 [ 148.488867] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.494342] ? get_page_from_freelist+0xab28/0xb600 [ 148.499377] ? __kernel_text_address+0x34/0xe0 [ 148.503973] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.509435] ? __save_stack_trace+0x90d/0xb00 [ 148.513956] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 148.518984] ? push_pipe+0x680/0xca0 [ 148.522708] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 148.527914] ? default_file_splice_read+0x2b9/0x1120 [ 148.533034] ? do_sendfile+0x1067/0x1e40 [ 148.537100] ? SyS_sendfile64+0x64/0x90 [ 148.541087] ? do_syscall_64+0x309/0x430 [ 148.545159] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 148.550628] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.555666] ? __switch_to+0x2b3/0x420 [ 148.559571] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.564430] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.569118] kmsan_alloc_page+0x82/0xe0 [ 148.573110] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 148.577879] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 148.583255] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 148.588543] ? kmsan_kmalloc+0x94/0x100 [ 148.592541] ? __kmalloc_node+0xdec/0x1190 [ 148.596791] ? kvmalloc_node+0x1a1/0x2e0 [ 148.600951] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 148.606156] ? default_file_splice_read+0x2b9/0x1120 [ 148.611277] ? splice_direct_to_actor+0x4c6/0x1040 [ 148.616222] ? do_splice_direct+0x335/0x540 [ 148.620557] ? do_sendfile+0x1067/0x1e40 [ 148.624627] ? SYSC_sendfile64+0x1b3/0x300 2018/04/30 11:32:25 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = creat(&(0x7f0000000080)='./control/file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='./file0\x00') socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0xfffffffffffffffc, 0x7}, &(0x7f0000000240)=0xc) dup2(r2, r1) 2018/04/30 11:32:25 executing program 7 (fault-call:5 fault-nth:3): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @loopback=0x7f000001}, 0xb1, &(0x7f0000000840)=[{&(0x7f0000000000)='\v', 0x1}], 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x1090}}], 0x1, 0x0) [ 148.628872] ? SyS_sendfile64+0x64/0x90 [ 148.632862] ? do_syscall_64+0x309/0x430 [ 148.636935] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 148.642320] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.647191] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.651964] ? should_failslab+0x279/0x2a0 [ 148.656220] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.661086] ? memcg_kmem_put_cache+0x40/0x280 [ 148.665693] alloc_pages_current+0x6b5/0x970 [ 148.670123] push_pipe+0x680/0xca0 [ 148.673701] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 148.679209] default_file_splice_read+0x2b9/0x1120 [ 148.684168] ? __fsnotify_parent+0x132/0x560 [ 148.688605] ? security_file_permission+0x473/0x4b0 [ 148.690805] FAULT_INJECTION: forcing a failure. [ 148.690805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.693653] ? rw_verify_area+0x35e/0x580 [ 148.709581] ? SYSC_tee+0x13d0/0x13d0 [ 148.713376] splice_direct_to_actor+0x4c6/0x1040 [ 148.718124] ? do_splice_direct+0x540/0x540 [ 148.722450] ? security_file_permission+0x28f/0x4b0 [ 148.727465] ? rw_verify_area+0x35e/0x580 [ 148.731601] do_splice_direct+0x335/0x540 [ 148.735740] do_sendfile+0x1067/0x1e40 [ 148.739622] SYSC_sendfile64+0x1b3/0x300 [ 148.744460] SyS_sendfile64+0x64/0x90 [ 148.748247] do_syscall_64+0x309/0x430 [ 148.752121] ? SYSC_sendfile+0x320/0x320 [ 148.756173] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 148.761352] RIP: 0033:0x455979 [ 148.764529] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 148.772221] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 148.779473] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 148.786729] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.794071] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 148.801326] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001d [ 148.808603] CPU: 0 PID: 10265 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 148.815532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.824894] Call Trace: [ 148.827499] dump_stack+0x185/0x1d0 [ 148.831142] should_fail+0x87b/0xab0 [ 148.834901] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 148.839672] ? kernel_poison_pages+0x40/0x360 [ 148.844271] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 148.849673] ? kernel_poison_pages+0x1a0/0x360 [ 148.854287] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.859759] ? get_page_from_freelist+0xab28/0xb600 [ 148.864800] ? save_stack_trace+0xa5/0xf0 [ 148.868968] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 148.874433] ? update_stack_state+0x885/0xa40 [ 148.878957] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 148.883996] ? __is_insn_slot_addr+0x198/0x1c0 [ 148.888603] ? __alloc_pages_nodemask+0xae2/0x5dc0 [ 148.893547] kmsan_alloc_page+0x82/0xe0 [ 148.897536] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 148.902302] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.907156] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 148.912536] ? __wake_up_common+0x123/0xa60 [ 148.916885] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 148.921572] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 148.927051] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 148.932443] alloc_pages_current+0x6b5/0x970 [ 148.936879] new_slab+0x366/0x1bb0 [ 148.940440] ? __msan_poison_alloca+0x15c/0x1d0 [ 148.945126] ? ___slab_alloc+0x1197/0x1f60 [ 148.949382] ? __cpuset_node_allowed+0xed/0x490 [ 148.954068] ___slab_alloc+0x1512/0x1f60 [ 148.958140] ? copy_process+0x6b0/0x9bb0 [ 148.962223] kmem_cache_alloc_node+0x69a/0xc70 [ 148.966823] ? copy_process+0x6b0/0x9bb0 [ 148.970908] copy_process+0x6b0/0x9bb0 [ 148.974807] ? kstrtouint_from_user+0x373/0x410 [ 148.979488] ? kmsan_set_origin_inline+0x6b/0x120 [ 148.984337] ? kmsan_set_origin+0x9e/0x160 [ 148.988580] ? fsnotify+0x493/0x18f0 [ 148.992313] ? __msan_poison_alloca+0x91/0x1d0 [ 148.996909] _do_fork+0x311/0xf00 [ 149.000372] ? prepare_exit_to_usermode+0x149/0x3a0 [ 149.005419] SYSC_clone+0xf6/0x110 [ 149.008974] SyS_clone+0x77/0xa0 [ 149.012344] do_syscall_64+0x309/0x430 [ 149.016241] ? sys_vfork+0x70/0x70 [ 149.019797] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 149.024992] RIP: 0033:0x455979 [ 149.028187] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 149.035905] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 149.043187] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 149.050464] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 149.057746] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 149.065024] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000003 2018/04/30 11:32:26 executing program 1 (fault-call:2 fault-nth:30): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x1ff, 0x200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="728af58226c691bfb2c952ebe8a486d6", 0x10) recvmmsg(r0, &(0x7f0000000040), 0x948, 0x42, 0x0) 2018/04/30 11:32:26 executing program 0: mkdir(&(0x7f000085cff8)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x3, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c42fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000ff3000)='./file0\x00', &(0x7f0000c22000)='./file0\x00', &(0x7f000015d000)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = dup(r0) bind$nfc_llcp(r1, &(0x7f0000000300)={0x27, 0x3, 0x0, 0x6, 0x3, 0x80000000, "cfc155cf5f66b03af1437d71f3935121d090db73a810ac409b91a6c8314b80406faa7c88b492cb5e9533063248f40782a0440b25ec38c17f0bdadba06add54", 0x1a}, 0x60) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10142, 0x0) linkat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00', 0x400) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x10001, 0x1, 0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x14000, 0xd, 0x400, 0x9, 0x7, 0x6, 0x4, 0xb8, 0x80, 0x8, 0x6, 0x5, 0x4, 0x80, 0x490000, 0x80000001, 0x6, 0x1, 0x6, 0xf, 0x400, 0x7, 0x200, 0xda, 0x1000, 0x1000, 0x2, 0x36f00000000000, 0x6, 0x75b, 0x0, 0x80, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x880, 0x9, 0xc1, 0x2, 0x7, 0x7fffffff, 0x9}, 0x0, 0x1, r3, 0xa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x15, "529a41e1db37e3062f2365410a867798eb90202962"}, &(0x7f0000000200)=0x1d) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0x8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1bdf}}, 0xffffffff, 0xce}, 0x90) 2018/04/30 11:32:26 executing program 3: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x2}) flock(r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/4096) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x10000, 0x235000, 0x1ff, 0x4, 0x3, 0x3ff, 0x4, {0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x14}, 0xfff}}, 0xfe, 0xfd2, 0x6, 0x6, 0x800}}, &(0x7f0000000140)=0xb0) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@upd={0xe8, 0x12, 0x308, 0x70bd2b, 0x25dfdbfc, {{'rfc4543(ccm_base(ctr-aes-aesni,sha3-256-generic))\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc0}, 0x40014) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7}, &(0x7f00000001c0)=0x8) 2018/04/30 11:32:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:26 executing program 6: unshare(0x400) vmsplice(0xffffffffffffffff, &(0x7f0000f14000)=[{}], 0x1, 0x0) 2018/04/30 11:32:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x3f}, &(0x7f00000002c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x5, @empty, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="b742abe73213cef29687bff62e5f195a766c59d4280048c530f29f6eaf5b2786cb0285bc38f060a9850c3d8b869ddd300617884c2174fe06d571951460003097feac3eeed8f6ca0801512d701e0ba162ca4cefe90f234f89c8ad0c8a7ed4cef94ba00881437105df99c47fc847194b434df074c9566d30b009823ca5a4ce42c5b5e2b2fa36ad3dc218f566f31e0d5eb72e44eca22c0779cc4f224816581d06a03319e2c0c685fca0849c11649cd39c3a301be198794c909cd650ed4face44c7dfcecc653117b3cd27407f91c63a1cd793b5d58667a1c4bd4", 0xd8}, {&(0x7f00000001c0)="17ff7955269152967fd290cb86c1c999d889cc5666597c6539746afaa3d1128e8caba84388a20afc652022f8d49cc5d527f25932c73ed67b9a83e58bc36079b784916d91f7f35b05862e6094661c3a892e1d3299391384069a196927aaf457e699993a9f7ef33a", 0x67}], 0x2, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0x8, 0x7ff, 0x7, 0x6}}, @init={0x18, 0x84, 0x0, {0x8, 0xd9b1, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2=0xe0000002}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x13}}, @init={0x18, 0x84, 0x0, {0x9, 0x5, 0x555, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @sndinfo={0x20, 0x84, 0x2, {0x7f, 0x4, 0x1000, 0x10001, r1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0xd8, 0x1}, 0x8040) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)="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", 0x35e}], 0x1, &(0x7f0000000300)}, 0x0) 2018/04/30 11:32:26 executing program 7 (fault-call:5 fault-nth:4): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 149.648972] FAULT_INJECTION: forcing a failure. [ 149.648972] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.661108] CPU: 1 PID: 10288 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 149.668155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.677547] Call Trace: [ 149.680200] dump_stack+0x185/0x1d0 [ 149.683900] should_fail+0x87b/0xab0 [ 149.687683] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 149.692523] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 149.697938] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 149.703256] ? kmsan_kmalloc+0x94/0x100 [ 149.707272] ? __kmalloc_node+0xdec/0x1190 [ 149.711592] ? kvmalloc_node+0x1a1/0x2e0 [ 149.715687] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 149.720916] ? default_file_splice_read+0x2b9/0x1120 [ 149.726061] ? splice_direct_to_actor+0x4c6/0x1040 [ 149.731069] ? do_splice_direct+0x335/0x540 [ 149.735471] ? do_sendfile+0x1067/0x1e40 [ 149.739571] ? SYSC_sendfile64+0x1b3/0x300 [ 149.743877] ? SyS_sendfile64+0x64/0x90 [ 149.747892] ? do_syscall_64+0x309/0x430 [ 149.752031] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 149.757485] ? kmsan_set_origin_inline+0x6b/0x120 [ 149.762378] ? __msan_poison_alloca+0x15c/0x1d0 [ 149.767096] ? should_failslab+0x279/0x2a0 [ 149.771388] ? kmsan_set_origin_inline+0x6b/0x120 [ 149.776297] ? memcg_kmem_put_cache+0x40/0x280 [ 149.780946] alloc_pages_current+0x6b5/0x970 [ 149.785467] push_pipe+0x680/0xca0 [ 149.789121] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 149.794207] default_file_splice_read+0x2b9/0x1120 [ 149.799241] ? __fsnotify_parent+0x132/0x560 [ 149.803741] ? security_file_permission+0x473/0x4b0 [ 149.808995] ? rw_verify_area+0x35e/0x580 [ 149.813200] ? SYSC_tee+0x13d0/0x13d0 [ 149.817046] splice_direct_to_actor+0x4c6/0x1040 [ 149.821858] ? do_splice_direct+0x540/0x540 [ 149.826234] ? security_file_permission+0x28f/0x4b0 [ 149.831318] ? rw_verify_area+0x35e/0x580 [ 149.832356] FAULT_INJECTION: forcing a failure. [ 149.832356] name failslab, interval 1, probability 0, space 0, times 0 [ 149.835525] do_splice_direct+0x335/0x540 [ 149.835627] do_sendfile+0x1067/0x1e40 [ 149.835726] SYSC_sendfile64+0x1b3/0x300 [ 149.859743] SyS_sendfile64+0x64/0x90 [ 149.864302] do_syscall_64+0x309/0x430 [ 149.868229] ? SYSC_sendfile+0x320/0x320 [ 149.872317] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 149.877521] RIP: 0033:0x455979 [ 149.880717] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.888439] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 2018/04/30 11:32:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00009db000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @tick, 0x0, {0x0, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000400)={0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/30 11:32:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f00aeabd1cd0000000000f9ff00", 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000015000104000000000000009af8ffff00", @ANYRES32=r1, @ANYBLOB="1400030076657468305f746f5f626f6e64000000"], 0x2c}, 0x1}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0xffffffff, 0x4) [ 149.895709] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 149.902983] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.910259] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 149.917536] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001e [ 149.924843] CPU: 0 PID: 10289 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 149.931798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.941194] Call Trace: [ 149.943845] dump_stack+0x185/0x1d0 2018/04/30 11:32:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14}, 0x0, 0x3ffffffffffffd06}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x140) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000700ff001759c8eec1fbab34f28c24fb79215227aa0352695438b5d4ac0100000000000000b98ba8e48043fac62f2950b9acdf0614bc4551137cfa865c667d98b67b7adc"], 0x8) 2018/04/30 11:32:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x18}, {0x7, 0x8ee}, 0x1, 0x3, 0x4}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="001d6a20bb3234f9b5000000000000000057dd00000000000000000000000000"]) [ 149.947527] should_fail+0x87b/0xab0 [ 149.951295] should_failslab+0x279/0x2a0 [ 149.955417] kmem_cache_alloc+0x136/0xb90 [ 149.959609] ? prepare_creds+0x65/0x5e0 [ 149.963716] prepare_creds+0x65/0x5e0 [ 149.967656] ? copy_creds+0x53/0x910 [ 149.971426] copy_creds+0x133/0x910 [ 149.975328] copy_process+0x1276/0x9bb0 [ 149.979382] ? kstrtouint_from_user+0x373/0x410 [ 149.984106] ? kmsan_set_origin_inline+0x6b/0x120 [ 149.989038] ? kmsan_set_origin+0x9e/0x160 [ 149.993367] ? fsnotify+0x493/0x18f0 [ 149.997138] ? __msan_poison_alloca+0x91/0x1d0 [ 150.001779] _do_fork+0x311/0xf00 [ 150.005305] ? prepare_exit_to_usermode+0x149/0x3a0 [ 150.010422] SYSC_clone+0xf6/0x110 [ 150.014085] SyS_clone+0x77/0xa0 [ 150.017563] do_syscall_64+0x309/0x430 [ 150.021521] ? sys_vfork+0x70/0x70 [ 150.025128] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 150.031144] RIP: 0033:0x455979 [ 150.034374] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 150.042128] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 2018/04/30 11:32:27 executing program 1 (fault-call:2 fault-nth:31): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 150.049433] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 150.056740] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 150.064052] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 150.071364] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000004 2018/04/30 11:32:27 executing program 2: r0 = socket(0x40000000000a, 0x5, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) [ 150.219795] FAULT_INJECTION: forcing a failure. [ 150.219795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.231650] CPU: 1 PID: 10312 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 150.238579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.247958] Call Trace: [ 150.250564] dump_stack+0x185/0x1d0 [ 150.254215] should_fail+0x87b/0xab0 [ 150.257953] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 150.262742] ? kernel_poison_pages+0x40/0x360 [ 150.267257] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 150.272636] ? kernel_poison_pages+0x1a0/0x360 [ 150.277239] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 150.282713] ? get_page_from_freelist+0xab28/0xb600 [ 150.287743] ? __kernel_text_address+0x34/0xe0 [ 150.292350] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 150.297821] ? __save_stack_trace+0x90d/0xb00 [ 150.302352] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 150.307305] ? push_pipe+0x680/0xca0 [ 150.311045] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 150.316250] ? default_file_splice_read+0x2b9/0x1120 [ 150.321372] ? do_sendfile+0x1067/0x1e40 [ 150.325450] ? SyS_sendfile64+0x64/0x90 [ 150.329438] ? do_syscall_64+0x309/0x430 [ 150.333518] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 150.338901] ? __kernel_text_address+0x34/0xe0 [ 150.343503] ? kmsan_set_origin_inline+0x6b/0x120 [ 150.348366] ? __msan_poison_alloca+0x15c/0x1d0 [ 150.353056] kmsan_alloc_page+0x82/0xe0 [ 150.357080] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 150.361890] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 150.367274] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 150.372570] ? kmsan_kmalloc+0x94/0x100 [ 150.376565] ? __kmalloc_node+0xdec/0x1190 [ 150.387096] ? kvmalloc_node+0x1a1/0x2e0 [ 150.391178] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 150.396477] ? default_file_splice_read+0x2b9/0x1120 [ 150.401690] ? splice_direct_to_actor+0x4c6/0x1040 [ 150.406636] ? do_splice_direct+0x335/0x540 [ 150.411062] ? do_sendfile+0x1067/0x1e40 [ 150.415138] ? SYSC_sendfile64+0x1b3/0x300 [ 150.419388] ? SyS_sendfile64+0x64/0x90 [ 150.423374] ? do_syscall_64+0x309/0x430 [ 150.427435] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 150.432789] ? kmsan_set_origin_inline+0x6b/0x120 [ 150.437622] ? __msan_poison_alloca+0x15c/0x1d0 [ 150.442289] ? should_failslab+0x279/0x2a0 [ 150.446534] ? kmsan_set_origin_inline+0x6b/0x120 [ 150.451380] ? memcg_kmem_put_cache+0x40/0x280 [ 150.455955] alloc_pages_current+0x6b5/0x970 [ 150.460374] push_pipe+0x680/0xca0 [ 150.463944] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 150.469169] default_file_splice_read+0x2b9/0x1120 [ 150.474129] ? __fsnotify_parent+0x132/0x560 [ 150.478540] ? security_file_permission+0x473/0x4b0 [ 150.483560] ? rw_verify_area+0x35e/0x580 [ 150.488262] ? SYSC_tee+0x13d0/0x13d0 [ 150.492077] splice_direct_to_actor+0x4c6/0x1040 [ 150.496842] ? do_splice_direct+0x540/0x540 [ 150.501166] ? security_file_permission+0x28f/0x4b0 [ 150.506189] ? rw_verify_area+0x35e/0x580 [ 150.510348] do_splice_direct+0x335/0x540 [ 150.514491] do_sendfile+0x1067/0x1e40 [ 150.518377] SYSC_sendfile64+0x1b3/0x300 [ 150.522438] SyS_sendfile64+0x64/0x90 [ 150.526242] do_syscall_64+0x309/0x430 [ 150.530121] ? SYSC_sendfile+0x320/0x320 [ 150.534279] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 150.539985] RIP: 0033:0x455979 [ 150.543182] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.550910] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 150.558529] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 150.565799] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.573068] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 150.580330] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001f 2018/04/30 11:32:28 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000018000)=ANY=[@ANYBLOB="05000002ac14ffaa0000000080000000"], 0x3dc5) 2018/04/30 11:32:28 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x84013, r1, 0x0) 2018/04/30 11:32:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$addseals(r0, 0x409, 0xc) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000480)=""/66) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xfffffffffffffff9, 0x637}) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_names='team_slave_1\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x71d, 0x20}, 'port0\x00', 0x4, 0x20000, 0x1, 0x100000000, 0x0, 0x8, 0x8001, 0x0, 0x5, 0xb6}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000440)=0x81, 0x4) r2 = dup3(r0, r0, 0x80000) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, [0x5, 0x1, 0x1, 0x5, 0xfff, 0x9, 0x81, 0x7, 0x800000000, 0x8920, 0x6, 0x8, 0x3f, 0x0, 0xff]}, &(0x7f0000000380)=0x100) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000500)={0x2, r2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x7, 0x2, 0x4, 0x8ef0, r3}, &(0x7f0000000400)=0x10) 2018/04/30 11:32:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:28 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockname(r0, &(0x7f0000000040)=@pptp, &(0x7f00000000c0)=0x80) 2018/04/30 11:32:28 executing program 1 (fault-call:2 fault-nth:32): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:28 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x101000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000080)={0x80000001, 0xb9, 0x9, 0x0, 0x5, 0x100000001}) socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xc0000001}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000000), 0x8) 2018/04/30 11:32:28 executing program 7 (fault-call:5 fault-nth:5): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 151.085866] FAULT_INJECTION: forcing a failure. [ 151.085866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.098082] CPU: 1 PID: 10341 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 151.105100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.115763] Call Trace: [ 151.118381] dump_stack+0x185/0x1d0 [ 151.122048] should_fail+0x87b/0xab0 [ 151.125793] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 151.130573] ? kernel_poison_pages+0x40/0x360 [ 151.135085] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 151.140464] ? kernel_poison_pages+0x1a0/0x360 [ 151.145065] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 151.150533] ? get_page_from_freelist+0xab28/0xb600 [ 151.155565] ? __kernel_text_address+0x34/0xe0 [ 151.160161] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 151.165629] ? __save_stack_trace+0x90d/0xb00 [ 151.170386] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 151.175428] ? push_pipe+0x680/0xca0 [ 151.179153] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 151.184362] ? default_file_splice_read+0x2b9/0x1120 [ 151.189481] ? do_sendfile+0x1067/0x1e40 [ 151.193566] ? SyS_sendfile64+0x64/0x90 [ 151.197552] ? do_syscall_64+0x309/0x430 [ 151.201628] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 151.207008] ? __kernel_text_address+0x34/0xe0 [ 151.211613] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.216473] ? __msan_poison_alloca+0x15c/0x1d0 [ 151.221170] kmsan_alloc_page+0x82/0xe0 [ 151.225170] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 151.229946] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 151.235330] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 151.240642] ? kmsan_kmalloc+0x94/0x100 [ 151.244723] ? __kmalloc_node+0xdec/0x1190 [ 151.248979] ? kvmalloc_node+0x1a1/0x2e0 [ 151.253059] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 151.258266] ? default_file_splice_read+0x2b9/0x1120 [ 151.263383] ? splice_direct_to_actor+0x4c6/0x1040 [ 151.268328] ? do_splice_direct+0x335/0x540 [ 151.272683] ? do_sendfile+0x1067/0x1e40 [ 151.276763] ? SYSC_sendfile64+0x1b3/0x300 [ 151.281030] ? SyS_sendfile64+0x64/0x90 [ 151.285120] ? do_syscall_64+0x309/0x430 [ 151.289200] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 151.294581] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.299443] ? __msan_poison_alloca+0x15c/0x1d0 [ 151.304129] ? should_failslab+0x279/0x2a0 [ 151.308380] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.313258] ? memcg_kmem_put_cache+0x40/0x280 [ 151.317867] alloc_pages_current+0x6b5/0x970 [ 151.322387] push_pipe+0x680/0xca0 [ 151.325955] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 151.332135] default_file_splice_read+0x2b9/0x1120 [ 151.337093] ? __fsnotify_parent+0x132/0x560 [ 151.341530] ? security_file_permission+0x473/0x4b0 [ 151.346573] ? rw_verify_area+0x35e/0x580 [ 151.350745] ? SYSC_tee+0x13d0/0x13d0 [ 151.354564] splice_direct_to_actor+0x4c6/0x1040 [ 151.359345] ? do_splice_direct+0x540/0x540 [ 151.363686] ? security_file_permission+0x28f/0x4b0 [ 151.368750] ? rw_verify_area+0x35e/0x580 [ 151.372924] do_splice_direct+0x335/0x540 [ 151.377098] do_sendfile+0x1067/0x1e40 [ 151.381014] SYSC_sendfile64+0x1b3/0x300 [ 151.385101] SyS_sendfile64+0x64/0x90 [ 151.388914] do_syscall_64+0x309/0x430 [ 151.392818] ? SYSC_sendfile+0x320/0x320 [ 151.396905] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 151.402108] RIP: 0033:0x455979 [ 151.405304] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 151.413035] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 151.420317] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 151.427606] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000bd2000)=@in={0x2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="6700000040e31149e7dce812213b3117b6e674d37c6ba825d6c09b43db4585d3ae52b9d5c791ff913d0dfa68b914800a0fe75dc2a71eec6dda7addae25069d3c67dd5c2c000000000100000070d281194f9b6a0f1b4cdc7c92b8f4652cdbb8dcc820bd3af74a30b32132c58f01ed8dbaf60bc8bdbb3835d780fbe20af70aa9ecef501a754cae4c9d917e78f586477e2e37370242d45fbc58f16cfd50236bcbe9de517f0b742390b035053e64a783429b76d7d5feb7ce13dccaa3f8ada120222e6e4aa19d9793ae624d9f06a9171089740c"], &(0x7f0000000200)=0x6f) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x200000000000102) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r3}, 0x8) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 2018/04/30 11:32:28 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000280), &(0x7f0000000000)=0x4) 2018/04/30 11:32:28 executing program 5: clock_getres(0x1000000800000002, &(0x7f0000000040)) 2018/04/30 11:32:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75702e6e65742f73ffc47443dc974d2f7ae6797a3000", 0x200002, 0x0) socketpair(0x5, 0x800, 0x8000, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x7}}, 0x8, 0x7}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x4, 0x6, 0x1ff, r2}, &(0x7f00000000c0)=0x10) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)="35d5", 0x2) 2018/04/30 11:32:28 executing program 5: r0 = socket(0x10, 0x2, 0xc) r1 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000280)=0x4, 0x4) sendmsg(r1, &(0x7f0000eeefc8)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000437000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000e7ff28000000020000001d1a2d4ba2f2fffffffffffffffd06000000000000b3bf3493ca740d4d5ba2153b0000006f34a756d55089af6099e3760abdd157a85bcbbbced35e58aedaa684215b510a43"], 0x28}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="1f0000000104ff00014454c0071100000a", 0x11) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xe) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000000c0)=0xffffffffffffffbd) [ 151.435141] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 151.442512] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000020 [ 151.454769] FAULT_INJECTION: forcing a failure. [ 151.454769] name failslab, interval 1, probability 0, space 0, times 0 [ 151.466130] CPU: 0 PID: 10340 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 151.473106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.482493] Call Trace: [ 151.485219] dump_stack+0x185/0x1d0 [ 151.488905] should_fail+0x87b/0xab0 [ 151.492712] should_failslab+0x279/0x2a0 [ 151.496847] kmem_cache_alloc+0x136/0xb90 [ 151.501038] ? copy_creds+0x523/0x910 [ 151.504900] ? __delayacct_tsk_init+0x72/0x140 [ 151.509550] __delayacct_tsk_init+0x72/0x140 [ 151.514028] copy_process+0x134d/0x9bb0 [ 151.518105] ? kstrtouint_from_user+0x373/0x410 [ 151.522868] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.527810] ? kmsan_set_origin+0x9e/0x160 [ 151.532153] ? fsnotify+0x493/0x18f0 2018/04/30 11:32:28 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x2aaaaaaaaaaaad18, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="5124b9df8522"]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, r2, 0x300, 0x70bd25, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x143f2f61d7d74d82}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd12}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa86}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb48}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x8000) [ 151.535934] ? __msan_poison_alloca+0x91/0x1d0 [ 151.540581] _do_fork+0x311/0xf00 [ 151.544106] ? prepare_exit_to_usermode+0x149/0x3a0 [ 151.549235] SYSC_clone+0xf6/0x110 [ 151.552909] SyS_clone+0x77/0xa0 [ 151.556392] do_syscall_64+0x309/0x430 [ 151.560354] ? sys_vfork+0x70/0x70 [ 151.564051] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 151.569284] RIP: 0033:0x455979 [ 151.572509] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 151.580273] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 2018/04/30 11:32:28 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000170001022dbd7000ffdbdf25fe80000000000008000000000000000d000004d42b000000e0000002000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001d4e2304004e2100010a008080ff000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000017f0000010000000000000000000000004e2200204e201000020080a02c000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="060000000000000081000000000000004000000000000000010000000000000002000000000000005500000000000000070000000000000000040000000000009d0f00000000000002000000000000000700000000000000634000000000000005000000bb6b6e00020001030000000000000000400000000100008029bd70000c000f00ff0000000000000028001a00ff010000000000000000000000000001ffffff8000000000000000000000000000000603"], 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2018/04/30 11:32:28 executing program 3: ioprio_set$pid(0x1, 0x0, 0x4002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, 0x3f, 0x1f, 0x7fff, 0x6, 0x8}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x3b, 0x0) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000040)=0xa28, 0x4) [ 151.587583] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 151.594895] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 151.602209] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 151.609515] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000005 2018/04/30 11:32:28 executing program 1 (fault-call:2 fault-nth:33): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 151.697565] bridge0: port 3(team_slave_0) entered blocking state [ 151.704030] bridge0: port 3(team_slave_0) entered disabled state [ 151.784820] FAULT_INJECTION: forcing a failure. [ 151.784820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.796965] CPU: 1 PID: 10382 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 151.803931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.813336] Call Trace: [ 151.815977] dump_stack+0x185/0x1d0 [ 151.819648] should_fail+0x87b/0xab0 [ 151.823437] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 151.828266] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 151.833686] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 151.839020] ? kmsan_kmalloc+0x94/0x100 [ 151.843053] ? __kmalloc_node+0xdec/0x1190 [ 151.847739] ? kvmalloc_node+0x1a1/0x2e0 [ 151.851853] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 151.857128] ? default_file_splice_read+0x2b9/0x1120 [ 151.864299] ? splice_direct_to_actor+0x4c6/0x1040 [ 151.869337] ? do_splice_direct+0x335/0x540 [ 151.874104] ? do_sendfile+0x1067/0x1e40 [ 151.878223] ? SYSC_sendfile64+0x1b3/0x300 [ 151.882547] ? SyS_sendfile64+0x64/0x90 [ 151.886572] ? do_syscall_64+0x309/0x430 [ 151.890726] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 151.896182] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.901116] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.906016] ? __msan_poison_alloca+0x15c/0x1d0 [ 151.910749] ? should_failslab+0x279/0x2a0 [ 151.915048] ? kmsan_set_origin_inline+0x6b/0x120 [ 151.919960] ? memcg_kmem_put_cache+0x40/0x280 [ 151.924621] alloc_pages_current+0x6b5/0x970 [ 151.929139] push_pipe+0x680/0xca0 [ 151.932811] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 151.937911] default_file_splice_read+0x2b9/0x1120 [ 151.942945] ? __fsnotify_parent+0x132/0x560 [ 151.947465] ? security_file_permission+0x473/0x4b0 [ 151.952595] ? rw_verify_area+0x35e/0x580 [ 151.956894] ? SYSC_tee+0x13d0/0x13d0 [ 151.960756] splice_direct_to_actor+0x4c6/0x1040 [ 151.966714] ? do_splice_direct+0x540/0x540 [ 151.971169] ? security_file_permission+0x28f/0x4b0 [ 151.976232] ? rw_verify_area+0x35e/0x580 [ 151.980435] do_splice_direct+0x335/0x540 [ 151.984651] do_sendfile+0x1067/0x1e40 [ 151.988593] SYSC_sendfile64+0x1b3/0x300 [ 151.992739] SyS_sendfile64+0x64/0x90 [ 151.996616] do_syscall_64+0x309/0x430 [ 152.000560] ? SYSC_sendfile+0x320/0x320 [ 152.004653] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.009865] RIP: 0033:0x455979 [ 152.013064] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.020799] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 152.028115] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 152.035430] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.042740] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 152.050054] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000021 [ 152.076321] bridge0: port 3(team_slave_0) entered blocking state [ 152.082714] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:29 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f00000001c0)="045a6fadd67e1e2e9663fc40cee87147d7d993b7fa7cd1452a92d5ac29c48f5451f2deda24ae7f706e23cff491b11b0facae57ae56d671ca99c0a39e89aca6fcf846f3d2dc4d4fc190fc6b6f0e744f34465ebd86cf8f9e679467c1e474a885d07485c995c99fbfcbf929905ce6e4f5bedc36752c7e50121877b1d4e0775399aaa18c913103fa58033a947e2d440a230ddff2b1f28629e50a053aed8a991812ff59ad8ccaa7d17d935594394f7f760511787be0eb297437510b0207399ff0fd0c6733e65153b960f4e6e0382b9566d603af4df3aedf1182637d5ca2954a93a1dac7", 0xe1) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000340)={0x5, &(0x7f00000002c0)=[{0x613, 0x8, 0x9, 0xc2}, {0x2, 0x5, 0x3f, 0x8}, {0x4, 0x400, 0x4, 0x45a4}, {0x1ff, 0xfffffffffffffffd, 0x81, 0x40}, {0x0, 0x1f, 0x974}]}, 0x10) dup2(r1, r0) r2 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000380)={0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}, 0x4) getsockname(r2, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e22, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x6f}, {0xa, 0x4e22, 0xcb, @loopback={0x0, 0x1}, 0x2}, 0x2, [0x3, 0x2000000000fff, 0x0, 0x6, 0x80000001, 0x1, 0x8, 0x80000000]}, 0xa) dup2(r1, r2) getpeername$inet6(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x1c) 2018/04/30 11:32:29 executing program 5: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0xf70, 0x1, 0x9, 0x4e, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f0000000100)=0xfffffffffffffffa, 0x4) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040205031d856808000f00083c14cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 2018/04/30 11:32:29 executing program 7 (fault-call:5 fault-nth:6): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:29 executing program 3: prctl$getreaper(0x25, &(0x7f00000001c0)) r0 = getuid() r1 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="f13df5f896df8727be582c65e1d8e4ab66a610a8860650b05049ea829aa8e3a238aa2ed2a1418481b3a586033cd7f0a556948b4bcb2a50886d648caa09828112fd7c5b43bca01e9264f1723c277df8b23205688ca99e4036353634f96abc7b771abce46866830fe00032bb5249ac0562efbe46a7e8de5caee890b7b2d234538556a3bfc3f61b20487302b6832bb30112f2540e627d1a15db0023073b0bb87f7bd3856e8c2adeae798b88343d39831c6a6dec04", 0xb3, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r0, r1) 2018/04/30 11:32:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:29 executing program 6: r0 = socket$inet6(0xa, 0x800000806, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x9fd, 0x4) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000080)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffffffffffffbfb, 0x2, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x8, &(0x7f0000000180)=0x2) 2018/04/30 11:32:29 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000170001022dbd7000ffdbdf25fe80000000000008000000000000000d000004d42b000000e0000002000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001d4e2304004e2100010a008080ff000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000017f0000010000000000000000000000004e2200204e201000020080a02c000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="060000000000000081000000000000004000000000000000010000000000000002000000000000005500000000000000070000000000000000040000000000009d0f00000000000002000000000000000700000000000000634000000000000005000000bb6b6e00020001030000000000000000400000000100008029bd70000c000f00ff0000000000000028001a00ff010000000000000000000000000001ffffff8000000000000000000000000000000603"], 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2018/04/30 11:32:29 executing program 1 (fault-call:2 fault-nth:34): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 152.224343] FAULT_INJECTION: forcing a failure. [ 152.224343] name failslab, interval 1, probability 0, space 0, times 0 [ 152.224387] FAULT_INJECTION: forcing a failure. [ 152.224387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.235729] CPU: 0 PID: 10407 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 152.254338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.263712] Call Trace: [ 152.266334] dump_stack+0x185/0x1d0 [ 152.269976] should_fail+0x87b/0xab0 [ 152.273750] should_failslab+0x279/0x2a0 [ 152.277868] kmem_cache_alloc+0x136/0xb90 [ 152.282059] ? dup_fd+0xc1/0x1480 [ 152.285539] dup_fd+0xc1/0x1480 [ 152.288829] ? audit_alloc+0x3f/0x870 [ 152.292640] ? copy_process+0x2090/0x9bb0 [ 152.296794] ? audit_alloc+0x44/0x870 [ 152.300608] ? copy_semundo+0x65/0x3f0 [ 152.304508] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 152.309974] copy_process+0x2386/0x9bb0 [ 152.313979] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.318865] ? kmsan_set_origin+0x9e/0x160 [ 152.323144] ? fsnotify+0x493/0x18f0 [ 152.326883] ? __msan_poison_alloca+0x91/0x1d0 [ 152.331490] _do_fork+0x311/0xf00 [ 152.334982] ? prepare_exit_to_usermode+0x149/0x3a0 [ 152.340058] SYSC_clone+0xf6/0x110 [ 152.343669] SyS_clone+0x77/0xa0 [ 152.347096] do_syscall_64+0x309/0x430 [ 152.351012] ? sys_vfork+0x70/0x70 [ 152.354575] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.359772] RIP: 0033:0x455979 [ 152.362967] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 152.370690] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 152.377963] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 152.385239] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 152.392514] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 152.399789] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000006 [ 152.407078] CPU: 1 PID: 10413 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 152.414010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.423370] Call Trace: [ 152.425968] dump_stack+0x185/0x1d0 [ 152.429608] should_fail+0x87b/0xab0 [ 152.433354] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 152.438121] ? kernel_poison_pages+0x40/0x360 [ 152.442626] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 152.447998] ? kernel_poison_pages+0x1a0/0x360 [ 152.452589] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 152.458048] ? get_page_from_freelist+0xab28/0xb600 [ 152.463071] ? __kernel_text_address+0x34/0xe0 [ 152.467665] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 152.473124] ? __save_stack_trace+0x90d/0xb00 [ 152.477640] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 152.478815] FAULT_INJECTION: forcing a failure. [ 152.478815] name failslab, interval 1, probability 0, space 0, times 0 [ 152.482575] ? push_pipe+0x680/0xca0 [ 152.482587] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 152.482600] ? default_file_splice_read+0x2b9/0x1120 [ 152.482611] ? do_sendfile+0x1067/0x1e40 [ 152.482622] ? SyS_sendfile64+0x64/0x90 [ 152.482634] ? do_syscall_64+0x309/0x430 [ 152.482649] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.482669] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.482683] ? __msan_poison_alloca+0x15c/0x1d0 [ 152.482701] kmsan_alloc_page+0x82/0xe0 [ 152.482719] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 152.482730] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 152.482766] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 152.553980] ? kmsan_kmalloc+0x94/0x100 [ 152.557943] ? __kmalloc_node+0xdec/0x1190 [ 152.562165] ? kvmalloc_node+0x1a1/0x2e0 [ 152.566213] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 152.571389] ? default_file_splice_read+0x2b9/0x1120 [ 152.576477] ? splice_direct_to_actor+0x4c6/0x1040 [ 152.581389] ? do_splice_direct+0x335/0x540 [ 152.585696] ? do_sendfile+0x1067/0x1e40 [ 152.589741] ? SYSC_sendfile64+0x1b3/0x300 [ 152.593961] ? SyS_sendfile64+0x64/0x90 [ 152.597921] ? do_syscall_64+0x309/0x430 [ 152.601970] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.607330] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.612168] ? __msan_poison_alloca+0x15c/0x1d0 [ 152.616822] ? should_failslab+0x279/0x2a0 [ 152.621049] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.625895] ? memcg_kmem_put_cache+0x40/0x280 [ 152.630563] alloc_pages_current+0x6b5/0x970 [ 152.634970] push_pipe+0x680/0xca0 [ 152.638502] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 152.643511] default_file_splice_read+0x2b9/0x1120 [ 152.648432] ? __fsnotify_parent+0x132/0x560 [ 152.652833] ? security_file_permission+0x473/0x4b0 [ 152.657842] ? rw_verify_area+0x35e/0x580 [ 152.661980] ? SYSC_tee+0x13d0/0x13d0 [ 152.665768] splice_direct_to_actor+0x4c6/0x1040 [ 152.670529] ? do_splice_direct+0x540/0x540 [ 152.674835] ? security_file_permission+0x28f/0x4b0 [ 152.679841] ? rw_verify_area+0x35e/0x580 [ 152.683975] do_splice_direct+0x335/0x540 [ 152.688116] do_sendfile+0x1067/0x1e40 [ 152.691999] SYSC_sendfile64+0x1b3/0x300 [ 152.696054] SyS_sendfile64+0x64/0x90 [ 152.699843] do_syscall_64+0x309/0x430 [ 152.703717] ? SYSC_sendfile+0x320/0x320 [ 152.707768] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.712944] RIP: 0033:0x455979 [ 152.716114] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/04/30 11:32:29 executing program 7 (fault-call:5 fault-nth:7): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 152.723896] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 152.731151] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 152.738406] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.745664] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 152.752920] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000022 [ 152.760206] CPU: 0 PID: 10419 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 152.767165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/04/30 11:32:29 executing program 5: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x8005, 0x807ff, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x800) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100), 0x2dc}]) r2 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="65e23541ff0e44d4ac47881eee00e84ffbe4", 0x12, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x8) [ 152.776647] Call Trace: [ 152.779287] dump_stack+0x185/0x1d0 [ 152.782961] should_fail+0x87b/0xab0 [ 152.786778] should_failslab+0x279/0x2a0 [ 152.790950] __kmalloc+0xc2/0x350 [ 152.794489] ? alloc_fdtable+0xc3/0x5e0 [ 152.798586] ? alloc_fdtable+0x2a/0x5e0 [ 152.803077] alloc_fdtable+0xc3/0x5e0 [ 152.806941] dup_fd+0xfef/0x1480 [ 152.810354] ? audit_alloc+0x3f/0x870 [ 152.814195] ? copy_process+0x2090/0x9bb0 [ 152.818402] copy_process+0x2386/0x9bb0 [ 152.822432] ? kmsan_set_origin_inline+0x6b/0x120 [ 152.828052] ? kmsan_set_origin+0x9e/0x160 [ 152.832378] ? fsnotify+0x493/0x18f0 [ 152.836150] ? __msan_poison_alloca+0x91/0x1d0 [ 152.840780] _do_fork+0x311/0xf00 [ 152.844301] ? prepare_exit_to_usermode+0x149/0x3a0 [ 152.849413] SYSC_clone+0xf6/0x110 [ 152.853069] SyS_clone+0x77/0xa0 [ 152.857108] do_syscall_64+0x309/0x430 [ 152.861080] ? sys_vfork+0x70/0x70 [ 152.869980] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 152.875212] RIP: 0033:0x455979 [ 152.878476] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 152.886244] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 152.893563] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 152.898519] bridge0: port 3(team_slave_0) entered blocking state [ 152.900872] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 152.900891] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 2018/04/30 11:32:29 executing program 1 (fault-call:2 fault-nth:35): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:29 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 152.900908] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000007 [ 152.929606] bridge0: port 3(team_slave_0) entered disabled state [ 153.010703] FAULT_INJECTION: forcing a failure. [ 153.010703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 153.022563] CPU: 1 PID: 10432 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 153.029500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.038866] Call Trace: [ 153.041475] dump_stack+0x185/0x1d0 [ 153.045125] should_fail+0x87b/0xab0 [ 153.048869] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 153.053640] ? kernel_poison_pages+0x40/0x360 [ 153.058146] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 153.063522] ? kernel_poison_pages+0x1a0/0x360 [ 153.068121] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 153.073594] ? get_page_from_freelist+0xab28/0xb600 [ 153.078618] ? __kernel_text_address+0x34/0xe0 [ 153.083217] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 153.088682] ? __save_stack_trace+0x90d/0xb00 [ 153.093209] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 153.098242] ? push_pipe+0x680/0xca0 [ 153.101969] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 153.102555] FAULT_INJECTION: forcing a failure. [ 153.102555] name failslab, interval 1, probability 0, space 0, times 0 [ 153.107167] ? default_file_splice_read+0x2b9/0x1120 [ 153.107182] ? do_sendfile+0x1067/0x1e40 [ 153.107193] ? SyS_sendfile64+0x64/0x90 [ 153.107205] ? do_syscall_64+0x309/0x430 [ 153.107221] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 153.107237] ? __kernel_text_address+0x34/0xe0 [ 153.107255] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.107296] ? __msan_poison_alloca+0x15c/0x1d0 [ 153.154973] kmsan_alloc_page+0x82/0xe0 [ 153.158943] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 153.163684] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 153.169038] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 153.174304] ? kmsan_kmalloc+0x94/0x100 [ 153.178264] ? __kmalloc_node+0xdec/0x1190 [ 153.182491] ? kvmalloc_node+0x1a1/0x2e0 [ 153.186540] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 153.191721] ? default_file_splice_read+0x2b9/0x1120 [ 153.196809] ? splice_direct_to_actor+0x4c6/0x1040 [ 153.201734] ? do_splice_direct+0x335/0x540 [ 153.206047] ? do_sendfile+0x1067/0x1e40 [ 153.210094] ? SYSC_sendfile64+0x1b3/0x300 [ 153.214316] ? SyS_sendfile64+0x64/0x90 [ 153.218279] ? do_syscall_64+0x309/0x430 [ 153.222329] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 153.227684] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 153.233122] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.237951] ? __msan_poison_alloca+0x15c/0x1d0 [ 153.242609] ? should_failslab+0x279/0x2a0 [ 153.246834] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.251673] ? memcg_kmem_put_cache+0x40/0x280 [ 153.256252] alloc_pages_current+0x6b5/0x970 [ 153.260649] push_pipe+0x680/0xca0 [ 153.264213] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 153.269226] default_file_splice_read+0x2b9/0x1120 [ 153.274147] ? __fsnotify_parent+0x132/0x560 [ 153.278547] ? security_file_permission+0x473/0x4b0 [ 153.283555] ? rw_verify_area+0x35e/0x580 [ 153.287693] ? SYSC_tee+0x13d0/0x13d0 [ 153.291483] splice_direct_to_actor+0x4c6/0x1040 [ 153.296228] ? do_splice_direct+0x540/0x540 [ 153.300537] ? security_file_permission+0x28f/0x4b0 [ 153.305546] ? rw_verify_area+0x35e/0x580 [ 153.309689] do_splice_direct+0x335/0x540 [ 153.313828] do_sendfile+0x1067/0x1e40 [ 153.317714] SYSC_sendfile64+0x1b3/0x300 [ 153.321769] SyS_sendfile64+0x64/0x90 [ 153.325586] do_syscall_64+0x309/0x430 [ 153.329462] ? SYSC_sendfile+0x320/0x320 [ 153.333515] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 153.338695] RIP: 0033:0x455979 [ 153.341869] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 153.349564] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 2018/04/30 11:32:30 executing program 7 (fault-call:5 fault-nth:8): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 153.356820] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 153.364076] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.371339] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 153.378593] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000023 [ 153.385884] CPU: 0 PID: 10436 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 153.392872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.402260] Call Trace: [ 153.404932] dump_stack+0x185/0x1d0 [ 153.408613] should_fail+0x87b/0xab0 [ 153.412396] should_failslab+0x279/0x2a0 [ 153.416511] __kmalloc_node+0x22e/0x1190 [ 153.420627] ? trace_kmalloc+0xa3/0x2b0 [ 153.424642] ? __kmalloc+0x20c/0x350 [ 153.428396] ? kvmalloc_node+0x1a1/0x2e0 [ 153.432507] ? trace_kmalloc+0xb6/0x2b0 [ 153.436572] kvmalloc_node+0x1a1/0x2e0 [ 153.440563] alloc_fdtable+0x17e/0x5e0 [ 153.444510] dup_fd+0xfef/0x1480 [ 153.447949] ? audit_alloc+0x3f/0x870 [ 153.451787] ? copy_process+0x2090/0x9bb0 [ 153.456004] copy_process+0x2386/0x9bb0 [ 153.460032] ? kmsan_set_origin_inline+0x6b/0x120 [ 153.464959] ? kmsan_set_origin+0x9e/0x160 [ 153.469276] ? fsnotify+0x493/0x18f0 [ 153.473038] ? __msan_poison_alloca+0x91/0x1d0 [ 153.477667] _do_fork+0x311/0xf00 [ 153.481171] ? prepare_exit_to_usermode+0x149/0x3a0 [ 153.486273] SYSC_clone+0xf6/0x110 [ 153.489922] SyS_clone+0x77/0xa0 [ 153.493386] do_syscall_64+0x309/0x430 [ 153.497332] ? sys_vfork+0x70/0x70 [ 153.500915] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 153.506132] RIP: 0033:0x455979 2018/04/30 11:32:30 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x800000000000852b, 0x7}, 0x14) recvmmsg(r0, &(0x7f0000008540)=[{{&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000002380)}}], 0x1, 0x2, &(0x7f00000086c0)) sendto(r0, &(0x7f00001a6000)="f1", 0x1, 0x0, &(0x7f000020ffa0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75296811812f17fcb15b854768b106479b8744cc07f4ef85104f214b714432d6b762b606b112d7bdfaa9811dffe7e6bf498b64cded3bcd7ee27eb2bed57758"}, 0x80) [ 153.509340] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.517090] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 153.524391] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 153.531696] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 153.539003] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 153.546323] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000008 2018/04/30 11:32:31 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x7fd) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) truncate(&(0x7f00000000c0)='./file0\x00', 0x81) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x2) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'yam0\x00', 0x4}, 0x18) 2018/04/30 11:32:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:31 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000170001022dbd7000ffdbdf25fe80000000000008000000000000000d000004d42b000000e0000002000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001d4e2304004e2100010a008080ff000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000017f0000010000000000000000000000004e2200204e201000020080a02c000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="060000000000000081000000000000004000000000000000010000000000000002000000000000005500000000000000070000000000000000040000000000009d0f00000000000002000000000000000700000000000000634000000000000005000000bb6b6e00020001030000000000000000400000000100008029bd70000c000f00ff0000000000000028001a00ff010000000000000000000000000001ffffff8000000000000000000000000000000603"], 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2018/04/30 11:32:31 executing program 3: r0 = socket$inet(0x2, 0x80006, 0x0) r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000180)='./file0\x00') getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000380)=""/50, &(0x7f00000003c0)=0x32) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000500), 0xffffffffffffff74) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='system.\'proc/s}s/net/ipv4/vs/expire_quiescent_template\x00']) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x2, 0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x252, @time={r3, r4+10000000}, 0x1, {0x93f, 0x20}, 0xfa59, 0x1, 0x7}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/30 11:32:31 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000140)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000740)={0x171, {{0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1000}}}, 0x88) getpeername$inet(r0, &(0x7f0000000280)={0x0, 0x0, @remote}, &(0x7f00000002c0)=0x10) set_robust_list(&(0x7f0000000240)={&(0x7f00000000c0), 0x0, &(0x7f00000001c0)}, 0x18) fsetxattr(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="75736572757365742f73236865645f0000d6fbf3ba184cc2cc0528c92a8dfbaec27b38fb67af40c3e38e69a9431565dd67a97da9c902db751b92799dee75dad0fdecd571297f8ee433ee526249ee1272b0230fffa84c2c4134e106b079095ccedc80567759167f9085b3bd5580b5a5387782532be844171e98762eb41abe1a0dc6f1243a07ca282f4a39f6c9314be454bf170d4d6c585f9a92f15aedaff1843a0ee83abd8d70926b18720430a7c936a26c734e9bda536fc2ba3b41b6146d9605410a500fcfe6cf588c0d20cbead7240db7c120e73135e3c2e3d31a66a4ff8a5bc59f9038f52b99d98d48ee1957aa2648a55ed7bb5bb93e"], &(0x7f0000000840)='GPL{em1\x00', 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={"726974ac0000000300060037087d00", r1}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x8000000, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) r4 = semget$private(0x0, 0x6, 0x20) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f0000000300)=""/230) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xffffffffffff8001, 0x4) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x200, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000004c0)) r6 = fcntl$getown(r0, 0x9) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt(r5, 0xfffffffffffffffc, 0x400, &(0x7f0000000a00)="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", 0x1000) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0xcf7, 0x101, 0x7, 0x100000001}, {0x4, 0xffffffffffffff81, 0x1f, 0x20}]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000700)=0xe8) r10 = getgid() syz_fuse_mount(&(0x7f00000005c0)='./file0\x00', 0xc000, r9, r10, 0xffffffffffff0001, 0x20004) sendfile(r8, r8, &(0x7f0000000080), 0x3) ptrace$cont(0x3f, r6, 0x5ee3, 0x7) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e24, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in={0x2, 0x4e20, @broadcast=0xffffffff}], 0x2c) 2018/04/30 11:32:31 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r0}) setfsuid(r1) 2018/04/30 11:32:31 executing program 1 (fault-call:2 fault-nth:36): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:31 executing program 7 (fault-call:5 fault-nth:9): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 154.687316] FAULT_INJECTION: forcing a failure. [ 154.687316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.696900] bridge0: port 3(team_slave_0) entered blocking state [ 154.699617] CPU: 0 PID: 10459 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 154.705823] bridge0: port 3(team_slave_0) entered disabled state [ 154.712646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.712660] Call Trace: [ 154.712706] dump_stack+0x185/0x1d0 [ 154.712752] should_fail+0x87b/0xab0 [ 154.738279] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 154.738351] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 154.748500] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 154.748524] ? kmsan_kmalloc+0x94/0x100 [ 154.748555] ? __kmalloc_node+0xdec/0x1190 [ 154.748627] ? kvmalloc_node+0x1a1/0x2e0 [ 154.748655] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 154.748683] ? default_file_splice_read+0x2b9/0x1120 [ 154.748707] ? splice_direct_to_actor+0x4c6/0x1040 [ 154.748759] ? do_splice_direct+0x335/0x540 [ 154.748815] ? do_sendfile+0x1067/0x1e40 [ 154.748856] ? SYSC_sendfile64+0x1b3/0x300 [ 154.748908] ? SyS_sendfile64+0x64/0x90 [ 154.748933] ? do_syscall_64+0x309/0x430 [ 154.748995] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 154.749061] ? kmsan_set_origin_inline+0x6b/0x120 [ 154.749121] ? kmsan_set_origin_inline+0x6b/0x120 [ 154.749151] ? __msan_poison_alloca+0x15c/0x1d0 [ 154.749180] ? should_failslab+0x279/0x2a0 [ 154.749212] ? kmsan_set_origin_inline+0x6b/0x120 [ 154.749257] ? memcg_kmem_put_cache+0x40/0x280 2018/04/30 11:32:31 executing program 6: timer_create(0x0, &(0x7f0000000000)={0x0, 0x80000040000013, 0x4, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f00000000c0)=0x0) r1 = memfd_create(&(0x7f0000000000)='ppp1\x00', 0x0) sendto$inet6(r1, &(0x7f00000006c0)="bb78f4c2cecc113dc10440e359b505d6fa85bb0a39e3a49e4a3d17237efba505974700f5f88be1e3e6be9078038f923ca8d167e0a19b315cf188138e4c0feca37597e7bf5cbdd2828fd48a29761a1d776b8092420cb70d53c936b225a75df848cd1cc255d758d1f697bba480fe27b3039ac4c3abd133af8d7548c867d53676bc4ab104a5fd7f9205c7f714b41f8634ce298ad34edc694e04abfe17a8de2eb122eb0e18aa6db8636e10bf2fb4b1a39f8348b8b007168145b888d37ef9a654f94829620fb233adf296d1dd12bc5bfb8fe4d7bded0930d77b5fcf44dfc795591c78bfdc5210756c9502e5a53b", 0xeb, 0xc000, &(0x7f00000007c0)={0xa, 0x4e21, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x800, 0x1, 0x5, 0x401, 0x92c}, 0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) io_submit(0x0, 0x7, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000800)="61ecb11513bb8d9711fee27e7277ef685cc98e4101bb9687a3d6672c103df11b2e8b86252038c2164091dcaf91e3b7bd6cdbce8f369ad8a3bf0b954abb21769135ac1ee196f4", 0x46, 0x972, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x100000000, r1, &(0x7f0000000200)="429531b8e78f1fcb507522616e82bd2e5cd0311c59ec52cb9f396c7ff229aac6e10b83249ba8ad29b13a142bc8bfb435e0fe6a96", 0x34, 0x9, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x7f, r1, &(0x7f0000000280)="06d04acf172c91a6c2263eb932ed695ec9c5901d49b4e18c78351db0af83794820c120465a1b649eb383d5f830e0ba38ea39d9ab9db9ea6f109d503d21989a6071a24c12f0db1230faa001f442baf5faecc748b12ae2daa1849d9bb516a4048f0251b8c3e6035211a22cc2f6e0594fbc9da101e0946e1707e34cac07a60cdcfb5fb7c4fa0d7c392357d003f7a7ebb437037de238de41bda1a0481676", 0x9c, 0x4, 0x0, 0x0, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000380)="5d659f219fa18e021c2d0629c99211b91cdba213139ed9e00276ff4ced41bd8faa2b72ac1d98f18b2908a389453ba65886426d6cbf57cfb8b2968dd3275c623da543e8a8be2cd2f76d1f094c272d423a021f112050add6f98989b191f4bdd52afc016c83389ece7b611a98d0212aa7dc5f0b0aba03ec5398e724a935f3d93758ebf537e142a44aaf6cef3c52229082acbab0807a3d2a", 0x96, 0x0, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x1000, r1, &(0x7f0000001340)="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", 0x1000, 0x8, 0x0, 0x1, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xb, 0x1, r1, &(0x7f00000004c0)="3b453fc6ea394f5e2b888310c7279519ef6500cd2b8519e7137ce62ddf43d8e7b6210fb6bf8d1d1a5cf22c9852d0cd0f7a3f045c1698e3db48bd27d741994998f8b137395127f024739b3fb1117d0726e8f31403dff0566269fd10fb07d051f307f1577167b653", 0x67, 0x200, 0x0, 0x0, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000580)="f7eb2d6bfb5c12fb7be140b281ffd2dcbd7ea23bb47db076097b2ecc3b44221ed583c4e39adfdf507802619d3aa3acb0efffd827239f09117bd7d4e9353eb848d7fadbf0850ec9710b665d49ac7221508ffba838e866f34dbe22186b355990b9d5f13f95f782400f9d94d079359c05a569c4383358f92e8c7a39a5de16f69803e2b6d4765e586495c865b26fbdc39136052459913ad9879dbfe9feef3a93644bfd952099bd61b692a586873b957dc837", 0xb0, 0x7, 0x0, 0x1, r1}]) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x7, 0x210400) timer_settime(r0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000001300)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) [ 154.749303] alloc_pages_current+0x6b5/0x970 [ 154.749385] push_pipe+0x680/0xca0 [ 154.749472] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 154.749515] default_file_splice_read+0x2b9/0x1120 [ 154.854783] ? __fsnotify_parent+0x132/0x560 [ 154.859289] ? security_file_permission+0x473/0x4b0 [ 154.864405] ? rw_verify_area+0x35e/0x580 [ 154.868604] ? SYSC_tee+0x13d0/0x13d0 [ 154.872452] splice_direct_to_actor+0x4c6/0x1040 [ 154.877260] ? do_splice_direct+0x540/0x540 [ 154.880616] FAULT_INJECTION: forcing a failure. [ 154.880616] name failslab, interval 1, probability 0, space 0, times 0 [ 154.881624] ? security_file_permission+0x28f/0x4b0 [ 154.881662] ? rw_verify_area+0x35e/0x580 [ 154.881710] do_splice_direct+0x335/0x540 [ 154.906286] do_sendfile+0x1067/0x1e40 [ 154.910257] SYSC_sendfile64+0x1b3/0x300 [ 154.914383] SyS_sendfile64+0x64/0x90 [ 154.918242] do_syscall_64+0x309/0x430 [ 154.922157] ? SYSC_sendfile+0x320/0x320 [ 154.926238] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 154.931454] RIP: 0033:0x455979 [ 154.934648] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.942371] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 154.949732] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 154.957009] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.964288] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 154.971651] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000024 [ 154.978955] CPU: 1 PID: 10467 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 154.985915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.995303] Call Trace: [ 154.997948] dump_stack+0x185/0x1d0 [ 155.001628] should_fail+0x87b/0xab0 [ 155.005406] should_failslab+0x279/0x2a0 [ 155.009533] __kmalloc_node+0x22e/0x1190 [ 155.013649] ? trace_kmalloc+0xa3/0x2b0 [ 155.017669] ? __kmalloc+0x20c/0x350 [ 155.021427] ? kvmalloc_node+0x1a1/0x2e0 [ 155.025579] kvmalloc_node+0x1a1/0x2e0 [ 155.029557] alloc_fdtable+0x2aa/0x5e0 [ 155.033509] dup_fd+0xfef/0x1480 [ 155.036924] ? audit_alloc+0x3f/0x870 [ 155.040772] ? copy_process+0x2090/0x9bb0 [ 155.044986] copy_process+0x2386/0x9bb0 [ 155.049026] ? kmsan_set_origin_inline+0x6b/0x120 [ 155.053956] ? kmsan_set_origin+0x9e/0x160 [ 155.058283] ? fsnotify+0x493/0x18f0 [ 155.062061] ? __msan_poison_alloca+0x91/0x1d0 [ 155.066704] _do_fork+0x311/0xf00 [ 155.070610] ? prepare_exit_to_usermode+0x149/0x3a0 [ 155.075718] SYSC_clone+0xf6/0x110 [ 155.079389] SyS_clone+0x77/0xa0 [ 155.082856] do_syscall_64+0x309/0x430 2018/04/30 11:32:32 executing program 1 (fault-call:2 fault-nth:37): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 155.086799] ? sys_vfork+0x70/0x70 [ 155.090404] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 155.095624] RIP: 0033:0x455979 [ 155.098838] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 155.106590] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 155.113895] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 155.121201] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 155.128508] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 2018/04/30 11:32:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c010000170001022dbd7000ffdbdf25fe80000000000008000000000000000d000004d42b000000e0000002000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001d4e2304004e2100010a008080ff000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000017f0000010000000000000000000000004e2200204e201000020080a02c000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="060000000000000081000000000000004000000000000000010000000000000002000000000000005500000000000000070000000000000000040000000000009d0f00000000000002000000000000000700000000000000634000000000000005000000bb6b6e00020001030000000000000000400000000100008029bd70000c000f00ff0000000000000028001a00ff010000000000000000000000000001ffffff8000000000000000000000000000000603"], 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) [ 155.135815] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000009 [ 155.152915] FAULT_INJECTION: forcing a failure. [ 155.152915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.164763] CPU: 1 PID: 10480 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 155.171700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.181068] Call Trace: [ 155.183666] dump_stack+0x185/0x1d0 [ 155.187304] should_fail+0x87b/0xab0 [ 155.191042] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 155.195814] ? kernel_poison_pages+0x40/0x360 [ 155.200322] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.205709] ? kernel_poison_pages+0x1a0/0x360 [ 155.210307] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 155.215784] ? get_page_from_freelist+0xab28/0xb600 [ 155.220815] ? __kernel_text_address+0x34/0xe0 [ 155.225415] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.230380] bridge0: port 3(team_slave_0) entered blocking state [ 155.230881] ? __save_stack_trace+0x90d/0xb00 [ 155.230913] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 155.230928] ? push_pipe+0x680/0xca0 [ 155.230941] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 155.230955] ? default_file_splice_read+0x2b9/0x1120 [ 155.230967] ? do_sendfile+0x1067/0x1e40 [ 155.230978] ? SyS_sendfile64+0x64/0x90 [ 155.230990] ? do_syscall_64+0x309/0x430 [ 155.231020] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 155.237338] bridge0: port 3(team_slave_0) entered disabled state [ 155.241653] ? kmsan_set_origin_inline+0x6b/0x120 2018/04/30 11:32:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x1, 0xffff, 0x1, 0x8, 0x2, 0x5, 0x5, 0x7fffffff}, 0xb) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000040)=@l2={0x1f}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)='&', 0x1}], 0x1, &(0x7f0000001780)}, 0x8001) recvfrom$inet(r0, &(0x7f00000000c0)=""/140, 0x8c, 0x40, &(0x7f0000000180)={0x2, 0x0, @broadcast=0xffffffff}, 0x4) 2018/04/30 11:32:32 executing program 7 (fault-call:5 fault-nth:10): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 155.241666] ? __msan_poison_alloca+0x15c/0x1d0 [ 155.241684] kmsan_alloc_page+0x82/0xe0 [ 155.241703] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 155.241714] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 155.241740] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 155.312997] ? kmsan_kmalloc+0x94/0x100 [ 155.316997] ? __kmalloc_node+0xdec/0x1190 [ 155.321245] ? kvmalloc_node+0x1a1/0x2e0 [ 155.325405] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 155.330605] ? default_file_splice_read+0x2b9/0x1120 [ 155.335718] ? splice_direct_to_actor+0x4c6/0x1040 [ 155.340656] ? do_splice_direct+0x335/0x540 [ 155.344989] ? do_sendfile+0x1067/0x1e40 [ 155.349061] ? SYSC_sendfile64+0x1b3/0x300 [ 155.353303] ? SyS_sendfile64+0x64/0x90 [ 155.357289] ? do_syscall_64+0x309/0x430 [ 155.361367] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 155.366751] ? kmsan_set_origin_inline+0x6b/0x120 [ 155.371610] ? __msan_poison_alloca+0x15c/0x1d0 [ 155.376293] ? should_failslab+0x279/0x2a0 [ 155.380545] ? kmsan_set_origin_inline+0x6b/0x120 [ 155.385407] ? memcg_kmem_put_cache+0x40/0x280 2018/04/30 11:32:32 executing program 6: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000002c0)="b049534500") set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x7) readv(r1, &(0x7f000004ffe0)=[{&(0x7f0000000000)=""/128, 0xe6}], 0x222) fadvise64(r1, 0x0, 0x8000, 0x0) [ 155.390009] alloc_pages_current+0x6b5/0x970 [ 155.394429] push_pipe+0x680/0xca0 [ 155.397987] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 155.403027] default_file_splice_read+0x2b9/0x1120 [ 155.407976] ? __fsnotify_parent+0x132/0x560 [ 155.412577] ? security_file_permission+0x473/0x4b0 [ 155.417617] ? rw_verify_area+0x35e/0x580 [ 155.421798] ? SYSC_tee+0x13d0/0x13d0 [ 155.425623] splice_direct_to_actor+0x4c6/0x1040 [ 155.430388] ? do_splice_direct+0x540/0x540 [ 155.434720] ? security_file_permission+0x28f/0x4b0 [ 155.439770] ? rw_verify_area+0x35e/0x580 [ 155.443929] do_splice_direct+0x335/0x540 [ 155.448094] do_sendfile+0x1067/0x1e40 [ 155.451997] SYSC_sendfile64+0x1b3/0x300 [ 155.456065] SyS_sendfile64+0x64/0x90 [ 155.459870] do_syscall_64+0x309/0x430 [ 155.463767] ? SYSC_sendfile+0x320/0x320 [ 155.467837] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 155.473034] RIP: 0033:0x455979 [ 155.476231] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.484035] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 155.491312] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 155.498593] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.505874] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 155.513152] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000025 [ 155.652647] FAULT_INJECTION: forcing a failure. [ 155.652647] name failslab, interval 1, probability 0, space 0, times 0 [ 155.664008] CPU: 1 PID: 10495 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 155.670973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.680372] Call Trace: [ 155.683022] dump_stack+0x185/0x1d0 [ 155.686704] should_fail+0x87b/0xab0 [ 155.690519] should_failslab+0x279/0x2a0 [ 155.694690] kmem_cache_alloc+0x136/0xb90 [ 155.698897] ? copy_fs_struct+0x74/0x300 [ 155.703003] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 155.708495] ? dup_fd+0xd6b/0x1480 [ 155.712090] copy_fs_struct+0x74/0x300 [ 155.716045] copy_process+0x2536/0x9bb0 [ 155.720071] ? kmsan_set_origin_inline+0x6b/0x120 [ 155.724989] ? kmsan_set_origin+0x9e/0x160 [ 155.729302] ? fsnotify+0x493/0x18f0 [ 155.733074] ? __msan_poison_alloca+0x91/0x1d0 [ 155.737706] _do_fork+0x311/0xf00 [ 155.741221] ? prepare_exit_to_usermode+0x149/0x3a0 [ 155.746340] SYSC_clone+0xf6/0x110 [ 155.749992] SyS_clone+0x77/0xa0 [ 155.753452] do_syscall_64+0x309/0x430 [ 155.757406] ? sys_vfork+0x70/0x70 [ 155.761003] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 155.766229] RIP: 0033:0x455979 [ 155.769446] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 155.777203] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 155.784507] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 155.792163] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 2018/04/30 11:32:32 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101000, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="3b97246929fe367158167c13ebce1000489ba7f4a4ab72580dbaa96c074e10629f6b8bc01ea509fa60f3428c93765657e0a347870e7ffc6979b27f3c6150fffe6c25d1fcefae5601a428191333fa1bb91fcade0d18c20f03cf1b70a93b3b") r3 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000300)={0x50000011}) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c653020656d306d643573756d05ea23552e7b637075736574f76c616e3175736572202f6465762f6e756c6c0020656d308c6c6f706f7369785f61636c5f6163636573732c206a776c616e305d47504c28206367726f757040202f6465762f6e756c6c0020202f6465762f766373000ac0330e0f7db4aff7ca27224032cc0d98ce3928c9bf30f49fe39860d16ff6f713fc851b5fe76d30b548bd32cc4dcc37e19f2ab8be986c82b5874cd87ee54a0206e35986d4bc90bc74ee4a740d4231a28555a4b0e2aa26db47ca1dcac580c0b201d1065b1d7d988635"], 0xda) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 2018/04/30 11:32:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) 2018/04/30 11:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x800000000240c3e, 0x0) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x1, r2}]) r3 = semget$private(0x0, 0x1, 0x610) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000380)={{0x4, r4, r5, r6, r7, 0x0, 0x7}, 0x3, 0x20, 0xfffffffffffffffe}) 2018/04/30 11:32:32 executing program 6: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000f20ff8)='./file0\x00', &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x400, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x46a9}, 0x8) sendfile(r0, r1, &(0x7f0000aef000), 0x0) 2018/04/30 11:32:32 executing program 7 (fault-call:5 fault-nth:11): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:32 executing program 1 (fault-call:2 fault-nth:38): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:32 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x35e5, 0x2300) fcntl$setpipe(r0, 0x407, 0x332dffba) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x201, 0x0) write$eventfd(r1, &(0x7f0000000000), 0x8) 2018/04/30 11:32:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) [ 155.799473] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 155.806968] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000a [ 155.879422] FAULT_INJECTION: forcing a failure. [ 155.879422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.881653] bridge0: port 3(team_slave_0) entered blocking state [ 155.891402] CPU: 1 PID: 10520 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 155.891410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.891414] Call Trace: [ 155.891437] dump_stack+0x185/0x1d0 [ 155.891454] should_fail+0x87b/0xab0 [ 155.891476] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 155.891492] ? kernel_poison_pages+0x40/0x360 [ 155.891507] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 155.891520] ? kernel_poison_pages+0x1a0/0x360 [ 155.891532] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 155.891562] ? get_page_from_freelist+0xab28/0xb600 [ 155.897848] bridge0: port 3(team_slave_0) entered disabled state [ 155.904620] ? __kernel_text_address+0x34/0xe0 [ 155.904639] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 155.904655] ? __save_stack_trace+0x90d/0xb00 [ 155.904680] kmsan_alloc_meta_for_pages+0x10c/0x3a0 2018/04/30 11:32:33 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0x401c5820, &(0x7f0000000040)=ANY=[@ANYBLOB="00000600fc8301b0188bfd6314580000c95bc72c8cb2c12ae0f94f1a000000000000000000000000000000754ad825"]) [ 155.904694] ? push_pipe+0x680/0xca0 [ 155.904706] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 155.904719] ? default_file_splice_read+0x2b9/0x1120 [ 155.904729] ? do_sendfile+0x1067/0x1e40 [ 155.904756] ? SyS_sendfile64+0x64/0x90 [ 156.001429] ? do_syscall_64+0x309/0x430 [ 156.005506] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 156.010881] ? __msan_poison_alloca+0x15c/0x1d0 [ 156.015563] ? __switch_to+0x2b3/0x420 [ 156.019458] ? kmsan_set_origin_inline+0x6b/0x120 [ 156.024310] ? __msan_poison_alloca+0x15c/0x1d0 2018/04/30 11:32:33 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) [ 156.029008] kmsan_alloc_page+0x82/0xe0 2018/04/30 11:32:33 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x7ffd}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semop(r0, &(0x7f0000035000)=[{0x4, 0x100000081, 0x1}, {}], 0x2) [ 156.029022] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 156.029031] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 156.029039] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 156.029046] ? kmsan_kmalloc+0x94/0x100 [ 156.029056] ? __kmalloc_node+0xdec/0x1190 [ 156.029068] ? kvmalloc_node+0x1a1/0x2e0 [ 156.029078] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 156.029087] ? default_file_splice_read+0x2b9/0x1120 [ 156.029094] ? splice_direct_to_actor+0x4c6/0x1040 [ 156.029101] ? do_splice_direct+0x335/0x540 [ 156.029109] ? do_sendfile+0x1067/0x1e40 [ 156.029116] ? SYSC_sendfile64+0x1b3/0x300 [ 156.029123] ? SyS_sendfile64+0x64/0x90 [ 156.029132] ? do_syscall_64+0x309/0x430 [ 156.029143] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 156.029154] ? kmsan_set_origin_inline+0x6b/0x120 [ 156.029163] ? __msan_poison_alloca+0x15c/0x1d0 [ 156.029172] ? should_failslab+0x279/0x2a0 [ 156.029182] ? kmsan_set_origin_inline+0x6b/0x120 [ 156.029197] ? memcg_kmem_put_cache+0x40/0x280 [ 156.029209] alloc_pages_current+0x6b5/0x970 2018/04/30 11:32:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x0, 0x40}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x1) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x0, 0x2000200000000, 0x8001, 0x7, 0x10, 0x3}) [ 156.029219] push_pipe+0x680/0xca0 [ 156.029232] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 156.029246] default_file_splice_read+0x2b9/0x1120 [ 156.029259] ? __fsnotify_parent+0x132/0x560 [ 156.029272] ? security_file_permission+0x473/0x4b0 [ 156.029285] ? rw_verify_area+0x35e/0x580 [ 156.029295] ? SYSC_tee+0x13d0/0x13d0 [ 156.029302] splice_direct_to_actor+0x4c6/0x1040 [ 156.029310] ? do_splice_direct+0x540/0x540 [ 156.029318] ? security_file_permission+0x28f/0x4b0 [ 156.029329] ? rw_verify_area+0x35e/0x580 [ 156.029349] do_splice_direct+0x335/0x540 [ 156.029362] do_sendfile+0x1067/0x1e40 [ 156.029377] SYSC_sendfile64+0x1b3/0x300 [ 156.029388] SyS_sendfile64+0x64/0x90 [ 156.029396] do_syscall_64+0x309/0x430 [ 156.029406] ? SYSC_sendfile+0x320/0x320 [ 156.029417] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 156.029425] RIP: 0033:0x455979 [ 156.029430] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.029439] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 156.029444] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 156.029448] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.029453] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 156.029457] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000026 [ 156.075727] FAULT_INJECTION: forcing a failure. [ 156.075727] name failslab, interval 1, probability 0, space 0, times 0 [ 156.167767] bridge0: port 3(team_slave_0) entered blocking state [ 156.169092] CPU: 0 PID: 10529 Comm: syz-executor7 Not tainted 4.16.0+ #87 2018/04/30 11:32:33 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4cc1, 0x100000001}, 0x2c) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x101200) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x260e03, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x2, {{0xa, 0x4e23, 0x3e5, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}, 0x2b1e}}}, 0x88) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000002c0)=""/161}, 0x24) [ 156.169109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.169121] Call Trace: [ 156.169161] dump_stack+0x185/0x1d0 [ 156.169205] should_fail+0x87b/0xab0 [ 156.173685] bridge0: port 3(team_slave_0) entered disabled state [ 156.177168] should_failslab+0x279/0x2a0 [ 156.177251] kmem_cache_alloc+0x136/0xb90 [ 156.357043] ? copy_process+0x276e/0x9bb0 [ 156.357082] ? lockref_get+0x2c4/0x310 [ 156.357151] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 156.357183] copy_process+0x276e/0x9bb0 [ 156.357221] ? kmsan_set_origin_inline+0x6b/0x120 [ 156.379601] ? kmsan_set_origin+0x9e/0x160 [ 156.383927] ? fsnotify+0x493/0x18f0 [ 156.387691] ? __msan_poison_alloca+0x91/0x1d0 [ 156.392325] _do_fork+0x311/0xf00 [ 156.395844] ? prepare_exit_to_usermode+0x149/0x3a0 [ 156.400951] SYSC_clone+0xf6/0x110 [ 156.404598] SyS_clone+0x77/0xa0 [ 156.408059] do_syscall_64+0x309/0x430 [ 156.412009] ? sys_vfork+0x70/0x70 [ 156.415601] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 156.420810] RIP: 0033:0x455979 2018/04/30 11:32:33 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xfffe00000000, 0x401) 2018/04/30 11:32:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:33 executing program 3: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x1f, 0x4) 2018/04/30 11:32:33 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500)) [ 156.424028] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 156.431779] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 156.439080] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 156.446381] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 156.453764] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 156.461066] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000b [ 156.593338] bridge0: port 3(team_slave_0) entered blocking state [ 156.599802] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:33 executing program 6: bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x25) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84000) shutdown(r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0xbe) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r1 = gettid() setpriority(0x1, r1, 0xff) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cubic\x00', 0x6) shutdown(0xffffffffffffffff, 0x1) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="d48d17d8ed50b6c389140cf387ae554ad0f92d823ecddcaae1abd3fcbe564ca380dc94c843709981221f3161c791d504ec5b95f4a74cdbcf75d5f0dc43b0b95c40adb690031596d089c46b2373d98f01d80408372539d954bf357f479700c640e2161a695c42c0e38f6873d5558e38465d4b6e7c28fd4a0bb9fe20006baa2d421ff953fd06c979b595b0f3ddf9f7f2d5f3b771943ae9a64b267bda983f9f5eca8873649c8b3841b70262170968bdb7ac04f8edb9d0", 0xb5, 0xfffffffffffffff9) keyctl$setperm(0x5, r2, 0x10000) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) 2018/04/30 11:32:33 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f00000001c0)=@pptp, &(0x7f00000000c0)=0xfffffffffffffe67) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0xfff, 0x4]) 2018/04/30 11:32:33 executing program 1 (fault-call:2 fault-nth:39): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f0000000140)=0xb0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYBLOB="5c40d9f6344dee84bf2095ff00814ef595d320b45b645544534ed273ef40caf55d0f5d15a350cf67f0a24c28dca7d384a4054bc1758d4c7943160070b2d9a4fc1a4ba289e24d849a3db58c5e6780098aa716d12f99ba784e58a9f9a12bc192699c3fef567bc60f84fc5e17cb06eb525d50ddf2fe272510852d4f5927762240be908f6be2754ac62bfa20da322f7cccb529806e629d6bf52fd80c7f64c95dc16b6adbd9b26a6b2dcc124758e9e9571aa063c489e7f30d44b8df920205f1128507ea", @ANYRES64=r2, @ANYRES64=r3, @ANYBLOB="148db48dc0e4900e05bb6fcc6159b803a60507165b76b6983db675f8a1bc3915443ca7"]) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x840) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000480)) flistxattr(r4, &(0x7f0000000280)=""/55, 0x37) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000003c0)=""/132) ioctl$sock_bt(r4, 0xdd1f, &(0x7f00000001c0)="a8") setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) open_by_handle_at(r1, &(0x7f0000000540)=ANY=[], 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev={0xfe, 0x80}}], 0x1c) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x80800000000000, 0x400) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) 2018/04/30 11:32:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:33 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) ioctl$VT_DISALLOCATE(r2, 0x5608) 2018/04/30 11:32:33 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2201, 0x0) ioctl$KDENABIO(r2, 0x4b36) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r3, 0xa, &(0x7f0000002780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r2, &(0x7f0000000140)="7c2bf38cc3f5163ec5ca6fa162d0cdc0cfb0188879a1c343e688eb3f627bdd716c0a0aff3cd3b246d7a9a298ed693f3d66d662bf0b3e5215b9a8917142bb7b43bf8d085471647bef153a1336fa9eca55b53b188ff719180600997100d8108d289d09e2183fdbb918f1dd0ec6c3a81555ecab8f962a9d18fde8f6c1cc57cfb98dafd8212a62207a6a331543e91c67b83685d3bf87f3e20c9d154dc3c0b9a35ee495d14e66b0c854159e22a115b092a2af20ce5c6a4ada19", 0xb7, 0x8, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000000280)="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", 0x1000, 0xc74, 0x0, 0x0, r0}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x6, 0x50, r0, &(0x7f0000001280)="beb6e4b9b1bce2de53c3dcc2a38e83ac59f7e5663fd22026dc81d427e4618d0149230df26e78ac7491ea351872ad0c6d8691b4adab5a2b435673a00febb5666f19338b", 0x43, 0x6, 0x0, 0x1, r2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001340), 0x0, 0x9, 0x0, 0x0, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000013c0)="0305fc7ba892a7e16137125829a0e8c86656b9455a50fecefd6fb20e42133373efe29d5dc4be8985db39d5f42f4b6017b00e97b7bff62f7081b2a86b4272763209ba1ce94d2f8e6772c4ea8acecd81f8d4f1781aca50cd0951dc", 0x5a, 0x5, 0x0, 0x1, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000001480)="610dd65e3ecebc7ba173031d5292a9d4f643fcd822d9dc715e999dd4515a48e9c4361934e547ebf35ec532f70a5295c1c232eccafed52ed3f5ac570c7eea791a25a8c780d9ef84c0ba4aae085c163efc94da5449c6a51a0f0da331849b8d20805dfcc6ff2f656c079131897d2e8e603daf331bc4ae740815dec16b3c209f553084bc8eb999ffee02fed530727a21f8a6d3ea460954abb690c164e3aa0c754200aa746739af7b5abfce92f63a7c5ceb9660188f1de794fd6c1386d257948abea7639b", 0xc2, 0x3, 0x0, 0x1, r2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff8, r2, &(0x7f00000015c0)="afe3", 0x2, 0x4, 0x0, 0x1, r0}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x1, r2, &(0x7f0000001640)="dec816544f0b8639d3719d6a9ca7830da6dbdae3ae750ed98f1115a55574559505e23a94c6db2d3c8fe8", 0x2a, 0x6, 0x0, 0x1, r1}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x7, 0x67ba, r0, &(0x7f00000016c0)="933f7573f0e77950b0f1d8d5e93533cc7af6a9051836ef9843568e31e9b61144df4cd66517ae83e10eb930e354d51801dbe758231573eee5d550", 0x3a, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000001740)="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", 0x1000, 0x5, 0x0, 0x0, r0}]) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001340)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syz_tun\x00', 0x3}) 2018/04/30 11:32:33 executing program 7 (fault-call:5 fault-nth:12): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 157.000304] FAULT_INJECTION: forcing a failure. [ 157.000304] name failslab, interval 1, probability 0, space 0, times 0 [ 157.011761] CPU: 1 PID: 10574 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 157.018719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.028109] Call Trace: [ 157.030750] dump_stack+0x185/0x1d0 [ 157.034441] should_fail+0x87b/0xab0 [ 157.037180] bridge0: port 3(team_slave_0) entered blocking state [ 157.038208] should_failslab+0x279/0x2a0 [ 157.038293] kmem_cache_alloc+0x136/0xb90 [ 157.038337] ? kmsan_memcpy_origins+0xf1/0x170 [ 157.044581] bridge0: port 3(team_slave_0) entered disabled state [ 157.048563] ? copy_process+0x2918/0x9bb0 [ 157.048605] copy_process+0x2918/0x9bb0 [ 157.048649] ? kmsan_set_origin_inline+0x6b/0x120 [ 157.076536] ? kmsan_set_origin+0x9e/0x160 [ 157.080869] ? fsnotify+0x493/0x18f0 [ 157.084650] ? __msan_poison_alloca+0x91/0x1d0 [ 157.089296] _do_fork+0x311/0xf00 [ 157.092820] ? prepare_exit_to_usermode+0x149/0x3a0 [ 157.097936] SYSC_clone+0xf6/0x110 [ 157.101599] SyS_clone+0x77/0xa0 [ 157.105066] do_syscall_64+0x309/0x430 [ 157.109012] ? sys_vfork+0x70/0x70 [ 157.112600] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 157.117820] RIP: 0033:0x455979 [ 157.121036] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.128797] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 157.136103] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 157.143412] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 2018/04/30 11:32:34 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 157.150744] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 157.158052] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000c 2018/04/30 11:32:34 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) 2018/04/30 11:32:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {0xffffffff, 0xfc3}}, 0x10) 2018/04/30 11:32:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x123000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x8}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0x8c90, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x67f6, @local={0xfe, 0x80, [], 0xaa}, 0x800}, @in6={0xa, 0x4e24, 0x9, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}, @in6={0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, [], 0x1f}, 0x7f}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0xe8) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast=0xffffffff}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[{0x10, 0x0, 0x2}], 0x10}}], 0x2, 0x0) 2018/04/30 11:32:34 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file1\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000000040)) [ 157.336951] FAULT_INJECTION: forcing a failure. [ 157.336951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.348949] CPU: 1 PID: 10590 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 157.356005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.365396] Call Trace: [ 157.368044] dump_stack+0x185/0x1d0 [ 157.371827] should_fail+0x87b/0xab0 [ 157.375880] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 157.380727] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 157.386167] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 157.391589] ? kmsan_kmalloc+0x94/0x100 [ 157.395714] ? __kmalloc_node+0xdec/0x1190 [ 157.400059] ? kvmalloc_node+0x1a1/0x2e0 [ 157.404174] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 157.409422] ? default_file_splice_read+0x2b9/0x1120 [ 157.414579] ? splice_direct_to_actor+0x4c6/0x1040 [ 157.419595] ? do_splice_direct+0x335/0x540 [ 157.424006] ? do_sendfile+0x1067/0x1e40 [ 157.428120] ? SYSC_sendfile64+0x1b3/0x300 [ 157.432442] ? SyS_sendfile64+0x64/0x90 [ 157.436471] ? do_syscall_64+0x309/0x430 [ 157.440625] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 157.446095] ? kmsan_set_origin_inline+0x6b/0x120 [ 157.451038] ? __msan_poison_alloca+0x15c/0x1d0 [ 157.455764] ? should_failslab+0x279/0x2a0 [ 157.460057] ? kmsan_set_origin_inline+0x6b/0x120 [ 157.464974] ? memcg_kmem_put_cache+0x40/0x280 [ 157.469619] alloc_pages_current+0x6b5/0x970 [ 157.474140] push_pipe+0x680/0xca0 [ 157.477801] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 157.482888] default_file_splice_read+0x2b9/0x1120 [ 157.487908] ? __fsnotify_parent+0x132/0x560 [ 157.492411] ? security_file_permission+0x473/0x4b0 [ 157.497525] ? rw_verify_area+0x35e/0x580 [ 157.501722] ? SYSC_tee+0x13d0/0x13d0 [ 157.505565] splice_direct_to_actor+0x4c6/0x1040 [ 157.510377] ? do_splice_direct+0x540/0x540 [ 157.514745] ? security_file_permission+0x28f/0x4b0 [ 157.519823] ? rw_verify_area+0x35e/0x580 [ 157.524029] do_splice_direct+0x335/0x540 [ 157.528308] do_sendfile+0x1067/0x1e40 [ 157.532343] SYSC_sendfile64+0x1b3/0x300 2018/04/30 11:32:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@newneigh={0x34, 0x1c, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_MAC={0xc, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @NDA_LLADDR={0xc, 0x2, @random="6c8d52b7961d"}]}, 0x34}, 0x1}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7dee, 0x200000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xffffffffffffff01, 0x2, 0x200, 0x9, 0x3, 0x75fe, 0x44e4000, 0x100, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xff, 0x820d, 0xa6, 0x3fb, r3}, &(0x7f0000000240)=0x10) [ 157.536517] SyS_sendfile64+0x64/0x90 [ 157.540427] do_syscall_64+0x309/0x430 [ 157.544381] ? SYSC_sendfile+0x320/0x320 [ 157.548495] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 157.553722] RIP: 0033:0x455979 [ 157.556940] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.564704] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 157.572011] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 157.579318] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/30 11:32:34 executing program 7 (fault-call:5 fault-nth:13): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 157.582759] bridge0: port 3(team_slave_0) entered blocking state [ 157.586625] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 157.586643] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000027 [ 157.607929] bridge0: port 3(team_slave_0) entered disabled state [ 157.670971] FAULT_INJECTION: forcing a failure. [ 157.670971] name failslab, interval 1, probability 0, space 0, times 0 [ 157.682383] CPU: 1 PID: 10625 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 157.689691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.699090] Call Trace: [ 157.701734] dump_stack+0x185/0x1d0 [ 157.705426] should_fail+0x87b/0xab0 [ 157.709214] should_failslab+0x279/0x2a0 [ 157.713394] kmem_cache_alloc+0x136/0xb90 [ 157.717597] ? kmsan_memcpy_origins+0xf1/0x170 [ 157.722232] ? copy_process+0x3606/0x9bb0 [ 157.726458] ? kmsan_set_origin+0x9e/0x160 [ 157.730747] copy_process+0x3606/0x9bb0 [ 157.734789] ? kmsan_set_origin_inline+0x6b/0x120 [ 157.739720] ? kmsan_set_origin+0x9e/0x160 [ 157.744050] ? fsnotify+0x493/0x18f0 [ 157.747827] ? __msan_poison_alloca+0x91/0x1d0 [ 157.752466] _do_fork+0x311/0xf00 [ 157.755988] ? prepare_exit_to_usermode+0x149/0x3a0 [ 157.761097] SYSC_clone+0xf6/0x110 [ 157.764746] SyS_clone+0x77/0xa0 [ 157.768209] do_syscall_64+0x309/0x430 [ 157.772163] ? sys_vfork+0x70/0x70 [ 157.775760] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 157.780991] RIP: 0033:0x455979 [ 157.784212] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.791966] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 157.799267] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 157.806576] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 157.813886] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 157.821196] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000d 2018/04/30 11:32:34 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080), 0x0) 2018/04/30 11:32:34 executing program 5: mount(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000851000)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000000180)="7632ef") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2000) 2018/04/30 11:32:34 executing program 1 (fault-call:2 fault-nth:40): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {0xffffffff, 0xfc3}}, 0x10) 2018/04/30 11:32:34 executing program 6: syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/97) 2018/04/30 11:32:34 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, [0x3fc6, 0xdf, 0x101, 0x6, 0xd4ee, 0x400, 0xed2c, 0x4, 0x7c, 0x6, 0xfff, 0x8, 0xf4, 0x80, 0x6]}, &(0x7f0000000680)=0x100) 2018/04/30 11:32:34 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:34 executing program 7 (fault-call:5 fault-nth:14): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 157.934414] alg: No test for seqiv(rfc4106(gcm(aes))) (seqiv(rfc4106(gcm_base(ctr(aes-fixed-time),ghash-generic)))) [ 158.029700] bridge0: port 3(team_slave_0) entered blocking state [ 158.036181] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:35 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:35 executing program 3: unshare(0x400) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10800, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r2}) r3 = epoll_create(0x46c) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x3, r3, &(0x7f0000000000)={0xfffffffffffffffd}) set_mempolicy(0x4000, &(0x7f0000000040), 0x4) 2018/04/30 11:32:35 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x5, &(0x7f0000000200)=0x7e, 0x4) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x82) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d}, 0x10, &(0x7f0000000180)={&(0x7f0000000080)=@canfd={{}, 0x48, 0x0, 0x0, 0x0, "3da8ebb471bab5c5d84bfad8e2f54fe4e17c6496e121e52342d3070ff2149c532d635bdc85850a1e8b9aa4242e6e8c5c9650fabb2c0fb45e45a7581e089269e4"}, 0xfffffffffffffd2a}, 0x1, 0x0, 0x0, 0x2000000000000000}, 0x1) llistxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)=""/116, 0x74) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000240)=0x400, 0x4) [ 158.145633] FAULT_INJECTION: forcing a failure. [ 158.145633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.157644] CPU: 1 PID: 10651 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 158.164617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.174010] Call Trace: [ 158.176662] dump_stack+0x185/0x1d0 [ 158.180360] should_fail+0x87b/0xab0 [ 158.184139] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 158.189001] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.194432] ? kmsan_set_origin+0x9e/0x160 [ 158.198722] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 158.203904] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 158.209359] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 158.213281] FAULT_INJECTION: forcing a failure. [ 158.213281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.214725] ? kmsan_kmalloc+0x94/0x100 [ 158.230492] ? kmem_cache_alloc+0xaab/0xb90 [ 158.234877] ? copy_process+0x3606/0x9bb0 [ 158.239036] ? _do_fork+0x311/0xf00 [ 158.242708] ? SYSC_clone+0xf6/0x110 [ 158.246430] ? SyS_clone+0x77/0xa0 [ 158.250006] ? do_syscall_64+0x309/0x430 [ 158.254106] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.259482] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.264360] alloc_pages_current+0x6b5/0x970 [ 158.268807] __get_free_pages+0x2d/0xc0 [ 158.272805] pgd_alloc+0x60/0x590 [ 158.276375] mm_init+0x654/0xae0 [ 158.279757] copy_process+0x3707/0x9bb0 [ 158.283743] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.288622] ? kmsan_set_origin+0x9e/0x160 [ 158.292904] ? fsnotify+0x493/0x18f0 [ 158.296632] ? __msan_poison_alloca+0x91/0x1d0 [ 158.301229] _do_fork+0x311/0xf00 [ 158.304705] ? prepare_exit_to_usermode+0x149/0x3a0 [ 158.309768] SYSC_clone+0xf6/0x110 [ 158.313374] SyS_clone+0x77/0xa0 [ 158.316791] do_syscall_64+0x309/0x430 [ 158.320701] ? sys_vfork+0x70/0x70 [ 158.324254] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.329445] RIP: 0033:0x455979 [ 158.332632] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 158.340360] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 158.347634] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 158.354903] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 158.362174] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 158.369449] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000e [ 158.376743] CPU: 0 PID: 10657 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 158.383677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.393035] Call Trace: 2018/04/30 11:32:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {0xffffffff, 0xfc3}}, 0x10) [ 158.395644] dump_stack+0x185/0x1d0 [ 158.399291] should_fail+0x87b/0xab0 [ 158.403109] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 158.407877] ? kernel_poison_pages+0x40/0x360 [ 158.412383] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 158.417755] ? kernel_poison_pages+0x1a0/0x360 [ 158.422352] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 158.427819] ? get_page_from_freelist+0xab28/0xb600 [ 158.432857] ? __kernel_text_address+0x34/0xe0 [ 158.437458] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 158.442921] ? __save_stack_trace+0x90d/0xb00 [ 158.447434] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 158.452377] ? push_pipe+0x680/0xca0 [ 158.456106] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 158.461391] ? default_file_splice_read+0x2b9/0x1120 [ 158.466501] ? do_sendfile+0x1067/0x1e40 [ 158.470655] ? SyS_sendfile64+0x64/0x90 [ 158.474636] ? do_syscall_64+0x309/0x430 [ 158.478704] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.484075] ? __kernel_text_address+0x34/0xe0 [ 158.488666] ? kmsan_set_origin_inline+0x6b/0x120 2018/04/30 11:32:35 executing program 7 (fault-call:5 fault-nth:15): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 158.493516] ? __msan_poison_alloca+0x15c/0x1d0 [ 158.498198] kmsan_alloc_page+0x82/0xe0 [ 158.502278] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 158.507036] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 158.512403] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 158.517684] ? kmsan_kmalloc+0x94/0x100 [ 158.521661] ? __kmalloc_node+0xdec/0x1190 [ 158.525899] ? kvmalloc_node+0x1a1/0x2e0 [ 158.529963] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 158.535159] ? default_file_splice_read+0x2b9/0x1120 [ 158.540264] ? splice_direct_to_actor+0x4c6/0x1040 2018/04/30 11:32:35 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 158.545195] ? do_splice_direct+0x335/0x540 [ 158.549520] ? do_sendfile+0x1067/0x1e40 [ 158.553593] ? SYSC_sendfile64+0x1b3/0x300 [ 158.557828] ? SyS_sendfile64+0x64/0x90 [ 158.561810] ? do_syscall_64+0x309/0x430 [ 158.565881] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.571251] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.576104] ? __msan_poison_alloca+0x15c/0x1d0 [ 158.580774] ? should_failslab+0x279/0x2a0 [ 158.585010] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.589866] ? memcg_kmem_put_cache+0x40/0x280 2018/04/30 11:32:35 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xee) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40200, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r0) [ 158.594456] alloc_pages_current+0x6b5/0x970 [ 158.598878] push_pipe+0x680/0xca0 [ 158.602434] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 158.607464] default_file_splice_read+0x2b9/0x1120 [ 158.612400] ? __fsnotify_parent+0x132/0x560 [ 158.616822] ? security_file_permission+0x473/0x4b0 [ 158.621863] ? rw_verify_area+0x35e/0x580 [ 158.626022] ? SYSC_tee+0x13d0/0x13d0 [ 158.629830] splice_direct_to_actor+0x4c6/0x1040 [ 158.634598] ? do_splice_direct+0x540/0x540 [ 158.637257] FAULT_INJECTION: forcing a failure. [ 158.637257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.638930] ? security_file_permission+0x28f/0x4b0 [ 158.655697] ? rw_verify_area+0x35e/0x580 [ 158.659841] do_splice_direct+0x335/0x540 [ 158.663986] do_sendfile+0x1067/0x1e40 [ 158.667959] SYSC_sendfile64+0x1b3/0x300 [ 158.672009] SyS_sendfile64+0x64/0x90 [ 158.675797] do_syscall_64+0x309/0x430 [ 158.679673] ? SYSC_sendfile+0x320/0x320 [ 158.683721] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.688903] RIP: 0033:0x455979 [ 158.692075] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.699764] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 158.707013] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 158.714267] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 158.721524] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 158.728779] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000028 [ 158.736042] CPU: 1 PID: 10680 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 158.742967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.752321] Call Trace: [ 158.754937] dump_stack+0x185/0x1d0 [ 158.758578] should_fail+0x87b/0xab0 [ 158.762307] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 158.767075] ? kernel_poison_pages+0x40/0x360 [ 158.771579] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 158.776951] ? kernel_poison_pages+0x1a0/0x360 [ 158.781549] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 158.787006] ? get_page_from_freelist+0xab28/0xb600 [ 158.792033] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 158.797408] ? is_bpf_text_address+0xb4/0x4b0 [ 158.801919] ? __is_insn_slot_addr+0x198/0x1c0 [ 158.806516] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.811376] ? __msan_poison_alloca+0x15c/0x1d0 [ 158.816062] ? memcg_kmem_charge+0x5dd/0xa30 [ 158.820476] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 158.825409] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 158.830890] ? __msan_poison_alloca+0x15c/0x1d0 [ 158.835570] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 158.840946] ? memcg_kmem_charge+0x703/0xa30 [ 158.845369] kmsan_alloc_page+0x82/0xe0 [ 158.849362] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 158.854129] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.859516] ? kmsan_set_origin+0x9e/0x160 [ 158.863861] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 158.868985] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 158.874375] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 158.879674] ? kmsan_kmalloc+0x94/0x100 [ 158.883669] ? kmem_cache_alloc+0xaab/0xb90 [ 158.888005] ? copy_process+0x3606/0x9bb0 [ 158.892683] ? _do_fork+0x311/0xf00 [ 158.896313] ? SYSC_clone+0xf6/0x110 [ 158.900030] ? SyS_clone+0x77/0xa0 [ 158.903573] ? do_syscall_64+0x309/0x430 [ 158.907637] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.913003] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.917871] alloc_pages_current+0x6b5/0x970 [ 158.922302] __get_free_pages+0x2d/0xc0 [ 158.926308] pgd_alloc+0x60/0x590 [ 158.929792] mm_init+0x654/0xae0 [ 158.933177] copy_process+0x3707/0x9bb0 [ 158.937175] ? kmsan_set_origin_inline+0x6b/0x120 [ 158.942032] ? kmsan_set_origin+0x9e/0x160 [ 158.946277] ? fsnotify+0x493/0x18f0 [ 158.950002] ? __msan_poison_alloca+0x91/0x1d0 [ 158.954602] _do_fork+0x311/0xf00 [ 158.958067] ? prepare_exit_to_usermode+0x149/0x3a0 [ 158.963104] SYSC_clone+0xf6/0x110 [ 158.966663] SyS_clone+0x77/0xa0 [ 158.970132] do_syscall_64+0x309/0x430 [ 158.974036] ? sys_vfork+0x70/0x70 [ 158.977595] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 158.982790] RIP: 0033:0x455979 [ 158.985981] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 2018/04/30 11:32:35 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1081, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000617fc9), 0x84, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)="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", 0x35e}], 0x1, &(0x7f0000000300)}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x458000, 0x0) ioctl$sock_bt(r0, 0xdd17, &(0x7f0000000100)="0ac92ecd2c50f42a373b487665bafefc120c7889966955700ce3e175448b9b41fa3ca148ab0d4c56b8ade8bf8295bff0b3914d8754cfe9d998b4c053c1a563e3a6fafb83ca702d2c28bd4c36de9e378280f7a82c9bfcd3f273b7953fad817c85e9303b66ab75bb2994604fabb90cc150800b7f9e3e98f094f16a7c0420d66b0ed772a841c20af7a9cf008a8e915c9a4115c31a373b7b58133433110487ed71d74a1b907af284c70b1ed5dd62b4795176b88969ba53ca85b8f23dbfa65958182c9a187a0fd6065393020ff7688365cb6572ddcbbbe1cacbd2093e7d5b8937b34acfb00a42fad5c30a0e6ba7ffa3633d86c2abbf") 2018/04/30 11:32:35 executing program 1 (fault-call:2 fault-nth:41): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:35 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x3f, 0x5, 0x8, 0x3ff, "040b3ba87fe64bda4d5f79ca178ec5397a869e76c585ebd31ac65977f713d7eff3324fdde3c5ca44d460f9e3", 0x100}, 0x0, 0x0, 0x8000, r2, 0xffffffffffff354f, 0x6, "fc1d1ebc8e10475ee46e42469bc668409ee2d49bf7a5ca9c714722442a1d906f7c0b05d90325df40cfe35e0257df774b805373e26100f1fcbda1806685b6ba0e", &(0x7f0000000080)='(,posix_acl_access\x00', 0x13, [], [0x2, 0x9, 0x2, 0xff]}) unshare(0x8000400) fcntl$setflags(r0, 0x2, 0x1) 2018/04/30 11:32:35 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:36 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x208000, 0x0) 2018/04/30 11:32:36 executing program 6: poll(&(0x7f0000001fef), 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x2}) [ 158.993727] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 159.001003] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 159.008285] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 159.015562] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 159.022847] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000000f [ 159.045245] FAULT_INJECTION: forcing a failure. [ 159.045245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.057098] CPU: 1 PID: 10697 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 159.064031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.073395] Call Trace: [ 159.076261] dump_stack+0x185/0x1d0 [ 159.079906] should_fail+0x87b/0xab0 [ 159.083637] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 159.088416] ? kernel_poison_pages+0x40/0x360 [ 159.092928] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 159.098304] ? kernel_poison_pages+0x1a0/0x360 [ 159.103002] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 159.108466] ? get_page_from_freelist+0xab28/0xb600 [ 159.113511] ? __kernel_text_address+0x34/0xe0 [ 159.118120] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 159.123590] ? __save_stack_trace+0x90d/0xb00 [ 159.128117] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 159.133146] ? push_pipe+0x680/0xca0 [ 159.136869] ? iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 159.137328] bridge0: port 3(team_slave_0) entered blocking state [ 159.142060] ? default_file_splice_read+0x2b9/0x1120 [ 159.142075] ? do_sendfile+0x1067/0x1e40 [ 159.142087] ? SyS_sendfile64+0x64/0x90 [ 159.142100] ? do_syscall_64+0x309/0x430 [ 159.142115] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.142129] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.142148] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.142161] ? __msan_poison_alloca+0x15c/0x1d0 [ 159.142179] kmsan_alloc_page+0x82/0xe0 [ 159.142196] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 159.142226] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 159.148486] bridge0: port 3(team_slave_0) entered disabled state [ 159.153466] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 159.153477] ? kmsan_kmalloc+0x94/0x100 [ 159.153491] ? __kmalloc_node+0xdec/0x1190 [ 159.153506] ? kvmalloc_node+0x1a1/0x2e0 [ 159.153519] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 159.153530] ? default_file_splice_read+0x2b9/0x1120 [ 159.153555] ? splice_direct_to_actor+0x4c6/0x1040 [ 159.238220] ? do_splice_direct+0x335/0x540 [ 159.242556] ? do_sendfile+0x1067/0x1e40 [ 159.246634] ? SYSC_sendfile64+0x1b3/0x300 [ 159.250892] ? SyS_sendfile64+0x64/0x90 [ 159.254909] ? do_syscall_64+0x309/0x430 [ 159.259070] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.264453] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.269314] ? __msan_poison_alloca+0x15c/0x1d0 [ 159.273997] ? should_failslab+0x279/0x2a0 [ 159.278240] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.283102] ? memcg_kmem_put_cache+0x40/0x280 [ 159.287697] alloc_pages_current+0x6b5/0x970 [ 159.292127] push_pipe+0x680/0xca0 [ 159.295684] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 159.300717] default_file_splice_read+0x2b9/0x1120 [ 159.305659] ? __fsnotify_parent+0x132/0x560 [ 159.310085] ? security_file_permission+0x473/0x4b0 [ 159.315216] ? rw_verify_area+0x35e/0x580 [ 159.319466] ? SYSC_tee+0x13d0/0x13d0 [ 159.323305] splice_direct_to_actor+0x4c6/0x1040 [ 159.328087] ? do_splice_direct+0x540/0x540 [ 159.332416] ? security_file_permission+0x28f/0x4b0 [ 159.337449] ? rw_verify_area+0x35e/0x580 [ 159.341612] do_splice_direct+0x335/0x540 [ 159.345776] do_sendfile+0x1067/0x1e40 [ 159.349683] SYSC_sendfile64+0x1b3/0x300 [ 159.353762] SyS_sendfile64+0x64/0x90 [ 159.357573] do_syscall_64+0x309/0x430 [ 159.361477] ? SYSC_sendfile+0x320/0x320 [ 159.365552] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.370745] RIP: 0033:0x455979 [ 159.373937] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 159.381742] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 159.389034] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 2018/04/30 11:32:36 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @rand_addr}}}, 0x108) [ 159.396314] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.403597] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 159.410886] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000029 2018/04/30 11:32:36 executing program 7 (fault-call:5 fault-nth:16): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:36 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:36 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000d73ff0)='/dev/input/mice\x00', 0x0, 0x82) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000240)=0x6, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x16907e, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000040)='-', 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x8000, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) write(r0, &(0x7f0000000080), 0x0) 2018/04/30 11:32:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2}}, 0x10) 2018/04/30 11:32:36 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:36 executing program 6: r0 = userfaultfd(0x80800) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r2, 0x1000}, 0x8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) r3 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000000)) 2018/04/30 11:32:36 executing program 1 (fault-call:2 fault-nth:42): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:36 executing program 3: r0 = memfd_create(&(0x7f0000000000)="24004aa36137330b6679374db37718af3f91b00a9235908dee589c597d8f7dec52277a92830ed6390522aaa8662471dca5bc1ae79e22e989a6c1afbb60ef513138ee6f16e5f1c4ac2753aa7a9f0686bddd9caff81015270a50677cddcba54d0f919d68d550479c63e9b64156513c474e0cca868cd6832affb597", 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x100, 0x9, 0x4, 0x2, 0x8, 0x101}) write(r0, &(0x7f0000000140)="b2", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x226ad518, 0x4, 0x921, 0xfea7, 0x3fffc0, 0x80, 0xd47, 0xffffffff, 0xe89e, 0xef2e}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0) write(r0, &(0x7f0000000200)="c6bf68aa57def5317ffc2f89e25e489730f86e98859d67e3574ba450b05b93853770a0c2ce3766f3864a9d684a29fff732f6e6774346ff17f4aee2e71c944ba293eb4697c46faa21f0066c8e1878014cf6dc1d15d8a079bb4d3d66da270137ddd6bdbf6333488c247914e5370be6f72a97b27a98ea9311b5f8b291ad6dabe0a1cdf2360b1047ba1ec1e8c6b60a3b2381f10f5f196bb40f907d2af17b44d387574d37d3796e6dee8d3f1f30105bed9ded5edd8e12b57c35ef47ee5e7fcdfbb434f1b008278a8669ba3741dbac3c43504bad20a721c3d1aa51826fabe87475a21fa28e24", 0xe3) [ 159.550900] bridge0: port 3(team_slave_0) entered blocking state [ 159.557433] bridge0: port 3(team_slave_0) entered disabled state [ 159.574875] FAULT_INJECTION: forcing a failure. [ 159.574875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.586810] CPU: 1 PID: 10728 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 159.593768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.603137] Call Trace: [ 159.606260] dump_stack+0x185/0x1d0 [ 159.607631] FAULT_INJECTION: forcing a failure. [ 159.607631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.609913] should_fail+0x87b/0xab0 [ 159.609938] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 159.609956] ? kernel_poison_pages+0x40/0x360 [ 159.609971] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 159.609985] ? kernel_poison_pages+0x1a0/0x360 [ 159.610001] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 159.610016] ? get_page_from_freelist+0xab28/0xb600 [ 159.610032] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 159.610045] ? is_bpf_text_address+0xb4/0x4b0 [ 159.610060] ? __is_insn_slot_addr+0x198/0x1c0 [ 159.610101] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.675028] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 159.680048] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 159.685582] ? __msan_poison_alloca+0x15c/0x1d0 [ 159.690254] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.695605] ? memcg_kmem_charge+0x703/0xa30 [ 159.700001] kmsan_alloc_page+0x82/0xe0 [ 159.703971] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 159.708721] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.714082] ? kmsan_set_origin+0x9e/0x160 [ 159.718323] ? __irqentry_text_end+0x1fb47e/0x1fb47e [ 159.723423] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 159.728773] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 159.734041] ? kmsan_kmalloc+0x94/0x100 [ 159.738032] ? kmem_cache_alloc+0xaab/0xb90 [ 159.742346] ? copy_process+0x3606/0x9bb0 [ 159.746481] ? _do_fork+0x311/0xf00 [ 159.750095] ? SYSC_clone+0xf6/0x110 [ 159.753793] ? SyS_clone+0x77/0xa0 [ 159.757321] ? do_syscall_64+0x309/0x430 [ 159.761379] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.766728] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.771565] alloc_pages_current+0x6b5/0x970 [ 159.775968] __get_free_pages+0x2d/0xc0 [ 159.779931] pgd_alloc+0x60/0x590 [ 159.783373] mm_init+0x654/0xae0 [ 159.786735] copy_process+0x3707/0x9bb0 [ 159.790722] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.795565] ? kmsan_set_origin+0x9e/0x160 [ 159.799799] ? fsnotify+0x493/0x18f0 [ 159.803505] ? __msan_poison_alloca+0x91/0x1d0 [ 159.808088] _do_fork+0x311/0xf00 [ 159.811534] ? prepare_exit_to_usermode+0x149/0x3a0 [ 159.816547] SYSC_clone+0xf6/0x110 [ 159.820079] SyS_clone+0x77/0xa0 [ 159.823432] do_syscall_64+0x309/0x430 [ 159.827324] ? sys_vfork+0x70/0x70 [ 159.830861] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.836124] RIP: 0033:0x455979 [ 159.839297] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 159.846992] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 159.854251] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 159.862157] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 159.869416] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 159.876674] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000010 [ 159.884497] CPU: 0 PID: 10735 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 159.891460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.900855] Call Trace: [ 159.903504] dump_stack+0x185/0x1d0 [ 159.907191] should_fail+0x87b/0xab0 [ 159.910977] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 159.915825] ? kmsan_internal_poison_shadow+0x14e/0x1b0 [ 159.921248] ? kmsan_internal_poison_shadow+0xb8/0x1b0 [ 159.927091] ? kmsan_kmalloc+0x94/0x100 [ 159.931118] ? __kmalloc_node+0xdec/0x1190 [ 159.935435] ? kvmalloc_node+0x1a1/0x2e0 [ 159.939534] ? iov_iter_get_pages_alloc+0x1745/0x1cf0 [ 159.945577] ? default_file_splice_read+0x2b9/0x1120 [ 159.950724] ? splice_direct_to_actor+0x4c6/0x1040 [ 159.955733] ? do_splice_direct+0x335/0x540 [ 159.960130] ? do_sendfile+0x1067/0x1e40 [ 159.964231] ? SYSC_sendfile64+0x1b3/0x300 [ 159.968540] ? SyS_sendfile64+0x64/0x90 [ 159.972554] ? do_syscall_64+0x309/0x430 [ 159.976693] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 159.982184] ? kmsan_set_origin_inline+0x6b/0x120 [ 159.987088] ? __msan_poison_alloca+0x15c/0x1d0 [ 159.991809] ? should_failslab+0x279/0x2a0 [ 159.996289] ? kmsan_set_origin_inline+0x6b/0x120 [ 160.001203] ? memcg_kmem_put_cache+0x40/0x280 [ 160.005848] alloc_pages_current+0x6b5/0x970 [ 160.010357] push_pipe+0x680/0xca0 [ 160.014377] iov_iter_get_pages_alloc+0x183e/0x1cf0 [ 160.019463] default_file_splice_read+0x2b9/0x1120 [ 160.024517] ? __fsnotify_parent+0x132/0x560 [ 160.030017] ? security_file_permission+0x473/0x4b0 [ 160.035140] ? rw_verify_area+0x35e/0x580 [ 160.039343] ? SYSC_tee+0x13d0/0x13d0 [ 160.043183] splice_direct_to_actor+0x4c6/0x1040 [ 160.048085] ? do_splice_direct+0x540/0x540 [ 160.052452] ? security_file_permission+0x28f/0x4b0 [ 160.057521] ? rw_verify_area+0x35e/0x580 [ 160.061718] do_splice_direct+0x335/0x540 [ 160.065989] do_sendfile+0x1067/0x1e40 [ 160.070002] SYSC_sendfile64+0x1b3/0x300 [ 160.074140] SyS_sendfile64+0x64/0x90 [ 160.078064] do_syscall_64+0x309/0x430 [ 160.082020] ? SYSC_sendfile+0x320/0x320 [ 160.086137] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 160.091363] RIP: 0033:0x455979 [ 160.094580] RSP: 002b:00007f06668d5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/04/30 11:32:37 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:37 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d500040000e668d1476979a795", 0x11) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x900, 0x70bd25, 0x25dfdbfc, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000001c0)="ab1c6c69b26fc83e826a3e0245060f8c5d9648cf615e"}, 0x10) 2018/04/30 11:32:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 160.102333] RAX: ffffffffffffffda RBX: 00007f06668d66d4 RCX: 0000000000455979 [ 160.109634] RDX: 0000000020000040 RSI: 0000000000000013 RDI: 0000000000000014 [ 160.116935] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 160.124235] R10: 00000800400000ff R11: 0000000000000246 R12: 0000000000000015 [ 160.131552] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002a 2018/04/30 11:32:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2}}, 0x10) 2018/04/30 11:32:37 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) socket$alg(0x26, 0x5, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:37 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:37 executing program 7 (fault-call:5 fault-nth:17): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:37 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000d73ff0)='/dev/input/mice\x00', 0x0, 0x82) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000240)=0x6, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x16907e, 0x0) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000040)='-', 0x1}], 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x8000, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) write(r0, &(0x7f0000000080), 0x0) 2018/04/30 11:32:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2}}, 0x10) [ 160.461792] FAULT_INJECTION: forcing a failure. [ 160.461792] name failslab, interval 1, probability 0, space 0, times 0 [ 160.473183] CPU: 0 PID: 10765 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 160.480143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.489578] Call Trace: [ 160.492232] dump_stack+0x185/0x1d0 [ 160.495925] should_fail+0x87b/0xab0 [ 160.499760] should_failslab+0x279/0x2a0 [ 160.503918] kmem_cache_alloc+0x136/0xb90 [ 160.508235] ? __khugepaged_enter+0xac/0x7a0 [ 160.512901] ? __msan_poison_alloca+0x15c/0x1d0 [ 160.517649] ? __khugepaged_enter+0x46/0x7a0 [ 160.522140] __khugepaged_enter+0xac/0x7a0 [ 160.526448] ? copy_process+0x5d69/0x9bb0 [ 160.530748] copy_process+0x5f9b/0x9bb0 [ 160.534807] ? kmsan_set_origin_inline+0x6b/0x120 [ 160.539763] ? kmsan_set_origin+0x9e/0x160 [ 160.544091] ? fsnotify+0x493/0x18f0 [ 160.547899] _do_fork+0x311/0xf00 [ 160.551428] ? prepare_exit_to_usermode+0x149/0x3a0 [ 160.556722] SYSC_clone+0xf6/0x110 2018/04/30 11:32:37 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000002c0)={0x0, @multicast1=0xe0000001, 0x0, 0x4, "7272dab108c700"}, 0x2c) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 160.560377] SyS_clone+0x77/0xa0 [ 160.563862] do_syscall_64+0x309/0x430 [ 160.567957] ? sys_vfork+0x70/0x70 [ 160.571587] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 160.576825] RIP: 0033:0x455979 [ 160.580056] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 160.587808] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 160.595124] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 160.602442] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 160.609928] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 160.617502] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000011 2018/04/30 11:32:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x1, 0x1ff}, 'port1\x00', 0x40, 0x10000, 0x6, 0x6, 0xffffffff, 0x10000, 0xffff, 0x0, 0x5, 0x5}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)="776305616e00") ioctl$KDDELIO(r0, 0x4b35, 0x80) syncfs(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{}]}) sendfile(r2, r0, &(0x7f0000000140)=0x4, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0xd87, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x100, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3ff}}, [0x80000000, 0x3, 0x5, 0x401, 0x5, 0x1, 0x10000, 0x0, 0xd7, 0xa5e, 0x2, 0xe, 0x80000000, 0x4, 0x6]}, &(0x7f0000000800)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000840)={0x0, 0xa4, "7cc2a98245c7ea23d28dfb0b542ccb2fdf4abc815c3d2d0b8b6bf5f47dd51d712b6864ca54272e490afe335dd5a4c3c18a9a0f1c5da8862d544b26ff667a315e3257067f4f63b5a2fc521d7063db22c5656e666d8708e15472747c341c60f88b6eaf92c308cf1aa8504fea0e30aded6ecb3cb20ca95a7e56cef4d5aa130e36a1514ce106e4f03f6af472f1a54da3e65051d844ed0b2bc568ff6cf28b8f824dffd714dd88"}, &(0x7f0000000900)=0xac) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000003dc0)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x1, 0x3ff, 0x5, 0x80000001, 0x101}, &(0x7f0000003e80)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000003ec0)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x8, 0xffffffffffffffff, 0x1f8a, 0x6}, &(0x7f0000003f80)=0x98) sendmmsg$inet_sctp(r2, &(0x7f00000040c0)=[{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x9f9, @local={0xfe, 0x80, [], 0xaa}, 0xf662}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="ba10f44c028d55c83c55fab4599bc6019156c84aba3368ef9f9ca08e8fc3d67efbbf5c510d0c98c7b4a7478314210ca2b619cbaa305a99de89b65298016a93", 0x3f}, {&(0x7f0000000340)="8cbdfe24ad72123b84fc6a5243015ed488141ce108129bb9fd9020d6209ef5b4c89f9fe0c81672adec9e7a3cd1d187491307b48bcc5fdd90713b599897ce73a951a958d2923f8c25e0ac87ddaad51eee0f2f88f2249a69ca072aae2d20ea35da147e916efe7fae6b7283b5561f2b032b30022c72", 0x74}], 0x2, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc}}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x734, 0x20c, 0x7, 0xffffffffffffff00, 0x9, 0x3c5, 0x80000001, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @init={0x18, 0x84, 0x0, {0x0, 0x31a4, 0x20000, 0x2}}], 0xc8, 0x4000}, {&(0x7f0000000600)=@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x1000}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="640da8b70ed2a806689093fdb1f28c6b3e2a3d1c069818f03e96290a9c97ebf7d8d93a707e893c3b94488ca42541af6d02d6595a3e946251b6afc4d5d9e5df7083c561e5f393e7", 0x47}], 0x1, &(0x7f0000000940)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x8, 0x200, 0x0, 0x3, 0x9, 0x8001, 0x1, r4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast=0xffffffff}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x200, 0x0, 0x5, r5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x10000}}], 0x98, 0x54b77cebc1066690}, {&(0x7f0000000a00)=@in={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000000a40)="7994d6daa2f0010dfc81b965693377177652b223886523999159706d56d17e", 0x1f}, {&(0x7f0000000a80)="5c48a3181e7675fc07eb12fb47aac4f90dad80992cb1929c72c9b5b3413d1dede47a91a8572ec31b9abf46e89c6eaaa1f1e23869dc3d154b35f4e2906eec6e8e0813ed4cc185b0b94cbb34305f38b496f9daf4951ba09c8206f314a2198c0118030bf9ecc4ff7b5c3c6e4720750cf6407b5b669d7ce96060c62772aecacbcdfff96b39fb6ebfb09eb95123f8107bad46bccea46706a02929247fae3729a960853fb1ce9c2dc3d1cb2f0551a298f308fba5dbbed51fda7838538a4037cd6caa589843933d5c54c24df9eb83228ae84a7355d0b0dd9aaabab1", 0xd8}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="ef1e4a3a647fe4a350dff7eb243e95754527cc49f93447963d5406681c52e945bcf23a1799eba7ae1ee477941500cae1603d6728c292d9a63689af5ba779f0e2b3e68e9a7656dfe47ce1a9b695adaab964f95a67e77827a24de1495b00e460", 0x5f}, {&(0x7f0000001c00)="abe424746ba702735e412fe3af2eb81e540bcfa7a9e48499bfd7f9b9cf852042fa009495cd0a01ba0489ad9137b5d288ea77645ba8179ae517079ee9903075c0efe643cc117528d4d702580bf9", 0x4d}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="6eff1e9fed8fa7af353886bfdc4544fe31ae17fa2a0649d6b9d0e9292773000f5faec18fdb5d190ea77a0e96241a5cc45ed7c457cf8581fc444e5f84981fc94d0025d3a1e8c1f01341657c36d6bc41babebfd9ea7db632940fb20ea767c9c0505b5d8423b8fec23bff24327b2c1b4de94705c78f50cf51ab1c62d00d990b9f25bf98a4228b14a86aa9ef3d11194ba8c278065b0883532e498bb2826be763917e0604ba690e8afb65addc57c13fc4740f08cdbcf8bba045abe3a580d7b7a78cff01dd070e7d873a93b3818bc99f47c7ee42642fb2a8dea8711b164400e511dcc4c4b98a6b2e4d5b5974dac6825fce4b9c991fc3088f11dbb601fffb9b572ed872ba7e1ac54d7cdfd8a6fdcbc9a5e3e78a5f44fa7970290036fd07247080dc774dbf56a3a6bf8c47065ad6a5153563d8ba83c5f1327f04e7e1f8ed59220bfb0db3b52879525f007b7cf37fe4bda8340955bdfa18f73a5b7e65e80eac3906f2045cec7a02d15cb45ca67acfbcf0f17f0a4cbfd53bccc76f0337bb0adb8006db428a8346d6fadf9dfb2e65b821895211e70411ced460e3f3e67a7ed05f0622b0f936441b5457c2442cbb340542c5e56d30d039214fd5fe9e7b924da584b999a48f1849ba18feac851ad97e5ced58d59dea813f9893624d23a7e95daf236d0cac063e5265b2cba0be435168ee95d71f3268ccf027a8537eed36986e430d60a924bb2319dc8a6ab23cecca0eb5aec5f97a5516f9b8f90f4489621961cf60f5b5d318ba91c192759d11bb3302ed07bbf05c285c0a9df3a372b0e29e63b1e0d60249964aafad397b458b91f80aea56bef35759397df0433a4cac3c1f3bc2816dbef32e7854dc990687e10bb39e6fcd897f4bf1350b03742cd7a58a157764f8e464f18f69fa8164162ae17daab2c9a1ff9a629fa061489da57f619a407dc53cb9a91c5ee82ae46fbd22d40728dffb0735c2646bb7f61d05d20df4d83b6d43ada98ea6be8c2dbe4408d4c0da7ab67f20b0d4e68dd71d114a68cdfe31373b4e69866474c2a91ae4ba1f76f68d50d89bc03cb9b46f7e45ad6e361fce07ce03ea5a7c3bb0b06fd0ab91b7dd7a53e374c6044d251e34c4f0d5d5450bf8e8d06f8e8c656c857a56f300c676967f1c159aec99003c7dc25a1ec0733a534683d64a46eeedcccc21ed15950821f1ce0956782a333fa54ee6306a73b5c98d204193f80685adecccc913b798b691b72b85e31c068c2751a57d8dbc4e550a2f871808bbc3df4d65f798b08bafaa33b91face5eb1c792d483dac122febb3e41a12c276980becacfba81654c9db9afda6fbde8dbf6282e4eeb2711be242dcaa19a03aef368b340e28c6c15732f8ee6186699b530b2a339f2999f27e61698a0c77d7f895859200268c1771111df30b2a06c92c96ef5dd7bc984b79d378ee459e135d700b2137a1e3edb2ebb49a9a05317a4b893cd446af3fea6c80ea9020808f56590da088f97f9df1b4367e7f09d481cb25d1662c5de762025706baef876313993d6879c5bd5aa5ad43bb14c0d18c13f89797ebc5df1e0d1f34981214bee8870f27667899868add636171ff0cf4dd67067aea4f48a6cb7e2842e2c2cbb1a7fb1a1944e6b27dfc41fa695f0f4e4ec3f31beabb1af5c27ed0aa8d53a34e7f521ce49bbd1097cbf27c77de875bbf6967f86fac0acd60efcae00454e193450c15e7a9e31a195041cf41d81c2ac5f77c48638c2454d85f0415b45919fccd5ba625c607117f12b7030e9891b902ecffc67fb5edf582aa5f26929b892bb8d359ba988b8ca109a95b2c1781d8f633a3b8e8ac67721b864f07296d63485869e2d19f6c12255387f77f82f03ee6a9f8aea8d529555030d4c420a9aa54847f8b538fc971a27ffc5d0cb596e44bd6c500209ea9a7da09278e411486fa135a1cc200c22e07abe2ff659bd61f5c5abed0a469bda676c602630bdb3e9ed3affb982562d5e23ae860ee4b5aded50c3804a299d6c391273d7a362fdfd34c7d38bebdc37ed0c28817399ec10561e3af4b9dcb7b693856a044eaedf2353acb0a98cb5d0ef1ce7532f419b03f02d3e69cb6accd67992bfc9dcd122ec63720dd6820e756aae7134d8678eba42d109b3f517aabf1ca887c05dadee5b4f76a2f313157d53dcc32d8b2ab9ac7b06b1bb64bd38d439f8081aef4b73f866a2fc90bde1105344a1216e59493c508ac0abcdb3b37952a09b09bdac001f37cc1a69221b32119d7d8275a1833e2a12d48c6595620cf366bf590a9479af4786bac924c6a8d537c975098790fe347bb377933b078b669e7c645d15c9ac75f82f66c3b3ae2865f46c63fba348a3e35cc200f0494d5be3cc4643116a46ba963060e315577b7c5370f8f0a5c885e26a5c17be3b0f59d2ef12a7c7ad183505cd681aed18a86e47ff1cf7f35de902721deb06b51668cbcc4a86ef93d5d1be6acdd386f040087a99f65c4f98e90324ad3f7b8e7571579b41c1f63894666f835d640a263a6bf23d31a0ffb08ff951807cf22be7aa2c48f3622aea8355d998c9b3fab1b46d27ecc0a802cd7e22533c68dc4db6122a184800bdb1fea225f0f0a932ef71fea5d846ac0f0f091ae26d70b4200860905fbd45d95304bb3d2dac5272197e8cf96aff3267fe8bc596223c8ea63e026801a7555ee79810e2c73caf35062bb4bb9d6bec93ad9e519b23f2f27a3fc07da85d57d63bbbcd2c545efbfed6209b39486fdf4d3253d7f12c043f085a56edd4be3026b3e0b0e9b110ed4902afb310501aee80924c57b97414c473e7b94b25807b880146d61a641d9af9f249f9c369ee8e014762da52a8f74a3061e9f32fe21943d27ba5edf5db5d86967926454c4721071ef1736e8c53155de204dc536bbbeee794124ab20078365acc78468cd6fa8130dac6cd8ff5a40ba7906444e6701ce34c5cb85d552b2a637d8a54abe5fc22b92ee8fe8d8a45d73fb0640cc46235719a7e3c4176d20a9126b9c8379ae53111cde6cbefd65038fc78720f09e0d9ddacc32b08002cba9725376fff8e3a477df1b1faceb493f61cc8b86427685e1d9e4f5815466e17aa476117b43bbf0cb0263fdfa56477b10856edeeb9d1e17190596eb55c1cec44d29460db67eb6d499cd406356b78f95b8a8986118a85e6c093adf79c039281cb99d7be57e0891189b155c11dafe24bc4e4fe70688a0ee5a5829db6c6a08ef180a02636654d9d51cc30adc6127a36e7d3116a594c56774c41bc27b69348b559f0cd316b75cd158f2d01693923f9c4accab909ff852e5e2a6148fee4d587f5e12f894c302afb3b764603514de07a3c9cc0d7ef2176b3066367d0932b9e37945a4628cc17dd7854da6c57cfa98bc0a89833a403bb80e749b1892b52233db590e838c9b253d70bd7d892aa8dc85e87983ffced5299e2b58242ca9323bbb7c424d70ca4a3deb75a9a186907408dc156bb1ea4b3b9466a2296993fb0e03ea0700511bd9a5b6b991be77e33e3b9d7ebbec71c1eacd12026619a17fbffdad66e4702ce5833129a78d8b7351bd6cf52a3296f7f15693839497be38b9bc971d3697af7c88770a21ad4b785fdcbd61dd6ff268fcc33d4782762798c95bc231e827452a0ead8940b2b6a299f89ebf4cc87c181c957964876a5803a310d387836e9b4bc0b0b72d51d179a7f20981424a2ed62d6df58bb7222438a6b6d156965e56a81c2f5d27ac6a34ca81d2c3cb8a417c422bd2907b8d28be165bf8d213dd813be812fd2e35a341c3a165d6f803e5015d364087c5e782e6dcdfb77602ccf12c77114bb3ff5851817c6176d0a2e38b6c5dcea90c2b251527be39f2b675e8a9e88eafbfd9821e0bf44e000225a317e60c2be257c5fdb71f696d3eda815d84801908d02f3cee3c6b5d2088015ffd46f69f19cd13d0ba6c474fbcb0e90411552ba261767e98777295cda4fed853ae03bc2095188cde2b8c0de5e80d4a698f79e1534d3230c12c4aec845438f4dd6d632803953eded5bfc65521a1ca5f000601d99ec688b541394f16e06de96095bcabe9e3954999707dfe0715575a1a964c62ab1db698de1d85008e1b8978117bd3956172c07d4b8bad8f3e51fffa32f596de8e05abb0ce80729d4fa4e01be7b3eba32970137a845dc9dac643391686477c0c93d44fb6b59f9abd7c46e98c936edb6301050b7eb414800cd74399e892dd0620edbe264147eeb18db2d6a496be3f5d3a64a3804ab9495cbd5f47ad5d749d3d35cd0940063b6648895344a6ddfc580b882d5d9ff049b23bbd1295fb4be1258ba778325a950f604084b7843b32598b8aa1c9337e76e23083c2ae2a33462742e6aa12bf0b9c18defa0532c39f79ccc24cceb57fd2081fa1831717ff86bb52955c2d61d66979af0bba43f87fc82f56d252c36ecec9f81fad3290e2997504a7994f784206192cf915f8f50928c2a3d27a7209c3888ca901dbe0c3481091b011dbd795c7499a06a75a3836cff008a1932a94562b5681c3cd64fad625bafde4bff7877227970b5e3b3515f62b98bde10890c9bf57c1aa7d23ab2b52e0a07e8f4264c571c258ae27ad123c2c770c0e1abb56a8916169015213d86a3eb671ed008e91533abb9f8c9347e87f00fe22e813336da123372a40818e004dca7030245e54fe24fcb5a56eeaa4480b8c3e8ff6721c84091713d50003a23a8656ac75bd2ee8cf73338a57e23e50644e8fb7fc2b366ccb5acdb73da162621596196e9f0179fb2a46cde7bd4f01450edeee743887871a4fdb52cc7aa47d4969780193b530b23368277d65cf454791971fc85d87974d57569c0b99d71fa60b24a206dbf2360d0d62f4545d11bbbd6a2d26cd479d49868e7e3fff985c8879db67208e5771ba68a29a2c6df4f1df370406b311b792a35e797ca27056bce1a5ceb8331c0c83f2d77855f274dc0d5a899aa9abb96e6a19900a15fa27e483d6fab25ba17a7e7606400f523536960c19cfd38675b9e3968dd5b37a357cabcf1a11f010c2454438386e5bb07a34f787e0f52028bec91159bcb7cd2f622602c02323fe2554e3d0d778894f23a4f6d5391648f153c8392c510b7c6e4509d7d70aa29c88ad21add6655a9fd4a90027d6f743dcc8ab9fe95e157dfdd106b2742a86ad99b480cbf1836f8468ada5f653852610b3dd8aee2f86cfe7893dbe09f1b0e4462877155acef391cdbf903e00afcba4743784062ad4c97a6b02cf5a30a9d42f1adb5fed443ecccd589b1ceaaba1d602d5378596aa190e20a0113bf45d9a3cbdeafee4379695aa2c974bf7c8f5e57770e9dabbc6ae3c45cf27c452ea5fb6fd69b65b657b6df3caff1b2a6ce1abc1707e897d54eb91716a87179a6aa3a8618d18d0e733cd5d9b73e07a4ccd3aed5c14b72d56460507eede011a41ff246fd1f5a20404a04c7b9f6a8fe8fe1c92a1247eb0e7d1353b51cbf0def233dff8b4055fd68b2a205c927eab1a519a0dc180c577649de98507ad20d0bf788d0d75cd38521778d2dd16760f198374d1fcf6036719997052e1c00d0a817ae1a0ecb6bd0a29852ab2ee64e09ba444fdcf58b0f194499322968cc6a511cb1ec73a8bea0bb7ec6c06d64c1b1f9974cbf3672c1627186723305fe93edcb876545572ebf73d771b7a7f1fa0fd983dce3ed2d4796371c36982057c960400f41c427aefa194d48ebc9616f4fe5dcd892e7bdc3526463ebcc7b92721898b48b5901386a9a9ace1431df8f864e57579e8e225efb93496119c536c50d5eee7de142e173ef4c970ab4318f55cfb0f79221472d0d99296f1994cdf4f2c9fad4c06e9098320f31416b985a754", 0x1000}, {&(0x7f0000003c80)="2cd7b5d042f71e0185142f4b1279a65fb19615751438ef0515433d2b9492758efa484df159082ed33d87a9c5bf330c99fb9cdf8768d63a41005f1c05283dbc6f7736a3dde2f90431c491ac924340cd1c06b79e0dedb0c06b156288c99feb30ab43ae747b7725be9ce48b12e2af3049cf82eb047eaef1c9c56ddf8a529f14bce5dfb52f6028fbbd0218e14bc29e2c2e5daa8f2c1e0db5c80f9283", 0x9a}], 0x8, &(0x7f0000003fc0)=[@sndrcv={0x30, 0x84, 0x1, {0x101, 0xffffffffffffffff, 0x0, 0x6, 0x8, 0x9, 0x1, 0x1, r6}}, @init={0x18, 0x84, 0x0, {0x33, 0xfff, 0x7f, 0x4aa}}, @dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8, 0x201, 0x9, 0x9, 0x7, 0x6, 0x81, r7}}, @init={0x18, 0x84, 0x0, {0x2, 0x8e0, 0x1, 0x5}}, @init={0x18, 0x84, 0x0, {0x200000000000000, 0x8, 0xcad2}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x100}}], 0xf8, 0x1}], 0x3, 0x800) 2018/04/30 11:32:37 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16=r3, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:37 executing program 3: unshare(0x4000000) r0 = inotify_init1(0x80083) inotify_rm_watch(r0, 0x0) 2018/04/30 11:32:37 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x8001, 0x501000) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:37 executing program 6: unshare(0x2000200) r0 = syz_open_procfs(0x0, &(0x7f0000a89ff9)='ns/uts\x00') preadv(r0, &(0x7f0000001000), 0x0, 0x0) 2018/04/30 11:32:37 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) mremap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x12000, 0x3, &(0x7f00006ed000/0x12000)=nil) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040), &(0x7f0000000100)=0x1) r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/103) 2018/04/30 11:32:37 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:37 executing program 7 (fault-call:5 fault-nth:18): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 160.901361] FAULT_INJECTION: forcing a failure. [ 160.901361] name failslab, interval 1, probability 0, space 0, times 0 [ 160.912854] CPU: 1 PID: 10804 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 160.919818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.929213] Call Trace: [ 160.931859] dump_stack+0x185/0x1d0 [ 160.935629] should_fail+0x87b/0xab0 [ 160.939408] should_failslab+0x279/0x2a0 [ 160.943577] kmem_cache_alloc+0x136/0xb90 [ 160.947772] ? copy_process+0x636f/0x9bb0 [ 160.952001] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 160.957544] ? __khugepaged_enter+0x63b/0x7a0 [ 160.962107] copy_process+0x636f/0x9bb0 [ 160.966173] _do_fork+0x311/0xf00 [ 160.969699] ? prepare_exit_to_usermode+0x149/0x3a0 [ 160.974808] SYSC_clone+0xf6/0x110 [ 160.978454] SyS_clone+0x77/0xa0 [ 160.981917] do_syscall_64+0x309/0x430 [ 160.985870] ? sys_vfork+0x70/0x70 [ 160.989473] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 160.994703] RIP: 0033:0x455979 2018/04/30 11:32:37 executing program 3: unshare(0x200) r0 = shmget$private(0x0, 0x2000, 0x90, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00') lseek(r1, 0x0, 0xfffffffffffffffd) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x8000, 0x1, 0x0, 0x8, 0x1}, 0xc) [ 160.997928] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 161.005776] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 161.013086] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 161.020398] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 161.027709] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 161.035020] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000012 2018/04/30 11:32:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x2c, 0xaff, 0x0, 0x0, {}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6}]}]}, 0x2c}, 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x2, &(0x7f0000000040)}) 2018/04/30 11:32:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[], 0xfffffffffffffd73) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000425000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept$inet6(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000001c0)=0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "1f05f1929010bd3df5a17fcf87a1e8b7"}) 2018/04/30 11:32:38 executing program 7 (fault-call:5 fault-nth:19): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:38 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:38 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getpeername$inet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x4, 0x1ff, 0x5, 0x6, 0x80000001, 0x7fffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005d00)) sendmsg$netlink(r0, &(0x7f0000006840)={&(0x7f0000000080)=@kern={0x10}, 0xc, &(0x7f0000006780)=[{&(0x7f0000002e80)={0x10, 0x25}, 0x10}, {&(0x7f0000004540)={0x10, 0x38, 0x111}, 0x10}], 0x2}, 0x0) 2018/04/30 11:32:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x12, 0x1a, &(0x7f0000000000)="c2a762f702aac1b76f56361c407dc4ec864069d85b9a9ad0cc69"}) fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000180)='oom_adj\x00') fcntl$notify(r0, 0x402, 0x80000004) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha512-avx,xts-camellia-aesni-avx2)\x00'}, 0x58) sendfile(r2, r0, &(0x7f0000000040)=0x4, 0x800400000ff) [ 161.776748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 161.789810] FAULT_INJECTION: forcing a failure. [ 161.789810] name failslab, interval 1, probability 0, space 0, times 0 [ 161.801249] CPU: 0 PID: 10837 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 161.808218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.817823] Call Trace: [ 161.820473] dump_stack+0x185/0x1d0 [ 161.824151] should_fail+0x87b/0xab0 [ 161.826909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 161.827992] should_failslab+0x279/0x2a0 [ 161.828078] kmem_cache_alloc+0x136/0xb90 [ 161.828124] ? copy_process+0x636f/0x9bb0 [ 161.849116] copy_process+0x636f/0x9bb0 [ 161.853199] _do_fork+0x311/0xf00 [ 161.856878] ? prepare_exit_to_usermode+0x149/0x3a0 [ 161.861981] SYSC_clone+0xf6/0x110 [ 161.865625] SyS_clone+0x77/0xa0 [ 161.869094] do_syscall_64+0x309/0x430 [ 161.873050] ? sys_vfork+0x70/0x70 [ 161.876649] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 161.881881] RIP: 0033:0x455979 [ 161.885093] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 161.892854] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 161.900167] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 161.907479] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 161.914795] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 2018/04/30 11:32:38 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x1a40, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/54) shmctl$SHM_UNLOCK(r0, 0xc) 2018/04/30 11:32:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:38 executing program 6: r0 = inotify_init() mkdir(&(0x7f0000000000)='./control\x00', 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/full\x00', 0x202000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfbe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./control/file0\x00', 0x20000, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000, 0x0) execveat(r4, &(0x7f0000000180)='./control\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='/dev/autofs\x00', &(0x7f0000000240)=':[\x00', &(0x7f0000000280)='/dev/autofs\x00', &(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='/dev/autofs\x00', &(0x7f0000000340)='/dev/autofs\x00'], &(0x7f0000000500)=[&(0x7f00000003c0)='/dev/autofs\x00', &(0x7f0000000400)='%\x00', &(0x7f0000000440)='wlan1#md5sumsystem$ppp1vmnet1/nodevkeyringmd5sum+]([-.cpuset)vboxnet0lo\x00', &(0x7f00000004c0)="766d6e65743123fb6367726f7570766d6e6574302d73656c662c706f7369785f61636c5f6163636573735e00"], 0x1000) linkat(r3, &(0x7f00000000c0)='./control/file0\x00', r4, &(0x7f0000000140)='./control/file0/file0\x00', 0x1400) r5 = request_key(&(0x7f0000000800)='rxrpc\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)='/em1^\x00', 0x0) r6 = add_key(&(0x7f0000000900)='.request_key_auth\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000740)="e1eaf9022a0d62511777dd516f53fbf04dd0e6676825f88f1cbedeba02afc0eb664e23cf074ec7e343472c925e752afb8514beea9db6d4366d5271299d177a342c01c3772ae7448b6a7c2bfe9a1e441849f2ee8f3c0fe93084c8b8107e183e74b50a7932e6775b8482b7f40113bc6f6b2cab99b73992de4a686f2b3daf77f2685dd6db9a65c7ae2b9d4c226ae4a4acac1ce4312de39abd646f17387a298080", 0x9f, r5) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000005c0)="26e1f4dae0cdb61b18771decc2a89b99e9ce45f5fab960302c3354f88458ddd1a5933a6aa2e3732d4bb13fa199c4b21547f833b6346be782d6dd669bf363e7fb63509442b66f441fd22c905b4a5704c966bb17ea59fd3a1ada2e9a9497854758eafa21b4ce03bb76c51fafae451a603797a48c458cf06762ac911f0419b8b01bf5aab803dccd6d8a1c5acedfbb6940e5e330640cd2961b6dbe27d328bc5e33620c83178674bc549829c56e0719ab21761d2aa850cbcf9c366ff534509ebd9097054cfe4711b44dc79872468e23f2", 0xce, r6) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) open$dir(&(0x7f0000000040)='./control/file0\x00', 0x0, 0x0) [ 161.922139] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000013 [ 161.933909] bridge0: port 3(team_slave_0) entered blocking state [ 161.940310] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:39 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:39 executing program 3: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8001, 0xfff, 0x0, 0x3a162480, 0xdd5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x5}, &(0x7f00000001c0)=0x8) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x7e, @loopback=0x7f000001, 0x4e20, 0x1, 'dh\x00', 0x4, 0x3, 0x3}, {@broadcast=0xffffffff, 0x4e23, 0x0, 0xa76, 0x2, 0x1}}, 0x44) mount(&(0x7f0000907ff8)='./file0\x00', &(0x7f0000058ffd)='./file0\x00', &(0x7f0000c77ffa)="646178000365", 0x0, &(0x7f0000de9000)) 2018/04/30 11:32:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000180000fa0100000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0176000000"], 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:39 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/30 11:32:39 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x81, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140)) restart_syscall() getitimer(0x3, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:39 executing program 7 (fault-call:5 fault-nth:20): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:39 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/30 11:32:39 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 162.251033] bridge0: port 3(team_slave_0) entered blocking state [ 162.257431] bridge0: port 3(team_slave_0) entered disabled state [ 162.389689] FAULT_INJECTION: forcing a failure. [ 162.389689] name failslab, interval 1, probability 0, space 0, times 0 [ 162.401202] CPU: 1 PID: 10893 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 162.408171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.417560] Call Trace: [ 162.420230] dump_stack+0x185/0x1d0 [ 162.423920] should_fail+0x87b/0xab0 [ 162.427699] should_failslab+0x279/0x2a0 [ 162.431819] kmem_cache_alloc+0x136/0xb90 [ 162.436051] ? anon_vma_clone+0x15c/0xbf0 [ 162.440245] ? kmsan_set_origin_inline+0x6b/0x120 [ 162.445194] anon_vma_clone+0x15c/0xbf0 [ 162.449253] ? kmsan_set_origin_inline+0x6b/0x120 [ 162.454183] ? copy_process+0x65cf/0x9bb0 [ 162.458395] ? copy_process+0x65cf/0x9bb0 [ 162.462648] anon_vma_fork+0x106/0xb20 [ 162.466595] copy_process+0x65cf/0x9bb0 [ 162.470665] _do_fork+0x311/0xf00 [ 162.474192] ? prepare_exit_to_usermode+0x149/0x3a0 [ 162.479303] SYSC_clone+0xf6/0x110 [ 162.482967] SyS_clone+0x77/0xa0 [ 162.486442] do_syscall_64+0x309/0x430 [ 162.490402] ? sys_vfork+0x70/0x70 [ 162.493997] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 162.499224] RIP: 0033:0x455979 [ 162.502443] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 162.510197] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 162.517503] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 162.524816] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 162.532126] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 162.539526] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000014 2018/04/30 11:32:39 executing program 6: r0 = socket$inet6(0xa, 0x800000806, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x28, "c5065dbb9e64b9c7603856ed85eb9ac5de08410a80940b6a6be36089f91f0ce74decc1a807732392"}, &(0x7f0000000080)=0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x0, 0x4}, &(0x7f0000000100)=0x8) 2018/04/30 11:32:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) 2018/04/30 11:32:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:39 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:39 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/30 11:32:39 executing program 7 (fault-call:5 fault-nth:21): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:39 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3ff}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 162.691447] bridge0: port 3(team_slave_0) entered blocking state [ 162.698174] bridge0: port 3(team_slave_0) entered disabled state [ 162.737253] FAULT_INJECTION: forcing a failure. [ 162.737253] name failslab, interval 1, probability 0, space 0, times 0 [ 162.748730] CPU: 1 PID: 10926 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 162.756049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.765440] Call Trace: [ 162.768085] dump_stack+0x185/0x1d0 [ 162.771774] should_fail+0x87b/0xab0 [ 162.775551] should_failslab+0x279/0x2a0 [ 162.779675] kmem_cache_alloc+0x136/0xb90 [ 162.783921] ? anon_vma_interval_tree_insert+0x4ee/0x600 [ 162.789420] ? anon_vma_clone+0x15c/0xbf0 [ 162.793671] anon_vma_clone+0x15c/0xbf0 [ 162.797841] anon_vma_fork+0x106/0xb20 [ 162.801786] copy_process+0x65cf/0x9bb0 [ 162.805849] _do_fork+0x311/0xf00 [ 162.809375] ? prepare_exit_to_usermode+0x149/0x3a0 [ 162.814486] SYSC_clone+0xf6/0x110 [ 162.818132] SyS_clone+0x77/0xa0 [ 162.821594] do_syscall_64+0x309/0x430 [ 162.825533] ? sys_vfork+0x70/0x70 [ 162.829127] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 162.834358] RIP: 0033:0x455979 2018/04/30 11:32:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000003300)=@in={0x0, 0x0, @rand_addr}, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000003380)=""/150, 0x96}}], 0x1, 0x0, 0x0) close(r0) 2018/04/30 11:32:39 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:39 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$rdma_cm(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0000181f95b3ffde000018001ffa0000000000000000", @ANYBLOB="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"], 0x214) ioctl$TCSBRKP(r1, 0x5425, 0x9) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r3, 0xfc3}}, 0x10) ioctl$LOOP_CLR_FD(r2, 0x4c01) 2018/04/30 11:32:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x40000000000000, 0x7fffa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x4, 0x8, 0x20, "7a612b90fa5f2461a08e086e4a19af144d8dc743e11bcc31a485a9ad4d29e7e16f982d97efe657b2f9273d7d", 0x7}, 0x1, [0x1, 0x69, 0x20, 0x8001, 0x7, 0x9, 0x8, 0x5, 0x4, 0x3, 0x63, 0xd14, 0x80000000, 0xfffffffffffffffd, 0x3, 0x1, 0x6, 0x101, 0x2, 0x80000000, 0x9, 0x2a, 0x3ff, 0x200, 0x3, 0x3, 0x40, 0x9c12, 0x7, 0x7, 0x81, 0x0, 0x3, 0x2, 0xcdb, 0x8000, 0x1f, 0xfffffffffffffffc, 0x1, 0x1, 0xffffffffffff8507, 0x8, 0x7fff, 0x2, 0x7, 0x8000, 0x6, 0x3, 0x6, 0x0, 0xfff, 0xfff, 0xa1, 0x8, 0xfffffffffffffff7, 0x3, 0xfffffffffffffffb, 0x4, 0x7f, 0x2, 0xff, 0x20, 0x3, 0x0, 0x3ff, 0x9, 0x0, 0x5, 0x2, 0x8000, 0xfffffffffffffffb, 0x3, 0x9, 0xff, 0x1, 0x799, 0x7, 0x2, 0x4, 0x4, 0x1000, 0x400, 0x0, 0xfffffffffffffffc, 0xfff, 0x7, 0x1, 0x8, 0x100, 0xffffffffffffff81, 0x9, 0x8, 0x8, 0x20, 0x8df, 0x7, 0xab8c, 0x7fc3fd26, 0x4f, 0x8d, 0x8, 0x100000001, 0x2, 0x800, 0x3, 0x3, 0xfffffffffffffe01, 0x20, 0x1, 0x7, 0xc5, 0xb364, 0x8001, 0x0, 0xffffffffffffffff, 0xe33d, 0x0, 0x3, 0x100000001, 0xf, 0xfffffffffffffffd, 0x5, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x5d5f2d74], {0x77359400}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3, 0x41e6247f, 0x10001}, 0x0, 0x2, 0x0, 0x0, "032d25b7a248a776"}, 0x10}, 0x1}, 0x8001) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']) [ 162.837571] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 162.845329] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 162.852644] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 162.860042] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 162.867355] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 162.874665] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000015 2018/04/30 11:32:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='oom_score_adj\x00') 2018/04/30 11:32:40 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:40 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 163.142643] bridge0: port 3(team_slave_0) entered blocking state [ 163.149153] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:40 executing program 7 (fault-call:5 fault-nth:22): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0), 0x80040000109) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') sendmsg$nl_crypto(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200401}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00000001100000326bd7000fbdbdf25726663343130362867636d286165732929000000000000000000000000000000000000000000071b0000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecbd6dc4daee1c720000000000000000000000200000000000000000000000000000000004000000240000000000000000000008000122bb340000080001000000000000000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 2018/04/30 11:32:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000001c0)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0x5d, "57940d051009a379a2f0496fd2d5326628a7ccf4dee386905993843dca6aa95c8ec4429fb60e5de161cc2578746e045fdbeade9adf18483f901aadd1a3d74b4207157b914ffb4ffdbd92e8db6c0e3d8ebb222140e3cb7da29f7fb8f28d"}, &(0x7f0000000700)=0x65) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000740)={r4, 0xd8900, 0x10000, 0x5, 0x80000001, 0x8001}, 0x14) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0xffffffffffffff9c, 0x0, 0x1, 0x81, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 2018/04/30 11:32:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000040)=0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x440, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x8, 0x7, 0xffffffff, 0x80000000, "97b659554a1be7364fe7ff99d6f02e39c88cd0f703857834fce4c188d356b57d"}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000300)=""/121) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f0000000000), 0x3ba) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40000, 0x0) 2018/04/30 11:32:40 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:40 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:40 executing program 6: add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x1, 0x7ff, 0x1}, 0x95) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000006000)}, 0x146) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000240)="a7742f3b2fd0736d72b136d827352fd6983fc8631ac831c485f2a287a2567c7e8509255edd3392f18d55b3d10ae4f4d674265a22b9646adac72a72ba5a08ef0c52ef507120abd87348b7bbb0f3593284c1dc261514426f52b83600018b09c88478c2bd9f281db4376dfca4dedd886d8fcebaa878d243616e98fc1b3b22bcdf1c0c0ceac67e11fb1ea8454e7269b7e8f8fab25a3017979bef1f3d5a8b7bb0d70b6b18e3e522e24834d0ddf5105ab834532ace00024050692accda7c36dde1db2a71d53008e83fbf3b0a2de64289177fc3e5c05b96e2259672daf9d2fc1a101897a85e78d900704c97a0a0df2921f4933079c4e8b8b2", &(0x7f0000006000)}, 0x18) 2018/04/30 11:32:40 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 163.883865] FAULT_INJECTION: forcing a failure. [ 163.883865] name failslab, interval 1, probability 0, space 0, times 0 [ 163.895763] CPU: 0 PID: 10984 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 163.902733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.912166] Call Trace: [ 163.912216] dump_stack+0x185/0x1d0 [ 163.912255] should_fail+0x87b/0xab0 [ 163.912299] should_failslab+0x279/0x2a0 [ 163.912337] kmem_cache_alloc+0x136/0xb90 [ 163.912420] ? anon_vma_interval_tree_insert+0x4ee/0x600 [ 163.912454] ? anon_vma_clone+0x15c/0xbf0 [ 163.912535] anon_vma_clone+0x15c/0xbf0 [ 163.912633] anon_vma_fork+0x106/0xb20 [ 163.912678] copy_process+0x65cf/0x9bb0 [ 163.912753] _do_fork+0x311/0xf00 [ 163.912797] ? prepare_exit_to_usermode+0x149/0x3a0 [ 163.912873] SYSC_clone+0xf6/0x110 [ 163.964975] SyS_clone+0x77/0xa0 [ 163.968453] do_syscall_64+0x309/0x430 [ 163.972409] ? sys_vfork+0x70/0x70 [ 163.976001] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 163.981488] RIP: 0033:0x455979 [ 163.984703] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 163.992459] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 163.999874] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 164.008677] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 164.015989] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 164.023301] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000016 2018/04/30 11:32:41 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:41 executing program 6: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000600)) r3 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000500)="01adf7c04eb7185f3237dc03ac", 0xd, r3) syz_open_procfs(0x0, &(0x7f00000005c0)='net/unix\x00') r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000580), 0x1b8, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r4}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'poly1305\x00'}}) 2018/04/30 11:32:41 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:41 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:41 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r2, r1, &(0x7f0000000040)=0x4, 0x800400000ff) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ff2000/0xc000)=nil, 0x80000001, 0x5, 0x30, &(0x7f0000ff3000/0x1000)=nil, 0x2}) 2018/04/30 11:32:41 executing program 7 (fault-call:5 fault-nth:23): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) r3 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e23}}) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:41 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x100000001, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x2, 0x20}, &(0x7f0000000380)=0xc) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x6040, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000180)={0x7, 0x5}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, 0x0, 0x10078, 0x0, 0x100, 0x0, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, &(0x7f0000000040)=0xc) [ 164.986410] FAULT_INJECTION: forcing a failure. [ 164.986410] name failslab, interval 1, probability 0, space 0, times 0 [ 164.997800] CPU: 1 PID: 11019 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 165.004767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.014158] Call Trace: [ 165.016806] dump_stack+0x185/0x1d0 [ 165.020490] should_fail+0x87b/0xab0 [ 165.024307] should_failslab+0x279/0x2a0 [ 165.028439] kmem_cache_alloc+0x136/0xb90 [ 165.032646] ? anon_vma_fork+0x222/0xb20 2018/04/30 11:32:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000001c0)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0x5d, "57940d051009a379a2f0496fd2d5326628a7ccf4dee386905993843dca6aa95c8ec4429fb60e5de161cc2578746e045fdbeade9adf18483f901aadd1a3d74b4207157b914ffb4ffdbd92e8db6c0e3d8ebb222140e3cb7da29f7fb8f28d"}, &(0x7f0000000700)=0x65) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000740)={r4, 0xd8900, 0x10000, 0x5, 0x80000001, 0x8001}, 0x14) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0xffffffffffffff9c, 0x0, 0x1, 0x81, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000005c0), &(0x7f0000000600)=0x4) [ 165.036805] anon_vma_fork+0x222/0xb20 [ 165.040750] copy_process+0x65cf/0x9bb0 [ 165.045511] _do_fork+0x311/0xf00 [ 165.049027] ? prepare_exit_to_usermode+0x149/0x3a0 [ 165.054130] SYSC_clone+0xf6/0x110 [ 165.057781] SyS_clone+0x77/0xa0 [ 165.061243] do_syscall_64+0x309/0x430 [ 165.065193] ? sys_vfork+0x70/0x70 [ 165.068791] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 165.074015] RIP: 0033:0x455979 [ 165.077232] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.084994] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 165.092307] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 165.099619] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 165.106931] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 165.114249] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000017 2018/04/30 11:32:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') open_by_handle_at(r0, &(0x7f0000000100)={0x10, 0x5, "d38462b1bca4807b"}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='oom_adj\x00') sendfile(r2, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:42 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x200040, 0x0) pread64(r0, &(0x7f0000001100)=""/4096, 0xffffffffffffff53, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2, 0x30}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0x2}, &(0x7f0000000140)=0xfffffffffffffeab) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r4, 0x7fffffff, 0x1, [0xffffffffe71db74e]}, &(0x7f00000001c0)=0xa) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x14, r2, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="000005006e1c9d6c070cc4c332f687103b3dc869d83d8ade2d1eda6ad8f44e959573eda8e669de04ecdb8d461a113ec2e5dc7e"], 0x8) 2018/04/30 11:32:42 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000f2e91afa10000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:42 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:42 executing program 1: getpgid(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x800400000ff) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x401, 0x800000000080007) 2018/04/30 11:32:42 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:42 executing program 6: io_setup(0x401, &(0x7f00000000c0)) io_setup(0x100, &(0x7f0000000080)=0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_destroy(r1) getresuid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) io_destroy(r0) 2018/04/30 11:32:42 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/30 11:32:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x701003, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x11, 0xff, 0x9, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1}, 0x20000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r3, 0xfc3}}, 0xa) 2018/04/30 11:32:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:43 executing program 7 (fault-call:5 fault-nth:24): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10001, 0x4500) sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x900400000ff) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x3, 0x9}) fcntl$addseals(r1, 0x409, 0xc) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 2018/04/30 11:32:43 executing program 6: unshare(0x8000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000480), 0x0) 2018/04/30 11:32:43 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:43 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000001ffc), &(0x7f0000000140)=0x4) 2018/04/30 11:32:43 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) [ 166.120118] FAULT_INJECTION: forcing a failure. [ 166.120118] name failslab, interval 1, probability 0, space 0, times 0 [ 166.131605] CPU: 0 PID: 11104 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 166.138562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.147947] Call Trace: [ 166.150589] dump_stack+0x185/0x1d0 [ 166.154267] should_fail+0x87b/0xab0 [ 166.158082] should_failslab+0x279/0x2a0 [ 166.162230] kmem_cache_alloc+0x136/0xb90 [ 166.166437] ? anon_vma_fork+0x347/0xb20 2018/04/30 11:32:43 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x2) umount2(&(0x7f00000000c0)='/\x00', 0xffffffffffffffff) [ 166.170610] anon_vma_fork+0x347/0xb20 [ 166.174560] copy_process+0x65cf/0x9bb0 [ 166.178630] _do_fork+0x311/0xf00 [ 166.182153] ? prepare_exit_to_usermode+0x149/0x3a0 [ 166.187274] SYSC_clone+0xf6/0x110 [ 166.190930] SyS_clone+0x77/0xa0 [ 166.194401] do_syscall_64+0x309/0x430 [ 166.198359] ? sys_vfork+0x70/0x70 [ 166.201961] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 166.207188] RIP: 0033:0x455979 [ 166.210412] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 2018/04/30 11:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x7, 0xe092, 0x8, 0x0, 0x5, 0x40000, 0x2, 0x80000000, 0xacf7, 0x101, 0xff, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffffa, 0x4, 0x2, 0xff, 0x0, 0x7, 0x0, 0x9, 0x2, 0x100000001, 0xfffffffffffffff8, 0x2, 0x80, 0x7ff, 0x6, 0x480000000000000, 0x80000000, 0x4, 0x800, 0x6, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x6}, 0x50, 0x0, 0x2, 0x1, 0x4, 0x2, 0xffff}, r2, 0x8, r1, 0xa) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x4, 0x7, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0x5}) 2018/04/30 11:32:43 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r0}) 2018/04/30 11:32:43 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 166.218172] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 166.225484] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 166.232802] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 166.240119] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 166.247430] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000018 2018/04/30 11:32:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000100)=0x400004) 2018/04/30 11:32:43 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:43 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r0, 0x0, 0x5) unshare(0x400) r1 = syz_open_dev$loop(&(0x7f0000cceff5)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) 2018/04/30 11:32:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000080)={0x7fffffff, 0x5, 0x1, 0x0, 0x0, [], [], [], 0x5, 0x4}) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)}], 0x1, 0x800000000000001) 2018/04/30 11:32:43 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x43) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000001e7f00768403330378000100000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f01000000000000"], 0x20) write$rdma_cm(r2, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r3, 0xfc3}}, 0x5) ioctl$TIOCSCTTY(r1, 0x540e, 0xfff) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="008c97d207000000ed8038e886b4f2d3", @ANYPTR64, @ANYBLOB="3f01060000000000"], 0x20) write$rdma_cm(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="07000000080000fa", @ANYRES32=0xffffffff, @ANYBLOB="24cd8c74cbc816502d2e02815ac7cd0000992c750614a8ecbf0625ca940158f4e1872c28802ef4f2dec3feeb66de9968354f639871659432550d8fcdcc107a501bd45e61ede05f19babb8face43b9b1561bc2cb3a14d813d109cdb17ce3ad45b78de2142257c3e2e4b01786e779353e100a6224ff67aa0dc4fdbb2c3e9b6d353d95e9b99a55a0b948c96fda9d72b2c54b29bb29094ebc48d72066793148017bf014d8bc3d1482f0abbabb25c7d6bb9202fb35449e1b8e08db9072a5a737d82d29a94aed7b6b66eec8d6d39c3a4e12ca8a01e85fcd833f3aaf118"], 0x10) statx(r1, &(0x7f0000000100)='./file0\x00', 0x1100, 0xfff, &(0x7f0000000680)) 2018/04/30 11:32:43 executing program 7 (fault-call:5 fault-nth:25): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xcba, 0x6, 0x6, 0x1}, 0x8) [ 166.678015] FAULT_INJECTION: forcing a failure. [ 166.678015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.690152] CPU: 1 PID: 11155 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 166.697114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.706503] Call Trace: [ 166.709146] dump_stack+0x185/0x1d0 [ 166.712826] should_fail+0x87b/0xab0 [ 166.716692] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 166.721519] ? kernel_text_address+0x34d/0x3a0 [ 166.726194] ? __kernel_text_address+0x34/0xe0 [ 166.730977] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 166.736705] ? __save_stack_trace+0x90d/0xb00 [ 166.741279] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 166.746736] ? kmsan_set_origin+0x9e/0x160 [ 166.751068] alloc_pages_current+0x6b5/0x970 [ 166.755609] get_zeroed_page+0x3f/0xd0 [ 166.759638] __pud_alloc+0xab/0x440 [ 166.763373] ? copy_process+0x6d87/0x9bb0 [ 166.768892] copy_page_range+0x3bda/0x3f10 [ 166.773196] ? __msan_metadata_ptr_for_store_8+0x13/0x20 2018/04/30 11:32:43 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 166.778706] ? __rb_insert_augmented+0xd4e/0x13e0 [ 166.783666] ? init_admin_reserve+0x160/0x160 [ 166.788231] ? __vma_link_rb+0xc0e/0xcd0 [ 166.792366] copy_process+0x6d87/0x9bb0 [ 166.796437] _do_fork+0x311/0xf00 [ 166.799954] ? prepare_exit_to_usermode+0x149/0x3a0 [ 166.805075] SYSC_clone+0xf6/0x110 [ 166.808732] SyS_clone+0x77/0xa0 [ 166.812225] do_syscall_64+0x309/0x430 [ 166.816189] ? sys_vfork+0x70/0x70 2018/04/30 11:32:43 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:43 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) 2018/04/30 11:32:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000100)=0x400004) [ 166.819844] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 166.819867] RIP: 0033:0x455979 [ 166.819883] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 2018/04/30 11:32:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x7, 0xe092, 0x8, 0x0, 0x5, 0x40000, 0x2, 0x80000000, 0xacf7, 0x101, 0xff, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffffa, 0x4, 0x2, 0xff, 0x0, 0x7, 0x0, 0x9, 0x2, 0x100000001, 0xfffffffffffffff8, 0x2, 0x80, 0x7ff, 0x6, 0x480000000000000, 0x80000000, 0x4, 0x800, 0x6, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x6}, 0x50, 0x0, 0x2, 0x1, 0x4, 0x2, 0xffff}, r2, 0x8, r1, 0xa) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x4, 0x7, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0x5}) 2018/04/30 11:32:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20001000ffffd, 0x1000404) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x5516, 0x4) [ 166.819915] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 166.819932] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 2018/04/30 11:32:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000180000fa0000020000007ae7e196e7abb267d302ce8b4b5d0a40816cb5bc7eb41e4010d9c70100d96cffc015df94b9f08a4274a91704611891fc62635d00000000000000410114cc447999c4454465", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00d7dd00180000fa0100000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f9f784a38b1968bf7267e79f101000051000000"], 0x20) write$rdma_cm(r1, &(0x7f0000000080)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) clock_settime(0x7, &(0x7f0000000040)) 2018/04/30 11:32:44 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 166.819951] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 166.819968] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 166.819984] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000019 2018/04/30 11:32:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:44 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000480)=""/31, &(0x7f00000003c0)=""/152, &(0x7f0000000280)=""/216, 0xffd}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r2, r1, &(0x7f0000000040)=0x4, 0x800400000ff) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 2018/04/30 11:32:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x80) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/30 11:32:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x2, 0x0, 0x9ce, 0x1, 0x2}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2, 0x100011, r1, 0x0) r3 = shmget$private(0x0, 0x1000, 0x1010, &(0x7f0000006000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000140)=""/241) lseek(r2, 0x0, 0x6) sigaltstack(&(0x7f0000006000/0x2000)=nil, &(0x7f0000000040)) mkdir(&(0x7f0000017ff6)='./control\x00', 0x0) r4 = open(&(0x7f000003dff6)='./control\x00', 0x0, 0x0) getdents(r4, &(0x7f0000006b00)=""/117, 0x75) 2018/04/30 11:32:44 executing program 7 (fault-call:5 fault-nth:26): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) getrlimit(0xf, &(0x7f0000000080)) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:44 executing program 6 (fault-call:2 fault-nth:0): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 167.438811] FAULT_INJECTION: forcing a failure. [ 167.438811] name failslab, interval 1, probability 0, space 0, times 0 [ 167.450199] CPU: 1 PID: 11218 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 167.457171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.466564] Call Trace: [ 167.469208] dump_stack+0x185/0x1d0 [ 167.472901] should_fail+0x87b/0xab0 [ 167.476688] should_failslab+0x279/0x2a0 [ 167.480813] __kmalloc+0xc2/0x350 [ 167.484341] ? br_add_if+0x4ed/0x3140 [ 167.488209] br_add_if+0x4ed/0x3140 [ 167.491918] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 167.497344] ? security_capable+0x1ef/0x220 [ 167.501778] br_dev_ioctl+0x2c4/0x2b30 [ 167.505783] ? __dev_get_by_name+0x2ab/0x2d0 [ 167.510251] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 167.515315] dev_ifsioc+0x8a8/0x10c0 [ 167.519145] ? _cond_resched+0x3c/0xd0 [ 167.523123] dev_ioctl+0xa45/0x1cf0 [ 167.526872] sock_do_ioctl+0x43a/0x6b0 [ 167.530874] sock_ioctl+0x400/0xca0 [ 167.534598] ? SYSC_ioctl+0x1d2/0x260 2018/04/30 11:32:44 executing program 2: unshare(0x8000800) r0 = syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)) 2018/04/30 11:32:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 167.538465] ? sock_poll+0x370/0x370 [ 167.542234] do_vfs_ioctl+0xaf0/0x2440 [ 167.546198] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 167.551620] ? __fget_light+0x6b9/0x710 [ 167.555649] ? prepare_exit_to_usermode+0x149/0x3a0 [ 167.560729] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 167.566202] SYSC_ioctl+0x1d2/0x260 [ 167.569960] SyS_ioctl+0x54/0x80 [ 167.573440] do_syscall_64+0x309/0x430 [ 167.577415] ? ioctl_file_clone+0x4f0/0x4f0 [ 167.581801] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 2018/04/30 11:32:44 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:44 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) [ 167.587037] RIP: 0033:0x455979 [ 167.590262] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.598025] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 167.605346] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 167.612670] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 167.619987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 167.627302] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000000 [ 167.679705] FAULT_INJECTION: forcing a failure. [ 167.679705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.691565] CPU: 1 PID: 11242 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 167.698498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.707867] Call Trace: [ 167.710481] dump_stack+0x185/0x1d0 [ 167.714158] should_fail+0x87b/0xab0 [ 167.717903] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 167.722688] ? kernel_poison_pages+0x40/0x360 [ 167.727204] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 167.732594] ? kernel_poison_pages+0x1a0/0x360 [ 167.737198] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 167.742670] ? get_page_from_freelist+0xab28/0xb600 [ 167.747714] ? kmsan_set_origin_inline+0x6b/0x120 [ 167.752578] ? __msan_poison_alloca+0x15c/0x1d0 [ 167.757274] ? memcg_kmem_charge+0x5dd/0xa30 [ 167.761702] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 167.766659] ? kmsan_set_origin_inline+0x6b/0x120 [ 167.771527] ? __msan_metadata_ptr_for_load_8+0x10/0x20 2018/04/30 11:32:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x9, 0x6, 0x1000}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e23, 0x7, @ipv4={[], [0xff, 0xff], @rand_addr=0x3}, 0x3}, {0xa, 0x4e22, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0xff, [0x4, 0x3f, 0x3, 0xee6b, 0x6, 0x4, 0x7b1ff939, 0x8]}, 0x5c) [ 167.776907] ? memcg_kmem_charge+0x703/0xa30 [ 167.781329] kmsan_alloc_page+0x82/0xe0 [ 167.785326] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 167.790104] ? kernel_text_address+0x34d/0x3a0 [ 167.794702] ? __kernel_text_address+0x34/0xe0 [ 167.799301] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 167.804793] ? __save_stack_trace+0x90d/0xb00 [ 167.809310] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 167.814708] ? kmsan_set_origin+0x9e/0x160 [ 167.818965] alloc_pages_current+0x6b5/0x970 [ 167.823402] get_zeroed_page+0x3f/0xd0 [ 167.827307] __pud_alloc+0xab/0x440 [ 167.830956] ? copy_process+0x6d87/0x9bb0 [ 167.835144] copy_page_range+0x3bda/0x3f10 [ 167.839402] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 167.844875] ? __rb_insert_augmented+0xd4e/0x13e0 [ 167.849745] ? init_admin_reserve+0x160/0x160 [ 167.854262] ? __vma_link_rb+0xc0e/0xcd0 [ 167.858350] copy_process+0x6d87/0x9bb0 [ 167.863237] _do_fork+0x311/0xf00 [ 167.866706] ? prepare_exit_to_usermode+0x149/0x3a0 [ 167.871749] SYSC_clone+0xf6/0x110 [ 167.875311] SyS_clone+0x77/0xa0 2018/04/30 11:32:44 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 167.878698] do_syscall_64+0x309/0x430 [ 167.882609] ? sys_vfork+0x70/0x70 [ 167.886167] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 167.891375] RIP: 0033:0x455979 [ 167.894569] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 167.902288] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 167.909569] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 167.916854] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 2018/04/30 11:32:44 executing program 6 (fault-call:2 fault-nth:1): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 167.924167] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 167.931445] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001a [ 168.098640] FAULT_INJECTION: forcing a failure. [ 168.098640] name failslab, interval 1, probability 0, space 0, times 0 [ 168.110351] CPU: 1 PID: 11270 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 168.117313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.126723] Call Trace: [ 168.129382] dump_stack+0x185/0x1d0 [ 168.133074] should_fail+0x87b/0xab0 [ 168.137039] should_failslab+0x279/0x2a0 [ 168.141251] __kmalloc+0xc2/0x350 [ 168.144775] ? br_add_if+0x87b/0x3140 [ 168.148639] br_add_if+0x87b/0x3140 [ 168.152351] ? security_capable+0x1ef/0x220 [ 168.156781] br_dev_ioctl+0x2c4/0x2b30 [ 168.160779] ? __dev_get_by_name+0x2ab/0x2d0 [ 168.165247] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 168.170319] dev_ifsioc+0x8a8/0x10c0 [ 168.174181] ? _cond_resched+0x3c/0xd0 [ 168.178169] dev_ioctl+0xa45/0x1cf0 [ 168.181927] sock_do_ioctl+0x43a/0x6b0 [ 168.185926] sock_ioctl+0x400/0xca0 [ 168.189656] ? SYSC_ioctl+0x1d2/0x260 [ 168.193513] ? sock_poll+0x370/0x370 [ 168.197274] do_vfs_ioctl+0xaf0/0x2440 [ 168.201668] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 168.207080] ? __fget_light+0x6b9/0x710 [ 168.211552] ? prepare_exit_to_usermode+0x149/0x3a0 [ 168.217185] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 168.222666] SYSC_ioctl+0x1d2/0x260 [ 168.226546] SyS_ioctl+0x54/0x80 [ 168.230020] do_syscall_64+0x309/0x430 [ 168.233995] ? ioctl_file_clone+0x4f0/0x4f0 [ 168.238471] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 168.243703] RIP: 0033:0x455979 2018/04/30 11:32:45 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:45 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x2, 0x0, 0x9ce, 0x1, 0x2}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2, 0x100011, r1, 0x0) r3 = shmget$private(0x0, 0x1000, 0x1010, &(0x7f0000006000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000140)=""/241) lseek(r2, 0x0, 0x6) sigaltstack(&(0x7f0000006000/0x2000)=nil, &(0x7f0000000040)) mkdir(&(0x7f0000017ff6)='./control\x00', 0x0) r4 = open(&(0x7f000003dff6)='./control\x00', 0x0, 0x0) getdents(r4, &(0x7f0000006b00)=""/117, 0x75) 2018/04/30 11:32:45 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x2000) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="3f010000000000009c0e9290c9b7c24936edcc587b9777e3bfbc5de7dfec65525bc7352b99037a87153652dee1d6f954a8abd1e352d1962ffe129d07c50506886e4649997b7e04d0df46f34c9e7435916b95dd954c1e918afac4af17236cc24e6c388f7e5898a34bcf4351d8e774ff42e05ee5650b1021d426fad78ac77a62e48e6025e25ee5b997070599a425a14112314103c8344325b41ad1c606446e9b2ccd2798aa7a8dff2b85960faaf15ae38dcb4fcc6bbaa3066ec9d585754cab1e215d6610676883c7b9da03a7ebb9ebab3d56fe700606d42c1a3aa2134475251ff6027b5426b358ccd001feff701677a4d2b37b4bd57ef3d64de3da69bb2aae6f13d3d494f7e8634f9906561c143abadf52b01a5446a82977bb59fa00cd41ea65b1d7b4119cd8a9951e64c0cef48d5dabb642d89740fb75111de913150df1aa0f24b3fe8e3859620e036204088425830b44248efe8382312490f15bc166cec155cc3c451767e0fdbf46c1a013c46b172e687ef0c2a4bc59fff49e1e98f34f974b236d64ed8cebdd143cfa3437a8f8c31ac13e85b82e410e94d51fe0e4367c8519e68614dc3f964475e05ad2f171b4b69541520924b78372ad5053e972f9f55c799db8c08de6cd070a10eb562a864c0c85a08d5b55afa93680a9a9725a7d2620f74ed24d29c8633a8f611ad521bf30884f7b5cc2e4f0eee34369b088baf6a2615c3f37d6ad17"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) pread64(r1, &(0x7f00000000c0)=""/146, 0x92, 0x0) 2018/04/30 11:32:45 executing program 7 (fault-call:5 fault-nth:27): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:45 executing program 6 (fault-call:2 fault-nth:2): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:45 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100000141842, 0x0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)=ANY=[]) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x2, 0x0, 0x9ce, 0x1, 0x2}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2, 0x100011, r1, 0x0) r3 = shmget$private(0x0, 0x1000, 0x1010, &(0x7f0000006000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000140)=""/241) lseek(r2, 0x0, 0x6) sigaltstack(&(0x7f0000006000/0x2000)=nil, &(0x7f0000000040)) mkdir(&(0x7f0000017ff6)='./control\x00', 0x0) r4 = open(&(0x7f000003dff6)='./control\x00', 0x0, 0x0) getdents(r4, &(0x7f0000006b00)=""/117, 0x75) [ 168.246930] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.254700] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 168.262011] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 168.269325] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 168.276709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 168.284002] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000001 [ 168.368418] FAULT_INJECTION: forcing a failure. [ 168.368418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.380280] CPU: 1 PID: 11282 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 168.387208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.396568] Call Trace: [ 168.399173] dump_stack+0x185/0x1d0 [ 168.402900] should_fail+0x87b/0xab0 [ 168.402955] FAULT_INJECTION: forcing a failure. [ 168.402955] name failslab, interval 1, probability 0, space 0, times 0 [ 168.406624] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 168.406642] ? kernel_poison_pages+0x40/0x360 [ 168.406658] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 168.406673] ? kernel_poison_pages+0x1a0/0x360 [ 168.406689] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 168.406703] ? get_page_from_freelist+0xab28/0xb600 [ 168.406727] ? kmsan_set_origin_inline+0x6b/0x120 [ 168.406745] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 168.406767] ? kmsan_set_origin_inline+0x6b/0x120 [ 168.406783] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 168.406822] ? memcg_kmem_charge+0x703/0xa30 [ 168.472315] kmsan_alloc_page+0x82/0xe0 [ 168.476297] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 168.481056] ? kernel_text_address+0x34d/0x3a0 [ 168.485718] ? __kernel_text_address+0x34/0xe0 [ 168.490378] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 168.495826] ? __save_stack_trace+0x90d/0xb00 [ 168.500404] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 168.505758] ? kmsan_set_origin+0x9e/0x160 [ 168.510001] alloc_pages_current+0x6b5/0x970 [ 168.514404] get_zeroed_page+0x3f/0xd0 [ 168.518288] __pud_alloc+0xab/0x440 [ 168.521913] ? copy_process+0x6d87/0x9bb0 [ 168.526055] copy_page_range+0x3bda/0x3f10 [ 168.530284] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 168.535811] ? __rb_insert_augmented+0xd4e/0x13e0 [ 168.540647] ? init_admin_reserve+0x160/0x160 [ 168.545139] ? __vma_link_rb+0xc0e/0xcd0 [ 168.549194] copy_process+0x6d87/0x9bb0 [ 168.553181] _do_fork+0x311/0xf00 [ 168.556630] ? prepare_exit_to_usermode+0x149/0x3a0 [ 168.561639] SYSC_clone+0xf6/0x110 [ 168.565171] SyS_clone+0x77/0xa0 [ 168.568618] do_syscall_64+0x309/0x430 [ 168.572585] ? sys_vfork+0x70/0x70 [ 168.576123] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 168.581301] RIP: 0033:0x455979 [ 168.584483] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 168.592358] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 168.599614] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 168.606871] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 168.614146] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 168.621403] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001b [ 168.628692] CPU: 0 PID: 11293 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 168.635653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.645042] Call Trace: [ 168.647708] dump_stack+0x185/0x1d0 [ 168.651396] should_fail+0x87b/0xab0 [ 168.655222] should_failslab+0x279/0x2a0 [ 168.659336] __kmalloc+0xc2/0x350 [ 168.662843] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/04/30 11:32:45 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 168.668399] ? switchdev_deferred_enqueue+0x9d/0x4f0 [ 168.673561] switchdev_deferred_enqueue+0x9d/0x4f0 [ 168.678575] ? switchdev_deferred_enqueue+0x4f0/0x4f0 [ 168.683829] switchdev_port_attr_set+0x1bd/0x270 [ 168.688708] br_set_state+0x178/0x4d0 [ 168.692583] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 168.698094] br_init_port+0x10e/0x300 [ 168.701966] br_add_if+0x112c/0x3140 [ 168.705761] ? security_capable+0x1ef/0x220 [ 168.710202] br_dev_ioctl+0x2c4/0x2b30 [ 168.714201] ? __dev_get_by_name+0x2ab/0x2d0 2018/04/30 11:32:45 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'user.', '/dev/infiniband/rdma_cm\x00'}, &(0x7f0000000080)=""/58, 0x3a) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000080000fa", @ANYRES32=r2, @ANYBLOB="c30f0000f30acd6c62461db0a9001933a2dd723599f12a0a1715a0a4469601baf12af67376d1cf4d2de34950961d6915aeba7ae683d0d429538bedb7e43be78782ee76c7951dedc980e13a2d9adf4fc1e63e36b8da01f1ade364aab6c1c5a1eeb4f695e2147266c98f3fe521b4a8a8d008c2cfb306973cda007f684d760862a3522772f0b69eca22914e2811b83354a0cc5bf1b5d9989ae15452b92d4426587c1e5cc22692f30342fbaa07add643749325130dcac11246020000002819dc375c725155941e4cac3262ede5cb29cefde8689ea9e89a91182a3d2c8639adbf0caeb2230207a1ba8fe371dd2ae9f4ceed08d007565264dc4ded6c141fb65767a744bc8ceb8d9a726bab514fae8d01de8ac52c3bb3526a38b16bb9ea265b09f0e6e4b8c94ed85996cb7eb98f50ed4bbf3617e6483546a47b5a0c576acabfaef42208768764ab514e979aad80f5fafba809c845764984387d2abc"], 0x10) [ 168.719458] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 168.724529] dev_ifsioc+0x8a8/0x10c0 [ 168.728351] ? _cond_resched+0x3c/0xd0 [ 168.732324] dev_ioctl+0xa45/0x1cf0 [ 168.736139] sock_do_ioctl+0x43a/0x6b0 [ 168.740145] sock_ioctl+0x400/0xca0 [ 168.743881] ? SYSC_ioctl+0x1d2/0x260 [ 168.747744] ? sock_poll+0x370/0x370 [ 168.751511] do_vfs_ioctl+0xaf0/0x2440 [ 168.755468] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 168.760969] ? __fget_light+0x6b9/0x710 [ 168.764999] ? prepare_exit_to_usermode+0x149/0x3a0 [ 168.770076] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 168.775802] SYSC_ioctl+0x1d2/0x260 [ 168.779560] SyS_ioctl+0x54/0x80 [ 168.783037] do_syscall_64+0x309/0x430 [ 168.787000] ? ioctl_file_clone+0x4f0/0x4f0 [ 168.791375] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 168.796597] RIP: 0033:0x455979 [ 168.799807] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.807563] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 2018/04/30 11:32:45 executing program 7 (fault-call:5 fault-nth:28): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:45 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 168.815393] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 168.822699] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 168.830008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 168.837314] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000002 [ 168.844926] bridge0: error setting offload STP state on port 3(team_slave_0) [ 168.852308] bridge0: port 3(team_slave_0) entered disabled state [ 168.992466] FAULT_INJECTION: forcing a failure. [ 168.992466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.004677] CPU: 1 PID: 11325 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 169.011648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.021041] Call Trace: [ 169.023692] dump_stack+0x185/0x1d0 [ 169.027388] should_fail+0x87b/0xab0 [ 169.031170] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 169.035977] ? kernel_text_address+0x34d/0x3a0 [ 169.040642] ? __kernel_text_address+0x34/0xe0 [ 169.045322] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 169.050895] ? __save_stack_trace+0x90d/0xb00 [ 169.055560] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 169.061024] alloc_pages_current+0x6b5/0x970 [ 169.065631] __pmd_alloc+0xad/0x410 [ 169.069313] copy_page_range+0x39ba/0x3f10 [ 169.073659] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 169.079217] ? __rb_insert_augmented+0xd4e/0x13e0 [ 169.084187] ? init_admin_reserve+0x160/0x160 [ 169.088761] ? __vma_link_rb+0xc0e/0xcd0 [ 169.092902] copy_process+0x6d87/0x9bb0 [ 169.096980] _do_fork+0x311/0xf00 [ 169.100510] ? prepare_exit_to_usermode+0x149/0x3a0 [ 169.105633] SYSC_clone+0xf6/0x110 [ 169.109296] SyS_clone+0x77/0xa0 [ 169.112783] do_syscall_64+0x309/0x430 [ 169.116747] ? sys_vfork+0x70/0x70 [ 169.120356] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 169.125612] RIP: 0033:0x455979 [ 169.128833] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 2018/04/30 11:32:46 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400000000f8", @ANYRES32=r2, @ANYBLOB="c30f0000"], 0x10) 2018/04/30 11:32:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:46 executing program 6 (fault-call:2 fault-nth:3): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:46 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x200000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xcfa}, 0x1) 2018/04/30 11:32:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) pread64(r1, &(0x7f00000000c0)=""/146, 0x92, 0x0) [ 169.136596] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 169.143916] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 169.151223] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 169.158552] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 169.165864] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001c 2018/04/30 11:32:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 169.305300] bridge0: port 3(team_slave_0) entered blocking state [ 169.311683] FAULT_INJECTION: forcing a failure. [ 169.311683] name failslab, interval 1, probability 0, space 0, times 0 [ 169.323018] CPU: 1 PID: 11345 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 169.330833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.340225] Call Trace: [ 169.342875] dump_stack+0x185/0x1d0 [ 169.346562] should_fail+0x87b/0xab0 [ 169.350402] should_failslab+0x279/0x2a0 [ 169.354526] __kmalloc+0xc2/0x350 [ 169.358067] ? switchdev_deferred_enqueue+0x9d/0x4f0 [ 169.363279] switchdev_deferred_enqueue+0x9d/0x4f0 [ 169.368283] ? switchdev_deferred_enqueue+0x4f0/0x4f0 [ 169.373538] switchdev_port_attr_set+0x1bd/0x270 [ 169.378368] __set_ageing_time+0x141/0x1f0 [ 169.382674] br_init_port+0x1da/0x300 [ 169.386548] br_add_if+0x112c/0x3140 [ 169.390357] ? security_capable+0x1ef/0x220 [ 169.394821] br_dev_ioctl+0x2c4/0x2b30 [ 169.398832] ? __dev_get_by_name+0x2ab/0x2d0 [ 169.403314] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 169.408395] dev_ifsioc+0x8a8/0x10c0 [ 169.412233] ? _cond_resched+0x3c/0xd0 [ 169.416212] dev_ioctl+0xa45/0x1cf0 [ 169.419957] sock_do_ioctl+0x43a/0x6b0 [ 169.423971] sock_ioctl+0x400/0xca0 [ 169.427700] ? SYSC_ioctl+0x1d2/0x260 [ 169.431557] ? sock_poll+0x370/0x370 [ 169.435328] do_vfs_ioctl+0xaf0/0x2440 [ 169.439303] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 169.444732] ? __fget_light+0x6b9/0x710 [ 169.448732] ? prepare_exit_to_usermode+0x149/0x3a0 [ 169.453765] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.459182] SYSC_ioctl+0x1d2/0x260 [ 169.462869] SyS_ioctl+0x54/0x80 [ 169.466296] do_syscall_64+0x309/0x430 [ 169.470206] ? ioctl_file_clone+0x4f0/0x4f0 [ 169.474550] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 169.485992] RIP: 0033:0x455979 [ 169.489180] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.496915] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 169.504186] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 169.511458] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.518728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 169.526002] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000003 [ 169.533482] team_slave_0: failed to offload ageing time [ 169.538969] bridge0: port 3(team_slave_0) entered disabled state 2018/04/30 11:32:46 executing program 7 (fault-call:5 fault-nth:29): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:46 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:46 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000280)="1d3cad043044c59ec98ccb7388f165b8652e93756503cf66c30204039083c2c9d88b0c1fbd4fad1b0335afb6a7516f7d0943fe52a8594299ff080947bca139545bddbb0bb95c3665b6d393621e66b468bb79f6607b680fb38db8b488d8573e43a7bd963e1fd4bd6031ad243e2fcbe0230c2133a139309759cf2735e01e48a4319a0c88344555205890386f72b201115f1fb6e84581f43e4e5ed69d40d8ca079082e922811b4a0733a096beb19df156779045b31f77acc652aa9c0f95355343ed019a2cf3ce2b6dc49813ec0bea821b703a3f593fe146679878907b27aa412f0429924f6ceeb2a548fe0be9f6862309", 0xef}, {&(0x7f0000000380)="e5a201778b19c87d626748fa0d2ec97c4d2cc092a8e09ae1f30cd204038f2b529366756af422dc3e90281316b8b7aa9420a8262c7e18cdad68d210cdead442cd930d014e727bc4602fe3d274ef6d7d43d3eb2030fff895d1f39bfab0a9d3f24380253d087bcb930867d3c45c9851b5df062fc4d4cc8653168c6d63a00b34", 0x7e}, {&(0x7f0000001400)="2162d53c4a3c07ac540ea62fc07272d85f18839b0efa9524eb431c03511a35dac9bde509075ba902e80f11ffa3c731e12bfd3603dae3ff7a24d50646b93dca8889b67e4e6dbf9af78f15a89c9ebee9160a25ced9b178b3f1c6608e24c131072aa82076c137c5ab51d29644c85784d6563d95c1c6b9d7090240128dd37da90f361d82d2823823ba652889fff5ce93e1b6b1f2b09c2ccfdd5d5f132ec3a97bc14a4e3717902ab80f95b448bdc11e4ea2730987b16b24b2f02075e36c2c4fffa2903605fd5bd350e2468beae853", 0xcc}, {&(0x7f0000001500)="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", 0xfd}, {&(0x7f0000001600)="542935dfa2f3af011c4fee2f81700b5ca07b704c5c2fcdde27a681bf150b338e1df7c694a92262b81c28d28d0a1e5ef906ea849565ef4aa3aa582548e6f1146c6ce5d68c99a812e071e0b2272c5de9bba5a3a099da8f93a0afc66f20", 0x5c}, {&(0x7f0000001680)}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="4ea1f7e3bfd57378ee3928e2a8922fe8f638d2def20cd37679505aa7c6c96aeb89da9c5f452565a5fd25924db99385c906ebf404208e137a4457c2fd05e5f09a2a22cd476df90630331e43aad0f1fecd96d198e66e278c923ef3d245ec0e0b99cf8a7586f19903835ab4a6c7a495a595b4aed7ec0cdb24635365cc76c5af355c2d4c", 0x82}, {&(0x7f00000017c0)="1bd5167040dafb190bb30ec1257ced033d09a94023b9c6888ac5b4e6c6778e0f22cfdcc06b9329700a586c8b46b7b1252cd3bb8178782f773f9f3e572d62fcf85c9dbc850595edd8b4af4f6746feac394d1ac8b2dc1a4bcb3dad9c79f40b47d114fd93cacd08b51340130ffd1bdb8af57c63c3b86c9c107f20e6464efd58dba0efbcbf079380468ed321de836bde5acf6506b4f4b0089493bd40835ed87b8e54ac0ca1f24953ac0f6917", 0xaa}, {&(0x7f0000001880)="5d066f6503786fbbc08c247ab08ea112a2470b19ee86ce51d64f0dba9c4461a571dde3aa2515f4a55e651e01e8756710636b48da26db3a092888204af9f791b6715a0314997f0abbb20762054ca2", 0x4e}], 0xa) r1 = accept4$ipx(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000200)=0x10, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x0, 0xfffffffffffff000}, 0x8) r2 = socket(0x400000010, 0x3, 0x0) write(r2, &(0x7f0000000000)="260000005e0009fff18500002400000700000000000000fff7df000008004665000002fb4b35", 0x26) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000040)=""/91, 0x5b}], 0x2, &(0x7f0000000140)=""/77, 0x4d}, 0x0) 2018/04/30 11:32:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) socket(0x15, 0xa, 0x2) 2018/04/30 11:32:46 executing program 6 (fault-call:2 fault-nth:4): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:46 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x200000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xcfa}, 0x1) 2018/04/30 11:32:46 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00'}) [ 169.815775] FAULT_INJECTION: forcing a failure. [ 169.815775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.823431] bridge0: port 3(team_slave_0) entered blocking state [ 169.827634] CPU: 0 PID: 11379 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 169.827643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.827647] Call Trace: [ 169.827671] dump_stack+0x185/0x1d0 [ 169.827689] should_fail+0x87b/0xab0 [ 169.827711] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 169.827745] ? kernel_poison_pages+0x40/0x360 [ 169.834017] FAULT_INJECTION: forcing a failure. [ 169.834017] name failslab, interval 1, probability 0, space 0, times 0 [ 169.840830] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 169.840850] ? kernel_poison_pages+0x1a0/0x360 [ 169.840865] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 169.840880] ? get_page_from_freelist+0xab28/0xb600 [ 169.840916] ? kmsan_set_origin_inline+0x6b/0x120 [ 169.905673] ? __msan_poison_alloca+0x15c/0x1d0 [ 169.910334] ? memcg_kmem_charge+0x5dd/0xa30 [ 169.914737] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 169.919655] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 169.925105] ? __msan_poison_alloca+0x15c/0x1d0 [ 169.929769] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.935121] ? memcg_kmem_charge+0x703/0xa30 [ 169.939520] kmsan_alloc_page+0x82/0xe0 [ 169.943491] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 169.948236] ? kernel_text_address+0x34d/0x3a0 [ 169.952809] ? __kernel_text_address+0x34/0xe0 [ 169.957386] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 169.962827] ? __save_stack_trace+0x90d/0xb00 [ 169.967323] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 169.972684] alloc_pages_current+0x6b5/0x970 [ 169.977095] __pmd_alloc+0xad/0x410 [ 169.980713] copy_page_range+0x39ba/0x3f10 [ 169.984941] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 169.990387] ? __rb_insert_augmented+0xd4e/0x13e0 [ 169.995230] ? init_admin_reserve+0x160/0x160 [ 169.999727] ? __vma_link_rb+0xc0e/0xcd0 [ 170.003799] copy_process+0x6d87/0x9bb0 [ 170.007788] _do_fork+0x311/0xf00 [ 170.011246] ? prepare_exit_to_usermode+0x149/0x3a0 [ 170.016256] SYSC_clone+0xf6/0x110 [ 170.019790] SyS_clone+0x77/0xa0 [ 170.023160] do_syscall_64+0x309/0x430 [ 170.027047] ? sys_vfork+0x70/0x70 [ 170.031419] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.036619] RIP: 0033:0x455979 [ 170.039802] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 170.047499] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 170.054756] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 170.062012] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 170.069269] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 170.076535] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001d [ 170.083826] CPU: 1 PID: 11382 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 170.090793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.100182] Call Trace: [ 170.102826] dump_stack+0x185/0x1d0 [ 170.106511] should_fail+0x87b/0xab0 [ 170.110342] should_failslab+0x279/0x2a0 [ 170.114457] __kmalloc+0xc2/0x350 [ 170.118068] ? switchdev_deferred_enqueue+0x9d/0x4f0 [ 170.123228] switchdev_deferred_enqueue+0x9d/0x4f0 [ 170.128219] ? switchdev_deferred_enqueue+0x4f0/0x4f0 [ 170.133660] switchdev_port_attr_set+0x1bd/0x270 [ 170.138478] br_set_state+0x178/0x4d0 [ 170.142368] br_add_if+0x1149/0x3140 [ 170.146162] ? security_capable+0x1ef/0x220 [ 170.150583] br_dev_ioctl+0x2c4/0x2b30 [ 170.154590] ? __dev_get_by_name+0x2ab/0x2d0 [ 170.159064] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 170.164136] dev_ifsioc+0x8a8/0x10c0 [ 170.167981] ? _cond_resched+0x3c/0xd0 [ 170.171964] dev_ioctl+0xa45/0x1cf0 [ 170.175726] sock_do_ioctl+0x43a/0x6b0 [ 170.179733] sock_ioctl+0x400/0xca0 [ 170.183482] ? SYSC_ioctl+0x1d2/0x260 [ 170.187346] ? sock_poll+0x370/0x370 [ 170.191115] do_vfs_ioctl+0xaf0/0x2440 [ 170.195094] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 170.200514] ? __fget_light+0x6b9/0x710 [ 170.204537] ? prepare_exit_to_usermode+0x149/0x3a0 [ 170.209607] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 170.215078] SYSC_ioctl+0x1d2/0x260 [ 170.218829] SyS_ioctl+0x54/0x80 [ 170.222315] do_syscall_64+0x309/0x430 [ 170.226281] ? ioctl_file_clone+0x4f0/0x4f0 [ 170.230658] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.235882] RIP: 0033:0x455979 [ 170.239098] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.246853] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 170.254244] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 2018/04/30 11:32:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xe0802, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='}ppp1md5sum\x00') bind$unix(r0, &(0x7f0000000040)=@file={0x1}, 0x6e) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 2018/04/30 11:32:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80002, 0x40) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x1) 2018/04/30 11:32:47 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 170.261550] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.268853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 170.274935] Unknown ioctl 1074275334 [ 170.276145] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000004 [ 170.276394] bridge0: error setting offload STP state on port 3(team_slave_0) [ 170.339413] Unknown ioctl 1074275334 2018/04/30 11:32:47 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') socket$inet_icmp(0x2, 0x2, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) rt_sigaction(0x29, &(0x7f0000000140)={0x5, {0x4}, 0x80000003, 0x800}, 0x0, 0x8, &(0x7f0000000180)) getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='oom_adj\x00') sendfile(r2, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:47 executing program 7 (fault-call:5 fault-nth:30): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') sendfile(r1, r1, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/30 11:32:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x2) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) 2018/04/30 11:32:47 executing program 6 (fault-call:2 fault-nth:5): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:47 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 170.557341] FAULT_INJECTION: forcing a failure. [ 170.557341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.569204] CPU: 1 PID: 11425 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 170.576138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.580208] FAULT_INJECTION: forcing a failure. [ 170.580208] name failslab, interval 1, probability 0, space 0, times 0 [ 170.585489] Call Trace: [ 170.585513] dump_stack+0x185/0x1d0 [ 170.585532] should_fail+0x87b/0xab0 [ 170.585555] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 170.585571] ? kernel_poison_pages+0x40/0x360 [ 170.585586] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 170.585599] ? kernel_poison_pages+0x1a0/0x360 [ 170.585614] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 170.585626] ? get_page_from_freelist+0xab28/0xb600 [ 170.585664] ? kmsan_set_origin_inline+0x6b/0x120 [ 170.641770] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 170.646788] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 170.652236] ? __msan_poison_alloca+0x15c/0x1d0 [ 170.657676] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 170.663036] ? memcg_kmem_charge+0x703/0xa30 [ 170.667440] kmsan_alloc_page+0x82/0xe0 [ 170.671418] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 170.676164] ? kernel_text_address+0x34d/0x3a0 [ 170.680737] ? __kernel_text_address+0x34/0xe0 [ 170.685311] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 170.690762] ? __save_stack_trace+0x90d/0xb00 [ 170.695250] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.700608] alloc_pages_current+0x6b5/0x970 [ 170.705005] __pmd_alloc+0xad/0x410 [ 170.708627] copy_page_range+0x39ba/0x3f10 [ 170.712856] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 170.718298] ? __rb_insert_augmented+0xd4e/0x13e0 [ 170.723135] ? init_admin_reserve+0x160/0x160 [ 170.727630] ? __vma_link_rb+0xc0e/0xcd0 [ 170.731685] copy_process+0x6d87/0x9bb0 [ 170.735665] _do_fork+0x311/0xf00 [ 170.739111] ? prepare_exit_to_usermode+0x149/0x3a0 [ 170.744122] SYSC_clone+0xf6/0x110 [ 170.747653] SyS_clone+0x77/0xa0 [ 170.751005] do_syscall_64+0x309/0x430 [ 170.754889] ? sys_vfork+0x70/0x70 [ 170.758418] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.764112] RIP: 0033:0x455979 [ 170.767286] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 170.775851] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 170.783106] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 170.790361] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 170.797614] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 170.804872] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001e [ 170.812158] CPU: 0 PID: 11429 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 170.819217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.828606] Call Trace: [ 170.831253] dump_stack+0x185/0x1d0 [ 170.834934] should_fail+0x87b/0xab0 [ 170.838708] should_failslab+0x279/0x2a0 [ 170.842818] __kmalloc+0xc2/0x350 [ 170.846324] ? br_add_if+0x4ed/0x3140 [ 170.850169] br_add_if+0x4ed/0x3140 [ 170.854005] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 170.859422] ? security_capable+0x1ef/0x220 [ 170.863855] br_dev_ioctl+0x2c4/0x2b30 [ 170.867850] ? __dev_get_by_name+0x2ab/0x2d0 [ 170.872307] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 170.877363] dev_ifsioc+0x8a8/0x10c0 [ 170.881160] ? _cond_resched+0x3c/0xd0 [ 170.885097] dev_ioctl+0xa45/0x1cf0 [ 170.888823] sock_do_ioctl+0x43a/0x6b0 [ 170.892824] sock_ioctl+0x400/0xca0 [ 170.896553] ? SYSC_ioctl+0x1d2/0x260 [ 170.900407] ? sock_poll+0x370/0x370 [ 170.904169] do_vfs_ioctl+0xaf0/0x2440 2018/04/30 11:32:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x2) sendfile(r0, r1, &(0x7f00000ddff8)=0xe00, 0x102000001) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)=0x3) [ 170.908122] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 170.913531] ? __fget_light+0x6b9/0x710 [ 170.917553] ? prepare_exit_to_usermode+0x149/0x3a0 [ 170.922622] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 170.928088] SYSC_ioctl+0x1d2/0x260 [ 170.931871] SyS_ioctl+0x54/0x80 [ 170.935341] do_syscall_64+0x309/0x430 [ 170.939300] ? ioctl_file_clone+0x4f0/0x4f0 [ 170.943675] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.948903] RIP: 0033:0x455979 2018/04/30 11:32:47 executing program 7 (fault-call:5 fault-nth:31): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) [ 170.952121] RSP: 002b:00007fde6d888c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.959971] RAX: ffffffffffffffda RBX: 00007fde6d8896d4 RCX: 0000000000455979 [ 170.967286] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 170.974597] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.981904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 170.989218] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000000 [ 170.999509] bridge0: port 3(team_slave_0) entered blocking state [ 171.005851] bridge0: port 3(team_slave_0) entered disabled state [ 171.012159] FAULT_INJECTION: forcing a failure. [ 171.012159] name failslab, interval 1, probability 0, space 0, times 0 [ 171.023491] CPU: 1 PID: 11426 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 171.030453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.039935] Call Trace: [ 171.042579] dump_stack+0x185/0x1d0 [ 171.046276] should_fail+0x87b/0xab0 [ 171.050107] should_failslab+0x279/0x2a0 [ 171.054258] __kmalloc+0xc2/0x350 [ 171.057773] ? kmsan_set_origin_inline+0x6b/0x120 [ 171.062718] ? switchdev_deferred_enqueue+0x9d/0x4f0 [ 171.067897] switchdev_deferred_enqueue+0x9d/0x4f0 [ 171.072990] ? switchdev_deferred_enqueue+0x4f0/0x4f0 [ 171.078248] ? br_multicast_add_port+0x138/0x490 [ 171.083091] switchdev_port_attr_set+0x1bd/0x270 [ 171.088001] br_multicast_add_port+0x25d/0x490 [ 171.092664] br_add_if+0x117a/0x3140 [ 171.096462] ? security_capable+0x1ef/0x220 [ 171.100900] br_dev_ioctl+0x2c4/0x2b30 [ 171.104910] ? __dev_get_by_name+0x2ab/0x2d0 [ 171.109388] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 171.111212] FAULT_INJECTION: forcing a failure. [ 171.111212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.114448] dev_ifsioc+0x8a8/0x10c0 [ 171.114556] ? _cond_resched+0x3c/0xd0 [ 171.114613] dev_ioctl+0xa45/0x1cf0 [ 171.114708] sock_do_ioctl+0x43a/0x6b0 [ 171.141643] sock_ioctl+0x400/0xca0 [ 171.145361] ? SYSC_ioctl+0x1d2/0x260 [ 171.149190] ? sock_poll+0x370/0x370 [ 171.152930] do_vfs_ioctl+0xaf0/0x2440 [ 171.156858] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 171.162234] ? __fget_light+0x6b9/0x710 [ 171.166219] ? prepare_exit_to_usermode+0x149/0x3a0 [ 171.171251] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 171.176673] SYSC_ioctl+0x1d2/0x260 [ 171.180374] SyS_ioctl+0x54/0x80 [ 171.183805] do_syscall_64+0x309/0x430 [ 171.187721] ? ioctl_file_clone+0x4f0/0x4f0 [ 171.192067] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 171.197261] RIP: 0033:0x455979 [ 171.200451] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.208180] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 171.215454] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 171.222732] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.230005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 171.237283] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000005 [ 171.244585] CPU: 0 PID: 11443 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 171.251545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.260935] Call Trace: [ 171.263582] dump_stack+0x185/0x1d0 [ 171.267262] should_fail+0x87b/0xab0 [ 171.271088] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 171.275911] ? __alloc_pages_nodemask+0xf5b/0x5dc0 [ 171.280891] ? kernel_text_address+0x34d/0x3a0 [ 171.285584] ? __kernel_text_address+0x34/0xe0 [ 171.290258] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 171.295807] ? __save_stack_trace+0x90d/0xb00 [ 171.300394] alloc_pages_current+0x6b5/0x970 [ 171.304912] pte_alloc_one+0x56/0x110 [ 171.309204] __pte_alloc+0x86/0x410 [ 171.312886] ? kmsan_set_origin+0x9e/0x160 [ 171.317179] copy_page_range+0x2ffd/0x3f10 [ 171.321474] ? __rb_insert_augmented+0xd4e/0x13e0 [ 171.326391] ? __vma_link_rb+0xc0e/0xcd0 [ 171.330503] copy_process+0x6d87/0x9bb0 [ 171.334575] _do_fork+0x311/0xf00 [ 171.338094] ? prepare_exit_to_usermode+0x149/0x3a0 [ 171.343204] SYSC_clone+0xf6/0x110 [ 171.346807] SyS_clone+0x77/0xa0 [ 171.356657] do_syscall_64+0x309/0x430 2018/04/30 11:32:48 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/if_inet6\x00') syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x76, 0x40000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r2, r1, &(0x7f0000000040)=0x4, 0x800400000ff) 2018/04/30 11:32:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') sendfile(r1, r1, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/04/30 11:32:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x5, 0x4) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x10) sendmsg$unix(r1, &(0x7f0000000000)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000007000)="fd20932fcc7cfaafcf960802e02330f8fba600069da7b774c31273", 0x1b}], 0x1, &(0x7f0000000100)=ANY=[]}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0xc0002) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x800000000000065}) ioctl(r2, 0x2285, &(0x7f0000007000)='S') ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4043, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000001000b0153c622083237000002200000008200000"]) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x30d, 0x401, 0x5, 0x7f, 0xc6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/04/30 11:32:48 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000200)=""/201, 0xfffffffffffffc50}], 0x2, &(0x7f00000000c0)=""/34, 0xfec8}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000400)={{0x0, @empty, 0x0, 0x0, 'ovf\x00'}, {@empty, 0x0, 0x0, 0x0, 0x9}}, 0x44) r1 = memfd_create(&(0x7f0000000500)=']self\x00', 0x1) sendto$unix(r1, &(0x7f0000000540)="f235d7be1841b80029e97d", 0xb, 0x4, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000380), 0x9c}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x34, r3}) [ 171.360592] ? sys_vfork+0x70/0x70 [ 171.364234] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 171.369486] RIP: 0033:0x455979 [ 171.372712] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 171.380464] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 171.387765] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 171.395072] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 171.402419] sd 0:0:1:0: [sg0] tag#2123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 171.402569] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 171.402588] R13: 0000000000000052 R14: 00000000006f4850 R15: 000000000000001f [ 171.426475] sd 0:0:1:0: [sg0] tag#2123 CDB: Test Unit Ready [ 171.432364] sd 0:0:1:0: [sg0] tag#2123 CDB[00]: 00 00 00 00 00 00 00 06 03 2a bf ba 3d fe ff ff [ 171.441397] sd 0:0:1:0: [sg0] tag#2123 CDB[10]: ff ff ff ff ff 88 04 00 20 00 00 00 00 00 00 00 [ 171.450423] sd 0:0:1:0: [sg0] tag#2123 CDB[20]: 00 00 00 00 00 08 00 00 00 00 00 00 00 5c 01 00 2018/04/30 11:32:48 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) 2018/04/30 11:32:48 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) [ 171.459411] sd 0:0:1:0: [sg0] tag#2123 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff d8 04 00 [ 171.468451] sd 0:0:1:0: [sg0] tag#2123 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 [ 171.477499] sd 0:0:1:0: [sg0] tag#2123 CDB[50]: 00 00 00 00 00 01 00 00 00 00 00 00 00 fe ff ff [ 171.486524] sd 0:0:1:0: [sg0] tag#2123 CDB[60]: ff ff ff ff ff 2018/04/30 11:32:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000180000fa0100000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0400000000000000"], 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r2, 0xfc3}}, 0x10) 2018/04/30 11:32:48 executing program 3: gettid() prctl$intptr(0x1d, 0x800) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000d64000)) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) 2018/04/30 11:32:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00003eb000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) recvfrom$unix(r1, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) epoll_wait(r2, &(0x7f00009e5000)=[{}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000bd000)={0x201000090000001}) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f000036bf70), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) r3 = dup(r0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x80000000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendfile(r5, r4, &(0x7f0000000040)=0x4, 0x800400000ff) [ 171.664326] FAULT_INJECTION: forcing a failure. [ 171.664326] name failslab, interval 1, probability 0, space 0, times 0 [ 171.675893] CPU: 0 PID: 11467 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 171.682949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.693648] Call Trace: [ 171.696298] dump_stack+0x185/0x1d0 [ 171.700002] should_fail+0x87b/0xab0 [ 171.703788] should_failslab+0x279/0x2a0 [ 171.707926] __kmalloc+0xc2/0x350 [ 171.711453] ? br_add_if+0x87b/0x3140 [ 171.715325] br_add_if+0x87b/0x3140 [ 171.719042] ? security_capable+0x1ef/0x220 [ 171.723487] br_dev_ioctl+0x2c4/0x2b30 [ 171.727514] ? __dev_get_by_name+0x2ab/0x2d0 [ 171.731999] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 171.737079] dev_ifsioc+0x8a8/0x10c0 [ 171.740937] dev_ioctl+0xa45/0x1cf0 [ 171.744701] sock_do_ioctl+0x43a/0x6b0 [ 171.748715] sock_ioctl+0x400/0xca0 [ 171.753066] ? SYSC_ioctl+0x1d2/0x260 [ 171.756935] ? sock_poll+0x370/0x370 [ 171.760699] do_vfs_ioctl+0xaf0/0x2440 [ 171.764694] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 171.770113] ? __fget_light+0x6b9/0x710 [ 171.773157] sd 0:0:1:0: [sg0] tag#2123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 171.774135] ? prepare_exit_to_usermode+0x149/0x3a0 [ 171.774174] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 171.774260] SYSC_ioctl+0x1d2/0x260 [ 171.774350] SyS_ioctl+0x54/0x80 [ 171.783111] sd 0:0:1:0: [sg0] tag#2123 CDB: Test Unit Ready [ 171.788063] do_syscall_64+0x309/0x430 [ 171.788112] ? ioctl_file_clone+0x4f0/0x4f0 2018/04/30 11:32:48 executing program 7 (fault-call:5 fault-nth:32): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:48 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 171.793526] sd 0:0:1:0: [sg0] tag#2123 CDB[00]: 00 00 00 00 00 00 00 06 03 2a bf ba 3d fe ff ff [ 171.797100] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 171.797134] RIP: 0033:0x455979 [ 171.800585] sd 0:0:1:0: [sg0] tag#2123 CDB[10]: ff ff ff ff ff 88 04 00 20 00 00 00 00 00 00 00 [ 171.806191] RSP: 002b:00007fde6d888c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.806223] RAX: ffffffffffffffda RBX: 00007fde6d8896d4 RCX: 0000000000455979 [ 171.806252] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 171.810194] sd 0:0:1:0: [sg0] tag#2123 CDB[20]: 00 00 00 00 00 08 00 00 00 00 00 00 00 5c 01 00 [ 171.814434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.814451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 171.814465] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000001 [ 171.895699] sd 0:0:1:0: [sg0] tag#2123 CDB[30]: 00 00 00 00 00 fe ff ff ff ff ff ff ff d8 04 00 [ 171.904694] sd 0:0:1:0: [sg0] tag#2123 CDB[40]: 20 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 2018/04/30 11:32:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="042bd73c000000080000fa75c026729093c2eab42116fd08420ae645", @ANYRES32=r2, @ANYBLOB="c30f0000"], 0x10) fstatfs(r0, &(0x7f0000000040)=""/72) [ 171.913755] sd 0:0:1:0: [sg0] tag#2123 CDB[50]: 00 00 00 00 00 01 00 00 00 00 00 00 00 fe ff ff [ 171.922752] sd 0:0:1:0: [sg0] tag#2123 CDB[60]: ff ff ff ff ff [ 171.937372] FAULT_INJECTION: forcing a failure. [ 171.937372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.949228] CPU: 1 PID: 11484 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 171.956189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.965549] Call Trace: [ 171.968152] dump_stack+0x185/0x1d0 [ 171.971798] should_fail+0x87b/0xab0 [ 171.975531] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 171.980309] ? kernel_poison_pages+0x40/0x360 [ 171.984822] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 171.990204] ? kernel_poison_pages+0x1a0/0x360 [ 171.994804] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 172.000273] ? get_page_from_freelist+0xab28/0xb600 [ 172.005309] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 172.010696] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.015561] ? __msan_poison_alloca+0x15c/0x1d0 [ 172.020251] ? memcg_kmem_charge+0x5dd/0xa30 [ 172.024761] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 172.029739] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.034698] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 172.040088] ? memcg_kmem_charge+0x703/0xa30 [ 172.044517] kmsan_alloc_page+0x82/0xe0 [ 172.048523] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 172.053296] ? __alloc_pages_nodemask+0xf5b/0x5dc0 [ 172.058237] ? kernel_text_address+0x34d/0x3a0 [ 172.062835] ? __kernel_text_address+0x34/0xe0 [ 172.067429] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 172.073416] ? __save_stack_trace+0x90d/0xb00 [ 172.077944] alloc_pages_current+0x6b5/0x970 [ 172.082374] pte_alloc_one+0x56/0x110 [ 172.086183] __pte_alloc+0x86/0x410 [ 172.089837] ? kmsan_set_origin+0x9e/0x160 [ 172.094085] copy_page_range+0x2ffd/0x3f10 [ 172.098332] ? __rb_insert_augmented+0xd4e/0x13e0 [ 172.103196] ? __vma_link_rb+0xc0e/0xcd0 [ 172.107268] copy_process+0x6d87/0x9bb0 [ 172.111268] _do_fork+0x311/0xf00 [ 172.114727] ? prepare_exit_to_usermode+0x149/0x3a0 [ 172.119750] SYSC_clone+0xf6/0x110 [ 172.123296] SyS_clone+0x77/0xa0 [ 172.126661] do_syscall_64+0x309/0x430 [ 172.130556] ? sys_vfork+0x70/0x70 [ 172.134103] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 172.139295] RIP: 0033:0x455979 [ 172.142485] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 172.150203] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 172.157480] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 172.164761] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 172.172043] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 172.179411] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000020 2018/04/30 11:32:49 executing program 2: unshare(0x60000000) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/igmp\x00') ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) pread64(r1, &(0x7f0000000080)=""/247, 0xf7, 0x0) 2018/04/30 11:32:49 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)="6e65742f69705f76735f73746157c500") sched_setattr(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, 0x2, 0x1, 0x4, 0x504a9b95, 0x2}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x8, 0x50e, 0x100000001, 0x80000001, 0x1}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x800400000ff) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) 2018/04/30 11:32:49 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x101000, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000340)="fbd940893a90772c2b09b33d66507c09e12a6a1f93dbd18d8789530ea473aed82dc479c4868642c5d03ae6ec4058bc747137aff68fc2962e292d48c916724efb94499ec67ac1368f87c9485af62491d951", 0x51) 2018/04/30 11:32:49 executing program 6 (fault-call:2 fault-nth:6): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2001, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x1d) write$rdma_cm(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="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"], 0x214) write$rdma_cm(r0, &(0x7f00000002c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r3, 0xfc3}}, 0x10) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'bpq0\x00', 0x400}) 2018/04/30 11:32:49 executing program 7 (fault-call:5 fault-nth:33): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) r1 = dup(r0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/04/30 11:32:49 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', r1}) 2018/04/30 11:32:49 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x6, 0x7ffffffe, 0x3, 'queue1\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0e70000", @ANYRES16, @ANYBLOB="edad2abd7000fcdbdf250100c26e450f686677de04ad2468b500000801004e22000008000300be0000000840040003000000080002000a00000008004e4e3781faf692b95bae050000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7}) [ 172.847209] FAULT_INJECTION: forcing a failure. [ 172.847209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.856231] FAULT_INJECTION: forcing a failure. [ 172.856231] name failslab, interval 1, probability 0, space 0, times 0 [ 172.859167] CPU: 0 PID: 11520 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 172.859176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.859180] Call Trace: [ 172.859204] dump_stack+0x185/0x1d0 [ 172.859223] should_fail+0x87b/0xab0 [ 172.859247] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 172.859263] ? kernel_poison_pages+0x40/0x360 [ 172.859277] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 172.859315] ? kernel_poison_pages+0x1a0/0x360 [ 172.915921] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 172.921363] ? get_page_from_freelist+0xab28/0xb600 [ 172.926387] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.931220] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 172.936232] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.941067] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 172.946421] ? memcg_kmem_charge+0x703/0xa30 [ 172.950814] kmsan_alloc_page+0x82/0xe0 [ 172.954784] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 172.959530] ? __alloc_pages_nodemask+0xf5b/0x5dc0 [ 172.964446] ? kernel_text_address+0x34d/0x3a0 [ 172.969102] ? __kernel_text_address+0x34/0xe0 [ 172.973673] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 172.979110] ? __save_stack_trace+0x90d/0xb00 [ 172.983602] alloc_pages_current+0x6b5/0x970 [ 172.988087] pte_alloc_one+0x56/0x110 [ 172.991874] __pte_alloc+0x86/0x410 [ 172.995488] ? kmsan_set_origin+0x9e/0x160 [ 172.999710] copy_page_range+0x2ffd/0x3f10 [ 173.003937] ? __rb_insert_augmented+0xd4e/0x13e0 [ 173.008775] ? __vma_link_rb+0xc0e/0xcd0 [ 173.012826] copy_process+0x6d87/0x9bb0 [ 173.016808] _do_fork+0x311/0xf00 [ 173.020256] ? prepare_exit_to_usermode+0x149/0x3a0 [ 173.025267] SYSC_clone+0xf6/0x110 [ 173.028798] SyS_clone+0x77/0xa0 [ 173.032151] do_syscall_64+0x309/0x430 [ 173.036028] ? sys_vfork+0x70/0x70 [ 173.039566] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 173.044738] RIP: 0033:0x455979 [ 173.047908] RSP: 002b:00007fe5daf18c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 173.055600] RAX: ffffffffffffffda RBX: 00007fe5daf196d4 RCX: 0000000000455979 [ 173.062857] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 173.070117] RBP: 000000000072bea0 R08: 0000000020000140 R09: 0000000000000000 [ 173.077459] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000014 [ 173.084716] R13: 0000000000000052 R14: 00000000006f4850 R15: 0000000000000021 [ 173.092004] CPU: 1 PID: 11515 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 173.098965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.108356] Call Trace: [ 173.110995] dump_stack+0x185/0x1d0 [ 173.114668] should_fail+0x87b/0xab0 [ 173.118484] should_failslab+0x279/0x2a0 [ 173.122590] __kmalloc+0xc2/0x350 [ 173.126091] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.131502] ? switchdev_deferred_enqueue+0x9d/0x4f0 [ 173.136661] switchdev_deferred_enqueue+0x9d/0x4f0 [ 173.141684] ? switchdev_deferred_enqueue+0x4f0/0x4f0 2018/04/30 11:32:50 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x20, @ipv4={[], [0xff, 0xff], @rand_addr=0x7}, 0x7}, @in6={0xa, 0x4e22, 0x100000000, @dev={0xfe, 0x80, [], 0x1c}, 0xffffffffffffff00}, @in6={0xa, 0x4e23, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffa}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x7fffffff}, @in6={0xa, 0x4e20, 0x3ff, @local={0xfe, 0x80, [], 0xaa}}], 0xcc) listen(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x4e23}], 0x1c) sendto$inet(r1, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f00006e2000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r1, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='9', 0x1}], 0x1, &(0x7f00000009c0)}}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000003000), 0x0, &(0x7f0000003080)}}], 0x2, 0x0) [ 173.146939] switchdev_port_attr_set+0x1bd/0x270 [ 173.151777] br_set_state+0x178/0x4d0 [ 173.155637] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 173.161237] br_init_port+0x10e/0x300 [ 173.165100] br_add_if+0x112c/0x3140 [ 173.168871] ? security_capable+0x1ef/0x220 [ 173.173254] br_dev_ioctl+0x2c4/0x2b30 [ 173.177252] ? __dev_get_by_name+0x2ab/0x2d0 [ 173.181713] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 173.186770] dev_ifsioc+0x8a8/0x10c0 [ 173.190605] ? _cond_resched+0x3c/0xd0 [ 173.194574] dev_ioctl+0xa45/0x1cf0 2018/04/30 11:32:50 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x40, 0x200301) sendto$unix(r0, &(0x7f00000002c0)="78ff192e51538be5590cda8cdd5ea3f78d871947a48b0d00c7d61e4c3ed344f58d7dc7328acd39339f4f533f79164834a9321097b142533e15e4beb818e39769044076ae83d793b376f3fa85c154779a16258f11af3ac9afecf6c7d0e3c02d3c7920c41a2411061bb45e9b41911719456de6cf41c2ffa3655d42e9027f8f6504c55b0d18eb9c5030ab8cb403d90dc1604165efdefb1abac752f6876b9e8356b082de8058341c6a6a07a6030593ec71fb3bd5763af7e876b24f6f89b06e0b5567bc7ad1ddc305bdc02bde275eaf514eab3a53e1c7c80e79707a4a885a23ff035b63640488bbc6f9bc22474baeba926084", 0xf0, 0x10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="82e8e8838fb378deeb18022c22f32932f020fe9bfa3e84c20418013484", 0x1d}], 0x1, 0x3d) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000004c0)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x800400000ff) [ 173.198311] sock_do_ioctl+0x43a/0x6b0 [ 173.202312] sock_ioctl+0x400/0xca0 [ 173.206029] ? SYSC_ioctl+0x1d2/0x260 [ 173.209884] ? sock_poll+0x370/0x370 [ 173.213632] do_vfs_ioctl+0xaf0/0x2440 [ 173.217581] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.222990] ? __fget_light+0x6b9/0x710 [ 173.227014] ? prepare_exit_to_usermode+0x149/0x3a0 [ 173.232094] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.237560] SYSC_ioctl+0x1d2/0x260 [ 173.241308] SyS_ioctl+0x54/0x80 [ 173.244784] do_syscall_64+0x309/0x430 [ 173.248737] ? ioctl_file_clone+0x4f0/0x4f0 [ 173.253116] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 173.258346] RIP: 0033:0x455979 [ 173.261560] RSP: 002b:00007fde6d888c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.269316] RAX: ffffffffffffffda RBX: 00007fde6d8896d4 RCX: 0000000000455979 [ 173.276716] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 173.284021] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.291333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 173.298645] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000002 [ 173.306092] bridge0: error setting offload STP state on port 3(team_slave_0) [ 173.310989] IPVS: ftp: loaded support on port[0] = 21 [ 173.313446] bridge0: port 3(team_slave_0) entered disabled state [ 173.407323] bridge0: port 3(team_slave_0) entered blocking state [ 173.413777] bridge0: port 3(team_slave_0) entered disabled state [ 173.457611] FAULT_INJECTION: forcing a failure. [ 173.457611] name failslab, interval 1, probability 0, space 0, times 0 [ 173.469109] CPU: 1 PID: 11517 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 173.476070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.485460] Call Trace: [ 173.488114] dump_stack+0x185/0x1d0 [ 173.491801] should_fail+0x87b/0xab0 [ 173.495633] should_failslab+0x279/0x2a0 [ 173.500629] kmem_cache_alloc+0x136/0xb90 [ 173.504855] ? __kernfs_new_node+0x137/0x6e0 [ 173.509387] __kernfs_new_node+0x137/0x6e0 [ 173.513684] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.519121] kernfs_create_dir_ns+0x167/0x4e0 [ 173.523696] sysfs_create_dir_ns+0x177/0x4c0 [ 173.528165] kobject_add_internal+0xbef/0x1700 [ 173.532823] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 173.538374] kobject_init_and_add+0x5cb/0x710 [ 173.542981] br_add_if+0xd24/0x3140 [ 173.546774] ? security_capable+0x1ef/0x220 [ 173.551220] br_dev_ioctl+0x2c4/0x2b30 [ 173.555188] ? __dev_get_by_name+0x2ab/0x2d0 [ 173.559644] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 173.564702] dev_ifsioc+0x8a8/0x10c0 [ 173.568486] dev_ioctl+0xa45/0x1cf0 [ 173.572198] sock_do_ioctl+0x43a/0x6b0 [ 173.576188] sock_ioctl+0x400/0xca0 [ 173.579869] ? SYSC_ioctl+0x1d2/0x260 [ 173.583724] ? sock_poll+0x370/0x370 [ 173.587473] do_vfs_ioctl+0xaf0/0x2440 [ 173.591393] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.596766] ? __fget_light+0x6b9/0x710 [ 173.600756] ? prepare_exit_to_usermode+0x149/0x3a0 [ 173.605784] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.611241] SYSC_ioctl+0x1d2/0x260 [ 173.614937] SyS_ioctl+0x54/0x80 [ 173.618357] do_syscall_64+0x309/0x430 [ 173.622285] ? ioctl_file_clone+0x4f0/0x4f0 [ 173.626650] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 173.631870] RIP: 0033:0x455979 [ 173.635086] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.642828] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 173.650126] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 173.657414] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.664693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 173.671985] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000006 [ 173.679397] ------------[ cut here ]------------ [ 173.684229] kobject_add_internal failed for brport (error: -12 parent: team_slave_0) [ 173.692676] WARNING: CPU: 1 PID: 11517 at lib/kobject.c:242 kobject_add_internal+0x10fc/0x1700 [ 173.701454] Kernel panic - not syncing: panic_on_warn set ... [ 173.701454] [ 173.708846] CPU: 1 PID: 11517 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 173.715791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.725147] Call Trace: [ 173.727763] dump_stack+0x185/0x1d0 [ 173.731421] panic+0x39d/0x940 [ 173.734660] ? disable_trace_on_warning+0x18/0xd0 [ 173.739531] __warn+0x40f/0x580 [ 173.742847] ? kobject_add_internal+0x10fc/0x1700 [ 173.747716] report_bug+0x72a/0x880 [ 173.751386] ? kobject_add_internal+0x10fc/0x1700 [ 173.756250] do_error_trap+0x1aa/0x600 [ 173.760245] do_invalid_op+0x46/0x50 [ 173.763993] invalid_op+0x1b/0x40 [ 173.767478] RIP: 0010:kobject_add_internal+0x10fc/0x1700 [ 173.772932] RSP: 0018:ffff880186eef4a8 EFLAGS: 00010282 [ 173.778301] RAX: 0000000000000048 RBX: 0000000000000000 RCX: 0000000000000000 [ 173.785582] RDX: ffffc900037a8000 RSI: 000000000001c157 RDI: 000000000001c158 [ 173.792871] RBP: ffff880186eef540 R08: 0000000001080020 R09: 0000000000000002 [ 173.800159] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 173.807433] R13: 00000000fffffff4 R14: ffff88015356d080 R15: ffff880189854418 [ 173.814762] ? kobject_add_internal+0x10fc/0x1700 [ 173.819660] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 173.825181] kobject_init_and_add+0x5cb/0x710 [ 173.829737] br_add_if+0xd24/0x3140 [ 173.833388] ? security_capable+0x1ef/0x220 [ 173.837757] br_dev_ioctl+0x2c4/0x2b30 [ 173.841748] ? __dev_get_by_name+0x2ab/0x2d0 [ 173.846214] ? br_ioctl_deviceless_stub+0xc20/0xc20 [ 173.851242] dev_ifsioc+0x8a8/0x10c0 [ 173.855009] dev_ioctl+0xa45/0x1cf0 [ 173.858701] sock_do_ioctl+0x43a/0x6b0 [ 173.863134] sock_ioctl+0x400/0xca0 [ 173.866796] ? SYSC_ioctl+0x1d2/0x260 [ 173.870623] ? sock_poll+0x370/0x370 [ 173.874376] do_vfs_ioctl+0xaf0/0x2440 [ 173.878299] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.883670] ? __fget_light+0x6b9/0x710 [ 173.887656] ? prepare_exit_to_usermode+0x149/0x3a0 [ 173.892689] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.898111] SYSC_ioctl+0x1d2/0x260 [ 173.901797] SyS_ioctl+0x54/0x80 [ 173.905259] do_syscall_64+0x309/0x430 [ 173.909166] ? ioctl_file_clone+0x4f0/0x4f0 [ 173.913493] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 173.918677] RIP: 0033:0x455979 [ 173.921876] RSP: 002b:00007f2c0febdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.929613] RAX: ffffffffffffffda RBX: 00007f2c0febe6d4 RCX: 0000000000455979 [ 173.936893] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000013 [ 173.944159] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.951423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 173.958692] R13: 00000000000003af R14: 00000000006f9908 R15: 0000000000000006 [ 173.966452] Dumping ftrace buffer: [ 173.969997] (ftrace buffer empty) [ 173.973695] Kernel Offset: disabled [ 173.977322] Rebooting in 86400 seconds..