x6}}, 0x9, 0xffffffff, 0x7, 0xf19, 0x7}}, &(0x7f00000004c0)=0xb0) 2018/04/09 20:04:19 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x346, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfd, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x5f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x24000010) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) 2018/04/09 20:04:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000505000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000cdc000)={0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x7dd}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000100)=""/13) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="f29d0f013f66baf80cb89ce18389ef66bafc0cb800780000ef65360f01bce20e0001003e0f009a00800000ff4603660f38828218ce00008a990000000066b870000f00d066f20f005502", 0x4a}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/09 20:04:19 executing program 2: keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x8fc) socketpair(0xb, 0x6, 0x100000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x6, 0x1, 0x5117, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r1 = getpid() sched_getscheduler(r1) 2018/04/09 20:04:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="67a967ebfdaf2ea0ef0000fdff9400000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x99, &(0x7f0000000140)=""/153}, 0x48) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@dev={0xfe, 0x80}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x9}, 0x20) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x20) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x200000) getsockopt$nfc_llcp(r1, 0x118, 0x7, &(0x7f00000003c0)=""/141, 0x8d) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000280)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x2}) 2018/04/09 20:04:19 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x5, 0x800000000000985, 0x8cd}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000032ff4)={0x2000}) mprotect(&(0x7f0000032000/0x3000)=nil, 0x3000, 0x5) setitimer(0x1, &(0x7f0000032fe0)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x1, &(0x7f0000036fe0)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) 2018/04/09 20:04:19 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x301, 0x70bd2c, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xd}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000077ffc)) 2018/04/09 20:04:19 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000040c0)=@broute={'broute\x00', 0x20, 0x6, 0xe6c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20004e00], 0x0, &(0x7f0000003a80), &(0x7f00000026c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000007465716c300000000000000000000000726f7365300000000000000000000000627269646765300000000000000000007465716c300000000000000000000000aaaaaaaaaa16000000000000aaaaaaaaaabb00000000000000007000000070000000a0000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff020000001f00000000000000000074756e6c30000000000000000000000073797a6b616c6c6572300000000000006970366772657461703000000000000073797a6b616c6c657231000000000000000000000000000000000000ffffffffffff00000000ff00000070000000c00000000801000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a30000000000000000000000000000000000000000000000000000000001d000000000000000000697036677265300000000000000000006970365f76746930000000000000000069666230000000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaabb0000000000000000e808000060090000a8090000616d6f6e670000000000000000000000000000000000000000000000000000005008000000000000000000008dffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000001fcffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000007c010000000000000000000000000000000000000100000000000000000000000000000000000000baffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000e0000002000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a31000000000000000000000000000000000000000000000000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff02000000050000000000000000006970366772653000000000000000000073797a6b616c6c6572310000000000006e723000000000000000000000000000626f6e6430000000000000000000000000000000000000000000ff000180c200000000000000000000007000000070000000a0000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000000000000000000110000000000000000006e7230000000000000000000000000006e7230000000000000000000000000006970646470300000000000000000000069726c616e3000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaabb00000000ff000000a0000000d000000048010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000003fbf1f36402970ee891b26a03c34f303702bdc62520e1580f42a56fdbf9f344afe3aab8cc1e7361216426f2928ac174ecd882f775a62dab1b0401bc9e19621fd00000000000000006f1eddb0cb2e81ef7c09effe3c73ad686a721c80345fcd6e5066ddbcb9e7c15b7dee6d084b7c287b08dc193474839fd29c7cf42822fdf14af9cc33fe0924c8741aab5845ea5ca14b92c75453ab20dfce888e242171c6de973c9f61c9d1c8ca5b1ec52eb0cbdcb868f327afdccf8ab47ece7b7cbd662a68c7f98e481fd76bff9788b1c7c4c7094492d9bb8a3103ebf8d76a7d5e894f723aea66d2a1317302d09b77523271b59efe5d306946273c062662b3ac944747a59b8a3908a7049af2731c4f1ff26915c1dbaa5696abb806bbb77ff7332c936450fbf0db1191639303a9a3bf56a064fb2204be781b03e38800521adef9c5cb60440f33b0c1ff22472f6cb3305a67c396c0e48cc93bf0bba2b23af7e7eb8f7bc6f45ad5e64ca9acdde6ebff81bad64037a06cf1a47762687549ca7650449b0fe904c32fa52b1ab06bebe6bd77af12a72ef552046312c8fd7924681248c6bfaa9fe78b8e9fa2e0beaa"]}, 0xfc1) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7fffffff}, 0xf7}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="6701a838f2e3a55f9f2c64d9511a6e03dfdc7ba9b570ab9191290a9bf5f8417bd8136a59de2af88f461d98822d3af8bea128f357adb2c0e074215cc3c6be93ccf27019d8168bd51b17d6f1d107c45a5463a30de2a5aa36b97cb24a165d2d5e33375404040dee01386922c2fdf5df6760a7b94ece629ba0390d260b472b33e364904f0bccd1c4a2f5a83acc85ffacb9fb38", 0x91}], 0x1) connect$inet(r2, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r2, &(0x7f0000000a40), 0x0, 0x0, &(0x7f00000009c0)={0x2}, 0x10) r3 = open(&(0x7f0000000300)='./file0\x00', 0x38900, 0x108) ioctl$KVM_SMI(r3, 0xaeb7) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r5, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000011000)) read$eventfd(r5, &(0x7f0000000540), 0x8) ioctl$UFFDIO_UNREGISTER(r6, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x4, 0x5, 0x5404, 0x3, 0x4, 0x0, 0x3, 0x8, 0xdf3, 0x81, 0x7, 0x80, 0x3, 0xb76]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r7, 0x5, 0xffffffffffff8000, 0x9, 0x9, 0x2}, &(0x7f00000002c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000440)=""/233) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000008c0), 0x4) 2018/04/09 20:04:19 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x80005, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000), 0x10) 2018/04/09 20:04:19 executing program 2: r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='p', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) 2018/04/09 20:04:19 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getegid() fstat(r0, &(0x7f0000000480)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/211) 2018/04/09 20:04:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771", 0x20}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x205, 0x2}, 0x0) [ 134.297807] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/09 20:04:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x7, r0}) ioctl$sock_netrom_TIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/170) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x7, 0x5, 0x8, "bbd302c36f794e765ba6baa521c77f6a0ea094afb51c614e63cdfb69ed056d756c572e4e88647b43950869a9", 0x1}, 0x0, 0x0, 0x1, r2, 0x6, 0x3, "0e5bc635be1548d0d0a4acb9d8ebf54282db8febbce6367acf6dea38231cd87d794d622a3d442433e41bbbea046fa682c6058ec5f53bd05fe4d27f7ae702ac3b", &(0x7f0000000180)='wlan1^+wlan1proc+\x00', 0x12, [], [0x800, 0x80000001, 0x8, 0x400]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x20011, r0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="006340400000000000000030000000000000000000006352aa0000000000ec1400000000ffe9000000000000000000e4ffffffffb8024ed8fa59950b6ed0281a07d7f1293ab33a5d2b4b873477616a121e1e5d6a06f54532266ddfe150726c6dd593b8fe8a75b423707d63e61aa9ef2e54e3ed658ca413b7ba5e8101100663ceb57b8444cd9d1a7c7aebd955653fab66cedfbc193f41a08c0c1204cfc366", @ANYPTR=&(0x7f000000d000)=ANY=[], @ANYPTR=&(0x7f0000006000)=ANY=[]], 0x0, 0x0, &(0x7f000023c000)}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000300)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in={0x2, 0x4e22, @multicast2=0xe0000002}], 0x30) 2018/04/09 20:04:19 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000180)=""/131, 0x83) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x7fff, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="240000001a0003000700fd556fa283bc0aeee6d879d37d05271d85940800040001000000", 0x24}], 0x1}, 0xfffffffffffffffc) [ 134.443310] binder: 10636:10638 ioctl c0306201 20007fd0 returned -14 2018/04/09 20:04:20 executing program 4: move_pages(0x0, 0x7, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000080), &(0x7f00000000c0), 0x0) kexec_load(0x0, 0x2, &(0x7f0000000040), 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@empty, 0x0}, &(0x7f0000000540)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000580)={0x0, @local, @multicast2}, &(0x7f00000005c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'bridge0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000009c0)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001240)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001340)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'bpq0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001640)=0x14, 0x80800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001680)={0x5dc, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xf30}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x254, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x170, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3f}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xbd68}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2018/04/09 20:04:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x10400) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) r2 = epoll_create1(0x0) close(r0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0xb49a, 0xc9b8, 0x1, 0x7f, 0xe745, 0x3, 0x2, 0x99ed, 0x7, 0x3ff, 0x367d8871, 0xffffffff, 0x1, 0x6, 0xfb8]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200)=r4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00003cbff4)) 2018/04/09 20:04:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x401, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x4, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000002c0)={0x40000004}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000300)={'dummy0\x00', 0x7}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000d80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f00000003c0)={0x954, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {0x3}, [{{0x8, 0x1, r2}, {0xc0, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r2}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x93c9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x21c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0xff, 0x7, 0x9, 0x3ff}, {0x52, 0x1, 0x3921, 0x6}, {0x3, 0x4, 0x100, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x7ff, 0x4, 0x3ff, 0x7f}, {0x4, 0x4, 0x200, 0x4}, {0x80, 0x81, 0xffffffff, 0xffffffff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r2}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r2}, {0x74, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x26c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xffffffffffffffe1}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x44, 0x4, [{0x0, 0x80, 0x8, 0x161840e7}, {0xb3, 0x3, 0xffffffff, 0x5}, {0x8d, 0x7, 0x7a6, 0x7}, {0x4, 0x8000, 0x7fff, 0x3}, {0x6, 0x7f, 0x1, 0x3}, {0x9, 0x3, 0xea5}, {0x8, 0x7, 0x5, 0x8}, {0x7fffffff, 0x8102, 0x1000, 0x9}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000dc0)) fdatasync(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x9c, r5, 0x310, 0x70bd27, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffffc1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfe00000000000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x9c}, 0x1}, 0x4004881) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000fc0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e22, 0x1000, @empty, 0x2}}, 0x6, 0xff, 0x7, 0xc500, 0x14}, &(0x7f0000001240)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001280)={r6, 0x40, 0x2, 0x8, 0x8, 0x2}, &(0x7f00000012c0)=0x14) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000001300)='sit0\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001340)={0x1, 0x10001, 0x204, 0x3, 0x65b, 0x3f, 0x46b00695, 0x62680cd9, r6}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001380)={{0x89, @broadcast=0xffffffff, 0x4e22, 0x2, 'none\x00', 0x1, 0x7f, 0x16}, {@multicast1=0xe0000001, 0x4e23, 0x2004, 0x0, 0x9, 0x4}}, 0x44) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001400)={@empty, 0x4b, r2}) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000001440)=0x3) r8 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001500)="9f0d8389680ec3070e83514487e49eb78ed7f7dad016d75677d09f4e4d6d8f712a83ce8aaed8ffcaf42fb3aa2ee4476c70f96c085aec2b0834c73bf45d5c095a3c2bc239a8a234db2a808b3c28426385842345aabddf870ae9022e80a005d0a9e2b16f814846f62bdfddafa78ff99008a97d790be9fd8e83e75abfe5ec1c26e07a73ff3814ea9ca9c9784215be5026309301079d1749d71a0f96973ebb1b4d6196d2e97a99a216f589fcd6f603c265f6", 0xb0, 0xfffffffffffffff9) keyctl$read(0xb, r8, &(0x7f00000015c0)=""/88, 0x58) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001640)=@sack_info={r7, 0x80000000, 0x8001}, &(0x7f0000001680)=0xc) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000016c0)) bind$vsock_dgram(r3, &(0x7f0000001700)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000001740)=0x2000) 2018/04/09 20:04:20 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getegid() fstat(r0, &(0x7f0000000480)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/211) 2018/04/09 20:04:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000526000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000a96fff)=""/1, &(0x7f00002a1000)=0x1) 2018/04/09 20:04:20 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40040, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, [0xf20, 0x7, 0x3ff, 0x2, 0x81, 0x317, 0xfff, 0x80, 0x5ca, 0x9, 0x7, 0x7f, 0x668, 0x4, 0x800]}, &(0x7f00000001c0)=0x100) r3 = accept4$bt_l2cap(r0, &(0x7f0000000200), &(0x7f0000000240)=0xe, 0x800) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000002c0)={0x40, 0xfff, 0x7fff, 0x5}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000440)=""/17) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={r1, 0x9, 0xffffffffffffffe1, 0x8}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000004c0)={@local={0xfe, 0x80, [], 0xaa}, r4}, 0x14) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000500)=0x6000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000540)={r1, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r2, @in={{0x2, 0x4e24}}, 0x6, 0x4, 0xff, 0x8, 0x20}, &(0x7f0000000640)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000680)={r1, 0x80, "6bb77d27ad52f100dd2ba964cd77d8c933cc2439bcd77cbc59d5e8d0a830fa28ce31f59cc1a769e49b9859ca7c9d42eeb8c7e80b64116706f2f845d55e5c0d8a6537502f087a1f852311fbbe53ed11416de3a940bb586d500e4b3b1a44a0fd1fb0692c179348fcd994ec23b715eba88e6714187d57838cc9958bc89a53bbf729"}, &(0x7f0000000740)=0x88) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000780)={0xdd54, 0x9, 0xfffffffffffff87c, 0x0, "406459ed4664e9bcf61184e61d31e766a5de80d6bf81a809f6024aa4caeab1c0"}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000007c0)={0x37d0, 0x93}, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x9) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000840)={0x0, 0x8c, 0x9, &(0x7f0000000800)}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000880)=0x268) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={r4, @loopback=0x7f000001, @rand_addr=0x7}, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000900)=0x10, 0x4) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000940)=""/211) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000ac0)=0x7, 0x4) mknod(&(0x7f0000000b00)='./file0\x00', 0x8001, 0x4) listen(r3, 0x2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) socket$pptp(0x18, 0x1, 0x2) renameat2(r0, &(0x7f0000000bc0)='./file0\x00', r0, &(0x7f0000000c00)='./file0\x00', 0x3) r6 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r5, r7) 2018/04/09 20:04:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') read$eventfd(r0, &(0x7f000028b000), 0x8) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000180)=""/25) ioctl$sock_bt(r0, 0x541b, &(0x7f0000000000)="169fdfef222280c199778e1e0ef9cc466725c3b1f26f769a455749fca7c1bcfe8e4f39acc3775fb980c0a31ab5d25179e9488de720d4434de0ffaa264f1979b64e85807c3e385bc43f3e86c75f504794fbbb1efb6677") ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000200)={0x8000, r1, 0x10001, 0x3fd}) write(r0, &(0x7f0000000100)="32caac4e78a94fcea61ccfa11a6d791be896e83e969216fcf6962c2df2d405c5e928ec4000a94d2a6cda67a41bb5a4ff2bc3ac334367948bdc7ab2a93ffd9d8f82a9634a10b6ef29fb1e612e16053ba731cee238c31c18f383b97c", 0x5b) [ 134.530173] binder: 10636:10638 ioctl c0306201 20007fd0 returned -14 2018/04/09 20:04:20 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x5, 0x4, @thr={&(0x7f0000000080)="9394d626c82340db3e2408ad2c1078d7778f43b7e116d358096f13ecedc1005a471674fe7bfad83830c703c7f1cea3a709f27f27e709e3aa3eaed22222913dca4ed527026d797387a341e0bf42d84aab37d75cba0678fba91b158a57c030f50efae0fad51b70619430edd69fd0d029357dd5d6d0a37dfec02a8a87da28d183b41a74e1cbf306b0597026864501066d52", &(0x7f0000000140)="73200daaf4052a5327a9bc33db8ff7c35048bbfb130413501727e8c946eea099e70a3492cacbfbba751ffa2e5cc3469a53d93c"}}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe) 2018/04/09 20:04:20 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x8800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x2, 0x44, 0x200000}, 0x14) r1 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={r1, r2, r3}, 0xc) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700020002000700c7a5ff6fc30e73a16b66c8c43e6f2288ab6ee9b6ac25dc5f1d6ea79caa5950f19e209b0d3634a0db3d5896e65d509e1778ffda734b0218659dfb2d0500000000000000a097d9d191e9ddffe7fda3e1"], &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x401}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000200)={r6}, &(0x7f0000000240)=0x8) ioctl(r4, 0xca0, &(0x7f0000000040)="20faf5be595f07f736e200f62f81377ff5febf0e4ef263b6f3ae48cd4993c242eda6c5944e39591e010494d03bfd1cce46d5ed7affcd0fe10a762966c4f7b337c99190474c7e279284f9be63f576785503d47b923e82bdf39b9e5a2fcac18017c37e75f117af98d1a87248f265fcdd1c6fce3acefe6debd7fdd7157bcb26147a7b1f3aa8f86caf0973fb4e8640f5be8d2577410736dc41d21440c5351e456b5b633d25da71") setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/04/09 20:04:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x28) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 2018/04/09 20:04:20 executing program 0: mkdir(&(0x7f00007d3000)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x1) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', '\x00'}, &(0x7f0000000040)="7070703021d97070703100", 0xb, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) 2018/04/09 20:04:20 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x240200) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x1ff, 0x0, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x80a80) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001240)=""/151, 0x97}], 0x1) 2018/04/09 20:04:20 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getegid() fstat(r0, &(0x7f0000000480)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/211) 2018/04/09 20:04:20 executing program 2: fanotify_init(0x20, 0x3fffc) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)=""/233, 0xe9}], 0x1, 0x0) ioctl$TTUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/24) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/58, 0x3a, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x101}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x3e) sendto$inet(r0, &(0x7f0000ef4000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2}, 0x10) recvmmsg(r0, &(0x7f0000000140), 0x50, 0x2, &(0x7f00000001c0)={0x0, 0x989680}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) setpgid(r1, r2) 2018/04/09 20:04:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="0eebaba61a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe0012", 0xff33) 2018/04/09 20:04:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000000000100000000000000000000000000000000000000000000000a00000008000000000000000000000000000000000000003468c24f56d1e095317f14f4ee6c78a9e94f9c210867a8948d72d461d54d"]) 2018/04/09 20:04:21 executing program 7: r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0xfffffffffffffffe) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000002500)={0x100000000, 0x9, 0x62b6499, 0x5, 0x9}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000002580)={0xf9, 0x28, 0x1, r0}) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000014000)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/193, 0xc1}, {&(0x7f0000002300)=""/101, 0x65}, {&(0x7f0000002380)=""/89, 0x59}, {&(0x7f0000002400)=""/68, 0x44}], 0x8, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x200000000050, 0x38, 0x3, 0x6, 0x8}) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000002540)=0x400, 0x4) fcntl$setlease(r1, 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r2, 0x1}) fcntl$getflags(r1, 0x401) 2018/04/09 20:04:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x9}, &(0x7f0000000040)=0x10) socketpair(0xb, 0x802, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x1, 0x7, 0x0, 0xc8}, {0x2, 0x100, 0x4, 0x1000}, {0x9, 0x9, 0x10000, 0x1}, {0x2, 0x9, 0xffffffffffffffff, 0x8}, {0xfffffffffffffffe, 0x41, 0x5, 0xfffffffff5b99a17}, {0x0, 0x2, 0xd8c5, 0x3ff}, {0x100, 0x8001, 0x80, 0x5}, {0x30000000000, 0xffffffff80000000, 0x8, 0xbb}]}, 0x10) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x2a4) 2018/04/09 20:04:21 executing program 5: r0 = open(&(0x7f0000000600)='./file0\x00', 0x28046, 0x0) fallocate(r0, 0x8, 0x0, 0x3f) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xdf, &(0x7f0000000000)="f09a1f5bdc75c76079ef48934510254a0c2bfc3806c2cb8574d7d7f7e302f6252e4b60fdf607823f9295eb861dd85db46ef998729a1c4e5936e201f70f41a1f3572fa1df2841eac97967fd8274c853ea0a2d3db6ef43bf4241cee795e99db33570979f6ebc5df5c2b5054a64d97baf6379880bf139e78541b6ff4fb59cd79c997035078897d89a39c373fefa94f1e0c395e10cdbd068c3ee498238735cee8cdd4ff94045a034bf310149b367dc8bf084a47c0de4eb69cc2e891689eaaaca303b806bc570923260aec68a875084cf074f3a66980bf3b61c2de4f1a53be43c45"}) 2018/04/09 20:04:21 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) getegid() fstat(r0, &(0x7f0000000480)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/211) 2018/04/09 20:04:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x1, 0x40) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @empty, 0x4}}, 0xbd7, 0x9}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0xfffffffffffffffb}, &(0x7f0000000300)=0x8) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) fcntl$setsig(r0, 0xa, 0x22) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) close(r0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000080)=""/82, &(0x7f0000000100)=0x52) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000200)=r3) 2018/04/09 20:04:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7a3e) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0218000002000000000000000000f200"], 0x10}, 0x1}, 0x8010) 2018/04/09 20:04:21 executing program 4: mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="2e65dbe10af866b9890400000f32d89f0f00ea1b00fd00d1b11c96f2662e0f21546cdbf7b839018ec8", 0x29}], 0x1, 0x0, &(0x7f00000000c0), 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\afles\x00') getdents(r4, &(0x7f0000000ea9)=""/407, 0x197) 2018/04/09 20:04:21 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x6000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/09 20:04:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:21 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x17, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x8, 0x208, 0x10000, 0x1, 0x4, 0x1, 0x8, r2}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) 2018/04/09 20:04:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x400, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0xd6, 0x4be, &(0x7f0000000040)}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x3, 0x5, 0x7, 0x9ca5, 0x0, 0xffffffffffff7fff, 0xff, 0x100000000, 0x8, 0x617, 0x1, 0x47}) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xab, 0x2) mkdirat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x1ff) 2018/04/09 20:04:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xffffff85}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f0000000000)=""/251}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendfile(r1, r0, &(0x7f0000000000), 0x70) 2018/04/09 20:04:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') ioctl$KDMKTONE(r0, 0x4b30, 0x7) r1 = socket$inet6(0xa, 0x10000000000802, 0x0) ioctl$sock_ifreq(r1, 0x200000008937, &(0x7f0000000000)={'gretap0\x00', @ifru_map}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xa4, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000180)=""/164}, &(0x7f0000000100)=0x78) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x0, 0x6, 0x9}) uselib(&(0x7f0000000080)='./file0\x00') 2018/04/09 20:04:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0xd7, 0xffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x100, 0x1) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r2, 0xffffffff) 2018/04/09 20:04:21 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x520, 0x800, 0x7}) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') syz_fuseblk_mount(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file2\x00') ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file3\x00') r5 = dup2(r1, r3) sendmsg$nl_generic(r5, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a80)={0x7c, 0x34, 0x404, 0x70bd27, 0x25dfdbfb, {0x14}, [@generic, @generic="45e5426c0d5405ef1cf726a46c4e4252045cb1e1ff09ce7b684b88a0d948623e63fa66c29081965d455ab2ac3f85cfc32fc797ea0011495f14bbfb81fe0e9b9f419a3eda10aeac5e0a9ba3c4648f467aab25d6b2c39950887a869be57f2b8678f5ee4d10f7"]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x6, 0x400001) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) open(&(0x7f0000000040)='./file0\x00', 0x3ff, 0x0) syz_mount_image$hfs(&(0x7f0000000380)='hfs\x00', &(0x7f00000003c0)='./file0\x00', 0x4d49, 0x4, &(0x7f0000000980)=[{&(0x7f0000000400)="6b3306fe5e7a4c4b9fb9e86b6cfbd5879bd8c47412db848a816662a5da4bb175aeef44e5209a534d998fca7a7e735f2001f485419ac361fc3edc8787d6d67cfad5d1ea60d0ee7c9b57f6162e0afad85deac92d69007b1a13f82a3e32a2680e4a538485b59f6148fc15c2b5be244b38d2188229983363ef02170d678fa7cfa2434930a435500833bf8e7e41514eb000bbccab5b27c294065bc9c78618ad4dd4b2d4da1bac254e3535a82985e39fcee89ef8fd4081e6fef57fcef831e3a7c48dc95e3cdc0e925a409089188f34bd708013829a42a4dedca6925d90f33f36a2b14e9cc0987b1e990e7b86ff2e96e6b2687ad3", 0xf1}, {&(0x7f0000000500)="7b6ad789737c87fc873c011ca8e1c3cd18e109ea91850466a8654da4bcc1edb57698fe22a37d546dc824d66df3e84de61b44219a8b4ad8e9d3852479fdb5eff7dfd82fd3", 0x44, 0x7}, {&(0x7f0000000640)="4d7cdc47eae6e3d133cdf4e7ee701bbdf59b0d1ebedd892fef013007428f23f4b51abaff367d85bda9b916d559da499d7f1ad067d3129d941eeb32921ffc2897e6e067c06056b6c188602044a9754505fa6f82fcfa70834fcf9ae4e468ff272cf4d68c06e1bca7cbf05624ca114aa7fb2d026a0171c76a02b941f9ad6f548a2a6dbcb808238d5ee6b2ab34ba6d98ce65982b", 0x92, 0x6}, {&(0x7f0000000580)="10f0b2faabf5e4", 0x7, 0x8}], 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="73657373696f6e3d002c756d61736b3d36353037322c64696d61736b3d323435373735323332002c696f636861727365743d69736f383835392d312c747970653dec1f4e942c63726561746f723de1653a6b2c66696c655f756d61736b3d372c000000000000000000000000"]) syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x1800, &(0x7f00000001c0)=ANY=[]) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x3) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000002c0)="a8dd659c46f652bf431888e7342e6eae2340ce4c950c9929ed5a977e703a9afc220340cefacf75b251c0a54d629649f5f8b9b4e32ccb0ff1e0c4e4167652566391f0e4b09b3d37beff733554b5954558273971fe78e653e0d9d400e421a3b4a7856d5eb9b8cf928836e92b2ee659a5eb9a95") syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000780)="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", 0x1f9, 0x7}], 0x0, &(0x7f0000000280)=ANY=[]) fallocate(r6, 0x11, 0x0, 0x8000) 2018/04/09 20:04:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:21 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6064b69700308400fe8000000000000000000000000000aaff02000000000000000000000000000104009078000000000a11f0a672e3a67a385d45609f1b1900000000fe8000000000000000000000000000bbff02000000"], &(0x7f0000000380)={0x0, 0x2, [0x0, 0xe31]}) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x10001, 0x200843) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/09 20:04:22 executing program 4: syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) migrate_pages(0x0, 0x204, &(0x7f0000000140), &(0x7f00000001c0)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x402000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0xa) 2018/04/09 20:04:22 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/32, 0x20) lseek(r0, 0x1d, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)='/dev/kvm\x00', 0xffffffffffffffff) keyctl$reject(0x13, r3, 0x6, 0x80000000, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000200c0000000000000000000000040"]) open(&(0x7f0000000000)='./file0\x00', 0x101080, 0x8) getdents64(r0, &(0x7f00000000c0)=""/243, 0xf3) 2018/04/09 20:04:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000003559d8da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000bd4e70d9cadf0000000000000000feffffff010000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff000000000000aaaaaaaa0000000000000000000070000000c0000000f80000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000064365b74000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa00000000fcffffff00000000"]}, 0x236) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) r1 = socket(0x200000000010, 0x3, 0x0) write(r1, &(0x7f0000000100)="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", 0x105) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="7d000000811e8abf5be639d22986ccba693ca2699a8f16ec8f14400ca16b734146a751a0acc4afc96c151bcee222cc150a78c75c3de208bf7f124c041b9be4dd70fc34bf053fe4911da8959c623050034650612549ebe4d2aa7163eececa1635ca33285b169be66b00c31637e02a9fd124887a423ba7781d4b6816ef627668020c"], &(0x7f00000000c0)=0x85) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x400, 0x7}, 0xc) 2018/04/09 20:04:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x14000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r2, 0x302a13f4416f52b0, 0x70bd2a, 0x25dfdbff, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000f74fc8)={0x0, 0x0, &(0x7f00007e0ff0), 0x0, &(0x7f0000000040)}, 0x0) 2018/04/09 20:04:22 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="cbff7f00000000000e"], 0x9}, 0x0) ioctl(r1, 0xc0184900, &(0x7f0000002000)) lseek(r0, 0x10000, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 2018/04/09 20:04:22 executing program 6: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x4}}}}}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2b6b8f980a8681c8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0x33, 0xd, [], [@calipso={0x7, 0x38, {0x7fff, 0xc, 0x4, 0x99, [0x100000001, 0x6, 0xa2, 0xfffffffffffff321, 0x20, 0x5]}}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x90}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote={0xfe, 0x80, [], 0xbb}}, @jumbo={0xc2, 0x4, 0x8}]}, 0x70) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 2018/04/09 20:04:22 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6126793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0xe}, 0x60) r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x5, 0x101000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x3}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000600)={r2, 0xf3}, 0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100), 0x4) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x404000) rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r4 = gettid() timer_create(0x6, &(0x7f00000007c0)={0x0, 0x400000002a, 0x2, @tid=r4}, &(0x7f0000000840)) timer_create(0x9, &(0x7f0000044000)={0x0, 0x1000000000000017, 0x4, @tid=r4}, &(0x7f00008ec000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r1, &(0x7f00000003c0)="be69ca767a7242d2f956aaac7d0a0fa85dd029abb660cc"}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, [], 0xd}, 0x2}}, 0x7, 0x5}, 0x90) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000006c0)={r5}) r6 = add_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000005c0)="56cad1f80f10f5f161b7d0af3f09704cd9e94bc175815dc9c867300a9960528f", 0x20, 0xfffffffffffffff8) getsockname$packet(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000780)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000800)={@loopback={0x0, 0x1}, r7}, 0x14) keyctl$set_timeout(0xf, r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x2, 0x81, 0xffff, 0x7fff, 0x90}, &(0x7f00000001c0)=0x98) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000400)={{0x2e, @rand_addr=0x100000000, 0x4e21, 0x2, 'rr\x00', 0x21, 0x3, 0x1}, {@multicast2=0xe0000002, 0x4e24, 0x12001, 0x8, 0x1, 0xffffffffffffffc0}}, 0x44) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r8, 0x1}, &(0x7f0000000240)=0x8) 2018/04/09 20:04:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 137.129430] hfs: unable to parse mount options [ 137.148907] jfs: Unrecognized mount option "./file3" or missing value [ 137.235816] kernel msg: ebtables bug: please report to author: Wrong len argument [ 137.237281] x86/PAT: syz-executor7:10808 map pfn RAM range req write-combining for [mem 0x18dc00000-0x18dc02fff], got write-back [ 137.301736] kernel msg: ebtables bug: please report to author: Wrong len argument [ 137.372245] x86/PAT: syz-executor7:10833 map pfn RAM range req write-combining for [mem 0x18ab00000-0x18ab02fff], got write-back 2018/04/09 20:04:22 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000080)='./control/file0\x00', 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') unlink(&(0x7f0000000100)='./control\x00') close(r1) 2018/04/09 20:04:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='ip6gre0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000240)={0x3, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffa, "70991dd304f04dd788556af8c364c530ffaf51881d6ae56941eefa1ccb634eb8f56f19898284f09131f51d61", 0xffffffffffffff00}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000280)={'security\x00'}, 0x28) 2018/04/09 20:04:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:22 executing program 0: truncate(&(0x7f0000001040)='./file0\x00', 0xff) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x100) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000840)={0xb, 0x1000, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r2 = socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001080), &(0x7f0000001500)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001440)=@broute={'broute\x00', 0x20, 0x2, 0x2a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001180], 0x0, &(0x7f00000000c0), &(0x7f0000001180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'ipddp0\x00', 'vcan0\x00', 'ip_vti0\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf0, 0x140}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}, {{{0x5, 0x0, 0x0, 'gretap0\x00', 'eql\x00', 'ifb0\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa0, 0xd8}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x320) syz_open_dev$sndmidi(&(0x7f00000014c0)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) write(r3, &(0x7f0000a34f31)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x1f) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r5, 0x800000c0045006, &(0x7f0000595ff8)=0x3) sendto(r3, &(0x7f0000001100)="a129867f626b488f40fb02c9506223a1e97e78a72c2709048dbb132a4214827a63b193047d84918a2a8199b09bbe1190bd3cbef127d80e3f34bd6110a6011320204c8e5d966eda974fc0fa398008375234fb927ad7dde8fc9292f586aad0eda21404a40c0f4fda81c17c5d449b6879860deea58fd4de1ecdc135fa6af5654108897d99f66d9c43f82509e5be8541d1c0276ea0c5ab99cd70a1ac33518faa539e", 0xa0, 0x4045, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfe0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) close(r5) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x0) 2018/04/09 20:04:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f}, 0xa) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x20000000002282, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 2018/04/09 20:04:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000100)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000ee9e0c)="b2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0xffa5) listen(r0, 0xfffffffffffffff9) accept4(r0, &(0x7f00000001c0)=@can, &(0x7f0000000080)=0x3, 0x0) 2018/04/09 20:04:22 executing program 7: sysinfo(&(0x7f00000001c0)=""/86) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x100040001, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+30000}, {r3, r4/1000+10000}}) 2018/04/09 20:04:22 executing program 2: r0 = socket$inet(0x2, 0x80803, 0x6) bind(r0, &(0x7f0000000140)=@ax25={0x3, {"4b947030e327f3"}, 0x3158}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x71, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)}, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@local}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) 2018/04/09 20:04:22 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}}, 0xfe07) [ 137.494012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'broute' [ 137.527737] gfs2: not a GFS2 filesystem 2018/04/09 20:04:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$bt_hci(r0, 0x84, 0xb, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) 2018/04/09 20:04:23 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, r0}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_cmd={0x3}}) 2018/04/09 20:04:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:23 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x800) fsetxattr(r0, &(0x7f0000000200)=@known='security.capability\x00', &(0x7f0000000240)='vmnet1\x00', 0x7, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40800}, 0xffffffffffffff25, &(0x7f0000000700)={&(0x7f0000000880)=@getsa={0x0, 0x12, 0x530, 0x70bd2c, 0x25dfdbfc, {@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d3, 0xa}, [@algo_comp={0x0, 0x3, {{'lzjh\x00'}, 0x0, "fee7c1bf2a6b41730b0b83c3fd172969c299e6627f33ec3402072a09c973b174e279d37a159f3a56eb8200b9989d812be439792558b0989ff5a0f8f7a089c1e5614b512b1de754fec097b75f603c54234ed2d4c7f7a2068209c4037c3cbe26b80fe40234c8268dd9024792d236ad73ff5088b800691ab62d2c5452bc383b9c7d701119c4ff83234b3aafe90358066af0d1c7a18f2f"}}, @replay_val={0x0, 0xa, {0x70bd2a, 0x70bd2d, 0x2}}, @lastused={0x0, 0xf, 0x3}, @coaddr={0x0, 0xe}, @algo_crypt={0x0, 0x2, {{'ctr(cast6)\x00'}, 0x0, "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"}}, @srcaddr={0x0, 0xd, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0xfffffffffffffea7}, 0x1}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, [0x1fc5, 0x1, 0x1, 0x3, 0x3f4, 0x6, 0xfffffffffffffffa, 0x7, 0x20, 0x7ff, 0x9e, 0x2000000000000000, 0x6, 0x5, 0x7]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e22, 0x4, @empty, 0x100}}}, &(0x7f0000000500)=0x84) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0)={0xfffffffffffffffc, 0xc48, 0x1f, 0x3f}, 0x6) keyctl$join(0x1, &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="01000097", @ANYRES32=0x0], &(0x7f0000000580)=0x8) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x0, 0x20, 0x26}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000180)={{0x9, 0x2, 0xfffffffffffffff7, 0x80, 0xa35, 0x1}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x7ff, 0x5}, &(0x7f0000000680)=0x90) accept$ipx(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) fgetxattr(r1, &(0x7f0000000040)=@random={'user.', 'vmnet1\x00'}, &(0x7f0000000080)=""/26, 0x1a) 2018/04/09 20:04:23 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x40000000) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffffedee0987, 0x28002) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x4000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000080)=""/103) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000ad9000)=[{{0x0, 0x0, &(0x7f0000bff000), 0x0, &(0x7f0000cc3fe8)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x286, 0x4) pread64(r1, &(0x7f0000000180)=""/13, 0xd, 0x0) [ 137.614840] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'broute' 2018/04/09 20:04:23 executing program 4: socket$kcm(0x2, 0x4000000005, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x206}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x93000f, 0x705000, &(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x10000) r3 = dup2(r0, r1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x0, r3}) 2018/04/09 20:04:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10, 0x800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x20) 2018/04/09 20:04:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:23 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/108, &(0x7f0000000180)=0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0x3, 0x9}) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x11}, @ipv4={[], [0xff, 0xff]}, [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xc2e687db672d49fd, 0xff], 'ip6gretap0\x00', 'bcsh0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x2, 0x8}, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8000, 0x2, 0x81, 0x4, 0xef2, 0x7e93, 0xffffffffffffffe1, 0xe6d]}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0xff, 0xe7b0df2c88746b4b, 0xffffffff, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffff00], 'eql\x00', 'bpq0\x00', {}, {}, 0x0, 0xc66, 0x1, 0x4}, 0x0, 0x140, 0x168, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x75, 0x3, 0x1, [0x3, 0x4, 0x1, 0x79, 0x3, 0x7, 0x7, 0x80, 0x54, 0x4, 0xffffffffffffff06, 0x4, 0x40, 0x7, 0x1, 0x7], 0x6}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x1, 0x9, 0x7, 0x36, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d5, 0x80, 0x5, 0x1}}, @common=@inet=@socket3={0x28, 'socket\x00', 0x3, 0x1}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/09 20:04:23 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000140)={0x1, 0x0, 0x10001}) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) 2018/04/09 20:04:23 executing program 2: r0 = gettid() semop(0x0, &(0x7f0000000100)=[{0x1, 0x33}, {0x1}], 0x2) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1eb, 0x2000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x200000) tkill(r0, 0x1000000000016) 2018/04/09 20:04:23 executing program 4: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00006bafe4)=@req3={0x6f, 0x0, 0x1, 0x9}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="9bd03fa952ae0336ff182834fc33c23a61f572ab9cbbd22767e73cf342550dc802e94cd3e5") sendmsg(r0, &(0x7f0000834fc9)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "030000091f00000300000001e526cc573c5bf86c483724c71e14dd6a739effea1b480000481ffe0000e103000900f8000004003f390001d8f986ff01000300000004af50d50700000000000000e3d2316a1983000000001d00e0dfe424281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1c26d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f0000353cf8)}, 0x0) 2018/04/09 20:04:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/09 20:04:23 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:23 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/04/09 20:04:23 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:23 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0x5}]}, 0x28}, 0x1}, 0x0) 2018/04/09 20:04:24 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000a7c000)=0x1f, 0xffffffffffffff4f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) 2018/04/09 20:04:24 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001cc0)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 2018/04/09 20:04:24 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb855) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) write(r1, &(0x7f0000f8aff1), 0xff8f) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/09 20:04:24 executing program 7: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) fchdir(r0) r2 = creat(&(0x7f00000005c0)='./file1\x00', 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="9bb3d531ee", 0x5}]) 2018/04/09 20:04:24 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/09 20:04:24 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:24 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:24 executing program 2: r0 = getpid() capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f00000001c0)) 2018/04/09 20:04:24 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:24 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 139.360343] dccp_xmit_packet: Payload too large (65423) for featneg. [ 139.370507] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 2018/04/09 20:04:24 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/09 20:04:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001640)={{0x5000, 0x0, 0x0, 0x0, 0x1, 0x200, 0xff, 0x3}, {0x3004, 0x0, 0x1f, 0x3f, 0x2, 0x9, 0xfffffffffffff801, 0xff, 0x3, 0x0, 0xfffffffffffffffc, 0x81}, {0x0, 0x1001, 0x0, 0x7, 0xfffffffffffff001, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800}, {0x1, 0xd001, 0x0, 0xcc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x522, 0x8040, 0x2}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x10000, 0x5000, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x630}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x32f, 0x5, 0x9, 0x0, 0x7, 0xe7eb}, {}, {}, 0x0, 0x0, 0x17002, 0x100140, 0x0, 0x6c00, 0x0, [0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/09 20:04:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in=@rand_addr, @in6=@dev={0xfe, 0x80}}, {@in=@broadcast=0xffffffff, 0x0, 0x833}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}, 0x1}, 0x0) 2018/04/09 20:04:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x8b, [], 0x0, &(0x7f0000000240), &(0x7f0000000280)=""/139}, &(0x7f00000003c0)=0x78) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x0, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) 2018/04/09 20:04:25 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:25 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:25 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:25 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100200086dd609d83d3004c2b00fe8000000000000000000000000000aafe8000000000000000000000000000aa2c000000000000000420880b0000000000000800000086dd0800090000000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000080)={0x0, 0x0, [0x200000000000000, 0x0, 0xfffffffffffffffe]}) 2018/04/09 20:04:25 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 2018/04/09 20:04:25 executing program 7: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) creat(&(0x7f0000aa0000)='./bus\x00', 0x0) unlink(&(0x7f000057b000)='./bus\x00') read(r2, &(0x7f0000d48000)=""/1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 2018/04/09 20:04:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a15cdf0311cfc093ad4d8bbd1d1f9fc4dd01b7e0965", 0x18) 2018/04/09 20:04:25 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:25 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x16, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7, {0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@dev={0xfe, 0x80}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x0, 0x8}]}, 0x58}, 0x1}, 0x4080) 2018/04/09 20:04:25 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 139.734468] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 139.745565] bond0: lo is up - this may be due to an out of date ifenslave [ 139.873559] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 139.884581] bond0: lo is up - this may be due to an out of date ifenslave 2018/04/09 20:04:26 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) 2018/04/09 20:04:26 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:26 executing program 3: 2018/04/09 20:04:26 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:26 executing program 0: 2018/04/09 20:04:26 executing program 7: 2018/04/09 20:04:26 executing program 2: 2018/04/09 20:04:26 executing program 3: 2018/04/09 20:04:26 executing program 2: 2018/04/09 20:04:26 executing program 0: 2018/04/09 20:04:26 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) shutdown(r1, 0x1) 2018/04/09 20:04:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 2018/04/09 20:04:26 executing program 7: 2018/04/09 20:04:26 executing program 3: 2018/04/09 20:04:26 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:26 executing program 2: 2018/04/09 20:04:26 executing program 0: 2018/04/09 20:04:26 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:26 executing program 7: 2018/04/09 20:04:26 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:26 executing program 2: 2018/04/09 20:04:26 executing program 0: 2018/04/09 20:04:26 executing program 7: 2018/04/09 20:04:26 executing program 3: 2018/04/09 20:04:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:27 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) 2018/04/09 20:04:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:27 executing program 2: 2018/04/09 20:04:27 executing program 0: 2018/04/09 20:04:27 executing program 7: 2018/04/09 20:04:27 executing program 3: 2018/04/09 20:04:27 executing program 2: 2018/04/09 20:04:27 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:27 executing program 0: 2018/04/09 20:04:27 executing program 5: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:27 executing program 7: 2018/04/09 20:04:27 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/09 20:04:27 executing program 2: 2018/04/09 20:04:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000240)='bdev\x00') 2018/04/09 20:04:27 executing program 0: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) dup2(r1, r0) 2018/04/09 20:04:27 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:27 executing program 2: 2018/04/09 20:04:27 executing program 7: 2018/04/09 20:04:28 executing program 3: 2018/04/09 20:04:28 executing program 0: 2018/04/09 20:04:28 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:28 executing program 7: 2018/04/09 20:04:28 executing program 2: 2018/04/09 20:04:28 executing program 1: perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:28 executing program 0: 2018/04/09 20:04:28 executing program 3: 2018/04/09 20:04:28 executing program 5: 2018/04/09 20:04:28 executing program 3: 2018/04/09 20:04:28 executing program 5: 2018/04/09 20:04:28 executing program 2: 2018/04/09 20:04:28 executing program 7: 2018/04/09 20:04:28 executing program 0: 2018/04/09 20:04:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:28 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:28 executing program 3: 2018/04/09 20:04:28 executing program 0: 2018/04/09 20:04:28 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000280)={{0xa}, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x5c) 2018/04/09 20:04:28 executing program 7: r0 = socket$nl_generic(0xa, 0x2, 0x11) r1 = socket$nl_generic(0xa, 0x2, 0x11) sendmsg$nl_generic(r1, &(0x7f0000004fc8)={&(0x7f0000001ff4)={0x2, 0x2}, 0x12dd0582, &(0x7f0000001000)={&(0x7f0000000fd8)={0x4}, 0x14}, 0x1}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000007000)={&(0x7f0000004ff4)={0x10}, 0xc, &(0x7f0000004ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x8800) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f0000001ff4)={0x2, 0x2}, 0x12dd0582, &(0x7f0000001000)={&(0x7f0000000fd8)={0x4}, 0x14}, 0x1}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000004ff4)={0x10}, 0xc, &(0x7f0000004ff0)={&(0x7f0000005d8c)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f000000ac37)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f000000aff0)={&(0x7f0000001040)={0x14}, 0x14}, 0x1}, 0x0) 2018/04/09 20:04:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000577000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000006af79), 0x0) sendmmsg$alg(r1, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001280)}, {0x0, 0x0, &(0x7f00000014c0)}, {0x0, 0x0, &(0x7f0000002900), 0x0, &(0x7f0000002940)=[@op={0x10, 0x117, 0x3}], 0x10}], 0x3, 0x0) 2018/04/09 20:04:28 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:28 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/27, &(0x7f000023e000)=0xe) 2018/04/09 20:04:29 executing program 5: memfd_create(&(0x7f0000000000)='securitysecurityuser.\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000040)={0x0, 0xe3, 0x9, 0x1}) close(r0) 2018/04/09 20:04:29 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:29 executing program 7 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:29 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5-generic)\x00'}, 0x58) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a", 0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6f, &(0x7f0000000040)=""/157, &(0x7f0000000100)=0x9d) sendmmsg$alg(r0, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000a80)="810b8f68adf1a34b", 0x8}], 0x1, &(0x7f0000000200)}], 0x1, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000740)=@nfc_llcp, 0x80, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000), 0xffffffffffffff7c}, 0x0) 2018/04/09 20:04:29 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) [ 143.671670] FAULT_INJECTION: forcing a failure. [ 143.671670] name failslab, interval 1, probability 0, space 0, times 1 [ 143.683281] CPU: 0 PID: 11239 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 143.690217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.699568] Call Trace: [ 143.702170] dump_stack+0x1b9/0x294 [ 143.705813] ? dump_stack_print_info.cold.2+0x52/0x52 [ 143.711024] should_fail.cold.4+0xa/0x1a [ 143.715099] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 143.720220] ? print_usage_bug+0xc0/0xc0 [ 143.724303] ? lock_downgrade+0x8e0/0x8e0 [ 143.728461] ? lock_release+0xa10/0xa10 [ 143.732448] ? lock_acquire+0x1dc/0x520 [ 143.736432] ? sctp_get_port_local+0x3d7/0x1540 [ 143.741117] __should_failslab+0x124/0x180 [ 143.745361] should_failslab+0x9/0x14 [ 143.749166] kmem_cache_alloc+0x47/0x760 [ 143.753232] ? kasan_check_write+0x14/0x20 [ 143.757469] ? do_raw_spin_lock+0xc1/0x200 [ 143.761715] sctp_get_port_local+0xb1e/0x1540 [ 143.766213] ? find_held_lock+0x36/0x1c0 [ 143.770283] ? sctp_set_owner_w+0x530/0x530 [ 143.774613] ? lock_downgrade+0x8e0/0x8e0 [ 143.778773] ? check_same_owner+0x320/0x320 [ 143.783100] ? print_usage_bug+0xc0/0xc0 [ 143.787165] ? find_held_lock+0x36/0x1c0 [ 143.791236] ? lock_acquire+0x1dc/0x520 [ 143.795216] ? inet_autobind+0x1f/0x1a0 [ 143.799211] sctp_get_port+0x12b/0x1b0 [ 143.803109] ? sctp_get_port_local+0x1540/0x1540 [ 143.807870] ? trace_hardirqs_on+0xd/0x10 [ 143.812027] ? __local_bh_enable_ip+0x161/0x230 [ 143.816711] inet_autobind+0xbd/0x1a0 [ 143.820511] inet_sendmsg+0x4c3/0x690 [ 143.824315] ? copy_msghdr_from_user+0x3a0/0x560 [ 143.829064] ? ipip_gro_receive+0x100/0x100 [ 143.833376] ? move_addr_to_kernel.part.18+0x100/0x100 [ 143.838654] ? security_socket_sendmsg+0x94/0xc0 [ 143.843397] ? ipip_gro_receive+0x100/0x100 [ 143.847791] sock_sendmsg+0xd5/0x120 [ 143.851487] ___sys_sendmsg+0x805/0x940 [ 143.855460] ? copy_msghdr_from_user+0x560/0x560 [ 143.860227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 143.865784] ? proc_fail_nth_write+0x96/0x1f0 [ 143.870264] ? __fget_light+0x2ef/0x430 [ 143.874220] ? fget_raw+0x20/0x20 [ 143.877660] ? find_held_lock+0x36/0x1c0 [ 143.881715] ? kasan_check_write+0x14/0x20 [ 143.885944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 143.891466] ? sockfd_lookup_light+0xc5/0x160 [ 143.895950] __sys_sendmsg+0x115/0x270 [ 143.899833] ? SyS_shutdown+0x30/0x30 [ 143.903623] ? __sb_end_write+0xac/0xe0 [ 143.907588] ? fput+0x130/0x1a0 [ 143.910866] ? ksys_write+0x1a6/0x250 [ 143.914655] ? ksys_ioctl+0x81/0xd0 [ 143.918273] SyS_sendmsg+0x29/0x30 [ 143.921804] ? __sys_sendmsg+0x270/0x270 [ 143.925846] do_syscall_64+0x29e/0x9d0 [ 143.929715] ? vmalloc_sync_all+0x30/0x30 [ 143.933856] ? _raw_spin_unlock_irq+0x27/0x70 [ 143.938336] ? finish_task_switch+0x1ca/0x820 [ 143.942815] ? syscall_return_slowpath+0x5c0/0x5c0 [ 143.947739] ? syscall_return_slowpath+0x30f/0x5c0 [ 143.952669] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 143.958049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 143.962988] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 143.968180] RIP: 0033:0x455259 [ 143.971347] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.979043] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 143.986294] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 143.993544] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 144.000794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 144.008053] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 2018/04/09 20:04:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x566ea2d, 0x4800) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}, 0x8, 0x18f4e530, 0x80000001, 0x9, 0x8}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @rand_addr=0x3}}, [0x10000, 0xfffffffffffffff7, 0x9, 0x1, 0x800, 0x40c, 0x2000, 0x1f, 0x8, 0x43c4, 0x8, 0x9, 0x7ff, 0xffffffff00000001, 0x1f]}, &(0x7f0000000300)=0x100) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-aes-aesni,poly1305-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/09 20:04:29 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:29 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:29 executing program 7 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x4, 0xffff, 0x38, 0x1, 0x5, 0x1, 0x7d94b7ab}, 0x1c) [ 144.480248] FAULT_INJECTION: forcing a failure. [ 144.480248] name failslab, interval 1, probability 0, space 0, times 0 [ 144.491552] CPU: 1 PID: 11254 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 144.498491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.507856] Call Trace: [ 144.510457] dump_stack+0x1b9/0x294 [ 144.514104] ? dump_stack_print_info.cold.2+0x52/0x52 [ 144.519307] ? graph_lock+0x170/0x170 [ 144.523130] should_fail.cold.4+0xa/0x1a [ 144.527208] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 144.532318] ? find_held_lock+0x36/0x1c0 [ 144.536402] ? lock_downgrade+0x8e0/0x8e0 [ 144.540559] ? graph_lock+0x170/0x170 [ 144.544383] ? mark_held_locks+0xc9/0x160 [ 144.548545] ? __local_bh_enable_ip+0x161/0x230 [ 144.553226] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 144.558256] ? sctp_get_port_local+0xece/0x1540 [ 144.562929] ? trace_hardirqs_on+0xd/0x10 [ 144.567090] ? __local_bh_enable_ip+0x161/0x230 [ 144.571772] ? sctp_get_port_local+0xee4/0x1540 [ 144.576458] ? lock_downgrade+0x789/0x8e0 [ 144.580623] __should_failslab+0x124/0x180 [ 144.584873] should_failslab+0x9/0x14 [ 144.588686] kmem_cache_alloc_trace+0x4b/0x780 [ 144.593280] ? mark_held_locks+0xc9/0x160 [ 144.597436] ? print_usage_bug+0xc0/0xc0 [ 144.601513] sctp_add_bind_addr+0xf9/0x4a0 [ 144.605761] ? sctp_bind_addr_free+0x20/0x20 [ 144.610180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.615727] ? sctp_v6_available+0x12b/0x300 [ 144.620150] ? sctp_inet6_bind_verify+0xb2/0x500 [ 144.624921] sctp_do_bind+0x30d/0x5f0 [ 144.628734] sctp_autobind+0x16d/0x1f0 [ 144.632626] ? sctp_do_bind+0x5f0/0x5f0 [ 144.636616] ? sctp_endpoint_is_peeled_off+0xf1/0x130 [ 144.641824] sctp_sendmsg_new_asoc+0xc3c/0x1120 [ 144.646509] ? sctp_sendmsg+0x125e/0x1d70 [ 144.650670] ? sctp_autobind+0x1f0/0x1f0 [ 144.654750] ? __local_bh_enable_ip+0x161/0x230 [ 144.659430] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 144.664452] ? lock_sock_nested+0x9f/0x120 [ 144.668688] ? trace_hardirqs_on+0xd/0x10 [ 144.672840] ? __local_bh_enable_ip+0x161/0x230 [ 144.677515] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 144.683053] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 144.688240] sctp_sendmsg+0x1888/0x1d70 [ 144.692220] ? do_raw_spin_unlock+0x9e/0x2e0 [ 144.696643] ? sctp_id2assoc+0x3e0/0x3e0 [ 144.700711] ? _raw_spin_unlock_bh+0x30/0x40 [ 144.705122] ? __release_sock+0x3a0/0x3a0 [ 144.709276] inet_sendmsg+0x19f/0x690 [ 144.713066] ? copy_msghdr_from_user+0x3a0/0x560 [ 144.717815] ? ipip_gro_receive+0x100/0x100 [ 144.722159] ? move_addr_to_kernel.part.18+0x100/0x100 [ 144.727427] ? security_socket_sendmsg+0x94/0xc0 [ 144.732171] ? ipip_gro_receive+0x100/0x100 [ 144.736481] sock_sendmsg+0xd5/0x120 [ 144.740184] ___sys_sendmsg+0x805/0x940 [ 144.744150] ? copy_msghdr_from_user+0x560/0x560 [ 144.748905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 144.754430] ? proc_fail_nth_write+0x96/0x1f0 [ 144.758915] ? __fget_light+0x2ef/0x430 [ 144.762882] ? fget_raw+0x20/0x20 [ 144.766320] ? find_held_lock+0x36/0x1c0 [ 144.770379] ? kasan_check_write+0x14/0x20 [ 144.774618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.780145] ? sockfd_lookup_light+0xc5/0x160 [ 144.784631] __sys_sendmsg+0x115/0x270 [ 144.788509] ? SyS_shutdown+0x30/0x30 [ 144.792296] ? __sb_end_write+0xac/0xe0 [ 144.796265] ? fput+0x130/0x1a0 [ 144.799535] ? ksys_write+0x1a6/0x250 [ 144.803332] ? ksys_ioctl+0x81/0xd0 [ 144.806948] SyS_sendmsg+0x29/0x30 [ 144.810475] ? __sys_sendmsg+0x270/0x270 [ 144.814522] do_syscall_64+0x29e/0x9d0 [ 144.818394] ? vmalloc_sync_all+0x30/0x30 [ 144.822527] ? _raw_spin_unlock_irq+0x27/0x70 [ 144.827015] ? finish_task_switch+0x1ca/0x820 [ 144.831503] ? syscall_return_slowpath+0x5c0/0x5c0 [ 144.836421] ? syscall_return_slowpath+0x30f/0x5c0 [ 144.841345] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 144.846700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 144.851537] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 144.856714] RIP: 0033:0x455259 [ 144.859888] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.867582] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 144.874836] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 2018/04/09 20:04:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f0000000140)=""/116) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x90) 2018/04/09 20:04:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:29 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:30 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:30 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x312, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x200, 0x50000) getsockname$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x913, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x5) dup2(r2, r2) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/17) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) 2018/04/09 20:04:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:30 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) [ 144.882090] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 144.889344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 144.896597] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000001 2018/04/09 20:04:30 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:30 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:30 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x566ea2d, 0x4800) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}, 0x8, 0x18f4e530, 0x80000001, 0x9, 0x8}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @rand_addr=0x3}}, [0x10000, 0xfffffffffffffff7, 0x9, 0x1, 0x800, 0x40c, 0x2000, 0x1f, 0x8, 0x43c4, 0x8, 0x9, 0x7ff, 0xffffffff00000001, 0x1f]}, &(0x7f0000000300)=0x100) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-aes-aesni,poly1305-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 2018/04/09 20:04:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = dup2(r0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) syslog(0x9, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="1500f83c12aab58a63e55b00b29edee01a000010000000a82abe46326adaad0000000000000000d095eb38c870b5c6"]) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x6, 0x101, 0x3ff, 0x0, 0x7f, 0x9}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) 2018/04/09 20:04:30 executing program 7 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:30 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:30 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 145.196091] FAULT_INJECTION: forcing a failure. [ 145.196091] name failslab, interval 1, probability 0, space 0, times 0 [ 145.207435] CPU: 1 PID: 11308 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 145.214378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.223745] Call Trace: [ 145.226353] dump_stack+0x1b9/0x294 [ 145.230003] ? dump_stack_print_info.cold.2+0x52/0x52 [ 145.235213] ? perf_trace_lock_acquire+0xe3/0x980 [ 145.240067] ? __kernel_text_address+0xd/0x40 [ 145.244582] should_fail.cold.4+0xa/0x1a [ 145.248663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 145.253787] ? save_stack+0xa9/0xd0 [ 145.257432] ? graph_lock+0x170/0x170 [ 145.261242] ? sctp_add_bind_addr+0xf9/0x4a0 [ 145.265658] ? sctp_do_bind+0x30d/0x5f0 [ 145.269639] ? sctp_autobind+0x16d/0x1f0 [ 145.273706] ? sctp_sendmsg_new_asoc+0xc3c/0x1120 [ 145.278540] ? inet_sendmsg+0x19f/0x690 [ 145.282508] ? find_held_lock+0x36/0x1c0 [ 145.286562] ? __lock_is_held+0xb5/0x140 [ 145.290624] ? check_same_owner+0x320/0x320 [ 145.294943] ? rcu_note_context_switch+0x710/0x710 [ 145.299868] __should_failslab+0x124/0x180 [ 145.304096] should_failslab+0x9/0x14 [ 145.307883] kmem_cache_alloc_trace+0x2cb/0x780 [ 145.312557] ? sctp_add_bind_addr+0xf9/0x4a0 [ 145.316959] ? rcu_read_lock_sched_held+0x108/0x120 [ 145.321965] ? kmem_cache_alloc_trace+0x616/0x780 [ 145.326803] sctp_association_new+0x123/0x21e0 [ 145.331372] ? memcpy+0x45/0x50 [ 145.334645] ? sctp_add_bind_addr+0x3a6/0x4a0 [ 145.339136] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 145.344650] ? sctp_bind_addr_free+0x20/0x20 [ 145.349056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 145.354581] ? sctp_v6_available+0x12b/0x300 [ 145.358984] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 145.364512] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 145.369001] ? sctp_do_bind+0x3e5/0x5f0 [ 145.372978] ? sctp_autobind+0x16d/0x1f0 [ 145.377036] ? sctp_do_bind+0x5f0/0x5f0 [ 145.381001] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 145.386185] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 145.391362] ? security_sctp_bind_connect+0x99/0xc0 [ 145.396372] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 145.401037] ? sctp_sendmsg+0x125e/0x1d70 [ 145.405181] ? sctp_autobind+0x1f0/0x1f0 [ 145.409231] ? __local_bh_enable_ip+0x161/0x230 [ 145.413889] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 145.418891] ? lock_sock_nested+0x9f/0x120 [ 145.423112] ? trace_hardirqs_on+0xd/0x10 [ 145.427247] ? __local_bh_enable_ip+0x161/0x230 [ 145.431908] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 145.437431] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 145.442613] sctp_sendmsg+0x1888/0x1d70 [ 145.446575] ? do_raw_spin_unlock+0x9e/0x2e0 [ 145.450979] ? sctp_id2assoc+0x3e0/0x3e0 [ 145.455061] ? sctp_id2assoc+0x3e0/0x3e0 [ 145.459116] inet_sendmsg+0x19f/0x690 [ 145.462906] ? copy_msghdr_from_user+0x3a0/0x560 [ 145.467653] ? ipip_gro_receive+0x100/0x100 [ 145.471963] ? move_addr_to_kernel.part.18+0x100/0x100 [ 145.477231] ? security_socket_sendmsg+0x94/0xc0 [ 145.481977] ? ipip_gro_receive+0x100/0x100 [ 145.486290] sock_sendmsg+0xd5/0x120 [ 145.489997] ___sys_sendmsg+0x805/0x940 [ 145.493983] ? copy_msghdr_from_user+0x560/0x560 [ 145.498738] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 145.504268] ? proc_fail_nth_write+0x96/0x1f0 [ 145.508756] ? __fget_light+0x2ef/0x430 [ 145.512739] ? fget_raw+0x20/0x20 [ 145.516184] ? find_held_lock+0x36/0x1c0 [ 145.520240] ? kasan_check_write+0x14/0x20 [ 145.524482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 145.530012] ? sockfd_lookup_light+0xc5/0x160 [ 145.534505] __sys_sendmsg+0x115/0x270 [ 145.538383] ? SyS_shutdown+0x30/0x30 [ 145.542171] ? __sb_end_write+0xac/0xe0 [ 145.546136] ? fput+0x130/0x1a0 [ 145.549405] ? ksys_write+0x1a6/0x250 [ 145.553203] ? ksys_ioctl+0x81/0xd0 [ 145.556822] SyS_sendmsg+0x29/0x30 [ 145.560353] ? __sys_sendmsg+0x270/0x270 [ 145.564406] do_syscall_64+0x29e/0x9d0 [ 145.568282] ? vmalloc_sync_all+0x30/0x30 [ 145.572422] ? _raw_spin_unlock_irq+0x27/0x70 [ 145.576905] ? finish_task_switch+0x1ca/0x820 [ 145.581390] ? syscall_return_slowpath+0x5c0/0x5c0 [ 145.586312] ? syscall_return_slowpath+0x30f/0x5c0 [ 145.591236] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 145.596597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 145.601436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 145.606613] RIP: 0033:0x455259 [ 145.609788] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.617488] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 145.624746] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 145.632006] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 145.639269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 145.646525] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000002 2018/04/09 20:04:31 executing program 2: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) epoll_create1(0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) unshare(0x8000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f0000553ff8), 0x8}) 2018/04/09 20:04:31 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:31 executing program 7 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2005}, 0x2c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x18}], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0xf7, &(0x7f00000000c0)=""/247}, 0x48) 2018/04/09 20:04:31 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000003080)=@assoc_value={0x0}, &(0x7f00000030c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xff000000, 'ip6_vti0\x00', 'tunl0\x00', {0xff}, {0xff}, 0xef, 0x1, 0x1}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x80, 0x2, 0x0, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, 0xffffffff, 0x0, 'syz_tun\x00', 'gre0\x00', {}, {}, 0x89, 0x0, 0x10}, 0x0, 0x110, 0x130, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x4, 0xf}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x2, 0x401}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x338) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000003280)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x0, {0x2, 0x4e22, @broadcast=0xffffffff}}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000003100)={r1, 0xc, "55d968a01107994bf0ec22c6"}, &(0x7f0000003140)=0x14) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x0) sched_getaffinity(0x0, 0x38d, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000003c0)) 2018/04/09 20:04:31 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:31 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) 2018/04/09 20:04:31 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) [ 145.810925] FAULT_INJECTION: forcing a failure. [ 145.810925] name failslab, interval 1, probability 0, space 0, times 0 [ 145.822265] CPU: 0 PID: 11339 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 145.829196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.838552] Call Trace: [ 145.841152] dump_stack+0x1b9/0x294 [ 145.844798] ? dump_stack_print_info.cold.2+0x52/0x52 [ 145.850010] should_fail.cold.4+0xa/0x1a [ 145.854086] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/09 20:04:31 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000900)}, 0x40) [ 145.859200] ? trace_hardirqs_on+0xd/0x10 [ 145.863363] ? graph_lock+0x170/0x170 [ 145.867176] ? find_held_lock+0x36/0x1c0 [ 145.871253] ? __lock_is_held+0xb5/0x140 [ 145.875329] ? check_same_owner+0x320/0x320 [ 145.879656] ? rcu_note_context_switch+0x710/0x710 [ 145.884589] ? sctp_outq_init+0x2e6/0x410 [ 145.888752] ? _warn_unseeded_randomness+0xbd/0x200 [ 145.893788] __should_failslab+0x124/0x180 [ 145.898047] should_failslab+0x9/0x14 [ 145.901851] __kmalloc+0x2c8/0x760 [ 145.905391] ? mark_held_locks+0xc9/0x160 2018/04/09 20:04:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) [ 145.909551] ? sctp_stream_alloc_out+0x33/0x1b0 [ 145.914236] sctp_stream_alloc_out+0x33/0x1b0 [ 145.918745] sctp_stream_init+0xf5/0x3b0 [ 145.922819] sctp_association_new+0x1305/0x21e0 [ 145.927498] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 145.932269] ? sctp_bind_addr_free+0x20/0x20 [ 145.936693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 145.942246] ? sctp_v6_available+0x12b/0x300 [ 145.946668] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 145.952217] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 145.956737] ? sctp_do_bind+0x3e5/0x5f0 2018/04/09 20:04:31 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:31 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 145.960734] ? sctp_autobind+0x16d/0x1f0 [ 145.964805] ? sctp_do_bind+0x5f0/0x5f0 [ 145.968795] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 145.974001] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 145.979197] ? security_sctp_bind_connect+0x99/0xc0 [ 145.984226] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 145.988899] ? sctp_sendmsg+0x125e/0x1d70 [ 145.993059] ? sctp_autobind+0x1f0/0x1f0 [ 145.997125] ? __local_bh_enable_ip+0x161/0x230 [ 146.001802] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 146.006819] ? lock_sock_nested+0x9f/0x120 2018/04/09 20:04:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0xffffffffffffffeb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000011000000000000000000007110000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x29, 0x30, &(0x7f0000000400)) socketpair(0x7, 0xb, 0x401, &(0x7f0000000000)) 2018/04/09 20:04:31 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) [ 146.011059] ? trace_hardirqs_on+0xd/0x10 [ 146.015216] ? __local_bh_enable_ip+0x161/0x230 [ 146.019891] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 146.025437] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 146.030638] sctp_sendmsg+0x1888/0x1d70 [ 146.034618] ? do_raw_spin_unlock+0x9e/0x2e0 [ 146.039036] ? sctp_id2assoc+0x3e0/0x3e0 [ 146.043106] ? _raw_spin_unlock_bh+0x30/0x40 [ 146.047522] ? __release_sock+0x3a0/0x3a0 [ 146.051685] inet_sendmsg+0x19f/0x690 [ 146.055521] ? copy_msghdr_from_user+0x3a0/0x560 [ 146.060283] ? ipip_gro_receive+0x100/0x100 [ 146.064616] ? move_addr_to_kernel.part.18+0x100/0x100 [ 146.069903] ? security_socket_sendmsg+0x94/0xc0 [ 146.074673] ? ipip_gro_receive+0x100/0x100 [ 146.079007] sock_sendmsg+0xd5/0x120 [ 146.082735] ___sys_sendmsg+0x805/0x940 [ 146.086726] ? copy_msghdr_from_user+0x560/0x560 [ 146.091498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 146.097043] ? proc_fail_nth_write+0x96/0x1f0 [ 146.101546] ? __fget_light+0x2ef/0x430 [ 146.105524] ? fget_raw+0x20/0x20 [ 146.108975] ? find_held_lock+0x36/0x1c0 [ 146.113045] ? kasan_check_write+0x14/0x20 [ 146.117297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 146.122838] ? sockfd_lookup_light+0xc5/0x160 [ 146.127338] __sys_sendmsg+0x115/0x270 [ 146.131229] ? SyS_shutdown+0x30/0x30 [ 146.135033] ? __sb_end_write+0xac/0xe0 [ 146.139006] ? fput+0x130/0x1a0 [ 146.142292] ? ksys_write+0x1a6/0x250 [ 146.146100] ? ksys_ioctl+0x81/0xd0 [ 146.149738] SyS_sendmsg+0x29/0x30 [ 146.153282] ? __sys_sendmsg+0x270/0x270 [ 146.157343] do_syscall_64+0x29e/0x9d0 [ 146.161231] ? vmalloc_sync_all+0x30/0x30 [ 146.165385] ? kasan_check_write+0x14/0x20 [ 146.169624] ? syscall_return_slowpath+0x5c0/0x5c0 [ 146.174559] ? syscall_return_slowpath+0x30f/0x5c0 [ 146.179595] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 146.184963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 146.189814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 146.195001] RIP: 0033:0x455259 [ 146.198186] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.205896] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 146.213167] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 146.220446] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 146.227722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 146.234995] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000003 2018/04/09 20:04:32 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x2a000) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x220000, 0x124) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x17000000000000, 0x7, 0x4, 0xaf8a}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r4, 0xf2, "157a1849232229002658150a9bce46510756d9ef3ef889fc61aad763f3818ee3c3bd4cc9ef60e2edabcc498d15ec1b600fb366e2addafc7033dd0d3696f2a2f2fe35a99180e71c8db68e0224bc6f8155598af6cd75d563afcf5808a2d5558d2a6254bf7578bcc309ed451a3d712cb5d599d347981469fd124df01217a9e970870648b848b86ae8f555420010c263ba7bb582d79da1a4e45420e9aa604abbd37e0724a2f62e8227f02471991f2f0c90694f308246ef31c016d1b6bf882ed2b5d3fc8dd955debbb0a16efa03de49c1c7e1f3482d6054f54b4cd4b606266d1629d4b878cab1d43df298787faced6feb92477092"}, &(0x7f0000000240)=0xfa) write(r3, &(0x7f000078e000)="2400000052001f0014fdf407000904000200071008000100feffffff0800000000000000", 0x24) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) 2018/04/09 20:04:32 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:32 executing program 7 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:32 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r1 = getegid() lchown(&(0x7f0000000000)='./file1\x00', r0, r1) mkdir(&(0x7f000000dff8)='./file0\x00', 0x0) mount(&(0x7f000001fff8)='./file1\x00', &(0x7f0000015ff8)='./file0\x00', &(0x7f000001fffa)='ramfs\x00', 0x0, &(0x7f000001f000)) mknod(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 2018/04/09 20:04:32 executing program 6 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@loopback=0x7f000001}, {@in=@rand_addr, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}}}]}, 0x13c}, 0x1}, 0x0) accept4$ipx(r0, 0x0, &(0x7f0000000040), 0x80000) 2018/04/09 20:04:32 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 146.829242] FAULT_INJECTION: forcing a failure. [ 146.829242] name failslab, interval 1, probability 0, space 0, times 0 [ 146.840578] CPU: 1 PID: 11372 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 146.847515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.856877] Call Trace: [ 146.859487] dump_stack+0x1b9/0x294 [ 146.863128] ? dump_stack_print_info.cold.2+0x52/0x52 [ 146.868347] should_fail.cold.4+0xa/0x1a [ 146.872427] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 146.877548] ? is_bpf_text_address+0xd7/0x170 [ 146.882059] ? graph_lock+0x170/0x170 [ 146.885877] ? __kernel_text_address+0xd/0x40 [ 146.890388] ? unwind_get_return_address+0x61/0xa0 [ 146.895330] ? find_held_lock+0x36/0x1c0 [ 146.899409] ? __lock_is_held+0xb5/0x140 [ 146.903490] ? check_same_owner+0x320/0x320 [ 146.907822] ? SyS_sendmsg+0x29/0x30 [ 146.911544] ? do_syscall_64+0x29e/0x9d0 [ 146.915618] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 146.920995] ? rcu_note_context_switch+0x710/0x710 [ 146.925944] __should_failslab+0x124/0x180 [ 146.930199] should_failslab+0x9/0x14 [ 146.934009] kmem_cache_alloc_trace+0x2cb/0x780 [ 146.938698] sctp_auth_shkey_create+0xd4/0x290 [ 146.943289] ? sctp_auth_key_put+0x30/0x30 [ 146.947532] ? __lock_is_held+0xb5/0x140 [ 146.951617] ? rcu_read_lock_sched_held+0x108/0x120 [ 146.956651] sctp_auth_asoc_copy_shkeys+0x2dc/0x3e0 [ 146.961683] ? sctp_auth_destroy_keys+0x3f0/0x3f0 [ 146.966536] ? memset+0x31/0x40 [ 146.969827] ? sctp_stream_alloc_out+0x127/0x1b0 [ 146.974598] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 146.980155] ? sctp_stream_interleave_init+0x69/0xa0 [ 146.985273] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 146.990829] ? sctp_stream_init+0x212/0x3b0 [ 146.995182] sctp_association_new+0x172b/0x21e0 [ 146.999875] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 147.004649] ? sctp_bind_addr_free+0x20/0x20 [ 147.009054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.014582] ? sctp_v6_available+0x12b/0x300 [ 147.018984] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 147.024538] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 147.029059] ? sctp_do_bind+0x3e5/0x5f0 [ 147.033028] ? sctp_autobind+0x16d/0x1f0 [ 147.037075] ? sctp_do_bind+0x5f0/0x5f0 [ 147.041039] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.046216] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.051390] ? security_sctp_bind_connect+0x99/0xc0 [ 147.056393] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 147.061060] ? sctp_sendmsg+0x125e/0x1d70 [ 147.065196] ? sctp_autobind+0x1f0/0x1f0 [ 147.069243] ? __local_bh_enable_ip+0x161/0x230 [ 147.073897] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 147.078895] ? lock_sock_nested+0x9f/0x120 [ 147.083115] ? trace_hardirqs_on+0xd/0x10 [ 147.087251] ? __local_bh_enable_ip+0x161/0x230 [ 147.091907] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 147.097433] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 147.102609] sctp_sendmsg+0x1888/0x1d70 [ 147.106570] ? do_raw_spin_unlock+0x9e/0x2e0 [ 147.110966] ? sctp_id2assoc+0x3e0/0x3e0 [ 147.115021] ? _raw_spin_unlock_bh+0x30/0x40 [ 147.119416] ? __release_sock+0x3a0/0x3a0 [ 147.123556] inet_sendmsg+0x19f/0x690 [ 147.127344] ? copy_msghdr_from_user+0x3a0/0x560 [ 147.132088] ? ipip_gro_receive+0x100/0x100 [ 147.136394] ? move_addr_to_kernel.part.18+0x100/0x100 [ 147.141660] ? security_socket_sendmsg+0x94/0xc0 [ 147.146398] ? ipip_gro_receive+0x100/0x100 [ 147.150704] sock_sendmsg+0xd5/0x120 [ 147.154404] ___sys_sendmsg+0x805/0x940 [ 147.158367] ? copy_msghdr_from_user+0x560/0x560 [ 147.163117] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.168648] ? proc_fail_nth_write+0x96/0x1f0 [ 147.173135] ? __fget_light+0x2ef/0x430 [ 147.177091] ? fget_raw+0x20/0x20 [ 147.180528] ? find_held_lock+0x36/0x1c0 [ 147.184576] ? kasan_check_write+0x14/0x20 [ 147.188805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.194327] ? sockfd_lookup_light+0xc5/0x160 [ 147.198808] __sys_sendmsg+0x115/0x270 [ 147.202680] ? SyS_shutdown+0x30/0x30 [ 147.206465] ? __sb_end_write+0xac/0xe0 [ 147.210423] ? fput+0x130/0x1a0 [ 147.213686] ? ksys_write+0x1a6/0x250 [ 147.217475] ? ksys_ioctl+0x81/0xd0 [ 147.221087] SyS_sendmsg+0x29/0x30 [ 147.224615] ? __sys_sendmsg+0x270/0x270 [ 147.228662] do_syscall_64+0x29e/0x9d0 [ 147.232533] ? vmalloc_sync_all+0x30/0x30 [ 147.236664] ? kasan_check_write+0x14/0x20 [ 147.240882] ? syscall_return_slowpath+0x5c0/0x5c0 [ 147.245796] ? syscall_return_slowpath+0x30f/0x5c0 [ 147.250713] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 147.256064] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.260895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 147.266064] RIP: 0033:0x455259 [ 147.269233] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2018/04/09 20:04:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:32 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:32 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:32 executing program 7 (fault-call:1 fault-nth:5): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 147.276924] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 147.284177] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 147.291427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 147.298678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 147.305929] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000004 2018/04/09 20:04:32 executing program 3: r0 = socket(0x9, 0xf, 0x10001) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev, 0x0}, &(0x7f0000001100)=0x14) sendto$packet(r0, &(0x7f0000000100)="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", 0x1000, 0x20004080, &(0x7f0000001140)={0x11, 0x1b, r1, 0x1, 0x8, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x14) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_emit_ethernet(0xfffffffffffffe70, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x21f, 0x0, 0xc9c, 0x991]}) [ 147.415035] FAULT_INJECTION: forcing a failure. [ 147.415035] name failslab, interval 1, probability 0, space 0, times 0 [ 147.426817] CPU: 1 PID: 11403 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 147.433761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.443121] Call Trace: [ 147.445723] dump_stack+0x1b9/0x294 [ 147.449387] ? dump_stack_print_info.cold.2+0x52/0x52 [ 147.454606] should_fail.cold.4+0xa/0x1a [ 147.458692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 147.463809] ? sock_sendmsg+0xd5/0x120 [ 147.467709] ? __sys_sendmsg+0x115/0x270 [ 147.471787] ? graph_lock+0x170/0x170 [ 147.475611] ? print_usage_bug+0xc0/0xc0 [ 147.479686] ? graph_lock+0x170/0x170 [ 147.483504] ? print_usage_bug+0xc0/0xc0 [ 147.487584] ? find_held_lock+0x36/0x1c0 [ 147.491666] ? lock_downgrade+0x8e0/0x8e0 [ 147.495833] __should_failslab+0x124/0x180 [ 147.500081] should_failslab+0x9/0x14 [ 147.503909] kmem_cache_alloc_trace+0x4b/0x780 [ 147.508514] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.513731] sctp_add_bind_addr+0xf9/0x4a0 [ 147.517988] ? sctp_bind_addr_free+0x20/0x20 [ 147.522411] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.527615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.533170] ? sctp_v4_scope+0x19b/0x1c0 [ 147.537248] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.542455] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 147.547493] sctp_copy_local_addr_list+0x499/0x690 [ 147.552432] ? sctp_defaults_init+0xe50/0xe50 [ 147.556934] ? get_random_bytes+0x34/0x40 [ 147.561089] ? sctp_association_new+0x135/0x21e0 [ 147.565844] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 147.571032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.576560] sctp_copy_one_addr+0x5d/0x170 [ 147.580780] ? sctp_copy_one_addr+0x5d/0x170 [ 147.585278] sctp_bind_addr_copy+0x16b/0x45b [ 147.589672] ? sctp_copy_one_addr+0x170/0x170 [ 147.594179] ? sctp_autobind+0x16d/0x1f0 [ 147.598225] ? sctp_do_bind+0x5f0/0x5f0 [ 147.602184] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 147.607706] ? security_sctp_bind_connect+0x99/0xc0 [ 147.612715] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 147.617370] ? sctp_sendmsg+0x125e/0x1d70 [ 147.621503] ? sctp_autobind+0x1f0/0x1f0 [ 147.625554] ? __local_bh_enable_ip+0x161/0x230 [ 147.630205] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 147.635218] ? lock_sock_nested+0x9f/0x120 [ 147.639453] ? trace_hardirqs_on+0xd/0x10 [ 147.643606] ? __local_bh_enable_ip+0x161/0x230 [ 147.648270] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 147.653816] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 147.659016] sctp_sendmsg+0x1888/0x1d70 [ 147.663001] ? do_raw_spin_unlock+0x9e/0x2e0 [ 147.667421] ? sctp_id2assoc+0x3e0/0x3e0 [ 147.671487] ? _raw_spin_unlock_bh+0x30/0x40 [ 147.675904] ? __release_sock+0x3a0/0x3a0 [ 147.680059] inet_sendmsg+0x19f/0x690 [ 147.683845] ? copy_msghdr_from_user+0x3a0/0x560 [ 147.688582] ? ipip_gro_receive+0x100/0x100 [ 147.692883] ? move_addr_to_kernel.part.18+0x100/0x100 [ 147.698151] ? security_socket_sendmsg+0x94/0xc0 [ 147.702892] ? ipip_gro_receive+0x100/0x100 [ 147.707197] sock_sendmsg+0xd5/0x120 [ 147.710891] ___sys_sendmsg+0x805/0x940 [ 147.714850] ? copy_msghdr_from_user+0x560/0x560 [ 147.719607] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.725127] ? proc_fail_nth_write+0x96/0x1f0 [ 147.729613] ? __fget_light+0x2ef/0x430 [ 147.733589] ? fget_raw+0x20/0x20 [ 147.737029] ? find_held_lock+0x36/0x1c0 [ 147.741087] ? kasan_check_write+0x14/0x20 [ 147.745312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.750829] ? sockfd_lookup_light+0xc5/0x160 [ 147.755307] __sys_sendmsg+0x115/0x270 [ 147.759186] ? SyS_shutdown+0x30/0x30 [ 147.762972] ? __sb_end_write+0xac/0xe0 [ 147.766927] ? fput+0x130/0x1a0 [ 147.770186] ? ksys_write+0x1a6/0x250 [ 147.773970] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 147.778795] ? ksys_ioctl+0x81/0xd0 [ 147.782406] SyS_sendmsg+0x29/0x30 [ 147.785931] ? __sys_sendmsg+0x270/0x270 [ 147.789974] do_syscall_64+0x29e/0x9d0 [ 147.793856] ? vmalloc_sync_all+0x30/0x30 [ 147.797983] ? _raw_spin_unlock_irq+0x27/0x70 [ 147.802461] ? finish_task_switch+0x1ca/0x820 [ 147.806936] ? syscall_return_slowpath+0x5c0/0x5c0 [ 147.811845] ? syscall_return_slowpath+0x30f/0x5c0 [ 147.816757] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 147.822103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.826927] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 147.832106] RIP: 0033:0x455259 [ 147.835285] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.842975] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 147.850235] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 147.857484] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/09 20:04:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000040)=0xa12888b177b9383f) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/04/09 20:04:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000238fc8)={&(0x7f000028afe4)=@in6={0xa, 0x4e20}, 0x80, &(0x7f0000250000), 0x0, &(0x7f000035e000)=[{0x18, 0x29, 0x4, 'R'}], 0x18}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3e) getsockopt$inet_mreqsrc(r1, 0x0, 0x2e, &(0x7f0000000080)={@loopback, @broadcast, @rand_addr}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0xffffffff, 0x1f, 0x1, {}, 0x4, 0xa99}) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000040)="f75f57bd70b75acff4f8d3dbb45727e9358a3f26a4d8c3b269825595ae1e6ceda554a9c86301650def4d4051f1baae596a8cc60dbd783a0a278b", 0x3a) 2018/04/09 20:04:33 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:33 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffffffffffd, @empty, 0x3}, 0x9f3a5d334494caa2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 2018/04/09 20:04:33 executing program 7 (fault-call:1 fault-nth:6): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:33 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x0) 2018/04/09 20:04:33 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000000802084) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) accept4$nfc_llcp(r1, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x800) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x6533}], 0x10) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005380)={{{@in6=@ipv4, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sendmmsg(r1, &(0x7f0000005240)=[{{&(0x7f0000000040)=@sco={0x1f, {0x3, 0xffffffff00000001, 0x9, 0x40}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="cea12e6f865c686f1f5490a92328fd74464ef535234f5cf642c7b25abfa8da7d6f29b85b40440ab71bb9c743149b33f48c1dfeb9ac455bb38935fe12f09568677bf61efd744d57a8aaf270f2742c0e55a560a1075f7f347f472e02f111eb8d9c034befa998bf390f77ad4d2edecaa08506d585328a8b7f4dfb734f392a62e5072dda92867e02edbf0114aa339e055ef193cac183e72913084e9daea1c168b667a571e65c4d45be8e98ba95e81d0874ecfd7d5f4222e165b24024d700708fa6ef2c8f668899680fe12e702b44830b4a188563ee9cc2bff05d050da77c941ff20b57b37c988c4fddf8506b75b8974136ff79fcb0", 0xf3}, {&(0x7f0000000200)="b06b7ecd152d6cbada99609a5b6bf102b7e0306750feaa9a83ed22102fdf7472eeb892cdf9", 0x25}], 0x2, &(0x7f0000000440)=[{0x58, 0x107, 0x6, "a203b38102dbc8ce7b148c3c6e47b31647d2e98f087fd0d58aa2256909141163901d1fc3e46e4eb5eea1eadc37cf90fcd1546069c2b025bfd2ff1b8f55d48e5ca5722dbb3c6abcbc"}, {0xb8, 0x10c, 0x7, "949ad21c3dc20f77910e73599035bf195397dd8b133406171ebe84d82f30c98023c0dcb87cf8bc985884a77a0eb2061b72f2fec3a6a731bbed33a0f3d34dde166e49f544faf52ce2027de0a8b7f7031c0545facd1cfeb7b3286013c9ee7abdfb8e246657b49053eb4409fc715907bc1a510b30e101f41a325876f060acd1c205c5a285bbd9f9cd08201bb1ce9147bf1b3c64206c8d2e1ffd658a6342d8c4793d381ca147ff827e63"}, {0x20, 0x115, 0x7fff, "59d98cb246dbc397d4c1d6e40e2c9193"}, {0xa8, 0x10b, 0x3, "562bba0493b472a842b2125f5ccf0d82e29f738bd870867bd1b3761ae2708c0ba655ed644074b4f96cd34ebc474669848bf8deb89cb5f46e96296497d89f2cd11e20c6fa60af549a60515e426c1d2c72133d7a1bccdccddb9d04ca6e7f9ab4a3d5a37e2028cdb24daaf125cbeefde549816d313a9aba2000b5b893be57f07f8f9c6b0d1726e6f74373d8c0cc67095365db"}, {0xb8, 0x13a, 0x2, "506c7cabba8f39118a5396b2ddd8d3bdf44031cf239fa8de83c25dd09afee7d7bdf91680945d5d1aa3f70242f51e981111b32924ce7c89f86dfdbec6ec911ac9cb712d881e668ccc8b838dc97c9f91e389c5ed01489e47b7d56daca4513376136d4d26c2077cfd086b218ada6283e355597cdc268261c9a015fc8cabbff62b7974e55754bb40c085256b36633df2a06b801944a6f70e6d95308e0e477ddf0f8b2bd49ae16c"}, {0x48, 0x117, 0x0, "6798e4f0b8d46a35dc0067d527408376cd973a90c03c2a52f36c595bd28434d274d3809190637369c424e67e53b9d8de13a46856"}, {0x28, 0x112, 0xff, "8c14a1b2f8033405825051dbdb62e39b9a"}, {0x70, 0x11, 0x2, "7f5c3f2f6ad619ed9f6c9747b50947ecee368553e26ffb5ba4c121634f86b47d4a043af1ba259b1085c98aa25710d0d904bfd5c74f0814cf2f69c849a5f625b0e626ff5b0843886dbbad85bd415cdf6fd2d37810ebeb45e03e0c798048ac"}, {0x100, 0x103, 0x9, "648c37d7023929aaf51351749d1898188aa3ce56ce35f9f1362239043eed228f715c87c007a4cf509132dfa3999104dde007674621e2d4ea0a14b4d06210e3c773ffd04118dac8af5fc8a565a03f39fb4c5798fb867d9439d0755809e0f701a607c10b92efa06dd5dde56679d92137b547358bfd37c2260b6b5002deb1b697af595cc58db42109ea63ee41d17fd78775510792638663c5bc6f074d752015b628b2e72329d0487bdd1911e2050e5539156d1fe4f1a62f12daec1bcfd44fa136f65ee22218071a73d53b83ca8e2633b3366cc0ce1530d09c400d133ba2918b973a30211251eb57c36a3d61a5ab"}], 0x470, 0x40000}, 0x100000000}, {{&(0x7f00000002c0)=@hci={0x1f, r3}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="ce047b1ec98e246228c73d6695139b3c548cfbe68350ec04756c7641f6fe281343956d4bef2315696986934d7c27bf3db3cd87251d8127211e88d2ea4370083b62a3b52a32431efee17c65bc5c16f7aef812295430fbefccee384bbce6c74631fd2604aac87e51e6921ec72ec3b4cabc8b4609a3ea7adc2eb34c9703cd102cfcf35a9a2dfe7163c606e76f6b650adbfd9863642d919648d1ebeeacf1b973234e7bc4b5d438ec9516d78329baa7fd82575b6b54f9583fd5a7b363459e4d556dde8a1add3545efe2db1b3bd4652f6ff5d4988022781c6ff7d63dec61", 0xdb}, {&(0x7f0000000ac0)="bced905e49d61faa6ccc7cc56260a0bf929da08f81e1c7d2fe89a50087c1d6244004deb78853c574f5bd3fec2c817972ec19b7aba7083bf490dd2d77f8f6a62edfb99261047322e6de59308de22723c6b34085f2b26840c4ff0e00af49c4a0c6fc6f6b2d53d2a268b1a40c51727536777b470a758c4eab3d83b8bb177995f05f2b", 0x81}, {&(0x7f0000000b80)="e3f2045f7769ff2db911c7bc186e874dd5cd7795dca821ea7897fca7362afbeb9f5f3014b79f4b3f3e96130a029d5145d6bb09f9f5a3d6030540e2bcc2fe05617b2d9c34a3eaa028c8ed94b4b2c50513eee99a92b99f656f380f3870ef33faba198176bf4a5b1e875d4a129efa12e222009404412486c162b3a3b1266dc1d27c375e3c927f69e518ebf3151499a4e6bed8d927f0308c71dad2fe78cdbfa38444cfa25ccee3a1d3d947367d1fb846590cf82a5d8e483e84e4729f62ed3a4002498848e8164e", 0xc5}, {&(0x7f0000000c80)="6fb80e3227c84130a5e9246fb1848b8acef0c10b720b5dfcd57883ff14e7f9053a1dc44da2551f007a74ee8dd6a58202c007", 0x32}, {&(0x7f0000000cc0)="bff81e56160ff0ab173962e6e18354df2a04fb67c152dfd888b0636e75993052bebb4181cbe3421966b9f2118b700be478cff568aeb926854d95dfc06ac81080577b0bd9b3e88ce53b3c14a2b8806bfc3fd2b9adfd74a482cd30", 0x5a}, {&(0x7f0000000d40)="8e6113a97b7bf8f60339f29363100b86f88dff3efc25baef86002224603a2789d2d3f54ddfaf270ed67d9ac103b3874cc74a230e173048bf6bdf9c8bce29c73ad10698e5ce87bdf262838eae5fdcc5a3495dfbb81fcb42fadfaf239cb50eb848863c8cd5cb742525e426d65fa37e2b1a9f204704915d2f149acaaac0048645076f5c19c0b4e4b6d18eefbf44191d50084f315161ca04a8fd8b565a4bd112709f05c1de9a71e35afdb703c8b301cb63c2eeec897accab", 0xb6}, {&(0x7f0000000e00)="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", 0x1000}], 0x7, &(0x7f0000001e80)=[{0xc8, 0x101, 0xf000000000000000, "2e7db16838aa55c9df3c8e8dc7be8aae38c7123c143ed9c976983503265a5da416d8081b331c5de5fa390361dee2c8f4e1bbceaefb5b94dda4ba3060e1394d03741c09876d60b8d2cb3bb5f7d433acd16091f1ab34cdfd1cab1f03df97cdf0da2c5464d55e4277f78a34710a0186182beee625b9908f35665acb2bf5da0a1623ad61e23b0966d6cad97f04af6457b54daeaacdb75c91bd090682c2db5fb6c77f11d7621c4fae0b63eba4bcba72e70cf058af"}, {0x38, 0x10e, 0xd5e5, "f7e02fd76bcbb991b920f362a9de0d71575d1ef3b2106274dbab5043688d8a71350c"}, {0xf8, 0x1ff, 0x2, "8eb0039b6ff31adf9f274433a10eeb140d65e2a62cdb7f237c8d62d36b0b753b7e58bfad9394825688a53c51932a1d87e553335431feebbfd71f49b493ea8113b2cc0424f5e9d506be3ded573f4c50bb5d469fe90a48f7939916f61718e4f5c04747f320bc675aefcdff1a14e16af6c7770d57039a56fec1a9d54030f387801e6d61053456d79e91861431198b31958ee50c2bc274b08034f9c53ae92def4f937ec17706983287d33be569f2d9651f10487cbad9a4210b9bd4eb2ef37ea0c59a8a49068e9389f756eb8d5e8181e06ddaf4e9c18577ad9cde5bde176f9e37b90dbfbc60662d"}, {0xc8, 0x117, 0x49, "80685c9e95f08d682cf841007440376d727d14f2285c1fedbcf1b065b30e225a67b27897d21cc04267104e48e27da41ab76bc0f7b8890ad9e24583b601459a97c1a80079ea0497285284d9c2b7e8528a2fc130c829c740e3c2932044672b4829b4d071ddc89df2be3759c7b4bd8c4466964653dc34f817665b84b9c47375c4a488f411afb9ad3ba8a1a9298076afd46a3faf94d88a1f6d75341ae1ddc383390d4f8af4fb76804e347a69135e82c6c8fa716f0c14119e"}, {0x100, 0x11f, 0x0, "ae99cbe2a80dac84d9ef08b77f0b32d2156eb674b79d6a64f1cb6e4d76c2d08c82678605e3cfe63e083dd145b5aa43657841cf316c1d42a237038013411d0dd7bedf5f72d569c96dddf91aa89b7250438bae088086189989c12b20551300dca72ed9bd560cbdce625ce7ec5df1b219a31603703fc2ad7b86832551b1d97c6c82c152f50d5e648e49d20b75559655da90e00f4af8c479182ab6d587050b08e37eb378aef46ac6b81cceaf10040dd193cd226dd419a0327041156ad06997cb8271d1bf381c322358390a4b9954f5fecfd3bf310ed3a90405682b6e6bf8d3d3015fb52d94a9c7a72ef72590"}, {0xb8, 0x1ff, 0x5, "2b08b5984f3fcf70e48a1399e8e8f5603ec01b0289e17510d83aaca702839a98ddf7affeba5334db1779ecf441028351837f8f4d0122114d9331a64496bf3d37967f9ed732b50cc090a872b675290a3f657d34f673f7cf28db2daf0dea7878ce05d78ff1f0092639518614ab22801717adb49581bd1509cea61791357bfe3b43cb746150505c23c32d9f29db1930cd8deeba01d6f42ce779b40914e5f6a671a065e3fe81d3"}, {0xd0, 0x11c, 0x6e9, "17c42e6a9466822dc55039a31b6a5052bebaeadc010d22597470aec7f587c17db7c9e5003984369eeb1e5153ac82e8f7263433c799f3983338b7969480f995c0f2f05cff690259502b220ee6497fe2fde88846199644379d426e111c080342e6a82f9b8ef997af0d7a69bdabb261ecc0aca4ec57975b24b74b6ce3189c31f85e51873c7e36fefad2d1b30ab7148093135b2b17b4a3d44ed516eae8e55b52a3b36d2800bb0869b046859c1fa40cc2b1d0e9d934e6d981304e10096207"}], 0x548, 0x4040}, 0x20}, {{&(0x7f0000002400)=@generic={0xb, "3eb9cf80f875b7c6c9922c542f4ae2cb121cb0e1cf0bc8d994d48b5a4f1dd382c2f0c0193cd833420d82da610aa3c9bbacc05ffe11e501a0f3aeec6f387ae5268b5281c473dfdef34fa78ca912ff3a416d0152befcd6e0f26f1aea951fe24513b70caedaccf3c6ae3263f77aad713e5eea9d20f8a43b1c354a0d2eeeff86"}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002480)="ae79076721bef031541e99822f59ca5b8366aece68c4e0e2dc402075090169a6d993eca40b493c7cdcc1", 0x2a}, {&(0x7f00000024c0)="c4b20d17c50253f88b4ccc994630dabf06807f610fe8375ea95f35d5dc8524b6c32e6e7fb748ff578aae3a28b4cb372ec60710e8b168a870628826001a1c9aeb7d91dcb781725e27fd0fc4b53c3ad715dde3327b213f73e31dbe854315712e4058ba948f7bf06600974cea7bd553bcfca10058f51d5c155e03013bd063fc6787fe2bbdfa3bbfc6f0cbc9244c33bc2ce81e4fec3cc3", 0x95}], 0x2, &(0x7f00000025c0)=[{0xc0, 0x194, 0x9, "6124c6954c39d52f2f50736ab9493bda53713a8e4178fdacd51e57939e9f33c73cb928ac14becb74998013e782aade5cd49e939b051d9d00f2646339eb06c4b515a19131a6ccb75a620c9ba470573d1935cc68a6c0233e168cd56a9dbed73eef01a22b1031d7c25d9de9ffc5b95cc9f879a60a5d368caf22e14c93dbf1cdb0627fe86368386281b8467e54bf830d3f094705c4efe642c59bca432bf7b1df5e62950a7f607622d91f34d96206dc478f69"}, {0x38, 0x10f, 0x4, "60e63499299c1961687a1b11459728769ac3a9858a6b6f6f3863cac57deb803246ce79062a25a2"}, {0xa8, 0x10d, 0x7e, "14cd50613212977b6b0dd6fa2ed1830ccead1bd897edda2c28667e36c86be3520b2f09859aee1bf4478ec1f19bf8c27cc79a042b07ed70211b5d4c40d741a9aab1e3bc72b58a2c7941e8ecf10d821b5a75f12573990994fe91adea1e3ef3a150d37266ebea40672356a486ababaa0a9845b770917f87361f27a296033086a6c000bca01d51a60d5106dc259e718f00e079722b"}, {0x90, 0x102, 0x828d, "81db7777bd8d2e626bd05a2171e99b9cee42b2670965cb6c73bd4f06a67ea6844b6cbbe0c7096f9d6b05826c169c119b989ba0f99c80ad76669eb5f6617a6e91c1f49fa91c7a7051b279bba4ccfd5320e85f49b9daef27816321502b25a8e71105a7cd31368a6ec9073d04232122c0632d004ae23de9930ada930b"}, {0x30, 0x6, 0x4ff2a0de, "9f0c843dbc0b8154814b87c41a29690b5a48250edb17ce1539"}], 0x260, 0x40}, 0xfff}, {{&(0x7f0000002840)=@pppoe={0x18, 0x0, {0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip_vti0\x00'}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000028c0)="b4b61559b5d8875d0f755fd5cd6d0b445451ddf4f01ee35a3c174d0f07fd6f8f79b5dafc1d75528ef34ae4f1c1c5609fa043", 0x32}, {&(0x7f0000002900)="dd3a5f9ff068590bceba65c4a89a38f1a2e8632351886fc776b2cc219f719b48cf2767889f2d8d5f1e5f093788b4847d85400d4580cc9cd6ce712c96fc66937ce9444223abaae26a357fcf43c8df09", 0x4f}, {&(0x7f0000002980)="d655f4659872428b0bacf34dd7d7ae0e49828ea5012805ded98915fb73ea4b5212a3f59f5301e0b41667a5e7ecf669d3dec3e50630c74009ce3f29172357fb84c73f748fb4cab1fc39348427ed0e1eca42560d80a460738d292be4a4acb357cf2ada0cb7f733528d33d1d733a54022e6471c63eadec1e45cd76ed27583f5c23ab974629a13fac82c31f8162ce38899658485a335a6623902f6d38a", 0x9b}, {&(0x7f0000002a40)="bdc046fb4deddfd60568044f8b318115ae9c78e40f56b9fb385413dd", 0x1c}, {&(0x7f0000002a80)="df778482f98e1d1c11a6f2868410a352b6b51c544c17d98996ea9104c5085fb640dd653c99a299ce738a6ef482750490e2335e8e16caf77dd7ff54d3f5f514c39a2ded3a3de901e341fd51f0bb3c5cf4e2396e0ae01549808f8e7b89098f0d1d9c3244c5298f24fa06638e576849a9e3366c5d85e74055565ca9b8cd4c28d4b7ac8d6b9ded1f4b7fc6cd3a37de75d4c2952dc069961c63e06d2c35782763d7e97a88687caf8c36f5b69c1fd1", 0xac}, {&(0x7f0000002b40)="a3e78871a90677b88a23c592e65ad3f1552203594e2734ebefe99520682fad631573f697a6b52568b9bf44d8fd8dd206c403fdebc79556496710a240b97053", 0x3f}, {&(0x7f0000002b80)="57c7", 0x2}], 0x7, &(0x7f0000002c40)=[{0xc8, 0x11c, 0x0, "3f5d2d7cb1b1a94c5b3df842214a5783fb5b1f29290bc7fe044157b871c4435708cc0fd22cd474e9fef6c05f71d14cb3081dd1555a7cfdd6e5c19a76f2f2057e45bd2f7b036958ebc8bbf115985595b406737dca749c88f14b9a0820aa2100048e1a2b11f244389b08ff55f23bd6b1ad8f377a13ed9118c42793c2adb672813298baeae2c5f485d523f97f873e78bed01d3f0954e12f43f62aa8376fb6adb99ca19f2d5b40eb11c878e06fc084d35625c1"}, {0x110, 0x10c, 0x10001, "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"}, {0x28, 0x0, 0x9, "6005eb2c213e85370a4854328b0bb8f9a43b6f710ad22f94"}], 0x200, 0x24044040}, 0x9}, {{&(0x7f0000002e40)=@pptp={0x18, 0x2, {0x3, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002ec0)="b05d9eef05745987b91e0ea20e85d4d57a863e660e18ad8206b0f2139990b340207ff8683a25a5a8b3ffb3b7abb4934dcfb72e031364ada643c29d5db33a108bdb8aae6ed85b0127bbbfbec11aeb49d18364589c2200f803f3e0977d1bd7ad5a9dfd5e3064e4c1700b5a0a5f1b50df42324e4a3efdd04ab51f822191bddbf0f5925174a57c83c97d", 0x88}, {&(0x7f0000002f80)="9db5cbc647fa75ec474e950f5c4ace90b35d444de80c7b382839472095734c6a06a83a18c68d66c9120743cc7bd5eee3c5d45e1ffb9b4314ac1730b501219d52a92575a1ace6a54f013f812ad21806f11eaf53b50132ed7cc987cb45f59abf99c144950351b7d23782160f82d3cd78df8547a13ffbc44beca27051c188b3f7145aa9be2ce4690c84b3c4b058abcf4eeb39ea99ee27d280c8daddc182d4a99b215d1c8a60034fb15b16347634e7c8aeabd0a9d10815054bbd445b9a62f6d923a9a0e7d0c3c40a53e2159a5fe46493ff6816a6761da0906b03eaffa19e8ff06ce3b4964a00233bfde3332a87e463d534d96f9d893872335cc26b1746eeeea499bdf184a3bbe574dffd2de4e00de83fd44bc347452cf60a4fba470f1f5bee759b77fa900a2f7686d2f95cafcd3b7a3ed45f29198f3b29cb8021cc8732cec2f22f809c5f6d9c4088cc908863d1dc24794a692078ab10a5c7e141dcf3c9759ee6cf8e51aafee93d4755a87f2dedc38ef7487c0b1e1a0cd0c5342573db141afc1a0b5af20a3b1dd8ef705e8e3d46616c97248181fb00b2965eb99e76a61bb6710bd539175a281f25321ad5fb65e8797b78e50b9367eebaf4c112f64e59fef0cb97090022666d269d54ee1f6c66b6f21a1f2104eeeb5d794b7567f1d11b0eb86c1eb10e0b252b4bf31a16aa69f9174f2095a05ff74e26fe4044bbf64b6e4f2d8d16d4e8911b511c8542eb8ac57f7cf3943267361aa5beb347c1fe8d6b063fe235a4ff920dde328ffd7a6ea8576a10175fe25532f41567b78914833029c0938fac8698debe44696e7d5b19cb60c9577d84e1755011593b5d91d3da403605e79b5abec6e71eeb3ef20a1ab3298f720326c06d7783eb95f7e6f6b87f7ee1c74e8336da614e254636e19a368f462db7a790efebfed02f512a36b81b031d75bff3488209eacda6f69cad993badbbddf7d1eecf77fdf3e96b102a5212afe45cc7abde143b11a750286b4071c7f9940d5edcd2be43778f48c4a668eae840908fbd283ea511347caeac1741e257f91bb58273ba87ba0aebf8a513531d73e3f1872b7becf8bcb7fe7b82ae294df29fd12bc2a237f53bc2a59162246722d1ff2fe660e272cdb8db081dea6883bd9aa31427caeaa476340c153984fcd31f697d58a7f8089f07cbc60ac83f158bf287f7b75ab1a5f664e15f087b477ddca1d91d85e3a6b846221d9f67d4b51520d171d008241613cfdb2e0a8a2f641835fc5ad5fb39afcdf19b5be47114f6c46e6dc8b2dc2dae03c8c10a398b67b48160ac1a585bcd608669831e6c9b309ced6abf85ac8c81479b18c2cc730a46510641757b7c89aea76d70d59e054e9de7554d71a8bb2e11498a3ad55cb81dc56a353c06a5ed6d6f2278d8edc99e6a9983e17e575b46cfced51e94d5ca93b577af5fad9f9cf66fc2d138e4c55cf4214620c538853848df576fa4f765dec74a656a3ca2eb5fe8ee2a2ab26dceff3be50cfe89c1bb10f06b969c52fc92efbdc9f37a64b3f8258c752f368356c22742183a65cfefed3614e752bf482935a82bbe58ef3d56cfae7e4225a9df320d39c9f023cd64021e8d64e2055f9a4c788a54b90c93695ce1cffe3c0e64f84873dac1176862f316af6a022c6649c62cd4f08dd9867cad4e82f1f9dc9dc03eaf4f5ae8f8cfd022ffbbc6e5b82525dd0a4bf96f7df56bf97f3e9ac5e29168e3f5d688b392f68543105c29a40cfbb2cd2dde4c21f1e494ce4b06f0269cf560ccc01536aadd63fc4ccf7295eb1a2416b268c4eb9acdbbc3ba9a9a5b78bc8ec21ea19ebf983aab145df9e94d58d46694c0075cc34fdd8d564b174a341ca4a6024eb83277851773d1aaad6ae5f4f64c06fc71b1468f83a9b26773aafca17f29bedbf80ec66b6b760bbc470bf14042f8a3f00a11cd133abe4db8ec62d0279b12cdac40e5eca6a64006198b486f7fa905c8e1d46ecfde5b53483486d31dbc4b42e8d16805539272a4741627f684e32507f9086e7c80effa9c6435137f2dc3a9256ee8cef89afa56199c07a0d679a8538d42b7a290ae62643f4dacc4d9d94cc85fde6c0028ea6044330a8bcaf00fa2eaf9a437be23e012e2f60ebb406b3124ddbbc9a36888c3be36e7a9023c13b9cc534bf8298ecb4fc11192e55cf9e9cbf1b97aaa8036873086cb69a92e791f46e8fa0429dae06d11cadf8bb256d27466d7067cd30495a66112edc5e2a4bcbf05622eee313d2315eb944a82a90db05357526318c5dfe93b4fb028078b31bfcff1cb6f554853b1c2a17ce31bd5b95ce3026102133187b66705ee595b83863d25aaaf7e0bb7c5111fac370c107da904ea315daad4b736afd4aab5ea5adc0af097c48852e895e46457c21d86ec08280f4c82fa135c8a50cb96be992a5f6b532249931415696d981d762358524657f3d74e54bccefd6d75c5dc5a9f8632a34fca513ebc5227fa2ae48a7ca36cd89c666d9aef4cb04ef1ecab98e5f87b45e9246aaa6d5e8a2682f57759169d44b295f8852d0c96691489a878e8b44791e2b5e518c0cf8417df58b5cb2ff7ae7b3663296d14e4297963e71eb06921a3c065cfc3b2fb1872d3b94901e3e1c853f781932dabace6a2588ebaf2525ac0c8f846ce7880463f72777aca2ea3d5d51d6cecc125cb1b48ae593174e9f2705bdb28f778cea2aa3bd6c896d439e47ab6e37bafa69ad071414f56815970f889a4c3abddba2b13e9df27aab0d029e7f5632e5e9dc250b4ec3844b211c38df32bc22e9391a94f33008dc4f2b64c956198a9f957781758b6f3712f27e315ae7d091dca98595fe23b46cefec197de41e395bbb6f2ce672a23e80e8aff3af96230381dee48e1efc35cf27e1553aa5760692b88df94e07afca4976e1784f90e50ee12546db6e1ba36cefed66023accc2c39264a1986de8f79bff10c98e3f54b58ddb68f3be186c22e1a7cb6cf221e9aa542917c0499ce200f2ee420f52e9c5cb289a69ffe3aa084cf4064793aee50b749bda11bd25bdea3c8624b38f8ec22fb01b5d35ca187151a3b44110342b2830b5456033b3a67da4d4a42098142529c9b69df458ca3a85e53625ad6d4703e87bf7c85e31eef4654eb6b7e6b3c423f7090ba6437a68c35e9ce811fa6b8a89afa65745095a7a649684b063335628fd8233e03fc67870255dafe557d61a3f03adea827cd294129da160363cd6da478d279cd8e168e4aa610cfd857c2e8716072941e5eb9f355a3db5009fe10deec9271defa23f728c4b33f00339d4638ac8380f1912cc7116aa7b30dd5918522bba55d9022910893c6d14b2a2e5acbfdad5ec0de2030e35959fc137eec30c909c8661d140b463d278af74983f28aba9b42aa1cb092d40ba044e4b0d09809fd4dfae34e77f82f3172e9adb410c3bb8832cf4fd845d7c630ac81d7d7ea3f884f293b7da599a1bcbe77a7fb9f379d00465b7c54fb9c9d7e4ba79883253c8bfe0f40792dfff97912d645ac163614cc6bb1bdddb3bd0a9e338f39541278f60f9a9d675411d90ee358e5ab71d09dc237eeb06f0c2a26ac5c227db34a03b2fb75cfc7bfb0fa71934ea1b072edec079541164dac944f28a3a2b48479bca943d31f8d44fb2c2372352112897c21e93585a03cff9da3df48be735cbca0211c2b5759ea90b767d46796a00f36e4dc030012f010d853207d3c3cd20626c449b99fb2555242d987ad98ba4051690047a2dd02414822481f1c1175747471c5071ed7c380972228b3c6a42b0180e7600dfac66a066608d3ad1e901aa432567c8b6f8c448a82ad94cab345249eb47cbfe8635e9a19590405f85d9b403fe44d3a7c41cabf46cce46651aaf0584f2725eaa6d324aa0ccb63887a677db64237b3f21707f5d9dc2eb7e9b6cad5b80b5407ebdadc27933254aca0aa0695e5633a5c20e5d8aaeb0c7af732b15fc6c2153c680957f261055ed0a69c30ef81310fd484ce623340f201c0828aefd4bfb95d06ec2a05f19312553f33fca3c61dd8a972a731226b51808bd472612d7b0287c16fc344a377f62aadd74b34a7a1b210bd6e39770db7190376bd7e7dcbf2f609cbe994706a5a88780a183ab33af941b718fa44bea323f2e60152270fda90fa0b996c9c3679471f0b60c7cfcfac34b83657c8925107c0089bfc8b88c4780bafb2acadc51c4dd79aba9f55805bf28a926655810ed6bcfce14acae263cd6c1672a7867c0bd832c5c5bd4a016827116d5b822d5ac769cf57a4bdb409195d6cc9df76e673a99ca0cc17b995646087398f0fad7f3b0189c3b2c6661b817de71e4fa036a221b2031c851048ec52d57386adfb634160e4018d7d2fec046e101fc92fe8fb43e61a30e598480d5db27d5f3dacdf5eeced40403d7ee8a2acf2a6880e7dd501308f1d1802c02d896e3c437f8c53275fa93e230e4756736cfa7497fc2e193401b16ee02764154d5b1ac46913ccf49599be50625119ae2da8054e1367d7ac2f63c9a27766a7d9a8932300efcbee234f6d67550dbe52a59e78f6f17e36a313ca58458eac6e5507d2f8acd4dea941b44882b9d2710fd5ec89f00de22e08088b45d2b7be81557899ff2393ed2a82ea7d8ce61bf84212f60a8846546d291beeb5985c0314bad46496c2aa24bddcc67cfce484a83cef340c2c11a23c43f92b3a7fb3ad61fcfbeaec214de0c020877645ba8fdf1af05c2e45e6455715d1b9261d77054b8a674b8ad5b2273bb867f68b8747e52a32f7d93238db72253b159c342a1365eab3f4d91b1c65121bf65893508fa363383b8cb002f0acac3a03656ef5de52163d9b12487a00a95bd13ca110c7ebb04a44d6353d425aa4074e1b9c4e58e78cadf39faa7b6843acc082e7394ab72ef484d9d570d49ad1f959336796621c46f0aa11dd2b99b03549cf4b4f412625d7562388c67e05ba256e0b49b52a51aa9b37be136b4d43dc6a5e6594084795680249425dcdfb7c25786b800075bbfc0513e4892553b82fbb591616e90d233dd64fa6ecf0259566c2946d31be36ad8154d22caf90316e593c0ba7e7b0f7bc9eecb6cce5092f6fd3b8e6cd6c18c223eef48db761165c26c88ff30aa390587df8ca9479fa33a551d01be1796fdc44d1c5635467bdcc9ddb947aff5094088a9c9cd6c43ac0e526b47d9dcee3cc2e9d743fb1a02fda055aed8fcc8801f5998dd9d8f5a2dab6579d8013d6f73096603f4dc1d9f6d3ab8e2bf06622dba3b1650199fc8c05c6ea9ae1e0ebb8e72b4f6d758ec1593503f6b568f288d65bff83c870aa16ee706e50544f0039e107a9b6cac0e63d543f0c58d4f6a7a569cf72ca260d1f3d1e9e31d17c63ce9f5c8a98076be21cae6c1531ad0c00446224ff21fea4016486ea286352f17a60778160f88e0cdb8b59e1e91aff327ed104bbc96766de921456c2091aae6862a37e2f299598f49325c5a677fb9f9dc7b1c54b51e5f0ff05eda6d872199e7d0f9f39be9a7c50f7fd8299e6802cd6fd47602635b1a32394992098425f38eb66098d10a1a610f2d04b83c8d75678e822e1229f69bf1bc38c4e24ea846b300ff4f5b71bd4b2cd580a6a46fff66ca82541bee90ae9891f6b4ec736d84920dcfede8505229efd4ec9ed7a9ecd269f6ab19e8ebafc071df94745c608df51fc983b314118f579830739872ddf9ff44186abeb66987b3a8a627af26cd0ae29058a502e0a33ea000ed6c1e5c25b7725aa4c247127de36e2094b1beea52dd4dc619a0a827dd4de341e5855663b6380ccdbd374301c1411adcb3044de4e01b131380da2c5b0848b2a2ad5b01c08e4bff2fac72d1ab6a57fe98e8f2a", 0x1000}, {&(0x7f0000003f80)="288ec7f0ba596c9944d73eb7d2e566ba02f2babdfb3ef1353e5a93d5b1655d1b3b58e88d6c1dfb93ad22baa3e36259411b756a6e0fc81cd562ca1c48", 0x3c}], 0x3, &(0x7f0000004000)=[{0x98, 0x11f, 0x7fffffff, "362b3386b03d19773ccd476c1abd460edf565db0886310936f67dbcb938f05ec62f9fbaf208d9a2db0dea99bb9197f21ee9156538a167491616050d8530c57caebe927e4ba06ba8080d69d961fd0e47e7a78a0c66006d442cff7de496b7a6f726a20c2ba402daaa5fdb0187c1e7056c5a4c03cc27ebfe87cec95e7065112961e0d58b9907d"}, {0x18, 0x118, 0x0, "ab3933a120c5"}, {0x1010, 0x115, 0x6, "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"}, {0x60, 0x10f, 0x80, "16e9be367c12447fe5cf95988ca5bf2c11def74e2bd168113a82c7ff1bfab1af42dce5f721017c568e5fa8ada54e44294f24284fced6c3b647fe54d9c740e34a43bc2d31311cba6648"}, {0x110, 0x100, 0x10000, "f0f2dbbf9a1f426c2c4f17259c5061216a94275546918cc29b4e455d79d2c1ce50798016f9909623a55497f30fcde2f421b3bcf59aecaebffc7b8d0969dfe8aeefe1ddc9edfbbc532f9c8f35b18753586913d6297a9d73c535f6c601eca55568d5c8911e7d61ed2e28187be13be7db2105fd3dea20fbd8802d6e0b97fde70a22f429dba7d47e7edfb4cfbe47bca538b2399f8abafb82e6a663f2245033b4352c36142e3b06795f4276926844a02154c06eae8365ec815e2e40617ae2bd488004030a7fb10710542dee871be504a1a45a9584cd2e852170d869f77c07ff2059bca154e8e1b11a094c3fb64deb43880f2ee3f382a19337f5cd328d2b508270de"}], 0x1230, 0x4000000}, 0x6}], 0x5, 0x4) write(r0, &(0x7f0000000340)="86", 0x1) [ 147.864732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 147.871980] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000005 [ 147.969556] FAULT_INJECTION: forcing a failure. [ 147.969556] name failslab, interval 1, probability 0, space 0, times 0 [ 147.981010] CPU: 0 PID: 11434 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 147.987943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.997302] Call Trace: [ 147.999907] dump_stack+0x1b9/0x294 [ 148.003562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 148.008772] ? __save_stack_trace+0x7e/0xd0 [ 148.013119] should_fail.cold.4+0xa/0x1a [ 148.017207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.022330] ? save_stack+0x43/0xd0 [ 148.025978] ? kasan_kmalloc+0xc4/0xe0 [ 148.029879] ? kmem_cache_alloc_trace+0x152/0x780 [ 148.034740] ? sctp_add_bind_addr+0xf9/0x4a0 [ 148.039169] ? sctp_copy_local_addr_list+0x499/0x690 [ 148.044286] ? sctp_copy_one_addr+0x5d/0x170 [ 148.048720] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 148.054451] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 148.059308] ? sctp_sendmsg+0x1888/0x1d70 [ 148.063469] ? inet_sendmsg+0x19f/0x690 [ 148.067453] ? sock_sendmsg+0xd5/0x120 [ 148.071355] ? ___sys_sendmsg+0x805/0x940 [ 148.075512] ? __sys_sendmsg+0x115/0x270 [ 148.079588] ? SyS_sendmsg+0x29/0x30 [ 148.083316] ? do_syscall_64+0x29e/0x9d0 [ 148.087394] ? graph_lock+0x170/0x170 [ 148.091211] ? print_usage_bug+0xc0/0xc0 [ 148.095292] ? graph_lock+0x170/0x170 [ 148.099113] ? find_held_lock+0x36/0x1c0 [ 148.103196] ? lock_downgrade+0x8e0/0x8e0 [ 148.107366] __should_failslab+0x124/0x180 [ 148.111617] should_failslab+0x9/0x14 [ 148.116042] kmem_cache_alloc_trace+0x4b/0x780 [ 148.120644] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 148.125854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.131417] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 148.135763] sctp_add_bind_addr+0xf9/0x4a0 [ 148.140021] ? sctp_bind_addr_free+0x20/0x20 [ 148.144449] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 148.149657] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 148.154862] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 148.159897] sctp_copy_local_addr_list+0x499/0x690 [ 148.164833] ? sctp_defaults_init+0xe50/0xe50 [ 148.169334] ? get_random_bytes+0x34/0x40 [ 148.173498] ? sctp_association_new+0x135/0x21e0 [ 148.178247] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 148.183425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.188951] sctp_copy_one_addr+0x5d/0x170 [ 148.193172] ? sctp_copy_one_addr+0x5d/0x170 [ 148.197571] sctp_bind_addr_copy+0x16b/0x45b [ 148.201967] ? sctp_copy_one_addr+0x170/0x170 [ 148.206489] ? sctp_autobind+0x16d/0x1f0 [ 148.210537] ? sctp_do_bind+0x5f0/0x5f0 [ 148.214499] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 148.220029] ? security_sctp_bind_connect+0x99/0xc0 [ 148.225053] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 148.229713] ? sctp_sendmsg+0x125e/0x1d70 [ 148.233851] ? sctp_autobind+0x1f0/0x1f0 [ 148.237902] ? __local_bh_enable_ip+0x161/0x230 [ 148.242564] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 148.247566] ? lock_sock_nested+0x9f/0x120 [ 148.251787] ? trace_hardirqs_on+0xd/0x10 [ 148.255918] ? __local_bh_enable_ip+0x161/0x230 [ 148.260576] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 148.266104] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 148.271282] sctp_sendmsg+0x1888/0x1d70 [ 148.275248] ? do_raw_spin_unlock+0x9e/0x2e0 [ 148.279650] ? sctp_id2assoc+0x3e0/0x3e0 [ 148.283702] ? _raw_spin_unlock_bh+0x30/0x40 [ 148.288101] ? __release_sock+0x3a0/0x3a0 [ 148.292237] inet_sendmsg+0x19f/0x690 [ 148.296029] ? copy_msghdr_from_user+0x3a0/0x560 [ 148.300793] ? ipip_gro_receive+0x100/0x100 [ 148.305109] ? move_addr_to_kernel.part.18+0x100/0x100 [ 148.310374] ? security_socket_sendmsg+0x94/0xc0 [ 148.315118] ? ipip_gro_receive+0x100/0x100 [ 148.319424] sock_sendmsg+0xd5/0x120 [ 148.323135] ___sys_sendmsg+0x805/0x940 [ 148.327104] ? copy_msghdr_from_user+0x560/0x560 [ 148.331861] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 148.337380] ? proc_fail_nth_write+0x96/0x1f0 [ 148.341857] ? __fget_light+0x2ef/0x430 [ 148.345812] ? fget_raw+0x20/0x20 [ 148.349246] ? find_held_lock+0x36/0x1c0 [ 148.353292] ? kasan_check_write+0x14/0x20 [ 148.357540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.363075] ? sockfd_lookup_light+0xc5/0x160 [ 148.367566] __sys_sendmsg+0x115/0x270 [ 148.371448] ? SyS_shutdown+0x30/0x30 [ 148.375232] ? __sb_end_write+0xac/0xe0 [ 148.379186] ? fput+0x130/0x1a0 [ 148.382453] ? ksys_write+0x1a6/0x250 [ 148.386243] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 148.391073] ? ksys_ioctl+0x81/0xd0 [ 148.394687] SyS_sendmsg+0x29/0x30 [ 148.398209] ? __sys_sendmsg+0x270/0x270 [ 148.402253] do_syscall_64+0x29e/0x9d0 [ 148.406137] ? vmalloc_sync_all+0x30/0x30 [ 148.410267] ? _raw_spin_unlock_irq+0x27/0x70 [ 148.414747] ? finish_task_switch+0x1ca/0x820 [ 148.419228] ? syscall_return_slowpath+0x5c0/0x5c0 [ 148.424140] ? syscall_return_slowpath+0x30f/0x5c0 [ 148.429063] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 148.434424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 148.439261] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 148.444431] RIP: 0033:0x455259 [ 148.447610] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.455307] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 148.462559] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 148.469810] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.477065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 148.484318] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000006 2018/04/09 20:04:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:34 executing program 5: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000c46000/0x4000)=nil, 0x4000, 0x2000000, r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000500)=""/4096, &(0x7f0000000080)=0x1000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000038007374617469737469630000000000000000000000000000000000000000000100000000000000ff0300004b5a00000300000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ac1414aaac141414ffffffffff00000073797a6b616c6c657231000000000000766c616e300000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002100010800000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010013801000000000000000000000000000000000000000000000000280074746c000000000000000000000000000000000000000000000000000000030900000000000050006f736600000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000004000000010000000200000001000000280052454a4543540000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x408) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000001cc0)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0xfa, @broadcast=0xffffffff}, 0xc) keyctl$chown(0x4, r3, r4, r5) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x4, &(0x7f0000001c40)=[{&(0x7f0000000200)="59259d79f3a854f37dc663ce64016467c8c0e4ec56c27aee38544ab671cf907a3b01db7c15addde25134e612fcb63f79429621143d42608116d9473ef0e1edfb5b9010cb79d40835b6e85674f835168e07e92a77d5c9fdb87751fb78a2e5600c18ca3215e58b59c5a4620a8b919d8bb37c85764df85bf0d3d555", 0x7a, 0x20}, {&(0x7f0000000340)="4c6ca8037ef7817da93ac3c7ba0e503cfe3401a9a373f713b34db2cfd2c0a6e74651f915091c14876971bdbff584fb166cea48ef6b89d8b2552cc6864e567ceecec9f200847f2345749b0b719e372cd868643a3a5c1e1694c92e75aabb5925a7a53e7f3c4459ab8755ec62", 0x6b, 0x20}, {&(0x7f0000001a80)="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", 0xff, 0xa88}, {&(0x7f0000001b80)="5c9b6572284dd6c80760360e207c8951991f47cb7225e823b92a7411f7c5944b5c5ae4eb1bd47a30c87acfe55b37f3db1a41ecadc58205a29e3a59b83723b01e39f7bd757935f6dcba26c583247916352155862bf879fb7cd3ab2971b7f0b5964a1c81de081bb3b90b4b7424cd90b91e291d0f0cf4fb3aaeb9145bc53260ad09fed4ff4fe674c1df1451be8ed1a2ac4579dbb0c30d123f77e20f3209b2bc81a103ad229a6f4ac1f755f75c87", 0xac, 0x9}], 0x800000, &(0x7f00000003c0)={[{@usrquota='usrquota', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@umask={'umask', 0x3d}, 0x2c}, {@resize='resize', 0x2c}, {@noquota='noquota', 0x2c}]}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000400)=""/213, &(0x7f0000000040)=0xd5) 2018/04/09 20:04:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8, 0x2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)=ANY=[@ANYBLOB="1c2100001d00ffff0017c3000000004cee00000005000000da000000"], 0x1c}, 0x1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x101800) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/235) 2018/04/09 20:04:34 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x20) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000240)={0x88, @multicast2=0xe0000002, 0x4e22, 0x0, 'nq\x00', 0x1, 0x6, 0x5f}, 0x2c) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r2 = socket$inet_dccp(0x2, 0x6, 0x0) pread64(r2, &(0x7f0000000000)=""/65, 0x41, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) shutdown(r2, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000200)=0x54) 2018/04/09 20:04:34 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/04/09 20:04:34 executing program 7 (fault-call:1 fault-nth:7): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:34 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 148.773738] FAULT_INJECTION: forcing a failure. [ 148.773738] name failslab, interval 1, probability 0, space 0, times 0 [ 148.782438] FAULT_INJECTION: forcing a failure. [ 148.782438] name failslab, interval 1, probability 0, space 0, times 0 [ 148.785309] CPU: 0 PID: 11454 Comm: syz-executor1 Not tainted 4.16.0+ #14 [ 148.785361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.812827] Call Trace: [ 148.815424] dump_stack+0x1b9/0x294 [ 148.819048] ? dump_stack_print_info.cold.2+0x52/0x52 [ 148.824232] ? page_add_new_anon_rmap+0x850/0x850 [ 148.829065] ? print_usage_bug+0xc0/0xc0 [ 148.833124] should_fail.cold.4+0xa/0x1a [ 148.837175] ? print_usage_bug+0xc0/0xc0 [ 148.841231] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.846328] ? __lock_acquire+0x7f5/0x5130 [ 148.850565] ? graph_lock+0x170/0x170 [ 148.854359] ? print_usage_bug+0xc0/0xc0 [ 148.858418] ? find_held_lock+0x36/0x1c0 [ 148.862481] ? __lock_is_held+0xb5/0x140 [ 148.866548] ? check_same_owner+0x320/0x320 [ 148.870868] ? rcu_note_context_switch+0x710/0x710 [ 148.875796] __should_failslab+0x124/0x180 [ 148.880030] should_failslab+0x9/0x14 [ 148.883823] kmem_cache_alloc_trace+0x2cb/0x780 [ 148.888488] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 148.893670] ? print_usage_bug+0xc0/0xc0 [ 148.897727] snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 [ 148.903345] ? print_usage_bug+0xc0/0xc0 [ 148.907402] ? debug_check_no_locks_freed+0x310/0x310 [ 148.912588] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 148.918518] ? debug_check_no_locks_freed+0x310/0x310 [ 148.923700] ? graph_lock+0x170/0x170 [ 148.927498] ? __lock_acquire+0x7f5/0x5130 [ 148.931727] ? debug_check_no_locks_freed+0x310/0x310 [ 148.936906] ? print_usage_bug+0xc0/0xc0 [ 148.940962] ? find_held_lock+0x36/0x1c0 [ 148.945046] ? lock_downgrade+0x8e0/0x8e0 [ 148.949188] ? lock_release+0xa10/0xa10 [ 148.953157] ? check_same_owner+0x320/0x320 [ 148.957480] snd_pcm_oss_change_params+0x80/0xe0 [ 148.962691] snd_pcm_oss_get_active_substream.part.27+0x136/0x190 [ 148.968917] snd_pcm_oss_ioctl+0x278d/0x3f00 [ 148.973321] ? _parse_integer+0x190/0x190 [ 148.977466] ? snd_pcm_oss_release+0x290/0x290 [ 148.982042] ? find_held_lock+0x36/0x1c0 [ 148.986098] ? graph_lock+0x170/0x170 [ 148.989890] ? find_held_lock+0x36/0x1c0 [ 148.993967] ? lock_downgrade+0x8e0/0x8e0 [ 148.998113] ? kasan_check_read+0x11/0x20 [ 149.002253] ? rcu_is_watching+0x85/0x140 [ 149.006391] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 149.011580] ? __fget+0x40c/0x650 [ 149.015029] ? match_held_lock+0x881/0x8b0 [ 149.019259] ? expand_files.part.8+0x9a0/0x9a0 [ 149.023831] ? kasan_check_write+0x14/0x20 [ 149.028057] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 149.032980] ? wait_for_completion+0x870/0x870 [ 149.037555] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 149.042737] ? snd_pcm_oss_release+0x290/0x290 [ 149.047311] do_vfs_ioctl+0x1cf/0x1650 [ 149.051197] ? ioctl_preallocate+0x2e0/0x2e0 [ 149.055597] ? fget_raw+0x20/0x20 [ 149.059043] ? __sb_end_write+0xac/0xe0 [ 149.063024] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 149.068552] ? fput+0x130/0x1a0 [ 149.071825] ? ksys_write+0x1a6/0x250 [ 149.075621] ? security_file_ioctl+0x94/0xc0 [ 149.080028] ksys_ioctl+0xa9/0xd0 [ 149.083477] SyS_ioctl+0x24/0x30 [ 149.086837] ? ksys_ioctl+0xd0/0xd0 [ 149.090458] do_syscall_64+0x29e/0x9d0 [ 149.094336] ? vmalloc_sync_all+0x30/0x30 [ 149.098477] ? kasan_check_write+0x14/0x20 [ 149.102707] ? syscall_return_slowpath+0x5c0/0x5c0 [ 149.107629] ? syscall_return_slowpath+0x30f/0x5c0 [ 149.112642] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 149.118002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.122848] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.128028] RIP: 0033:0x455259 [ 149.131300] RSP: 002b:00007f055391ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.139002] RAX: ffffffffffffffda RBX: 00007f055391b6d4 RCX: 0000000000455259 [ 149.146261] RDX: 0000000020000000 RSI: 00800000c0045005 RDI: 0000000000000013 [ 149.153519] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.160779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 149.168036] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000000 [ 149.175316] CPU: 1 PID: 11464 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 149.182249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.191603] Call Trace: [ 149.194198] dump_stack+0x1b9/0x294 [ 149.197840] ? dump_stack_print_info.cold.2+0x52/0x52 [ 149.203052] should_fail.cold.4+0xa/0x1a [ 149.207127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.212244] ? print_usage_bug+0xc0/0xc0 [ 149.216322] ? lock_downgrade+0x8e0/0x8e0 [ 149.220477] ? lock_release+0xa10/0xa10 2018/04/09 20:04:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 149.224456] ? lock_acquire+0x1dc/0x520 [ 149.228434] ? sctp_get_port_local+0x3d7/0x1540 [ 149.233114] __should_failslab+0x124/0x180 [ 149.237353] should_failslab+0x9/0x14 [ 149.241154] kmem_cache_alloc+0x47/0x760 [ 149.245218] ? kasan_check_write+0x14/0x20 [ 149.249455] ? do_raw_spin_lock+0xc1/0x200 [ 149.253703] sctp_get_port_local+0xb1e/0x1540 [ 149.258198] ? find_held_lock+0x36/0x1c0 [ 149.262275] ? sctp_set_owner_w+0x530/0x530 [ 149.266599] ? lock_downgrade+0x8e0/0x8e0 [ 149.270758] ? check_same_owner+0x320/0x320 2018/04/09 20:04:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 149.275085] ? print_usage_bug+0xc0/0xc0 [ 149.279144] ? find_held_lock+0x36/0x1c0 [ 149.283213] ? lock_acquire+0x1dc/0x520 [ 149.287192] ? inet_autobind+0x1f/0x1a0 [ 149.291187] sctp_get_port+0x12b/0x1b0 [ 149.295082] ? sctp_get_port_local+0x1540/0x1540 [ 149.299840] ? trace_hardirqs_on+0xd/0x10 [ 149.303991] ? __local_bh_enable_ip+0x161/0x230 [ 149.308665] inet_autobind+0xbd/0x1a0 [ 149.312470] inet_sendmsg+0x4c3/0x690 [ 149.316267] ? copy_msghdr_from_user+0x3a0/0x560 [ 149.321023] ? ipip_gro_receive+0x100/0x100 [ 149.325352] ? move_addr_to_kernel.part.18+0x100/0x100 [ 149.330632] ? security_socket_sendmsg+0x94/0xc0 [ 149.335391] ? ipip_gro_receive+0x100/0x100 [ 149.339721] sock_sendmsg+0xd5/0x120 [ 149.344204] ___sys_sendmsg+0x805/0x940 [ 149.348189] ? copy_msghdr_from_user+0x560/0x560 [ 149.352960] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 149.358498] ? proc_fail_nth_write+0x96/0x1f0 [ 149.363005] ? __fget_light+0x2ef/0x430 [ 149.367595] ? fget_raw+0x20/0x20 [ 149.371050] ? find_held_lock+0x36/0x1c0 2018/04/09 20:04:34 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 149.375113] ? kasan_check_write+0x14/0x20 [ 149.379363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.384903] ? sockfd_lookup_light+0xc5/0x160 [ 149.389407] __sys_sendmsg+0x115/0x270 [ 149.393297] ? SyS_shutdown+0x30/0x30 [ 149.397100] ? __sb_end_write+0xac/0xe0 [ 149.401076] ? fput+0x130/0x1a0 [ 149.404355] ? ksys_write+0x1a6/0x250 [ 149.408174] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 149.413014] ? ksys_ioctl+0x81/0xd0 [ 149.416645] SyS_sendmsg+0x29/0x30 [ 149.420186] ? __sys_sendmsg+0x270/0x270 [ 149.424248] do_syscall_64+0x29e/0x9d0 [ 149.428136] ? vmalloc_sync_all+0x30/0x30 [ 149.432284] ? _raw_spin_unlock_irq+0x27/0x70 [ 149.436786] ? finish_task_switch+0x1ca/0x820 [ 149.441294] ? syscall_return_slowpath+0x5c0/0x5c0 [ 149.446233] ? syscall_return_slowpath+0x30f/0x5c0 [ 149.451176] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 149.456544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.457672] FAULT_INJECTION: forcing a failure. [ 149.457672] name failslab, interval 1, probability 0, space 0, times 0 [ 149.461390] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.461401] RIP: 0033:0x455259 [ 149.461409] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.461424] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 149.461433] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 149.461451] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.510405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 149.517666] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000000 [ 149.524948] CPU: 0 PID: 11462 Comm: syz-executor7 Not tainted 4.16.0+ #14 [ 149.531882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.541233] Call Trace: [ 149.543827] dump_stack+0x1b9/0x294 [ 149.547464] ? dump_stack_print_info.cold.2+0x52/0x52 [ 149.552664] ? __save_stack_trace+0x7e/0xd0 [ 149.556998] should_fail.cold.4+0xa/0x1a [ 149.561074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.566184] ? save_stack+0x43/0xd0 [ 149.569813] ? kasan_kmalloc+0xc4/0xe0 [ 149.573704] ? kmem_cache_alloc_trace+0x152/0x780 [ 149.578553] ? sctp_add_bind_addr+0xf9/0x4a0 [ 149.582966] ? sctp_copy_local_addr_list+0x499/0x690 [ 149.588079] ? sctp_copy_one_addr+0x5d/0x170 [ 149.592493] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 149.598211] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 149.603061] ? sctp_sendmsg+0x1888/0x1d70 [ 149.607218] ? inet_sendmsg+0x19f/0x690 [ 149.611205] ? sock_sendmsg+0xd5/0x120 [ 149.615099] ? ___sys_sendmsg+0x805/0x940 [ 149.619342] ? __sys_sendmsg+0x115/0x270 [ 149.623404] ? SyS_sendmsg+0x29/0x30 [ 149.627102] ? do_syscall_64+0x29e/0x9d0 [ 149.631155] ? graph_lock+0x170/0x170 [ 149.634946] ? print_usage_bug+0xc0/0xc0 [ 149.638987] ? graph_lock+0x170/0x170 [ 149.642771] ? find_held_lock+0x36/0x1c0 [ 149.646903] ? lock_downgrade+0x8e0/0x8e0 [ 149.651046] __should_failslab+0x124/0x180 [ 149.655266] should_failslab+0x9/0x14 [ 149.659057] kmem_cache_alloc_trace+0x4b/0x780 [ 149.663622] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 149.668802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.674323] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 149.678630] sctp_add_bind_addr+0xf9/0x4a0 [ 149.682849] ? sctp_bind_addr_free+0x20/0x20 [ 149.687240] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 149.692419] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 149.697591] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 149.702597] sctp_copy_local_addr_list+0x499/0x690 [ 149.707511] ? sctp_defaults_init+0xe50/0xe50 [ 149.711989] ? get_random_bytes+0x34/0x40 [ 149.716121] ? sctp_association_new+0x135/0x21e0 [ 149.720863] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 149.726046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.731579] sctp_copy_one_addr+0x5d/0x170 [ 149.735800] ? sctp_copy_one_addr+0x5d/0x170 [ 149.740196] sctp_bind_addr_copy+0x16b/0x45b [ 149.744591] ? sctp_copy_one_addr+0x170/0x170 [ 149.749073] ? sctp_autobind+0x16d/0x1f0 [ 149.753119] ? sctp_do_bind+0x5f0/0x5f0 [ 149.757077] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 149.762605] ? security_sctp_bind_connect+0x99/0xc0 [ 149.767609] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 149.772262] ? sctp_sendmsg+0x125e/0x1d70 [ 149.776409] ? sctp_autobind+0x1f0/0x1f0 [ 149.780456] ? __local_bh_enable_ip+0x161/0x230 [ 149.785106] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 149.790115] ? lock_sock_nested+0x9f/0x120 [ 149.794334] ? trace_hardirqs_on+0xd/0x10 [ 149.798467] ? __local_bh_enable_ip+0x161/0x230 [ 149.803120] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 149.808657] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 149.813830] sctp_sendmsg+0x1888/0x1d70 [ 149.817788] ? do_raw_spin_unlock+0x9e/0x2e0 [ 149.822186] ? sctp_id2assoc+0x3e0/0x3e0 [ 149.826230] ? _raw_spin_unlock_bh+0x30/0x40 [ 149.830624] ? __release_sock+0x3a0/0x3a0 [ 149.834760] inet_sendmsg+0x19f/0x690 [ 149.838542] ? copy_msghdr_from_user+0x3a0/0x560 [ 149.843278] ? ipip_gro_receive+0x100/0x100 [ 149.847582] ? move_addr_to_kernel.part.18+0x100/0x100 [ 149.852844] ? security_socket_sendmsg+0x94/0xc0 [ 149.857583] ? ipip_gro_receive+0x100/0x100 [ 149.861887] sock_sendmsg+0xd5/0x120 [ 149.865582] ___sys_sendmsg+0x805/0x940 [ 149.869541] ? copy_msghdr_from_user+0x560/0x560 [ 149.874293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 149.879815] ? proc_fail_nth_write+0x96/0x1f0 [ 149.884303] ? __fget_light+0x2ef/0x430 [ 149.888260] ? fget_raw+0x20/0x20 [ 149.891692] ? find_held_lock+0x36/0x1c0 [ 149.895736] ? kasan_check_write+0x14/0x20 [ 149.899961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.905492] ? sockfd_lookup_light+0xc5/0x160 [ 149.909972] __sys_sendmsg+0x115/0x270 [ 149.913842] ? SyS_shutdown+0x30/0x30 [ 149.917624] ? __sb_end_write+0xac/0xe0 [ 149.921578] ? fput+0x130/0x1a0 [ 149.924836] ? ksys_write+0x1a6/0x250 [ 149.928620] ? ksys_ioctl+0x81/0xd0 [ 149.932229] SyS_sendmsg+0x29/0x30 [ 149.935751] ? __sys_sendmsg+0x270/0x270 [ 149.939796] do_syscall_64+0x29e/0x9d0 [ 149.943670] ? vmalloc_sync_all+0x30/0x30 [ 149.947799] ? _raw_spin_unlock_irq+0x27/0x70 [ 149.952276] ? finish_task_switch+0x1ca/0x820 [ 149.956756] ? syscall_return_slowpath+0x5c0/0x5c0 [ 149.961665] ? syscall_return_slowpath+0x30f/0x5c0 [ 149.966590] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 149.971937] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/09 20:04:35 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:35 executing program 6: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffd) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffda9, 0x200000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x0, 0x9, 0x1}) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x2) getsockname$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) shutdown(r1, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=""/34) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@rand_addr}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) 2018/04/09 20:04:35 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) 2018/04/09 20:04:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x4, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb000000004bbdd330eaaa50c6a17a4cbe4cf9a27f671d171c4a2c50f288493829c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f38b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "8984041f02000000e10000000100000009007a7d000000000000047e000081d9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000001c0)) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x214002) r2 = shmget(0x0, 0x2000, 0xc, &(0x7f0000ffb000/0x2000)=nil) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000100)=0x1c) r4 = getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) setpgid(r4, r5) setsockopt$inet6_dccp_int(r3, 0x21, 0x7, &(0x7f0000000140)=0x22c1, 0x4) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000040)=""/69) prlimit64(r4, 0xa, &(0x7f0000000240)={0x7, 0x33}, &(0x7f0000000280)) 2018/04/09 20:04:35 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r1, 0x1, 0xfffffffffffffffc, r1}) close(r1) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x60}, 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) delete_module(&(0x7f0000000440)='dev ', 0x200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)='dev ', 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='/dev/loop-control\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xcf, "f453936a64768c875066ec5e98139462691c4d8d687b2549dd4093ae3ef12ce13709e621cad6e4a493fabd8b935e0af0291a0a519bb68defc5f4d99125dd9d1043531d9c2dfb21ce456575979dfc76a4f5b93b6d1fea75dc5407e5f6a30131adc77d9f4328d79aa242289d5c56d2ebc103af35988c2921041950b5fcbad297915208ca8a99a8c3537d1361d6b1469a475f6d3a270153b84743c9924396f944a2b12c736f5702cd86a91da96cb225fb7ada3c78b3c7e844c3acfaea90d252175bf24b03c463a6b5687a82f8f83a3c41"}, &(0x7f0000000600)=0xd7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={r5, 0x2c, &(0x7f0000000640)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x29e, @empty, 0x79}]}, &(0x7f00000006c0)=0x10) fallocate(r4, 0x0, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x0, 0x1}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x4000000000005, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) io_setup(0x1f, &(0x7f0000000400)) r7 = add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r7, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'syz_tun\x00'}) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) accept$inet(r6, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f00000003c0)=0xffffffffffffff54) 2018/04/09 20:04:35 executing program 5: setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x5, 0x4) r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141042, 0x0) r2 = getpid() stat(&(0x7f0000000040)='./bus\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f00000007c0)=0xe8) getgroups(0x3, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r8 = getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) r10 = getgid() sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="e44b3bc89b1e1ec41ba456311163b108d79c0ae2cbdec37b97aff4603f4aee3cb6495109ac145276d03a3c701b384918361b40b56552507fe1d72671c3c376334768aa3dce6c1594a6a80ebc9a1dd5e8ad5cf354f3bc2cf94e298903928b51c8e83a59c2018ec647e3fc200c3029a3108c45fe752b9732fd82eb429bf00f44babfba4a9e50598ee26347b62e0535b5e6b66533a1cfcd", 0x96}, {&(0x7f00000002c0)="0912011a0d8da0c5253190ccbf647a66c850179e63ec05821b084f3194db9c57d928c5251dce43602f822dcbf7943fb5e2644e79f5bca3d5e396972050842aae6089d6a8c9512023aa07e43b2aa15a15e0b68cd0cc6362eb594161c202fce2f0e816f3137d9af30920077c5dbef460da043d2616a95a3203e0333db3cb73", 0x7e}, {&(0x7f0000000340)="0223318e60cc1eb95ef7e4ea940c08ed2933a973f37182342409aef71e9ac3b76379e4f4465885935a7c1a6ebfb00381f47cc0828443da5e133d97b1bb1497df78b25d34af7020eab97dd2974b7912", 0x4f}, {&(0x7f00000003c0)="eaaa8951fb1054465bdec2a7d698bc567780b889d34f7d4fe5ebbe4d32412f3852cd6e954544169ec8f77dcb80b2f3e080f138cd53a7faf0611fa11442887301231105ae82f4cb6a5a4b8e2e57bec9e73d0ddbad2174483fa93b01838339020adf36c8e4c94ec9d7d8b14e72642b7509bae6840fbaea07c58704a0a9e1c09a05cb0d17f366720031e4154a9e02cf09ab5c09b6159794d6c3929f161d58ee36aa0bfebc075efe013b0a159edf353663476e98adce8b17303ca2643e5ed7fe0302e1306aea29f62483ac6e2526cd8f956ec442", 0xd2}, {&(0x7f00000004c0)="40411ff5e77cebe60268efb78165014ddf6e943ff352a06dd9915dfb02086cca8ed9beaa4e0633d0d9d8b284cee36f976079f786c35f9e750ff4a92ec64ae9d44038c69d98658bd7fa4c68f692e79cf0d3ec85998f9a50109eb22207", 0x5c}], 0x5, &(0x7f00000008c0)=[@rights={0x38, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0, r1, r1, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, r0, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff]}], 0x130, 0x40841}, 0x4000004) pwrite64(r1, &(0x7f0000000080)="b3", 0x1, 0x200000) sendfile(r1, r1, 0x0, 0x80000000) 2018/04/09 20:04:35 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:35 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 149.976763] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.981933] RIP: 0033:0x455259 [ 149.985098] RSP: 002b:00007fc66dbd3c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.992783] RAX: ffffffffffffffda RBX: 00007fc66dbd46d4 RCX: 0000000000455259 [ 150.000038] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 150.007289] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.014546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 150.021803] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000007 [ 150.065290] FAULT_INJECTION: forcing a failure. [ 150.065290] name failslab, interval 1, probability 0, space 0, times 0 [ 150.076611] CPU: 0 PID: 11492 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 150.083544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.092900] Call Trace: [ 150.095489] dump_stack+0x1b9/0x294 [ 150.099112] ? dump_stack_print_info.cold.2+0x52/0x52 [ 150.104299] ? graph_lock+0x170/0x170 [ 150.108100] should_fail.cold.4+0xa/0x1a [ 150.112155] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.117244] ? find_held_lock+0x36/0x1c0 [ 150.121299] ? lock_downgrade+0x8e0/0x8e0 [ 150.125432] ? graph_lock+0x170/0x170 [ 150.129222] ? mark_held_locks+0xc9/0x160 [ 150.133364] ? __local_bh_enable_ip+0x161/0x230 [ 150.138026] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 150.143044] ? sctp_get_port_local+0xece/0x1540 [ 150.147696] ? trace_hardirqs_on+0xd/0x10 [ 150.151830] ? __local_bh_enable_ip+0x161/0x230 [ 150.156487] ? sctp_get_port_local+0xee4/0x1540 [ 150.161145] ? check_usage.cold.58+0x637/0xac7 [ 150.165722] __should_failslab+0x124/0x180 [ 150.169945] should_failslab+0x9/0x14 [ 150.173732] kmem_cache_alloc_trace+0x4b/0x780 [ 150.178300] ? graph_lock+0x170/0x170 [ 150.182085] ? print_usage_bug+0xc0/0xc0 [ 150.186141] sctp_add_bind_addr+0xf9/0x4a0 [ 150.190369] ? sctp_bind_addr_free+0x20/0x20 [ 150.194770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 150.200297] ? sctp_v6_available+0x12b/0x300 [ 150.204699] ? sctp_inet6_bind_verify+0xb2/0x500 [ 150.209448] sctp_do_bind+0x30d/0x5f0 [ 150.213243] sctp_autobind+0x16d/0x1f0 [ 150.217123] ? sctp_do_bind+0x5f0/0x5f0 [ 150.221098] ? sctp_endpoint_is_peeled_off+0xf1/0x130 [ 150.226282] sctp_sendmsg_new_asoc+0xc3c/0x1120 [ 150.230939] ? sctp_sendmsg+0x125e/0x1d70 [ 150.235082] ? sctp_autobind+0x1f0/0x1f0 [ 150.239134] ? __local_bh_enable_ip+0x161/0x230 [ 150.243790] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 150.248794] ? lock_sock_nested+0x9f/0x120 [ 150.253018] ? trace_hardirqs_on+0xd/0x10 [ 150.257160] ? __local_bh_enable_ip+0x161/0x230 [ 150.261821] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 150.267355] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 150.272537] sctp_sendmsg+0x1888/0x1d70 [ 150.276500] ? do_raw_spin_unlock+0x9e/0x2e0 [ 150.280904] ? sctp_id2assoc+0x3e0/0x3e0 [ 150.284979] ? _raw_spin_unlock_bh+0x30/0x40 [ 150.289383] ? __release_sock+0x3a0/0x3a0 [ 150.293532] inet_sendmsg+0x19f/0x690 [ 150.297320] ? copy_msghdr_from_user+0x3a0/0x560 [ 150.302071] ? ipip_gro_receive+0x100/0x100 [ 150.306386] ? move_addr_to_kernel.part.18+0x100/0x100 [ 150.311653] ? security_socket_sendmsg+0x94/0xc0 [ 150.316394] ? ipip_gro_receive+0x100/0x100 [ 150.320708] sock_sendmsg+0xd5/0x120 [ 150.324417] ___sys_sendmsg+0x805/0x940 [ 150.328387] ? copy_msghdr_from_user+0x560/0x560 [ 150.333141] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 150.338666] ? proc_fail_nth_write+0x96/0x1f0 [ 150.343155] ? __fget_light+0x2ef/0x430 [ 150.347119] ? fget_raw+0x20/0x20 [ 150.350557] ? find_held_lock+0x36/0x1c0 [ 150.354608] ? kasan_check_write+0x14/0x20 [ 150.358846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 150.364375] ? sockfd_lookup_light+0xc5/0x160 [ 150.368862] __sys_sendmsg+0x115/0x270 [ 150.372742] ? SyS_shutdown+0x30/0x30 [ 150.376529] ? __sb_end_write+0xac/0xe0 [ 150.380491] ? fput+0x130/0x1a0 [ 150.383761] ? ksys_write+0x1a6/0x250 [ 150.387556] ? ksys_ioctl+0x81/0xd0 [ 150.391185] SyS_sendmsg+0x29/0x30 [ 150.394712] ? __sys_sendmsg+0x270/0x270 [ 150.398760] do_syscall_64+0x29e/0x9d0 [ 150.402633] ? vmalloc_sync_all+0x30/0x30 [ 150.406770] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.411253] ? finish_task_switch+0x1ca/0x820 [ 150.415735] ? syscall_return_slowpath+0x5c0/0x5c0 [ 150.420656] ? syscall_return_slowpath+0x30f/0x5c0 [ 150.425579] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.430959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.435798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.440978] RIP: 0033:0x455259 [ 150.444155] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.451853] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 150.459109] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 150.466368] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.473622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 150.480877] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000001 [ 150.495072] FAULT_INJECTION: forcing a failure. [ 150.495072] name failslab, interval 1, probability 0, space 0, times 0 [ 150.506425] CPU: 1 PID: 11494 Comm: syz-executor1 Not tainted 4.16.0+ #14 [ 150.513370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.522731] Call Trace: [ 150.525336] dump_stack+0x1b9/0x294 [ 150.528987] ? dump_stack_print_info.cold.2+0x52/0x52 [ 150.534189] ? __save_stack_trace+0x7e/0xd0 [ 150.538535] should_fail.cold.4+0xa/0x1a [ 150.542615] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.547733] ? save_stack+0x43/0xd0 [ 150.551377] ? kasan_kmalloc+0xc4/0xe0 [ 150.555275] ? kmem_cache_alloc_trace+0x152/0x780 [ 150.560130] ? snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 2018/04/09 20:04:36 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 150.565938] ? snd_pcm_oss_change_params+0x80/0xe0 [ 150.570881] ? snd_pcm_oss_get_active_substream.part.27+0x136/0x190 [ 150.577304] ? graph_lock+0x170/0x170 [ 150.581120] ? do_syscall_64+0x29e/0x9d0 [ 150.585196] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.590576] ? find_held_lock+0x36/0x1c0 [ 150.594655] ? __lock_is_held+0xb5/0x140 [ 150.598744] ? check_same_owner+0x320/0x320 [ 150.603079] ? rcu_note_context_switch+0x710/0x710 [ 150.608019] __should_failslab+0x124/0x180 [ 150.612253] should_failslab+0x9/0x14 [ 150.616047] kmem_cache_alloc_trace+0x2cb/0x780 [ 150.620704] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 150.625892] snd_pcm_oss_change_params_locked+0x231/0x3ce0 [ 150.631509] ? perf_trace_lock+0xd6/0x900 [ 150.635649] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 150.641519] ? debug_check_no_locks_freed+0x310/0x310 [ 150.646696] ? graph_lock+0x170/0x170 [ 150.650483] ? __lock_acquire+0x7f5/0x5130 [ 150.654704] ? debug_check_no_locks_freed+0x310/0x310 [ 150.659874] ? print_usage_bug+0xc0/0xc0 [ 150.663922] ? find_held_lock+0x36/0x1c0 [ 150.667976] ? lock_downgrade+0x8e0/0x8e0 [ 150.672111] ? lock_release+0xa10/0xa10 [ 150.676069] ? check_same_owner+0x320/0x320 [ 150.680381] snd_pcm_oss_change_params+0x80/0xe0 [ 150.685125] snd_pcm_oss_get_active_substream.part.27+0x136/0x190 [ 150.691344] snd_pcm_oss_ioctl+0x278d/0x3f00 [ 150.695741] ? _parse_integer+0x190/0x190 [ 150.699878] ? snd_pcm_oss_release+0x290/0x290 [ 150.704456] ? graph_lock+0x170/0x170 [ 150.708243] ? find_held_lock+0x36/0x1c0 [ 150.712295] ? lock_downgrade+0x8e0/0x8e0 [ 150.716433] ? rcu_is_watching+0x85/0x140 [ 150.720567] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 150.725753] ? __fget+0x40c/0x650 [ 150.729193] ? match_held_lock+0x881/0x8b0 [ 150.733415] ? expand_files.part.8+0x9a0/0x9a0 [ 150.737985] ? kasan_check_write+0x14/0x20 [ 150.742207] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 150.747122] ? wait_for_completion+0x870/0x870 [ 150.751692] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 150.756869] ? snd_pcm_oss_release+0x290/0x290 [ 150.761449] do_vfs_ioctl+0x1cf/0x1650 [ 150.765328] ? ioctl_preallocate+0x2e0/0x2e0 [ 150.769724] ? fget_raw+0x20/0x20 [ 150.773166] ? retint_kernel+0x10/0x10 [ 150.777040] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 150.782046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 150.786792] ? security_file_ioctl+0x94/0xc0 [ 150.791192] ksys_ioctl+0xa9/0xd0 [ 150.794634] SyS_ioctl+0x24/0x30 [ 150.797990] ? ksys_ioctl+0xd0/0xd0 [ 150.801605] do_syscall_64+0x29e/0x9d0 [ 150.805477] ? vmalloc_sync_all+0x30/0x30 [ 150.809609] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.814090] ? finish_task_switch+0x1ca/0x820 [ 150.818568] ? syscall_return_slowpath+0x5c0/0x5c0 [ 150.823484] ? syscall_return_slowpath+0x30f/0x5c0 [ 150.828405] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.833757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.838590] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.843762] RIP: 0033:0x455259 [ 150.846933] RSP: 002b:00007f055391ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.854628] RAX: ffffffffffffffda RBX: 00007f055391b6d4 RCX: 0000000000455259 [ 150.861881] RDX: 0000000020000000 RSI: 00800000c0045005 RDI: 0000000000000013 2018/04/09 20:04:36 executing program 2: r0 = add_key$keyring(&(0x7f0000e38ff8)='keyring\x00', &(0x7f0000866000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000243000)='dns_resolver\x00', &(0x7f00006f9000)={0x73, 0x79, 0x7a}, &(0x7f0000c89fb9)="5c4cff01000030b78334881f2b16c5896cf4277336ae090000000000005f2316dcbfd20d84e3de3d0000248bfbd524c61df9c977d1024b9dbaeb02a51dad8098fb5ef4054b6b00", 0x47, r0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000, 0x280001) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/128) 2018/04/09 20:04:36 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x3, 0x1, 'client1\x00', 0x1, "307fbdebdd5c087c", "620209c3599f208d54d59ac70583864f55741e03cfb49f65834b6a20dc3217b1", 0x9, 0x3f}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) [ 150.869135] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.876390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 150.883642] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000001 2018/04/09 20:04:36 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:36 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:36 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x4, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 150.932852] Option 'Ü¿Ò „ãÞ' to dns_resolver key: bad/missing value [ 150.969295] Option 'Ü¿Ò „ãÞ' to dns_resolver key: bad/missing value 2018/04/09 20:04:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)) [ 151.042563] FAULT_INJECTION: forcing a failure. [ 151.042563] name failslab, interval 1, probability 0, space 0, times 0 [ 151.053910] CPU: 1 PID: 11533 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 151.060852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.070301] Call Trace: [ 151.072911] dump_stack+0x1b9/0x294 [ 151.076563] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.081785] ? __kernel_text_address+0xd/0x40 [ 151.086304] should_fail.cold.4+0xa/0x1a [ 151.090383] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.095502] ? save_stack+0xa9/0xd0 [ 151.099138] ? graph_lock+0x170/0x170 [ 151.102951] ? sctp_add_bind_addr+0xf9/0x4a0 [ 151.107373] ? sctp_do_bind+0x30d/0x5f0 [ 151.111361] ? sctp_autobind+0x16d/0x1f0 [ 151.115431] ? sctp_sendmsg_new_asoc+0xc3c/0x1120 [ 151.120284] ? sctp_sendmsg+0x1888/0x1d70 [ 151.124442] ? inet_sendmsg+0x19f/0x690 [ 151.128434] ? find_held_lock+0x36/0x1c0 [ 151.132510] ? __lock_is_held+0xb5/0x140 [ 151.136598] ? check_same_owner+0x320/0x320 [ 151.140930] ? rcu_note_context_switch+0x710/0x710 [ 151.145888] __should_failslab+0x124/0x180 [ 151.150133] should_failslab+0x9/0x14 [ 151.153940] kmem_cache_alloc_trace+0x2cb/0x780 [ 151.158615] ? sctp_add_bind_addr+0xf9/0x4a0 [ 151.163036] ? rcu_read_lock_sched_held+0x108/0x120 [ 151.168059] ? kmem_cache_alloc_trace+0x616/0x780 [ 151.172914] sctp_association_new+0x123/0x21e0 [ 151.177504] ? memcpy+0x45/0x50 [ 151.180817] ? sctp_add_bind_addr+0x3a6/0x4a0 [ 151.185329] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 151.190088] ? sctp_bind_addr_free+0x20/0x20 [ 151.194509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.200058] ? sctp_v6_available+0x12b/0x300 [ 151.204476] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 151.210025] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 151.214530] ? sctp_do_bind+0x3e5/0x5f0 [ 151.218513] ? sctp_autobind+0x16d/0x1f0 [ 151.222579] ? zap_class+0x720/0x720 [ 151.226298] ? sctp_do_bind+0x5f0/0x5f0 [ 151.230278] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 151.235472] ? __sanitizer_cov_trace_switch+0x53/0x90 2018/04/09 20:04:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045877, &(0x7f0000000000)) [ 151.240662] ? security_sctp_bind_connect+0x99/0xc0 [ 151.245690] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 151.250365] ? sctp_sendmsg+0x125e/0x1d70 [ 151.254524] ? sctp_autobind+0x1f0/0x1f0 [ 151.258592] ? __local_bh_enable_ip+0x161/0x230 [ 151.263266] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 151.268289] ? lock_sock_nested+0x9f/0x120 [ 151.272528] ? trace_hardirqs_on+0xd/0x10 [ 151.276769] ? __local_bh_enable_ip+0x161/0x230 [ 151.281455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 151.287003] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 151.292203] sctp_sendmsg+0x1888/0x1d70 [ 151.296179] ? do_raw_spin_unlock+0x9e/0x2e0 [ 151.300596] ? sctp_id2assoc+0x3e0/0x3e0 [ 151.304667] ? _raw_spin_unlock_bh+0x30/0x40 [ 151.309089] ? __release_sock+0x3a0/0x3a0 [ 151.313256] inet_sendmsg+0x19f/0x690 [ 151.317058] ? copy_msghdr_from_user+0x3a0/0x560 [ 151.321812] ? ipip_gro_receive+0x100/0x100 [ 151.326133] ? move_addr_to_kernel.part.18+0x100/0x100 [ 151.331424] ? security_socket_sendmsg+0x94/0xc0 [ 151.336189] ? ipip_gro_receive+0x100/0x100 [ 151.340522] sock_sendmsg+0xd5/0x120 [ 151.344831] ___sys_sendmsg+0x805/0x940 [ 151.348824] ? copy_msghdr_from_user+0x560/0x560 [ 151.353608] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 151.359257] ? proc_fail_nth_write+0x96/0x1f0 [ 151.363765] ? __fget_light+0x2ef/0x430 [ 151.367752] ? fget_raw+0x20/0x20 [ 151.371208] ? find_held_lock+0x36/0x1c0 [ 151.375367] ? kasan_check_write+0x14/0x20 [ 151.379627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.385171] ? sockfd_lookup_light+0xc5/0x160 [ 151.389677] __sys_sendmsg+0x115/0x270 [ 151.393569] ? SyS_shutdown+0x30/0x30 [ 151.397374] ? __sb_end_write+0xac/0xe0 [ 151.401355] ? fput+0x130/0x1a0 [ 151.404639] ? ksys_write+0x1a6/0x250 [ 151.408454] ? ksys_ioctl+0x81/0xd0 [ 151.412092] SyS_sendmsg+0x29/0x30 [ 151.415630] ? __sys_sendmsg+0x270/0x270 [ 151.419696] do_syscall_64+0x29e/0x9d0 [ 151.423586] ? vmalloc_sync_all+0x30/0x30 [ 151.427810] ? _raw_spin_unlock_irq+0x27/0x70 [ 151.432315] ? finish_task_switch+0x1ca/0x820 [ 151.436815] ? syscall_return_slowpath+0x5c0/0x5c0 [ 151.441754] ? syscall_return_slowpath+0x30f/0x5c0 [ 151.446697] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 151.452074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.456931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 151.462116] RIP: 0033:0x455259 [ 151.465302] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.473015] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 151.480286] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 151.487561] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.494833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 151.502102] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000002 2018/04/09 20:04:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045878, &(0x7f0000000000)) 2018/04/09 20:04:37 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x602, 0x102) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x30, 0x0, @tid=r2}, &(0x7f0000000100)) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180), 0x2) 2018/04/09 20:04:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)="656d30776c616e3173797374656d657468302f656d31c100", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)=""/13) 2018/04/09 20:04:37 executing program 6: r0 = socket$inet6(0xa, 0x10000000006, 0x4009) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000273000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc00, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20012cbd7000fbdbdf25bc3100800000389d080006006e710000080005000800000008000500bae500000c00020008000600980f0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000180)={[{0x6, 0x3, 0x100, 0x52b, 0x8, 0x3, 0x2, 0x3, 0xe4, 0x1000, 0x52167b59, 0x10000, 0x1010}, {0x4, 0x3, 0x81, 0x401, 0x0, 0x7b, 0x6, 0x200, 0x5, 0x400, 0x5, 0x4, 0x63}, {0x1, 0x1, 0x3, 0x8, 0xa5c9, 0x2, 0x10001, 0x3, 0x11e, 0x0, 0x6, 0x10000, 0x9}], 0x3ff}) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0xfffffffffffffffd) 2018/04/09 20:04:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000006c0)=ANY=[]) r0 = getpgid(0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, r0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x36) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x472000, 0x0) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x8, &(0x7f0000000280)={0x3}, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000240), &(0x7f00000002c0)=0x30) 2018/04/09 20:04:37 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x9, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 151.687729] FAULT_INJECTION: forcing a failure. [ 151.687729] name failslab, interval 1, probability 0, space 0, times 0 [ 151.699065] CPU: 0 PID: 11551 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 151.705998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.715358] Call Trace: [ 151.717959] dump_stack+0x1b9/0x294 [ 151.721599] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.726807] should_fail.cold.4+0xa/0x1a [ 151.730882] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.735989] ? trace_hardirqs_on+0xd/0x10 [ 151.740150] ? graph_lock+0x170/0x170 [ 151.743961] ? find_held_lock+0x36/0x1c0 [ 151.748029] ? __lock_is_held+0xb5/0x140 [ 151.752108] ? check_same_owner+0x320/0x320 [ 151.756438] ? rcu_note_context_switch+0x710/0x710 [ 151.761375] ? sctp_outq_init+0x2e6/0x410 [ 151.765533] ? _warn_unseeded_randomness+0xbd/0x200 [ 151.770580] __should_failslab+0x124/0x180 [ 151.774827] should_failslab+0x9/0x14 [ 151.778636] __kmalloc+0x2c8/0x760 [ 151.782182] ? mark_held_locks+0xc9/0x160 [ 151.786348] ? sctp_stream_alloc_out+0x33/0x1b0 [ 151.791030] sctp_stream_alloc_out+0x33/0x1b0 [ 151.795542] sctp_stream_init+0xf5/0x3b0 [ 151.799620] sctp_association_new+0x1305/0x21e0 [ 151.804308] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 151.809080] ? sctp_bind_addr_free+0x20/0x20 [ 151.813502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.819054] ? sctp_v6_available+0x12b/0x300 [ 151.823482] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 151.829034] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 151.833542] ? sctp_do_bind+0x3e5/0x5f0 [ 151.837532] ? sctp_autobind+0x16d/0x1f0 [ 151.841604] ? sctp_do_bind+0x5f0/0x5f0 [ 151.845592] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 151.850790] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 151.855990] ? security_sctp_bind_connect+0x99/0xc0 [ 151.861024] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 151.865701] ? sctp_sendmsg+0x125e/0x1d70 [ 151.869862] ? sctp_autobind+0x1f0/0x1f0 [ 151.873931] ? __local_bh_enable_ip+0x161/0x230 [ 151.878680] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 151.883705] ? lock_sock_nested+0x9f/0x120 [ 151.887948] ? trace_hardirqs_on+0xd/0x10 [ 151.892109] ? __local_bh_enable_ip+0x161/0x230 [ 151.896788] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 151.902334] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 151.907534] sctp_sendmsg+0x1888/0x1d70 [ 151.911515] ? do_raw_spin_unlock+0x9e/0x2e0 [ 151.915938] ? sctp_id2assoc+0x3e0/0x3e0 [ 151.920011] ? _raw_spin_unlock_bh+0x30/0x40 [ 151.924429] ? __release_sock+0x3a0/0x3a0 [ 151.928592] inet_sendmsg+0x19f/0x690 [ 151.932396] ? copy_msghdr_from_user+0x3a0/0x560 2018/04/09 20:04:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7}, 0x2c) r0 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x52) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/5}, 0x18) socketpair$inet(0x2, 0x7, 0xffff, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000100)={@rand_addr, @broadcast, @remote}, &(0x7f0000000140)=0xc) 2018/04/09 20:04:37 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) quotactl(0x2, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)="7a5615218d6e014dddbb59993b8261fc4659f516619375f6efa83dcee01ce1c061da4234d5941f39bee70c24ceeb2396956cfbfeb3d96ab4d7dd93ba89a27f5d653344be7f0bc76f3502d922186008918e0274b7b4a93d58c7433f858c4a187d273fccdf2c3e3eb376d7ab3c9c10c0acda34bca2799a9074f50b18a11c52dadd85c8d17c0e3e6ee5") write$eventfd(r0, &(0x7f0000b4dff8), 0xfffffe7e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000001c0)=0x9, 0x4) readv(r3, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1) 2018/04/09 20:04:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:37 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x10, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005421, &(0x7f0000000000)) 2018/04/09 20:04:37 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x8, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 151.937167] ? ipip_gro_receive+0x100/0x100 [ 151.941516] ? move_addr_to_kernel.part.18+0x100/0x100 [ 151.946804] ? security_socket_sendmsg+0x94/0xc0 [ 151.951566] ? ipip_gro_receive+0x100/0x100 [ 151.955895] sock_sendmsg+0xd5/0x120 [ 151.959615] ___sys_sendmsg+0x805/0x940 [ 151.963597] ? copy_msghdr_from_user+0x560/0x560 [ 151.968371] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 151.973909] ? proc_fail_nth_write+0x96/0x1f0 [ 151.978415] ? __fget_light+0x2ef/0x430 [ 151.982475] ? fget_raw+0x20/0x20 2018/04/09 20:04:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0xfffffe4f, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000000c0)) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf80", 0x1f) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x200000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000180)=0x10002) write(r0, &(0x7f0000f63000)="1f0000000104ff0095430700072c01000000010008000400020423dcffb600", 0x1f) [ 151.985927] ? find_held_lock+0x36/0x1c0 [ 151.989995] ? kasan_check_write+0x14/0x20 [ 151.994252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.999796] ? sockfd_lookup_light+0xc5/0x160 [ 152.004303] __sys_sendmsg+0x115/0x270 [ 152.008201] ? SyS_shutdown+0x30/0x30 [ 152.012004] ? __sb_end_write+0xac/0xe0 [ 152.015983] ? fput+0x130/0x1a0 [ 152.019276] ? ksys_write+0x1a6/0x250 [ 152.023087] ? ksys_ioctl+0x81/0xd0 [ 152.026722] SyS_sendmsg+0x29/0x30 [ 152.030267] ? __sys_sendmsg+0x270/0x270 [ 152.034334] do_syscall_64+0x29e/0x9d0 2018/04/09 20:04:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r0, &(0x7f0000003ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000013000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/rtc\x00', 0x10040, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000001600)=0x81, &(0x7f0000001640)=0x4) accept4(r0, &(0x7f0000000140)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80, 0x0) 2018/04/09 20:04:37 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xb, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 152.038227] ? vmalloc_sync_all+0x30/0x30 [ 152.042380] ? _raw_spin_unlock_irq+0x27/0x70 [ 152.046876] ? finish_task_switch+0x1ca/0x820 [ 152.051383] ? syscall_return_slowpath+0x5c0/0x5c0 [ 152.056315] ? syscall_return_slowpath+0x30f/0x5c0 [ 152.061252] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 152.066630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.071486] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.076674] RIP: 0033:0x455259 [ 152.079861] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 2018/04/09 20:04:37 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:37 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x14, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 152.087574] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 152.094845] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 152.102116] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.109386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 152.116658] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000003 [ 152.197262] FAULT_INJECTION: forcing a failure. [ 152.197262] name failslab, interval 1, probability 0, space 0, times 0 [ 152.208682] CPU: 0 PID: 11604 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 152.215617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.223632] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 152.224968] Call Trace: [ 152.236014] dump_stack+0x1b9/0x294 [ 152.239655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.244865] should_fail.cold.4+0xa/0x1a [ 152.248939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.254059] ? is_bpf_text_address+0xd7/0x170 [ 152.258562] ? graph_lock+0x170/0x170 [ 152.262369] ? __kernel_text_address+0xd/0x40 [ 152.266873] ? unwind_get_return_address+0x61/0xa0 [ 152.271805] ? find_held_lock+0x36/0x1c0 [ 152.273219] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 152.275872] ? __lock_is_held+0xb5/0x140 [ 152.275902] ? check_same_owner+0x320/0x320 [ 152.275919] ? SyS_sendmsg+0x29/0x30 [ 152.275935] ? do_syscall_64+0x29e/0x9d0 [ 152.275953] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.275970] ? rcu_note_context_switch+0x710/0x710 [ 152.302866] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 152.305811] __should_failslab+0x124/0x180 [ 152.305830] should_failslab+0x9/0x14 [ 152.305845] kmem_cache_alloc_trace+0x2cb/0x780 [ 152.305871] sctp_auth_shkey_create+0xd4/0x290 [ 152.305885] ? sctp_auth_key_put+0x30/0x30 [ 152.305901] ? __lock_is_held+0xb5/0x140 [ 152.318656] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 152.319222] ? rcu_read_lock_sched_held+0x108/0x120 [ 152.319242] sctp_auth_asoc_copy_shkeys+0x2dc/0x3e0 [ 152.363116] ? sctp_auth_destroy_keys+0x3f0/0x3f0 [ 152.367970] ? memset+0x31/0x40 [ 152.371336] ? sctp_stream_alloc_out+0x127/0x1b0 [ 152.376102] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 152.381659] ? sctp_stream_interleave_init+0x69/0xa0 [ 152.386760] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 152.392300] ? sctp_stream_init+0x212/0x3b0 [ 152.396626] sctp_association_new+0x172b/0x21e0 [ 152.401312] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 152.406072] ? sctp_bind_addr_free+0x20/0x20 [ 152.410475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.416023] ? sctp_v6_available+0x12b/0x300 [ 152.420429] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 152.425951] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 152.430434] ? sctp_do_bind+0x3e5/0x5f0 [ 152.434397] ? sctp_autobind+0x16d/0x1f0 [ 152.438448] ? sctp_do_bind+0x5f0/0x5f0 [ 152.442414] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 152.447589] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 152.452760] ? security_sctp_bind_connect+0x99/0xc0 [ 152.457766] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 152.462430] ? sctp_sendmsg+0x125e/0x1d70 [ 152.466566] ? sctp_autobind+0x1f0/0x1f0 [ 152.470619] ? __local_bh_enable_ip+0x161/0x230 [ 152.475278] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 152.480288] ? lock_sock_nested+0x9f/0x120 [ 152.484513] ? trace_hardirqs_on+0xd/0x10 [ 152.488660] ? __local_bh_enable_ip+0x161/0x230 [ 152.493315] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 152.498835] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 152.504017] sctp_sendmsg+0x1888/0x1d70 [ 152.507997] ? do_raw_spin_unlock+0x9e/0x2e0 [ 152.512417] ? sctp_id2assoc+0x3e0/0x3e0 [ 152.516477] ? _raw_spin_unlock_bh+0x30/0x40 [ 152.520883] ? __release_sock+0x3a0/0x3a0 [ 152.525112] inet_sendmsg+0x19f/0x690 [ 152.528897] ? copy_msghdr_from_user+0x3a0/0x560 [ 152.533649] ? ipip_gro_receive+0x100/0x100 [ 152.537963] ? move_addr_to_kernel.part.18+0x100/0x100 [ 152.543228] ? security_socket_sendmsg+0x94/0xc0 [ 152.547975] ? ipip_gro_receive+0x100/0x100 [ 152.552543] sock_sendmsg+0xd5/0x120 [ 152.556238] ___sys_sendmsg+0x805/0x940 [ 152.560219] ? copy_msghdr_from_user+0x560/0x560 [ 152.564975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 152.570508] ? proc_fail_nth_write+0x96/0x1f0 [ 152.575009] ? __fget_light+0x2ef/0x430 [ 152.578976] ? fget_raw+0x20/0x20 [ 152.582416] ? find_held_lock+0x36/0x1c0 [ 152.586489] ? kasan_check_write+0x14/0x20 [ 152.590735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.596253] ? sockfd_lookup_light+0xc5/0x160 [ 152.600731] __sys_sendmsg+0x115/0x270 [ 152.604614] ? SyS_shutdown+0x30/0x30 [ 152.608405] ? __sb_end_write+0xac/0xe0 [ 152.612362] ? fput+0x130/0x1a0 [ 152.615632] ? ksys_write+0x1a6/0x250 [ 152.619421] ? ksys_ioctl+0x81/0xd0 [ 152.623042] SyS_sendmsg+0x29/0x30 [ 152.626576] ? __sys_sendmsg+0x270/0x270 [ 152.630632] do_syscall_64+0x29e/0x9d0 [ 152.634502] ? vmalloc_sync_all+0x30/0x30 [ 152.638643] ? _raw_spin_unlock_irq+0x27/0x70 [ 152.643140] ? finish_task_switch+0x1ca/0x820 [ 152.647619] ? syscall_return_slowpath+0x5c0/0x5c0 [ 152.652540] ? syscall_return_slowpath+0x30f/0x5c0 [ 152.657463] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 152.662812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.667660] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.672839] RIP: 0033:0x455259 [ 152.676024] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.683737] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 152.691011] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 2018/04/09 20:04:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0xffffffffffffffff, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:38 executing program 3: mkdir(&(0x7f0000109282)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000216000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f0000ffb000)) r0 = creat(&(0x7f00000ec000)='./file0/bus\x00', 0xbc9cc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r0, 0x0) r1 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="9d8db50570fd33fad6f9715e563227958c0e25e8a1047bc82a2dcdfc4f", 0x1d}, {&(0x7f00000000c0)="9a736d74030b09025e532939af27537c5ebce1e003f6d181785fb16370e4c672d924d7bbdaac738a5b2df952eefa68db3f7b0940227b8d8ce0e3fe031e3f692e3d9d715e7258ad703e3a227da5d8d8dfbb11e5b113d8bc364e88b25439593ea3b91ed0d35b5cf83eaf8671041b07d26a193d39735d7a5bd8c53ab39c81120da7cabf6780318a3fe41ea9e9d36c763281bad2e341b4321ec1e178c97836d590f3dd882af5a0b0f6f21e9eabb96a45fe447e03b6a843f3be4d51460d17d07082a3252893b197df1cd3f8f2e1a75c989cf6eeace6137ed27442f8a7f583b689d6e0daf501722f118896157a8ee3e4d5a98b7d2d", 0xf2}, {&(0x7f0000000200)="5d12f5b2e0b37a91c17b67b6a3d310a40b5ac1868ede75b3e500db82a2d4fc4763b5b7bc86abb5960c66cb4f30bc7116630bc12dd8da8e49db9f97c1165fe994df37c8cdd1bb0b22ebcc1fcc2455a975eabcfd5c916d88514a5cd10ffffd1269f624e008d336e9a9a0583b21ad681e1e5bff6e4fcbe9dfbc532e81a055c348ca377b31150d372f642a51c1e9d45b777822f7521cb92f5ed2b989c73eb7", 0x9d}, {&(0x7f00000003c0)="9ac88f6d5c2935cf0f5207b71126f3e305e271feca9578fc27a188620eeac34ea5dbdd154a9f33f024", 0x29}], 0x4) 2018/04/09 20:04:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:38 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080044df9, &(0x7f0000000000)) 2018/04/09 20:04:38 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x2, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:38 executing program 5: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000edaff8)='./file0\x00', &(0x7f0000d9fffa)='msdos\x00', 0x1002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r0, &(0x7f0000000100)='../file0\x00', &(0x7f0000000180)={{0x77359400}, {r1, r2/1000+10000}}, 0x100) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='../file0\x00') [ 152.698286] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.705561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 152.712835] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000004 2018/04/09 20:04:38 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:38 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xfffffffd, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:38 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) r2 = dup(r1) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 2018/04/09 20:04:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x1c, 0x40000000002}, {}], 0x30) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80, 0x80800) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x101000, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)=0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100), 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x200, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/58) 2018/04/09 20:04:38 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000000000500e, &(0x7f0000000000)) [ 152.880761] FAULT_INJECTION: forcing a failure. [ 152.880761] name failslab, interval 1, probability 0, space 0, times 0 [ 152.892096] CPU: 0 PID: 11648 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 152.899031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.908383] Call Trace: [ 152.910981] dump_stack+0x1b9/0x294 [ 152.914622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.919834] should_fail.cold.4+0xa/0x1a [ 152.923916] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.929037] ? is_bpf_text_address+0xd7/0x170 [ 152.933632] ? graph_lock+0x170/0x170 [ 152.937445] ? __kernel_text_address+0xd/0x40 [ 152.941954] ? unwind_get_return_address+0x61/0xa0 [ 152.946894] ? find_held_lock+0x36/0x1c0 [ 152.950970] ? __lock_is_held+0xb5/0x140 [ 152.955055] ? check_same_owner+0x320/0x320 [ 152.959389] ? SyS_sendmsg+0x29/0x30 [ 152.963115] ? do_syscall_64+0x29e/0x9d0 [ 152.967192] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.972567] ? rcu_note_context_switch+0x710/0x710 [ 152.977507] __should_failslab+0x124/0x180 [ 152.981751] should_failslab+0x9/0x14 [ 152.985562] kmem_cache_alloc_trace+0x2cb/0x780 [ 152.990251] sctp_auth_shkey_create+0xd4/0x290 [ 152.994842] ? sctp_auth_key_put+0x30/0x30 [ 152.999083] ? __lock_is_held+0xb5/0x140 [ 153.003169] ? rcu_read_lock_sched_held+0x108/0x120 [ 153.008200] sctp_auth_asoc_copy_shkeys+0x2dc/0x3e0 [ 153.013233] ? sctp_auth_destroy_keys+0x3f0/0x3f0 [ 153.018081] ? memset+0x31/0x40 [ 153.021378] ? sctp_stream_alloc_out+0x127/0x1b0 [ 153.026148] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 153.031694] ? sctp_stream_interleave_init+0x69/0xa0 [ 153.037347] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 153.037362] ? sctp_stream_init+0x212/0x3b0 [ 153.037387] sctp_association_new+0x172b/0x21e0 [ 153.037406] ? sctp_trans_elect_best+0x3d0/0x3d0 [ 153.037421] ? sctp_bind_addr_free+0x20/0x20 [ 153.037438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.037457] ? sctp_v6_available+0x12b/0x300 [ 153.071086] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 153.071112] ? sctp_v6_to_sk_saddr+0xef/0x250 [ 153.071131] ? sctp_do_bind+0x3e5/0x5f0 [ 153.071152] ? sctp_autobind+0x16d/0x1f0 [ 153.071169] ? sctp_do_bind+0x5f0/0x5f0 [ 153.071185] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.071202] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.071218] ? security_sctp_bind_connect+0x99/0xc0 [ 153.071238] sctp_sendmsg_new_asoc+0x39b/0x1120 [ 153.071254] ? sctp_sendmsg+0x125e/0x1d70 [ 153.071276] ? sctp_autobind+0x1f0/0x1f0 [ 153.071295] ? __local_bh_enable_ip+0x161/0x230 [ 153.071312] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 153.071326] ? lock_sock_nested+0x9f/0x120 [ 153.071339] ? trace_hardirqs_on+0xd/0x10 [ 153.071354] ? __local_bh_enable_ip+0x161/0x230 [ 153.071369] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 153.071386] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 153.071405] sctp_sendmsg+0x1888/0x1d70 [ 153.071421] ? do_raw_spin_unlock+0x9e/0x2e0 [ 153.071442] ? sctp_id2assoc+0x3e0/0x3e0 [ 153.071461] ? _raw_spin_unlock_bh+0x30/0x40 [ 153.071478] ? __release_sock+0x3a0/0x3a0 [ 153.071505] inet_sendmsg+0x19f/0x690 [ 153.071520] ? copy_msghdr_from_user+0x3a0/0x560 [ 153.071538] ? ipip_gro_receive+0x100/0x100 [ 153.071550] ? move_addr_to_kernel.part.18+0x100/0x100 [ 153.071567] ? security_socket_sendmsg+0x94/0xc0 [ 153.071579] ? ipip_gro_receive+0x100/0x100 [ 153.203185] sock_sendmsg+0xd5/0x120 [ 153.203204] ___sys_sendmsg+0x805/0x940 [ 153.203224] ? copy_msghdr_from_user+0x560/0x560 [ 153.203247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 153.203267] ? proc_fail_nth_write+0x96/0x1f0 [ 153.225700] ? __fget_light+0x2ef/0x430 [ 153.225715] ? fget_raw+0x20/0x20 [ 153.225728] ? find_held_lock+0x36/0x1c0 [ 153.225746] ? kasan_check_write+0x14/0x20 [ 153.225777] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.225791] ? sockfd_lookup_light+0xc5/0x160 [ 153.251604] __sys_sendmsg+0x115/0x270 [ 153.251621] ? SyS_shutdown+0x30/0x30 [ 153.251634] ? __sb_end_write+0xac/0xe0 [ 153.251649] ? fput+0x130/0x1a0 [ 153.251663] ? ksys_write+0x1a6/0x250 [ 153.251683] ? ksys_ioctl+0x81/0xd0 [ 153.251698] SyS_sendmsg+0x29/0x30 [ 153.277603] ? __sys_sendmsg+0x270/0x270 [ 153.277620] do_syscall_64+0x29e/0x9d0 [ 153.277638] ? vmalloc_sync_all+0x30/0x30 [ 153.289731] ? _raw_spin_unlock_irq+0x27/0x70 [ 153.289748] ? finish_task_switch+0x1ca/0x820 [ 153.289765] ? syscall_return_slowpath+0x5c0/0x5c0 [ 153.289780] ? syscall_return_slowpath+0x30f/0x5c0 [ 153.289797] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 153.289815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.318751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.318763] RIP: 0033:0x455259 2018/04/09 20:04:38 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r0, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f00004eef09)="96427feebcc603c266d2a2c2da2644124066d6c52746a66fd07a4a9370b924b494651c3febca0be535e0f30bbafe65b8b859d66972208f558b002bbc2366429da28cdb97727474f32fcce772ce439a1b5785bb74b8680705191a3d28e775b402a04cdf7881cf1c80eb042835db0e8c24fd0e3c0f396da612f44d9999de32f883521dfa4593a5772e19b5c0c27ace555870d7fe3a1819c614a8d9447cfa592c236d96bf255bf3966b0c1c34711ce489df2032a31902ae0742b79d7334ef248790fa0e3787e4b945215cddc03c4f384e6815bab43d34b8c04eb06ff00f10743a0e25f6", 0xe2, 0x4001, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000abc0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f000000ab80)={&(0x7f000000a080)={0x110, 0x0, 0x0, 0x0, 0x0, {0x1}, [{{0x8, 0x1}, {0xf4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x110}, 0x1}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendto$inet(r1, &(0x7f0000000000)='\f', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$netlink(r1, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) 2018/04/09 20:04:38 executing program 5: r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'ip6gretap0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x141040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r3, 0x8, 0x800, 0x7f, 0x9, 0x7666}, 0x14) r4 = fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1d6, 0x100000001, 0x80000001, 0x2, 0x80000001, 0x4, 0xffffffff, 0x7, 0xd068, 0x40}, 0xb) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b3fdc)) write(0xffffffffffffffff, &(0x7f0000000280)="3d3f3617629f042ee552c8c255c5c1797503f1345e83879d5f0c8d20f3e700c7c68e6fbd8b4e31e4f992ecc2395a9ed9f5a11f0be8e92e0313054600dd52e8280d3dc25afba96967b9d207056cf65755a4ab6066772edf56ab37d6c1eecb1f3e79de9014c72a7815f7f2a561", 0x6c) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) 2018/04/09 20:04:38 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:38 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x6, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:38 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0xf001) listen(r0, 0x4000000006) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x101, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r5 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r3, r4, r5}, 0xc) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:38 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005450, &(0x7f0000000000)) 2018/04/09 20:04:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3}}, {{@in=@multicast2=0xe0000002, 0x0, 0xff}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x3c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) [ 153.318770] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.318785] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 153.318793] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 153.318800] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.318812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 153.363861] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000005 2018/04/09 20:04:38 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r3 = getegid() fchown(r1, r2, r3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x4, r0}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x20000, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)="6370757365742e6d656d6f72795f70726573737572650039204193ec912bbc2d7878e2e8d708cafedf6c7e27f1c69ad037fd", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f00000001c0)=0xfffffffffffffffd) [ 153.435946] FAULT_INJECTION: forcing a failure. [ 153.435946] name failslab, interval 1, probability 0, space 0, times 0 [ 153.447290] CPU: 0 PID: 11675 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 153.454231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.463591] Call Trace: [ 153.466195] dump_stack+0x1b9/0x294 [ 153.469841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.475050] ? __save_stack_trace+0x7e/0xd0 [ 153.479404] should_fail.cold.4+0xa/0x1a [ 153.483485] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.488598] ? save_stack+0x43/0xd0 [ 153.492243] ? kasan_kmalloc+0xc4/0xe0 [ 153.496124] ? kmem_cache_alloc_trace+0x152/0x780 [ 153.500957] ? sctp_add_bind_addr+0xf9/0x4a0 [ 153.505355] ? sctp_copy_local_addr_list+0x499/0x690 [ 153.511402] ? sctp_copy_one_addr+0x5d/0x170 [ 153.515801] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 153.521495] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 153.526323] ? sctp_sendmsg+0x1888/0x1d70 [ 153.530457] ? inet_sendmsg+0x19f/0x690 [ 153.534420] ? sock_sendmsg+0xd5/0x120 [ 153.538409] ? ___sys_sendmsg+0x805/0x940 [ 153.542544] ? __sys_sendmsg+0x115/0x270 [ 153.546589] ? SyS_sendmsg+0x29/0x30 [ 153.550287] ? do_syscall_64+0x29e/0x9d0 [ 153.554338] ? graph_lock+0x170/0x170 [ 153.558127] ? print_usage_bug+0xc0/0xc0 [ 153.562174] ? graph_lock+0x170/0x170 [ 153.565960] ? find_held_lock+0x36/0x1c0 [ 153.570013] ? lock_downgrade+0x8e0/0x8e0 [ 153.574158] __should_failslab+0x124/0x180 [ 153.578383] should_failslab+0x9/0x14 [ 153.582170] kmem_cache_alloc_trace+0x4b/0x780 [ 153.586764] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.591944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.597473] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 153.601872] sctp_add_bind_addr+0xf9/0x4a0 [ 153.606095] ? sctp_bind_addr_free+0x20/0x20 [ 153.610489] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.615670] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.620847] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 153.625856] sctp_copy_local_addr_list+0x499/0x690 [ 153.630777] ? sctp_defaults_init+0xe50/0xe50 [ 153.635264] ? get_random_bytes+0x34/0x40 [ 153.639402] ? sctp_association_new+0x135/0x21e0 [ 153.644153] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 153.649331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.654858] sctp_copy_one_addr+0x5d/0x170 [ 153.659080] ? sctp_copy_one_addr+0x5d/0x170 [ 153.663477] sctp_bind_addr_copy+0x16b/0x45b [ 153.667879] ? sctp_copy_one_addr+0x170/0x170 [ 153.672363] ? sctp_autobind+0x16d/0x1f0 [ 153.676415] ? sctp_do_bind+0x5f0/0x5f0 [ 153.680376] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 153.685901] ? security_sctp_bind_connect+0x99/0xc0 [ 153.690907] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 153.695563] ? sctp_sendmsg+0x125e/0x1d70 [ 153.699704] ? sctp_autobind+0x1f0/0x1f0 [ 153.703753] ? __local_bh_enable_ip+0x161/0x230 [ 153.708406] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 153.713408] ? lock_sock_nested+0x9f/0x120 [ 153.717631] ? trace_hardirqs_on+0xd/0x10 [ 153.721768] ? __local_bh_enable_ip+0x161/0x230 [ 153.726424] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 153.731948] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 153.737136] sctp_sendmsg+0x1888/0x1d70 [ 153.741106] ? do_raw_spin_unlock+0x9e/0x2e0 [ 153.745515] ? sctp_id2assoc+0x3e0/0x3e0 [ 153.749568] ? _raw_spin_unlock_bh+0x30/0x40 [ 153.753969] ? __release_sock+0x3a0/0x3a0 [ 153.758112] inet_sendmsg+0x19f/0x690 [ 153.761903] ? copy_msghdr_from_user+0x3a0/0x560 [ 153.766646] ? ipip_gro_receive+0x100/0x100 [ 153.770953] ? move_addr_to_kernel.part.18+0x100/0x100 [ 153.776243] ? security_socket_sendmsg+0x94/0xc0 [ 153.780988] ? ipip_gro_receive+0x100/0x100 [ 153.785304] sock_sendmsg+0xd5/0x120 [ 153.789006] ___sys_sendmsg+0x805/0x940 [ 153.792979] ? copy_msghdr_from_user+0x560/0x560 [ 153.797729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 153.803256] ? proc_fail_nth_write+0x96/0x1f0 [ 153.807739] ? __fget_light+0x2ef/0x430 [ 153.811698] ? fget_raw+0x20/0x20 [ 153.815135] ? find_held_lock+0x36/0x1c0 [ 153.819191] ? kasan_check_write+0x14/0x20 [ 153.823423] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.828945] ? sockfd_lookup_light+0xc5/0x160 [ 153.833427] __sys_sendmsg+0x115/0x270 [ 153.837300] ? SyS_shutdown+0x30/0x30 [ 153.841087] ? __sb_end_write+0xac/0xe0 [ 153.845051] ? fput+0x130/0x1a0 [ 153.848317] ? ksys_write+0x1a6/0x250 [ 153.852105] ? ksys_ioctl+0x81/0xd0 [ 153.855722] SyS_sendmsg+0x29/0x30 [ 153.859250] ? __sys_sendmsg+0x270/0x270 [ 153.863298] do_syscall_64+0x29e/0x9d0 [ 153.867170] ? vmalloc_sync_all+0x30/0x30 [ 153.871304] ? _raw_spin_unlock_irq+0x27/0x70 [ 153.875785] ? finish_task_switch+0x1ca/0x820 [ 153.880276] ? syscall_return_slowpath+0x5c0/0x5c0 [ 153.885194] ? syscall_return_slowpath+0x30f/0x5c0 [ 153.890115] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 153.895470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.900300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.905469] RIP: 0033:0x455259 [ 153.908646] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.916340] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 153.924114] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 2018/04/09 20:04:39 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x5, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 153.931367] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.938620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 153.945869] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000006 2018/04/09 20:04:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @loopback={0x0, 0x1}, 0x4}}}, &(0x7f0000000040)=0x84) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x5) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080)="040100000009cb396da10000009054b932ce5b73832fdbaf", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 2018/04/09 20:04:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000000002, &(0x7f0000000000)) 2018/04/09 20:04:39 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f0000004800)=[{{&(0x7f0000004900)=@nfc={0x27, 0x1, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="d9abd3e3974b62f14a72b0fe1c004421d27f9e7efa72af66df3d29026ba4a8a203fe7e3763e61ecf917a542ee485932c43d87a98283b41662112222b3e60607434ab2bc2405a82841b4207a26dbe3fb38bba5739b086810aa297b459618ac7838e27455580e7598f5ae1c9fed5d208c7a527185e6ccd1a02ae6ee849c11f83712ac8ac4bfd1fc3ecb0145dcedf8ff997a48709f3a4a750254a4c5d0956b54a37408ef29c8f94be2b34ef557353a95560fc8f11e044fd69c41f5a0203b3df4b6457ddc01fda8e49ba5baab0a643458a5bc57ed173e274b32baefdcf6ff381428ea585a1d8e55bd64079b2cee8789874e0ae7c7874", 0xf4}, {&(0x7f00000002c0)="1700f0c01e878c3ddc9af91590b4fdb30536b927e7f33d3231942ae69ef30b4705930a8a3255854d7c2b500c9021b6b02cb6b677da0e45bc1459252e9d775a95ba3e09104c90613c4a46e142aaf023be4a968552c88a78d90e5a58a0f025687446c28308", 0x64}, {&(0x7f0000000380)="24144c19d2b60185afd9e305c18421c9a597c62ee399762940e6881156b37f3128571ec5ce7a7cae41302f7164376a2cc2027c80f956e742d1e73e4b2509ac4361d24b70fc00ea3229dfad6fb1bb962802320a965570306066f6070651b6921a5b1c859aea452cecf635ff4e4fea8a737af6122f29ba42e7939e4ed7e303c9497f3b4ec71c33a8d4873e", 0x8a}], 0x3, &(0x7f00000004c0)=[{0x98, 0x111, 0x0, "1c49fcab4b881fc6af140af8ace5460b24fa6307d08b103a620c3c348aa7a39957c2b45dd396ad336ecacbc6d2fc141d47fd09f61690c2cd7f9b26229ad7929f4814d7b18b4053645a0d4864935c148d86d5c0aa226aeea4c23e34c8dbf3a1400afe3f5157bda8dae6b7a894e3922b883c0e371d419a8eea9c20e8eab0950265f9bf8777e81a"}, {0x98, 0x101, 0x7, "8f087866a4cc6feb30d9f0c2d46fc402abba2a04381b1e2cd6a9f6f2805bb8cab6a175fd77a892c5cbd41bbcce508baf9470483baf4db27e6f879297f1599be95f18371a2d433a1c03de8ee15afb809ee6714d38a94948e9fb630c80b389aafecf718976094855482a5ca150f654b81bcb51903480e9dccfebf7699dd2d4385f0bf9ee"}, {0x70, 0x10f, 0xf48e, "edf8284dd02790a2e2b1872a187adf548e2b726e3816cbb14b4980c5231bf547ea73955a267e7fee6c8d3afacb809b4d879bad83d1514c75a0c6815f96ee50d4347220e23c4a996578f63866e6c19942122f854e839328f4834426ef"}, {0xd0, 0x13d, 0x4, "cbc26892ed3eb533f1c46a4c47a2dfbd7970bb3e14100709ff6049f65f4119e73c1d0360f101057c5b87419b3f22b9172cde84a7e75437e6413794a71618e8f6d8b3e943d2292c06a74b2892d9c2c9af0612316ba86382560831ce4a9e628462a92fe092ee403259a8241ff9bdfd42f81e22e8d033a2b3b21bd12d60fcc642dfb636c606cb814041e96a14a892813fbd689cd2e6821ab93c3a18bdf4072cbc639eaf24e661b01f390dc346a8e223f0de44e9674aa0fb08d4f5e7f9cbd5e32af1"}], 0x270}, 0x8}, {{&(0x7f0000002f40)=@nl=@kern={0x10}, 0x80, &(0x7f0000004980)=[{&(0x7f0000002fc0)="b778215be4585c45c5fbad", 0xb}, {&(0x7f00000030c0)="b88ca31f4bdf87c979deabca4bb1d23be3dd540485fb61f004a0d5198817ac657e1ba4b0bf8ebe07c06aab209ef05a58b58f1e431e9653991b97e86c7d8dafd1ef10f4958192eb9ea06ad5eb3f675fd5feaaac9fb1d1f8b33276240633d7dd8345cb29c6a1b9a32c684e1453eef487903190750a2403b872972f80", 0x7b}, {&(0x7f0000003180)="58601b52e5d105efa527fdfa30a8a2c05d7c2ade05e85e7b40d63de9cc917b0c32ab62c62e7b61f8ec25a76a40a7b095e81e176ed364a8d90df633f28c4a1a3cdbc1a18d81a1c6e619869dd58a548f0a0fdd45139361db67c3d67462aabb13b3d8279120de650026946534b0baba430df712de7c2df50ba066a32cff12f88526bad0626c8e263b7ee833ca980b0d6d180b8209a9c4dac07879eda70f6c77d643fa5d718a9baea76ea8e748313ed7c2c0f5fe747e9c4ce8d755e98e2a9bfe637316ed129670904cd6b014980981069eecfa20dead", 0xd4}], 0x3, &(0x7f00000033c0)=[{0x30, 0x118, 0x1, "39c203d50d71d064ba74b4867b954b46459bcd4796a25738daee"}], 0x30}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003440)="cce0b4d3bc0ecf308446717be84583cf258d3fd9fbb10791459b6f65a33200ea84e7cee7a5c2edd8294a9e5273caee6b31665e351003bf548c0c311001a0654576335bec35f5216e1310f1ce1f88a5fe8cfeb4cdd091b2ed0de76aa2e513a382ea5872c5c3f954307e036b93cb", 0x6d}, {&(0x7f00000035c0)="1d0a2bc7a426ebea9fff05818025fe989bf999b23d6b6e97e4707dd23a9b9fa2a0be9df97f086c0205e1391d9acab6d8ba65243c868cbe36ef119412fc8bedd535ac5ccadc59e58f8aee2446832afabc7b16c5a632cb3d6f2e8fc62ab8d9306fed", 0x61}, {&(0x7f0000004640)="02e06b60f218c9f11f5a5bdff261167bfe39335b9f1d691c89a2a4ef3cec0b6f093370d47029262e2a3a736db1e5c2d077796d96a082ccabb89ee3b8dedf6b4db082fc0ecb499d219cc5322506d22cb26a1e5daf61fafdef4678fe49858d5b3f25c78030307d2b", 0x67}], 0x3, &(0x7f0000004740)=[{0x20, 0x109, 0x2, "5079c7ac22073fee0f95da344827b7"}], 0x20, 0x8000}, 0x4}], 0x3, 0x800) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, r1) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003340)='mounts\x00') ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000004a00)={0x7b, 0x0, [0x1, 0x1, 0xc9, 0x9]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x7, 0x8) 2018/04/09 20:04:39 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000a004e23fbfffffffe8000000000000000000000000000aafe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000080000000a004e2305000000fe8000000000000000000000000000aa690a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21010001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000a004e239a92dc2900000000000000000000ffffac14141a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21e5000000fe80000000000000000000000000001302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20ffff0000ff010000000000000000000000000001ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200300000000000000000000000000ffffac14140a00080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000fe8000000000000000000000000000bb01000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2406000000ff010000000000000000000000000001ff01000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x490) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) listen(r0, 0x4000000006) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x1, 0x7, 0x81, 0x9, 0x2, 0x40, 0x3, 0x7, 0xfffffffffffffff7, 0x1, 0xc7d9, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x100000000, 0xd9, 0x5b1, 0x7fff, 0x10000}, 0x14) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000100)={'bridge0\x00', @ifru_hwaddr=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:39 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x3, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:39 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:39 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x151401, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x0, 0x8}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000001000)={@broadcast, @remote}, &(0x7f0000012000)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r2, r2, 0x0) prctl$setmm(0x23, 0x7, &(0x7f00008ee000/0x1000)=nil) [ 154.152141] IPVS: length: 160 != 24 [ 154.166313] FAULT_INJECTION: forcing a failure. [ 154.166313] name failslab, interval 1, probability 0, space 0, times 0 [ 154.177628] CPU: 0 PID: 11711 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 154.184560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.193924] Call Trace: [ 154.196533] dump_stack+0x1b9/0x294 [ 154.200185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 154.200655] IPVS: length: 160 != 24 [ 154.205385] ? __save_stack_trace+0x7e/0xd0 [ 154.205412] should_fail.cold.4+0xa/0x1a [ 154.205432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.205446] ? save_stack+0x43/0xd0 [ 154.205462] ? kasan_kmalloc+0xc4/0xe0 [ 154.230032] ? kmem_cache_alloc_trace+0x152/0x780 [ 154.234884] ? sctp_add_bind_addr+0xf9/0x4a0 [ 154.239307] ? sctp_copy_local_addr_list+0x499/0x690 [ 154.244424] ? sctp_copy_one_addr+0x5d/0x170 [ 154.248849] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 154.254573] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 154.259431] ? sctp_sendmsg+0x1888/0x1d70 [ 154.263591] ? inet_sendmsg+0x19f/0x690 [ 154.267576] ? sock_sendmsg+0xd5/0x120 [ 154.271475] ? ___sys_sendmsg+0x805/0x940 [ 154.275646] ? __sys_sendmsg+0x115/0x270 [ 154.279722] ? SyS_sendmsg+0x29/0x30 [ 154.283451] ? do_syscall_64+0x29e/0x9d0 [ 154.287526] ? graph_lock+0x170/0x170 [ 154.291342] ? print_usage_bug+0xc0/0xc0 [ 154.295414] ? graph_lock+0x170/0x170 [ 154.299233] ? find_held_lock+0x36/0x1c0 [ 154.303312] ? lock_downgrade+0x8e0/0x8e0 [ 154.307479] __should_failslab+0x124/0x180 [ 154.311722] should_failslab+0x9/0x14 [ 154.315527] kmem_cache_alloc_trace+0x4b/0x780 [ 154.320123] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 154.325326] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.330875] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 154.335213] sctp_add_bind_addr+0xf9/0x4a0 [ 154.339464] ? sctp_bind_addr_free+0x20/0x20 [ 154.343884] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 154.349090] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 154.354293] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 154.359331] sctp_copy_local_addr_list+0x499/0x690 [ 154.364711] ? sctp_defaults_init+0xe50/0xe50 [ 154.369224] ? get_random_bytes+0x34/0x40 [ 154.373389] ? sctp_association_new+0x135/0x21e0 [ 154.378169] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 154.383376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.388941] sctp_copy_one_addr+0x5d/0x170 [ 154.393197] ? sctp_copy_one_addr+0x5d/0x170 [ 154.397618] sctp_bind_addr_copy+0x16b/0x45b [ 154.402027] ? sctp_copy_one_addr+0x170/0x170 [ 154.406525] ? sctp_autobind+0x16d/0x1f0 [ 154.410574] ? sctp_do_bind+0x5f0/0x5f0 [ 154.414533] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 154.420061] ? security_sctp_bind_connect+0x99/0xc0 [ 154.425077] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 154.429731] ? sctp_sendmsg+0x125e/0x1d70 [ 154.433868] ? sctp_autobind+0x1f0/0x1f0 [ 154.437920] ? __local_bh_enable_ip+0x161/0x230 [ 154.442571] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 154.447574] ? lock_sock_nested+0x9f/0x120 [ 154.451790] ? trace_hardirqs_on+0xd/0x10 [ 154.455919] ? __local_bh_enable_ip+0x161/0x230 [ 154.460587] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 154.466124] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 154.471300] sctp_sendmsg+0x1888/0x1d70 [ 154.475259] ? do_raw_spin_unlock+0x9e/0x2e0 [ 154.479655] ? sctp_id2assoc+0x3e0/0x3e0 [ 154.483705] ? _raw_spin_unlock_bh+0x30/0x40 [ 154.488107] ? __release_sock+0x3a0/0x3a0 [ 154.492247] inet_sendmsg+0x19f/0x690 [ 154.496045] ? copy_msghdr_from_user+0x3a0/0x560 [ 154.500788] ? ipip_gro_receive+0x100/0x100 [ 154.505098] ? move_addr_to_kernel.part.18+0x100/0x100 [ 154.510375] ? security_socket_sendmsg+0x94/0xc0 [ 154.515124] ? ipip_gro_receive+0x100/0x100 [ 154.519437] sock_sendmsg+0xd5/0x120 [ 154.523137] ___sys_sendmsg+0x805/0x940 [ 154.527097] ? copy_msghdr_from_user+0x560/0x560 [ 154.531846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 154.537370] ? proc_fail_nth_write+0x96/0x1f0 [ 154.541861] ? __fget_light+0x2ef/0x430 [ 154.545826] ? fget_raw+0x20/0x20 [ 154.549258] ? find_held_lock+0x36/0x1c0 [ 154.553304] ? kasan_check_write+0x14/0x20 [ 154.557529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.563061] ? sockfd_lookup_light+0xc5/0x160 [ 154.567547] __sys_sendmsg+0x115/0x270 [ 154.571422] ? SyS_shutdown+0x30/0x30 [ 154.575213] ? __sb_end_write+0xac/0xe0 [ 154.579172] ? fput+0x130/0x1a0 [ 154.582439] ? ksys_write+0x1a6/0x250 [ 154.586226] ? ksys_ioctl+0x81/0xd0 [ 154.589856] SyS_sendmsg+0x29/0x30 [ 154.593395] ? __sys_sendmsg+0x270/0x270 [ 154.597446] do_syscall_64+0x29e/0x9d0 [ 154.601328] ? vmalloc_sync_all+0x30/0x30 [ 154.605461] ? _raw_spin_unlock_irq+0x27/0x70 [ 154.609941] ? finish_task_switch+0x1ca/0x820 [ 154.614426] ? syscall_return_slowpath+0x5c0/0x5c0 [ 154.619350] ? syscall_return_slowpath+0x30f/0x5c0 [ 154.624279] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 154.629636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.634468] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 154.639646] RIP: 0033:0x455259 [ 154.642845] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.650554] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 154.657806] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 154.665078] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.672335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 154.679590] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000007 2018/04/09 20:04:40 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045012, &(0x7f0000000000)) 2018/04/09 20:04:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0x4d, &(0x7f0000000000), 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f00000000c0)=0x78) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/09 20:04:40 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x7, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:40 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:40 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000002c0)=0x4) uname(&(0x7f0000000000)=""/39) listen(r0, 0x4000000006) sendto$inet(r3, &(0x7f00000000c0)="38475d2baae321", 0x7, 0x20000000, &(0x7f0000000280)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x45) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) timer_gettime(0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r5, 0x6}, 0x8) timerfd_gettime(r2, &(0x7f0000000080)) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r3, 0x0) 2018/04/09 20:04:40 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2008101}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf251100000008000500070000000800050000000000f0fff8ff03de8a4f9aaccec85a8fad1b4ff78b65326e0410d12664c4397583e5401f1e000000000000000052a2ffb4a39ac75a1b32444fb78688ee3904d89168da65a958924bf38845c45c6f03fbb6317de0386fcac2d5d7eb7cc67121f6dff9c262d258fcd197ca3a0f9805a24590214473197f543aae7b4c7ed4b413db7571c4e8b3901e6fe0bd6e67e9d138bb36"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x40001) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00000002c0)) r3 = socket(0x10, 0x800, 0x80000000) init_module(&(0x7f0000000340)='keyringtrusted\x00', 0xf, &(0x7f0000000380)='}security&xmd5sum-bdev\x00') ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000006c0)={0x1ff, 0x4, 0x1, 0x4, 0x6}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(r3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = accept$ax25(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000640)={0x3, 0x0, 0x10001, 0x5324}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000680)={0x7f, r5}) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[0x81]}) accept4$ax25(r3, &(0x7f0000000000), &(0x7f0000000200)=0xf, 0x80000) sendto$ax25(r3, &(0x7f0000000240)="41a710785605029d4287cb2c7ff45dfc935e7f17073435076e8d02a69e89c5448002a0b27a36017c80d03a7400a07a7afc7fb22f3813e677841224a0bb7cfd45687329fb0ffbe9b394f0be98857db7b90a0e9f5d082f5ea2910842a471c89758654d4ebcb38597cceeffc1e8d680a8646f94c6df0054d10784e4848e66832cab28f2ffd4b8605583d8fc602c09a0cf8852118baabf7fab14a58f3feefc26c03a1715c21ce7de35309e2b4f2dba200908330557abc99a6992a1dffb04ac042ad40451940df4a3d5fc03b1d4a6e0a78756e0bf11", 0xd3, 0x4000, &(0x7f00000001c0)={0x3, {"5a043f806aa3b9"}, 0x8f}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', r6}) shutdown(r3, 0x0) 2018/04/09 20:04:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) [ 155.173663] FAULT_INJECTION: forcing a failure. [ 155.173663] name failslab, interval 1, probability 0, space 0, times 0 [ 155.185062] CPU: 1 PID: 11738 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 155.192000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.201355] Call Trace: [ 155.203953] dump_stack+0x1b9/0x294 [ 155.207590] ? dump_stack_print_info.cold.2+0x52/0x52 [ 155.212783] ? __save_stack_trace+0x7e/0xd0 [ 155.217119] should_fail.cold.4+0xa/0x1a [ 155.221172] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.226259] ? save_stack+0x43/0xd0 [ 155.229870] ? kasan_kmalloc+0xc4/0xe0 [ 155.233740] ? kmem_cache_alloc_trace+0x152/0x780 [ 155.238570] ? sctp_add_bind_addr+0xf9/0x4a0 [ 155.242963] ? sctp_copy_local_addr_list+0x499/0x690 [ 155.248049] ? sctp_copy_one_addr+0x5d/0x170 [ 155.252443] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 155.258141] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 155.262970] ? sctp_sendmsg+0x1888/0x1d70 [ 155.267100] ? inet_sendmsg+0x19f/0x690 [ 155.271059] ? sock_sendmsg+0xd5/0x120 [ 155.274932] ? ___sys_sendmsg+0x805/0x940 [ 155.279065] ? __sys_sendmsg+0x115/0x270 [ 155.283111] ? SyS_sendmsg+0x29/0x30 [ 155.286808] ? do_syscall_64+0x29e/0x9d0 [ 155.290855] ? graph_lock+0x170/0x170 [ 155.294643] ? print_usage_bug+0xc0/0xc0 [ 155.298691] ? graph_lock+0x170/0x170 [ 155.302485] ? find_held_lock+0x36/0x1c0 [ 155.306537] ? lock_downgrade+0x8e0/0x8e0 [ 155.310677] __should_failslab+0x124/0x180 [ 155.314898] should_failslab+0x9/0x14 [ 155.318682] kmem_cache_alloc_trace+0x4b/0x780 [ 155.323255] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 155.328433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.333961] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 155.338274] sctp_add_bind_addr+0xf9/0x4a0 [ 155.343015] ? sctp_bind_addr_free+0x20/0x20 [ 155.347416] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 155.352590] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 155.357765] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 155.362769] sctp_copy_local_addr_list+0x499/0x690 [ 155.367685] ? sctp_defaults_init+0xe50/0xe50 [ 155.372168] ? get_random_bytes+0x34/0x40 [ 155.376305] ? sctp_association_new+0x135/0x21e0 [ 155.381054] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 155.386233] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.391760] sctp_copy_one_addr+0x5d/0x170 [ 155.395982] ? sctp_copy_one_addr+0x5d/0x170 [ 155.400381] sctp_bind_addr_copy+0x16b/0x45b [ 155.404781] ? sctp_copy_one_addr+0x170/0x170 [ 155.409262] ? sctp_autobind+0x16d/0x1f0 [ 155.413309] ? sctp_do_bind+0x5f0/0x5f0 [ 155.417272] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 155.422794] ? security_sctp_bind_connect+0x99/0xc0 [ 155.427797] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 155.432448] ? sctp_sendmsg+0x125e/0x1d70 [ 155.436584] ? sctp_autobind+0x1f0/0x1f0 [ 155.440636] ? __local_bh_enable_ip+0x161/0x230 [ 155.445289] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 155.450290] ? lock_sock_nested+0x9f/0x120 [ 155.454510] ? trace_hardirqs_on+0xd/0x10 [ 155.458645] ? __local_bh_enable_ip+0x161/0x230 [ 155.463299] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 155.468822] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 155.474000] sctp_sendmsg+0x1888/0x1d70 [ 155.477968] ? do_raw_spin_unlock+0x9e/0x2e0 [ 155.482366] ? sctp_id2assoc+0x3e0/0x3e0 [ 155.486429] ? _raw_spin_unlock_bh+0x30/0x40 [ 155.490824] ? __release_sock+0x3a0/0x3a0 [ 155.494970] inet_sendmsg+0x19f/0x690 [ 155.498768] ? copy_msghdr_from_user+0x3a0/0x560 [ 155.503507] ? ipip_gro_receive+0x100/0x100 [ 155.507813] ? move_addr_to_kernel.part.18+0x100/0x100 [ 155.513087] ? security_socket_sendmsg+0x94/0xc0 [ 155.517830] ? ipip_gro_receive+0x100/0x100 [ 155.522135] sock_sendmsg+0xd5/0x120 [ 155.525832] ___sys_sendmsg+0x805/0x940 [ 155.529793] ? copy_msghdr_from_user+0x560/0x560 [ 155.534536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 155.540057] ? proc_fail_nth_write+0x96/0x1f0 [ 155.544538] ? __fget_light+0x2ef/0x430 [ 155.548493] ? fget_raw+0x20/0x20 [ 155.551929] ? find_held_lock+0x36/0x1c0 [ 155.555975] ? kasan_check_write+0x14/0x20 [ 155.560202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.565721] ? sockfd_lookup_light+0xc5/0x160 [ 155.570200] __sys_sendmsg+0x115/0x270 [ 155.574075] ? SyS_shutdown+0x30/0x30 [ 155.577858] ? __sb_end_write+0xac/0xe0 [ 155.581815] ? fput+0x130/0x1a0 [ 155.585078] ? ksys_write+0x1a6/0x250 [ 155.588868] ? ksys_ioctl+0x81/0xd0 [ 155.592479] SyS_sendmsg+0x29/0x30 [ 155.596006] ? __sys_sendmsg+0x270/0x270 [ 155.600056] do_syscall_64+0x29e/0x9d0 [ 155.603927] ? vmalloc_sync_all+0x30/0x30 [ 155.608057] ? _raw_spin_unlock_irq+0x27/0x70 [ 155.612534] ? finish_task_switch+0x1ca/0x820 [ 155.617018] ? syscall_return_slowpath+0x5c0/0x5c0 [ 155.621932] ? syscall_return_slowpath+0x30f/0x5c0 [ 155.626848] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 155.632197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.637031] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 155.642204] RIP: 0033:0x455259 [ 155.645376] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.653065] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 155.660316] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 155.667566] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/09 20:04:41 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x200000, 0x8) rt_sigpending(&(0x7f0000000000), 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44800) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x8) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000005000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/27) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r2, r3, r4}, 0xc) 2018/04/09 20:04:41 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xf, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 155.674816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 155.682080] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000008 2018/04/09 20:04:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001dc0)="85fdf99afab2181424cf56aa373ecc766866645d6dcd03c9711398925d", 0x1d}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1, &(0x7f0000000400)=""/203, 0xcb}, 0x0) 2018/04/09 20:04:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045035, &(0x7f0000000000)) 2018/04/09 20:04:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:41 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) r2 = accept4$ax25(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) accept$ax25(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) rt_sigreturn() 2018/04/09 20:04:41 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaaaa, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:41 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ppp\x00', 0x14000, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"0e57b47ea6b6769bfbb40bccf7e264930aa6178650c78d19da52fe6d3bf466c04c1c4a94bf2798706cb63e225217d542e10fdedc68e923081d9dbb4c9da7605f566d8d2777c0405774a89e56ca348e48f36445de50e8ce3bd2d55978b5157796e4d2ff3310e074e9760a17365effc4688665bd0ed58d0db48b081135c7543d2fe9a8fbcf761eebc36370f3f5821f514ce1e354b8592061c7e3b75812fb029b258568d22f8646e174dbe4a757a7c61d637eced9faf0929e7d6cb4d836e74690ed11922479c2a0d964d9391ec40cda0eee03ffef8034fa7d7fb5fe14451601d57954906380a78f30299b47d29024ed2310beb98e6d1ecbc535f1d7c6b9e6a4da38cae2ed0c2cd8d8a7f14bc8ed4d9bc6734af49a53aded8655418c5d5a8e5a73d4d85d43193a77a0685dac139f42811f44b7e1b9191c2e140f73c694a76fe12c1b724c95a0db677cd08300284b1ad3241e52e5984f3a0ce58fb61f573fdceb73ee34a0e0f639d9886b87754be5768a64e9fb09918ecd15628f2ad322b530f0b05aafcfb151c2b5378661901eaf8d3b25a1b042d6d33ff37202be0b7a696ba4e2a0e303d2c31743eccd8b47d0672dd67a57a24b3bd37b1c1531f4bd5b1dc41b58ef0794e6acb3ed637d53ec580f75ca9bec08c0ad1a929cfac41526404caab80f2def8b7d6a8d0c78ff2265fd6af7a12088ae24b4d6d3d0bbe5147da580abd986294ec78005aaaf50221f7ad8ba903910bd1ef5ad922c6c24541bc89a4cfdbdd14778fdfb4f53065c501bbb96d8768fb99f5eb108191b9cdf2cb9373da795e4e72327013a0afb4b671bc131006027dd5bcd32e436ad66f5e98f9d774c0cc8bfbf327506643f05b0a8e043c2ec4e21407f7e954c2731bdc6f363be86e386d9dc4ab105469d51b56586ce4569f575cd0632926a8eac1a3be6bd54241cddbc56ed9a7c0e3d694d937f4ae7ab5d61449df9edd50428e123ace57fbea2e4bf857da46d5e2aa27f4cb3ef068c3c0cf4ba1d8984de54c4a3bb3ac0a1ef8664211f63b3f98495038f24387d605e34091cc26bfc05f0114344d78beed45bb77a78f96c92c7a5f181533a1db44596c9bcd44d47c83c05f728c17197492dbdd7f8b1bf012126224f426e6f3206d0fd8e398da7260cacd546687d3049d186124f3000acd94b090d2fc232b0a94cc67a738bc76195b9f5a6dcb66f58d5c08159f387eae605021626af1ff163863e9cdbdb66659aa78f330a270f59112c8c06e96da01d7aa8951457dcd96661a85d2f5010d1252507f8200292bf60ba7fc975f994da116556fa21a4de002f8781b7b741544d68f7907a0bec61a78ca459790f0107029c3e2f11e82175e51e1afd35510734edca3610e28e6868bc304d62157f315f5ec225aacde433ae0616657171470380a514ae5b8854a9c66bd6ce17ab801f69af7287674d9de8"}) r4 = dup2(r0, r3) dup3(r0, r1, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000600)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) 2018/04/09 20:04:41 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x13, 0x40000102, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x35) connect$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) sendmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)}}], 0x2, 0x0) [ 155.991647] FAULT_INJECTION: forcing a failure. [ 155.991647] name failslab, interval 1, probability 0, space 0, times 0 [ 156.003009] CPU: 1 PID: 11791 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 156.009940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.019284] Call Trace: [ 156.021870] dump_stack+0x1b9/0x294 [ 156.025486] ? dump_stack_print_info.cold.2+0x52/0x52 [ 156.030663] ? __save_stack_trace+0x7e/0xd0 [ 156.034979] should_fail.cold.4+0xa/0x1a [ 156.039031] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.044121] ? save_stack+0x43/0xd0 [ 156.047730] ? kasan_kmalloc+0xc4/0xe0 [ 156.051599] ? kmem_cache_alloc_trace+0x152/0x780 [ 156.056428] ? sctp_add_bind_addr+0xf9/0x4a0 [ 156.060823] ? sctp_copy_local_addr_list+0x499/0x690 [ 156.065911] ? sctp_copy_one_addr+0x5d/0x170 [ 156.070304] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 156.075999] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 156.080831] ? sctp_sendmsg+0x1888/0x1d70 [ 156.084964] ? inet_sendmsg+0x19f/0x690 [ 156.088924] ? sock_sendmsg+0xd5/0x120 [ 156.092796] ? ___sys_sendmsg+0x805/0x940 [ 156.096932] ? __sys_sendmsg+0x115/0x270 [ 156.100983] ? SyS_sendmsg+0x29/0x30 [ 156.104685] ? do_syscall_64+0x29e/0x9d0 [ 156.108734] ? graph_lock+0x170/0x170 [ 156.112523] ? print_usage_bug+0xc0/0xc0 [ 156.116573] ? graph_lock+0x170/0x170 [ 156.120360] ? find_held_lock+0x36/0x1c0 [ 156.124417] ? lock_downgrade+0x8e0/0x8e0 [ 156.128556] __should_failslab+0x124/0x180 [ 156.132778] should_failslab+0x9/0x14 [ 156.136565] kmem_cache_alloc_trace+0x4b/0x780 [ 156.141135] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.146318] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 156.151334] sctp_add_bind_addr+0xf9/0x4a0 [ 156.155566] ? sctp_bind_addr_free+0x20/0x20 [ 156.159964] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.165139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.170661] ? sctp_v4_scope+0x19b/0x1c0 [ 156.174708] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.179884] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 156.184889] sctp_copy_local_addr_list+0x499/0x690 [ 156.189808] ? sctp_defaults_init+0xe50/0xe50 [ 156.194290] ? get_random_bytes+0x34/0x40 [ 156.198424] ? sctp_association_new+0x135/0x21e0 [ 156.203166] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.208345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.213871] sctp_copy_one_addr+0x5d/0x170 [ 156.218092] ? sctp_copy_one_addr+0x5d/0x170 [ 156.222486] sctp_bind_addr_copy+0x16b/0x45b [ 156.226882] ? sctp_copy_one_addr+0x170/0x170 [ 156.231362] ? sctp_autobind+0x16d/0x1f0 [ 156.235410] ? sctp_do_bind+0x5f0/0x5f0 [ 156.239367] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 156.244887] ? security_sctp_bind_connect+0x99/0xc0 [ 156.249891] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 156.254545] ? sctp_sendmsg+0x125e/0x1d70 [ 156.258685] ? sctp_autobind+0x1f0/0x1f0 [ 156.262734] ? __local_bh_enable_ip+0x161/0x230 [ 156.267391] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 156.272389] ? lock_sock_nested+0x9f/0x120 [ 156.276604] ? trace_hardirqs_on+0xd/0x10 [ 156.280736] ? __local_bh_enable_ip+0x161/0x230 [ 156.285388] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 156.290911] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 156.296090] sctp_sendmsg+0x1888/0x1d70 [ 156.300049] ? do_raw_spin_unlock+0x9e/0x2e0 [ 156.304447] ? sctp_id2assoc+0x3e0/0x3e0 [ 156.308501] ? _raw_spin_unlock_bh+0x30/0x40 [ 156.312895] ? __release_sock+0x3a0/0x3a0 [ 156.317039] inet_sendmsg+0x19f/0x690 [ 156.320830] ? copy_msghdr_from_user+0x3a0/0x560 [ 156.325574] ? ipip_gro_receive+0x100/0x100 [ 156.329895] ? move_addr_to_kernel.part.18+0x100/0x100 [ 156.335170] ? security_socket_sendmsg+0x94/0xc0 [ 156.339912] ? ipip_gro_receive+0x100/0x100 [ 156.344220] sock_sendmsg+0xd5/0x120 [ 156.347925] ___sys_sendmsg+0x805/0x940 [ 156.351890] ? copy_msghdr_from_user+0x560/0x560 [ 156.356635] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 156.362157] ? proc_fail_nth_write+0x96/0x1f0 [ 156.366642] ? __fget_light+0x2ef/0x430 [ 156.370605] ? fget_raw+0x20/0x20 [ 156.374042] ? find_held_lock+0x36/0x1c0 [ 156.378089] ? kasan_check_write+0x14/0x20 [ 156.382322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.387846] ? sockfd_lookup_light+0xc5/0x160 [ 156.392333] __sys_sendmsg+0x115/0x270 [ 156.396207] ? SyS_shutdown+0x30/0x30 [ 156.399994] ? __sb_end_write+0xac/0xe0 [ 156.403960] ? fput+0x130/0x1a0 [ 156.407225] ? ksys_write+0x1a6/0x250 [ 156.411020] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 156.415849] ? ksys_ioctl+0x81/0xd0 [ 156.419464] SyS_sendmsg+0x29/0x30 [ 156.422987] ? __sys_sendmsg+0x270/0x270 [ 156.427037] do_syscall_64+0x29e/0x9d0 [ 156.430910] ? vmalloc_sync_all+0x30/0x30 [ 156.435043] ? _raw_spin_unlock_irq+0x27/0x70 [ 156.439524] ? finish_task_switch+0x1ca/0x820 [ 156.444003] ? syscall_return_slowpath+0x5c0/0x5c0 [ 156.448922] ? syscall_return_slowpath+0x30f/0x5c0 [ 156.453840] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 156.459189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.464034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.469206] RIP: 0033:0x455259 [ 156.472375] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.480066] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 156.487323] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 156.494572] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.501823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 156.509075] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000009 2018/04/09 20:04:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x800000400000000a) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:42 executing program 2: socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500000500000006000000718b2314aaac14142b0000000000089078"], &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x168) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3e6e0acca4245e172b6ba27312000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005815766a5049f8c4f112651f38326cb9586e5b16aeeeb11ad88407790e96226e2e1d67b3fbd71dee0b595a2c4f1744fc0c9d0f46f36c1354254e6db429235b1922bdd8f72a057a43b4b87ed2cdfa548b6f2c3e814d989d21fdb19645c3194564764406a998e602"]) 2018/04/09 20:04:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005015, &(0x7f0000000000)) 2018/04/09 20:04:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:42 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x78000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9c, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, 0x8, 0x9, 0x4, "52565d12b0ef0fef8bb8d7102bd55b77baed30e3fed9c13b5fe764b772feae6a420d10ddbbc7be6823d8aa376d43fe15609d85c87edd840962da59b60ac424add238b1c3b914e6f0595976bc2ea89733"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x407, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) accept$inet(r0, &(0x7f0000000080)={0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) 2018/04/09 20:04:42 executing program 0 (fault-call:1 fault-nth:10): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 156.621585] FAULT_INJECTION: forcing a failure. [ 156.621585] name failslab, interval 1, probability 0, space 0, times 0 [ 156.632973] CPU: 0 PID: 11812 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 156.639916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.649275] Call Trace: [ 156.651879] dump_stack+0x1b9/0x294 [ 156.655516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 156.660718] ? __save_stack_trace+0x7e/0xd0 [ 156.665061] should_fail.cold.4+0xa/0x1a [ 156.669135] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.674244] ? zap_class+0x720/0x720 [ 156.677949] ? sctp_copy_local_addr_list+0x499/0x690 [ 156.683042] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 156.688742] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 156.693571] ? sctp_sendmsg+0x1888/0x1d70 [ 156.697705] ? inet_sendmsg+0x19f/0x690 [ 156.701663] ? sock_sendmsg+0xd5/0x120 [ 156.705536] ? ___sys_sendmsg+0x805/0x940 [ 156.709678] ? __sys_sendmsg+0x115/0x270 [ 156.713725] ? SyS_sendmsg+0x29/0x30 [ 156.717426] ? do_syscall_64+0x29e/0x9d0 [ 156.721478] ? graph_lock+0x170/0x170 [ 156.725268] ? print_usage_bug+0xc0/0xc0 [ 156.729318] ? graph_lock+0x170/0x170 [ 156.733108] ? find_held_lock+0x36/0x1c0 [ 156.737166] ? lock_downgrade+0x8e0/0x8e0 [ 156.741306] __should_failslab+0x124/0x180 [ 156.745529] should_failslab+0x9/0x14 [ 156.749318] kmem_cache_alloc_trace+0x4b/0x780 [ 156.753894] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.759075] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.764602] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 156.768920] sctp_add_bind_addr+0xf9/0x4a0 [ 156.773148] ? sctp_bind_addr_free+0x20/0x20 [ 156.777548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.782734] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.787917] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 156.792932] sctp_copy_local_addr_list+0x499/0x690 [ 156.797856] ? sctp_defaults_init+0xe50/0xe50 [ 156.802344] ? get_random_bytes+0x34/0x40 [ 156.806481] ? sctp_association_new+0x135/0x21e0 [ 156.811235] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 156.816414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.821942] sctp_copy_one_addr+0x5d/0x170 [ 156.826164] ? sctp_copy_one_addr+0x5d/0x170 [ 156.830566] sctp_bind_addr_copy+0x16b/0x45b [ 156.834968] ? sctp_copy_one_addr+0x170/0x170 [ 156.839451] ? sctp_autobind+0x16d/0x1f0 [ 156.843500] ? zap_class+0x720/0x720 [ 156.847201] ? sctp_do_bind+0x5f0/0x5f0 [ 156.851167] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 156.856694] ? security_sctp_bind_connect+0x99/0xc0 [ 156.861704] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 156.866364] ? sctp_sendmsg+0x125e/0x1d70 [ 156.870509] ? sctp_autobind+0x1f0/0x1f0 [ 156.874562] ? __local_bh_enable_ip+0x161/0x230 [ 156.879219] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 156.884221] ? lock_sock_nested+0x9f/0x120 [ 156.888443] ? trace_hardirqs_on+0xd/0x10 [ 156.892579] ? __local_bh_enable_ip+0x161/0x230 [ 156.897238] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 156.902768] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 156.907948] sctp_sendmsg+0x1888/0x1d70 [ 156.911912] ? do_raw_spin_unlock+0x9e/0x2e0 [ 156.916313] ? sctp_id2assoc+0x3e0/0x3e0 [ 156.920363] ? _raw_spin_unlock_bh+0x30/0x40 [ 156.924760] ? __release_sock+0x3a0/0x3a0 [ 156.928920] inet_sendmsg+0x19f/0x690 [ 156.932708] ? copy_msghdr_from_user+0x3a0/0x560 [ 156.937451] ? ipip_gro_receive+0x100/0x100 [ 156.941757] ? move_addr_to_kernel.part.18+0x100/0x100 [ 156.947036] ? security_socket_sendmsg+0x94/0xc0 [ 156.951786] ? ipip_gro_receive+0x100/0x100 [ 156.956094] sock_sendmsg+0xd5/0x120 [ 156.959798] ___sys_sendmsg+0x805/0x940 [ 156.963769] ? copy_msghdr_from_user+0x560/0x560 [ 156.968521] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 156.974048] ? proc_fail_nth_write+0x96/0x1f0 [ 156.978532] ? __fget_light+0x2ef/0x430 [ 156.982496] ? fget_raw+0x20/0x20 [ 156.985950] ? find_held_lock+0x36/0x1c0 [ 156.990002] ? kasan_check_write+0x14/0x20 [ 156.994243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.999770] ? sockfd_lookup_light+0xc5/0x160 [ 157.004254] __sys_sendmsg+0x115/0x270 [ 157.008130] ? SyS_shutdown+0x30/0x30 [ 157.011932] ? __sb_end_write+0xac/0xe0 [ 157.015915] ? fput+0x130/0x1a0 [ 157.019187] ? ksys_write+0x1a6/0x250 [ 157.022983] ? ksys_ioctl+0x81/0xd0 [ 157.026602] SyS_sendmsg+0x29/0x30 [ 157.030143] ? __sys_sendmsg+0x270/0x270 [ 157.034196] do_syscall_64+0x29e/0x9d0 [ 157.038072] ? vmalloc_sync_all+0x30/0x30 [ 157.042209] ? _raw_spin_unlock_irq+0x27/0x70 [ 157.046693] ? finish_task_switch+0x1ca/0x820 [ 157.051180] ? syscall_return_slowpath+0x5c0/0x5c0 [ 157.056099] ? syscall_return_slowpath+0x30f/0x5c0 [ 157.061028] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 157.066386] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/09 20:04:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="669f33a9c579cd13cee65276ffc6d469545b6eb45dbe0e04d335", 0x1a, 0xfffffffffffffffb) r3 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="4fb19b282881f293f39df4ef9ebffd732eb86afeb0c75b2a5cfbf5b402c62f95794d3040efc960cb7d7f5058998344b81f781965c4686171b3ad0be69559d8f8e247dbfe106eba9f05229a1af1e59877515a5cc2db65eae2bfb0368f3943e430f380b97aa4a342957f88a1", 0x6b, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) 2018/04/09 20:04:42 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x11, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 157.071222] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 157.076397] RIP: 0033:0x455259 [ 157.079571] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.087266] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 157.094520] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 157.101775] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 157.109035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 157.116291] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000a 2018/04/09 20:04:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000000000)) 2018/04/09 20:04:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000040)=0x4, 0x78c4, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/anycast6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) preadv(r0, &(0x7f00006c6000)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1, 0x62) 2018/04/09 20:04:42 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1600000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000002240), &(0x7f0000002280)=0x4) r1 = fcntl$dupfd(r0, 0x200000000000406, r0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=""/230, 0xe6}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f00000001c0)=""/174, 0xae}], 0x4, 0x0, 0x0, 0x84}, 0x20000000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) splice(r2, &(0x7f0000000300), r1, &(0x7f0000000340), 0x9, 0x1) listen(r0, 0x4000000006) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) r6 = gettid() sendmsg$nl_route(r1, &(0x7f0000002140)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x108010}, 0xc, &(0x7f0000002100)={&(0x7f0000000740)=@getlink={0x19b0, 0x12, 0xc, 0x8, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x0, 0x40000}, [@IFLA_PORT_SELF={0x13e4, 0x19, [@typed={0x8, 0x31, @fd=r1}, @nested={0x10, 0x13, [@typed={0x4, 0xb}, @typed={0x8, 0x5a, @uid=r4}]}, @typed={0x8, 0x4345, @str='\x00'}, @generic="c61e0a4a58", @generic="6244805bcf5ce3a33de329b33d6035d368f472e07d1f5145a8e9359f6e49c2efdc7981bc34b08ce45e83ea7565c85825e49a3da6e88887029cef1feb74ffc5462f71a7ccf1ce375d750ddbb85f650e3c56cc90401445a070b1f1b906935e32979dca622c4990d471df105876157fc723413f89ff88a28eb282e9eccd31ce6eb8012858e356e76486d156a14a", @nested={0x1114, 0x49, [@typed={0x14, 0x3f, @ipv6}, @typed={0x8, 0x5, @ipv4=@broadcast=0xffffffff}, @generic="f2c71acb55ebfb66974d2632d3dc61ffcd3885dfed95a653a0e838b51f46841885923f505326f939a531c5dbf134ae7be3467c84bf49ff1ec192e27ad5b43753017077e5b3b0684bf3e3e7f6b588fbe949f72db54194b80a6276968ffa7b20d07aee0ce3bda23449bc9bda63f3957dadf8f57faeedceb9da41eed3fe518e7f8e77662c0acadb8af077d4b5af7e7875d00edc19b382a675a390cb4738382b2862cfa4f345ffaa164a", @generic="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", @generic="b0d748978ccca60716911088315e00b6da6ffd53fb4c1e02036b995edd3cfaf8c12d90b4db03244156c2773d938d5a75804e1ab83cccd031acacbb8d76d501f1725a6f262fec3f", @typed={0x4, 0x64}]}, @nested={0x1b4, 0x4d, [@typed={0x8, 0x26, @uid=r5}, @typed={0x4, 0x12}, @typed={0xbc, 0x4c, @binary="130a7871dc8fa046530695ef87cfb772031afd84816ab05d4bbbc55fe0cd2f1ce36a5f9fa547af73b0971eea361ef9bae185592c3fe61bb325edb1a1cd263fb72799ea7dece42e242c501ce9d5f5c961455482e2d15574518f801d4c63308b1e4ef6532a9aff2922a729e5da6e26b1713b1dbe9e29c59a63dfdec0806e19aac79de599e6c5693538aa96589ff302372bbd0c9023fc792caff9ef04e018f069293c18f37974e9cc0bfe12159dbf1912e66f61bcec845f1743"}, @typed={0x8, 0x96, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @generic="c7e15205959af27fc50f35ac79f474e456670c1d96efc82d480a2f721fb5c8f9c31c2c3916b3c218835b53b3dc134b3bf89fcd7a2aa71751526f5d0847a6142b8235eca2f68f469f0a9100a2c564dedff514e860ac58b3627fe5d5767ed102bf48d3a70d58b103257232e748cefdf356d390d6971e4b3e2697dc8a8ae3e8f7cd052620bf35533a1f25293661ebe5040adafca351bf4f269024f898c84c99af00c0b94228881473d90e392d1386c0303c745ec2b63490a2e5c09dc13ed67cd2ce7b17fbe28312f4b60eecb5c7b1e9", @typed={0x8, 0x1, @pid=r6}, @typed={0x8, 0x20, @ipv4}]}, @generic="c85bc92245f57d62178edfe026e6d807cded206c39706644e97dcc86d5a021531e62a60f78dfd23ba10911d597660a7aab4e5354ba0869b4f2cb98e2680cae1aae892654d0073d3bf418dafa98e7403688cb8a12580946fad9c3fd0efdd4de49988785f25c1c8f"]}, @IFLA_MAP={0x24, 0xe, {0x81, 0x1f, 0xa6, 0x8, 0x5, 0x20}}, @IFLA_PHYS_PORT_ID={0x14, 0x22, "241492cbd4bcd9aac6769a04ded9"}, @IFLA_VFINFO_LIST={0x574, 0x16, [{0x174, 0x1, [@typed={0x8, 0x2b, @ipv4=@broadcast=0xffffffff}, @nested={0x20, 0x5a, [@typed={0x8, 0x6a, @u32=0xffffffffffff0001}, @typed={0x8, 0x32, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @typed={0x4, 0x56}, @typed={0x8, 0x24, @ipv4=@rand_addr=0xfffffffffffffffa}]}, @generic="75d3a5ee314cd393d8d1af621ad38419a65e85b7e091d4f90b2d91c2dbd84136817b9381123c0040547a4405c598873c06cb34d656ff2baee602bf7f367af21264de3b35eb625f9d823d8591560e5ac33fbd7ef6215d2d66b564ed671fc4b76da3393a4069f9287978f23da04854", @nested={0xd0, 0x2, [@typed={0x14, 0x5b, @ipv6}, @generic="e4ba51997dd3919bc8334ef4326eb962117953cf7d3045b75aa5a62e3cb336629db47d170028de07cd5ca724f01db15530482aa9bd80691e15c2618bd5c3104dcfa8b06835ef4660caa1c3f21b001f1e538dd04bd4b487d1416476fd2ed7960c264b07067ada9efb7ef7310537ef79b554bf566633cf235522c6157a0476b68db50bd29efcc71cd8ad6b1925653e58dcf88c7099fcfccad444d2e8870dcc536be332384018830b15b5954331c811b522c0de16b81a"]}, @typed={0x8, 0x8a, @fd=r0}]}, {0x150, 0x1, [@generic="c97068d0fafc560ebb0427ade6bbfc55d63bc90c842d29a9a6bca1806932d6d117e0cee71f818fe82eb8a28088075a9ed915a71542cc523cbd5ee02e8e4ff204f7c921caf3be6fe0b7ca2c578bc6b951b8a3f77ee0ef1ded565ee66084faf4e2607e97decfdeae75ae6b78a84f3d974d655736b1aa91e0b4b06beaf775533f45ff880618f0a3071f7d1a0be1bb68bcab8e85ec6112a2a23d41e350c9", @generic="eb4cc8924c104b358a767179f1f0378a6f1c9946af5ad529bda79f3bce5282f53430ba2662b0c90ba54944b23bcd3c7b7b5d057e9ca9b33fdac191211200d8cce2541e0ef45aa234a80e1af5816b8ba1df16ecbe2e726f22aee76d57ce98ee9c2efde4a29e375bbd22252a25792c5176ab7ee23f3b3f70cffcfced51fa40bf8cacb7f10e4e252b8caf61864e757a745f6893f2b90f1ea1fc226a41f4a3c0dc819ea39ead2f5148988613145d0bdc7451"]}, {0x2ac, 0x1, [@nested={0x64, 0x38, [@typed={0x1c, 0x48, @str='vboxnet0em1wlan0cpuset\x00'}, @generic="4e4b7217e8b61764a021c72fd4edadace296added84ff67c6d63a4aae714ab181d78587cff11339cc0c675ba55286217882945f0976faf9cb3db08977f687c0e4aa6b5"]}, @typed={0xc, 0x5b, @u64=0x2}, @nested={0x20c, 0x30, [@typed={0x8, 0x3c, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @typed={0xb8, 0x2d, @binary="40668ea917b709a6df35be1931d6e6b102a7b793a85af18ab9ad6aa127e5d7e60d2257440262cd08f8c1fd7037279be0b22e382315a745ff18e9aa8af5613b452df2cc3026a8b3bbe393f81414bd2ed9b959adada08017fecec5b3e42eeb7cf716649ff33ab925361432a54a463efc5f134477111b21edfe3f10326558af3d501347f163da7aad1a37806bca535785f825469d0b76c2186762d0db5b46a15897eda87c6508ea94c3eeafe9e99c362f240a"}, @generic="a1b136750bdce73934ca3e8a27867fc772f920e0f878463347f5551020aecfebf7feff5add29552b9fcf3fd1f61926f21af9a6f621de5d6b2db997bcc6e43ee1ad27f8c914e87f93a7b086ee0f68c7217c699ead5e810987b815468b40831679f5e04955b62a6b488fa250d7a1393227b041a0a0e58fd62749c721a5398f188c75bd892fb9c1cca2b97bd9d7adefaab4801b25e2a8cb29854b87834d4606bfaf8445b6a81586c7a122", @typed={0x8, 0x43, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @generic="0400cdf01f5cc36d6fefc86f7163768c65bb228ffd60293db0e02f6245003891d3d49d1bcb89fb40620c1a2bdaa6fb7399a6059f697c288503ccfec58895fc58ca291a09a798c314374770fcb0943a017f0e062dcff54a516379924fd7f8ca80358abfaa80ac72221925e217bfb16ad85b0eb03576414ea64f413ee1b634dff3bd48fadfc7a6888dcfbc35bb233504", @typed={0x8, 0x81, @ipv4}]}, @typed={0x4, 0x7c}, @nested={0x20, 0x15, [@generic="96e171ee94fb6b1bcf0fb8492b6646eed496f5b9ed1d9c0c24d5"]}, @typed={0x8, 0x57, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}]}]}]}, 0x19b0}, 0x1}, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000002180)={'security\x00'}, &(0x7f0000002200)=0x54) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x80000000001) 2018/04/09 20:04:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:42 executing program 0 (fault-call:1 fault-nth:11): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000000)) 2018/04/09 20:04:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9c, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, 0x8, 0x9, 0x4, "52565d12b0ef0fef8bb8d7102bd55b77baed30e3fed9c13b5fe764b772feae6a420d10ddbbc7be6823d8aa376d43fe15609d85c87edd840962da59b60ac424add238b1c3b914e6f0595976bc2ea89733"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x407, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) accept$inet(r0, &(0x7f0000000080)={0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) 2018/04/09 20:04:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000000000)) 2018/04/09 20:04:42 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:42 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4b1, 0x20000) accept4$llc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) fdatasync(r1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) [ 157.492664] FAULT_INJECTION: forcing a failure. [ 157.492664] name failslab, interval 1, probability 0, space 0, times 0 [ 157.503970] CPU: 1 PID: 11861 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 157.510904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.520265] Call Trace: [ 157.522870] dump_stack+0x1b9/0x294 [ 157.526515] ? dump_stack_print_info.cold.2+0x52/0x52 [ 157.531720] ? __save_stack_trace+0x7e/0xd0 [ 157.536059] should_fail.cold.4+0xa/0x1a 2018/04/09 20:04:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000000000)) [ 157.540140] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 157.545255] ? save_stack+0x43/0xd0 [ 157.548894] ? kasan_kmalloc+0xc4/0xe0 [ 157.552794] ? kmem_cache_alloc_trace+0x152/0x780 [ 157.557652] ? sctp_add_bind_addr+0xf9/0x4a0 [ 157.562077] ? sctp_copy_local_addr_list+0x499/0x690 [ 157.567194] ? sctp_copy_one_addr+0x5d/0x170 [ 157.571616] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 157.577338] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 157.582191] ? sctp_sendmsg+0x1888/0x1d70 [ 157.586357] ? inet_sendmsg+0x19f/0x690 [ 157.590432] ? sock_sendmsg+0xd5/0x120 [ 157.594329] ? ___sys_sendmsg+0x805/0x940 [ 157.598485] ? __sys_sendmsg+0x115/0x270 [ 157.602556] ? SyS_sendmsg+0x29/0x30 [ 157.606281] ? do_syscall_64+0x29e/0x9d0 [ 157.610350] ? graph_lock+0x170/0x170 [ 157.614148] ? print_usage_bug+0xc0/0xc0 [ 157.618212] ? graph_lock+0x170/0x170 [ 157.622009] ? find_held_lock+0x36/0x1c0 [ 157.626072] ? lock_downgrade+0x8e0/0x8e0 [ 157.630221] __should_failslab+0x124/0x180 [ 157.634445] should_failslab+0x9/0x14 [ 157.638234] kmem_cache_alloc_trace+0x4b/0x780 [ 157.642813] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 157.647989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.653517] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 157.657834] sctp_add_bind_addr+0xf9/0x4a0 [ 157.662060] ? sctp_bind_addr_free+0x20/0x20 [ 157.666458] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 157.671638] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 157.676817] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 157.681825] sctp_copy_local_addr_list+0x499/0x690 [ 157.686749] ? sctp_defaults_init+0xe50/0xe50 [ 157.691233] ? get_random_bytes+0x34/0x40 [ 157.695371] ? sctp_association_new+0x135/0x21e0 [ 157.700126] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 157.705308] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.710839] sctp_copy_one_addr+0x5d/0x170 [ 157.715060] ? sctp_copy_one_addr+0x5d/0x170 [ 157.719461] sctp_bind_addr_copy+0x16b/0x45b [ 157.723863] ? sctp_copy_one_addr+0x170/0x170 [ 157.728349] ? sctp_autobind+0x16d/0x1f0 [ 157.732402] ? sctp_do_bind+0x5f0/0x5f0 [ 157.736385] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 157.741912] ? security_sctp_bind_connect+0x99/0xc0 [ 157.746922] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 157.751581] ? sctp_sendmsg+0x125e/0x1d70 [ 157.755726] ? sctp_autobind+0x1f0/0x1f0 [ 157.759783] ? __local_bh_enable_ip+0x161/0x230 [ 157.764441] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 157.769447] ? lock_sock_nested+0x9f/0x120 [ 157.773668] ? trace_hardirqs_on+0xd/0x10 [ 157.777815] ? __local_bh_enable_ip+0x161/0x230 [ 157.782473] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 157.787999] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 157.793193] sctp_sendmsg+0x1888/0x1d70 [ 157.797160] ? do_raw_spin_unlock+0x9e/0x2e0 [ 157.801568] ? sctp_id2assoc+0x3e0/0x3e0 [ 157.805624] ? _raw_spin_unlock_bh+0x30/0x40 [ 157.810042] ? __release_sock+0x3a0/0x3a0 [ 157.814202] inet_sendmsg+0x19f/0x690 [ 157.817999] ? copy_msghdr_from_user+0x3a0/0x560 [ 157.822754] ? ipip_gro_receive+0x100/0x100 [ 157.827068] ? move_addr_to_kernel.part.18+0x100/0x100 [ 157.832342] ? security_socket_sendmsg+0x94/0xc0 [ 157.837087] ? ipip_gro_receive+0x100/0x100 [ 157.841399] sock_sendmsg+0xd5/0x120 [ 157.845112] ___sys_sendmsg+0x805/0x940 [ 157.849084] ? copy_msghdr_from_user+0x560/0x560 [ 157.853844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 157.859377] ? proc_fail_nth_write+0x96/0x1f0 [ 157.863868] ? __fget_light+0x2ef/0x430 [ 157.867834] ? fget_raw+0x20/0x20 [ 157.871274] ? find_held_lock+0x36/0x1c0 [ 157.875328] ? kasan_check_write+0x14/0x20 [ 157.879568] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.885093] ? sockfd_lookup_light+0xc5/0x160 [ 157.889582] __sys_sendmsg+0x115/0x270 [ 157.893462] ? SyS_shutdown+0x30/0x30 [ 157.897250] ? __sb_end_write+0xac/0xe0 [ 157.901213] ? fput+0x130/0x1a0 [ 157.904482] ? ksys_write+0x1a6/0x250 [ 157.908279] ? ksys_ioctl+0x81/0xd0 [ 157.911899] SyS_sendmsg+0x29/0x30 [ 157.915430] ? __sys_sendmsg+0x270/0x270 [ 157.919479] do_syscall_64+0x29e/0x9d0 [ 157.923352] ? vmalloc_sync_all+0x30/0x30 [ 157.927486] ? _raw_spin_unlock_irq+0x27/0x70 [ 157.931972] ? finish_task_switch+0x1ca/0x820 [ 157.936457] ? syscall_return_slowpath+0x5c0/0x5c0 [ 157.941374] ? syscall_return_slowpath+0x30f/0x5c0 [ 157.946299] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 157.951654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 157.956489] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 157.961665] RIP: 0033:0x455259 [ 157.964840] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.972538] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 157.979791] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 157.987045] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/09 20:04:43 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfca131fffe53d154, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000000000)) [ 157.994299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 158.001551] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000b 2018/04/09 20:04:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:43 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb80b, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)) 2018/04/09 20:04:43 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000040)={0x3, 0x4}) 2018/04/09 20:04:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:43 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4ce826fefffcdbd0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045007, &(0x7f0000000000)) 2018/04/09 20:04:43 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) setsockopt$inet6_opts(r1, 0x29, 0x3a, &(0x7f0000000040)=@routing={0x8a, 0x4, 0x1, 0x5, 0x0, [@loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x14}]}, 0x28) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) socket(0x3, 0x7, 0x959) shutdown(r1, 0x0) 2018/04/09 20:04:43 executing program 0 (fault-call:1 fault-nth:12): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9c, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, 0x8, 0x9, 0x4, "52565d12b0ef0fef8bb8d7102bd55b77baed30e3fed9c13b5fe764b772feae6a420d10ddbbc7be6823d8aa376d43fe15609d85c87edd840962da59b60ac424add238b1c3b914e6f0595976bc2ea89733"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x407, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) accept$inet(r0, &(0x7f0000000080)={0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) [ 158.430511] FAULT_INJECTION: forcing a failure. [ 158.430511] name failslab, interval 1, probability 0, space 0, times 0 [ 158.441877] CPU: 1 PID: 11917 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 158.448817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.458178] Call Trace: [ 158.460776] dump_stack+0x1b9/0x294 [ 158.464422] ? dump_stack_print_info.cold.2+0x52/0x52 [ 158.469628] ? __save_stack_trace+0x7e/0xd0 [ 158.473972] should_fail.cold.4+0xa/0x1a [ 158.478051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 158.483169] ? zap_class+0x720/0x720 [ 158.486891] ? sctp_copy_local_addr_list+0x499/0x690 [ 158.492001] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 158.497726] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 158.502574] ? sctp_sendmsg+0x1888/0x1d70 [ 158.506710] ? inet_sendmsg+0x19f/0x690 [ 158.510671] ? sock_sendmsg+0xd5/0x120 [ 158.514544] ? ___sys_sendmsg+0x805/0x940 [ 158.518677] ? __sys_sendmsg+0x115/0x270 [ 158.522725] ? SyS_sendmsg+0x29/0x30 [ 158.526430] ? do_syscall_64+0x29e/0x9d0 [ 158.530480] ? graph_lock+0x170/0x170 [ 158.534272] ? print_usage_bug+0xc0/0xc0 [ 158.538324] ? graph_lock+0x170/0x170 [ 158.542115] ? find_held_lock+0x36/0x1c0 [ 158.546177] ? lock_downgrade+0x8e0/0x8e0 [ 158.550321] __should_failslab+0x124/0x180 [ 158.554547] should_failslab+0x9/0x14 [ 158.558334] kmem_cache_alloc_trace+0x4b/0x780 [ 158.562907] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 158.568087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.573616] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 158.577931] sctp_add_bind_addr+0xf9/0x4a0 [ 158.582156] ? sctp_bind_addr_free+0x20/0x20 [ 158.586554] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 158.591744] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 158.596925] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 158.601934] sctp_copy_local_addr_list+0x499/0x690 [ 158.606856] ? sctp_defaults_init+0xe50/0xe50 [ 158.611342] ? get_random_bytes+0x34/0x40 [ 158.615478] ? sctp_association_new+0x135/0x21e0 [ 158.620229] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 158.625409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.630938] sctp_copy_one_addr+0x5d/0x170 [ 158.635157] ? sctp_copy_one_addr+0x5d/0x170 [ 158.639560] sctp_bind_addr_copy+0x16b/0x45b [ 158.643960] ? sctp_copy_one_addr+0x170/0x170 [ 158.648440] ? sctp_autobind+0x16d/0x1f0 [ 158.652489] ? zap_class+0x720/0x720 [ 158.656192] ? sctp_do_bind+0x5f0/0x5f0 [ 158.660160] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 158.665772] ? security_sctp_bind_connect+0x99/0xc0 [ 158.670783] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 158.675443] ? sctp_sendmsg+0x125e/0x1d70 [ 158.679587] ? sctp_autobind+0x1f0/0x1f0 [ 158.683642] ? __local_bh_enable_ip+0x161/0x230 [ 158.688301] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 158.693304] ? lock_sock_nested+0x9f/0x120 [ 158.697526] ? trace_hardirqs_on+0xd/0x10 [ 158.701667] ? __local_bh_enable_ip+0x161/0x230 [ 158.706325] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 158.711853] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 158.717038] sctp_sendmsg+0x1888/0x1d70 [ 158.721004] ? do_raw_spin_unlock+0x9e/0x2e0 [ 158.725415] ? sctp_id2assoc+0x3e0/0x3e0 [ 158.729484] ? _raw_spin_unlock_bh+0x30/0x40 [ 158.733885] ? __release_sock+0x3a0/0x3a0 [ 158.738039] inet_sendmsg+0x19f/0x690 [ 158.741829] ? copy_msghdr_from_user+0x3a0/0x560 [ 158.746575] ? ipip_gro_receive+0x100/0x100 [ 158.750884] ? move_addr_to_kernel.part.18+0x100/0x100 [ 158.756150] ? security_socket_sendmsg+0x94/0xc0 [ 158.760893] ? ipip_gro_receive+0x100/0x100 [ 158.765206] sock_sendmsg+0xd5/0x120 [ 158.768909] ___sys_sendmsg+0x805/0x940 [ 158.772878] ? copy_msghdr_from_user+0x560/0x560 [ 158.777631] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 158.783155] ? proc_fail_nth_write+0x96/0x1f0 [ 158.787641] ? __fget_light+0x2ef/0x430 [ 158.791609] ? fget_raw+0x20/0x20 [ 158.795045] ? find_held_lock+0x36/0x1c0 [ 158.799097] ? kasan_check_write+0x14/0x20 [ 158.803338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.808864] ? sockfd_lookup_light+0xc5/0x160 [ 158.813350] __sys_sendmsg+0x115/0x270 [ 158.817226] ? SyS_shutdown+0x30/0x30 [ 158.821018] ? __sb_end_write+0xac/0xe0 [ 158.824985] ? fput+0x130/0x1a0 [ 158.828254] ? ksys_write+0x1a6/0x250 [ 158.832053] ? ksys_ioctl+0x81/0xd0 [ 158.835673] SyS_sendmsg+0x29/0x30 [ 158.839203] ? __sys_sendmsg+0x270/0x270 [ 158.843255] do_syscall_64+0x29e/0x9d0 [ 158.847130] ? vmalloc_sync_all+0x30/0x30 [ 158.851268] ? finish_task_switch+0x1ca/0x820 [ 158.855752] ? syscall_return_slowpath+0x5c0/0x5c0 [ 158.860674] ? syscall_return_slowpath+0x30f/0x5c0 [ 158.865602] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 158.870958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.875793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/09 20:04:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000000)) 2018/04/09 20:04:44 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x3f00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 158.880969] RIP: 0033:0x455259 [ 158.884143] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.891839] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 158.899117] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 158.906373] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 158.913633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 158.920887] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000c 2018/04/09 20:04:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0x9c, @dev={0xfe, 0x80, [], 0x14}, 0x5}}, 0x8, 0x9, 0x4, "52565d12b0ef0fef8bb8d7102bd55b77baed30e3fed9c13b5fe764b772feae6a420d10ddbbc7be6823d8aa376d43fe15609d85c87edd840962da59b60ac424add238b1c3b914e6f0595976bc2ea89733"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x407, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) accept$inet(r0, &(0x7f0000000080)={0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) 2018/04/09 20:04:44 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:44 executing program 0 (fault-call:1 fault-nth:13): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x8c100) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000040)={{0x10000, 0x2, 0xa4, 0x7, 0x10001, 0x7ff}, 0x7fff, 0x100, 0x8, 0x3, 0x5, "ecd234eb0d8740fc779cf256d99a508a08f9a44fac0ad4c5fcd889d59ab4972c8c0eb161c5ad8330f24b1be582f1ff12709c0d3b9a1f2789440be53bb32c1742c5b9dfe50eb331c353db46ffa80e53e0992b70577c05eeef7664a8eb7f6f0f7536a6ebb18a2cf87d389fcc7fe7b509002649becf7b4100cc761faf6bbdf57141"}) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x356) shutdown(r1, 0x0) 2018/04/09 20:04:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000000)) 2018/04/09 20:04:44 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfe800000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 159.101800] FAULT_INJECTION: forcing a failure. [ 159.101800] name failslab, interval 1, probability 0, space 0, times 0 [ 159.113167] CPU: 1 PID: 11935 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 159.120109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.129474] Call Trace: [ 159.132086] dump_stack+0x1b9/0x294 [ 159.135742] ? dump_stack_print_info.cold.2+0x52/0x52 [ 159.140947] ? __save_stack_trace+0x7e/0xd0 [ 159.145299] should_fail.cold.4+0xa/0x1a [ 159.149386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 159.154512] ? zap_class+0x720/0x720 [ 159.158247] ? perf_trace_lock+0x900/0x900 [ 159.162503] ? sctp_sendmsg+0x1888/0x1d70 [ 159.166672] ? sock_sendmsg+0xd5/0x120 [ 159.170578] ? ___sys_sendmsg+0x805/0x940 [ 159.174745] ? __sys_sendmsg+0x115/0x270 [ 159.178828] ? SyS_sendmsg+0x29/0x30 [ 159.182562] ? do_syscall_64+0x29e/0x9d0 [ 159.186643] ? graph_lock+0x170/0x170 [ 159.190461] ? print_usage_bug+0xc0/0xc0 [ 159.194542] ? perf_trace_lock_acquire+0xe3/0x980 2018/04/09 20:04:44 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x2, 0x8000e, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000000040)=0xa5fe) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) [ 159.199405] ? graph_lock+0x170/0x170 [ 159.203230] ? find_held_lock+0x36/0x1c0 [ 159.207320] ? lock_downgrade+0x8e0/0x8e0 [ 159.211487] __should_failslab+0x124/0x180 [ 159.215742] should_failslab+0x9/0x14 [ 159.219559] kmem_cache_alloc_trace+0x4b/0x780 [ 159.224162] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.229369] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.234928] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 159.239269] sctp_add_bind_addr+0xf9/0x4a0 [ 159.243515] ? sctp_bind_addr_free+0x20/0x20 [ 159.247935] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.253143] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.258345] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 159.263377] sctp_copy_local_addr_list+0x499/0x690 [ 159.268325] ? sctp_defaults_init+0xe50/0xe50 [ 159.272837] ? get_random_bytes+0x34/0x40 [ 159.277001] ? sctp_association_new+0x135/0x21e0 [ 159.281777] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.286981] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.292540] sctp_copy_one_addr+0x5d/0x170 [ 159.296791] ? sctp_copy_one_addr+0x5d/0x170 [ 159.301219] sctp_bind_addr_copy+0x16b/0x45b [ 159.305645] ? sctp_copy_one_addr+0x170/0x170 [ 159.310153] ? sctp_autobind+0x16d/0x1f0 [ 159.314228] ? sctp_do_bind+0x5f0/0x5f0 [ 159.318219] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 159.323762] ? security_sctp_bind_connect+0x99/0xc0 [ 159.328797] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 159.333475] ? sctp_sendmsg+0x125e/0x1d70 [ 159.337641] ? sctp_autobind+0x1f0/0x1f0 [ 159.342168] ? __local_bh_enable_ip+0x161/0x230 [ 159.346846] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 159.351863] ? lock_sock_nested+0x9f/0x120 [ 159.356087] ? trace_hardirqs_on+0xd/0x10 [ 159.360222] ? __local_bh_enable_ip+0x161/0x230 [ 159.364880] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 159.370406] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 159.375587] sctp_sendmsg+0x1888/0x1d70 [ 159.379547] ? do_raw_spin_unlock+0x9e/0x2e0 [ 159.383950] ? sctp_id2assoc+0x3e0/0x3e0 [ 159.388009] ? _raw_spin_unlock_bh+0x30/0x40 [ 159.392414] ? __release_sock+0x3a0/0x3a0 [ 159.396566] inet_sendmsg+0x19f/0x690 [ 159.400353] ? copy_msghdr_from_user+0x3a0/0x560 [ 159.405098] ? ipip_gro_receive+0x100/0x100 [ 159.409407] ? move_addr_to_kernel.part.18+0x100/0x100 [ 159.414676] ? security_socket_sendmsg+0x94/0xc0 [ 159.419418] ? ipip_gro_receive+0x100/0x100 [ 159.423730] sock_sendmsg+0xd5/0x120 [ 159.427433] ___sys_sendmsg+0x805/0x940 [ 159.431405] ? copy_msghdr_from_user+0x560/0x560 [ 159.436160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 159.441694] ? proc_fail_nth_write+0x96/0x1f0 [ 159.446179] ? __fget_light+0x2ef/0x430 [ 159.450141] ? fget_raw+0x20/0x20 [ 159.453675] ? find_held_lock+0x36/0x1c0 [ 159.457728] ? kasan_check_write+0x14/0x20 [ 159.461970] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.467508] ? sockfd_lookup_light+0xc5/0x160 [ 159.471997] __sys_sendmsg+0x115/0x270 [ 159.475883] ? SyS_shutdown+0x30/0x30 [ 159.479671] ? __sb_end_write+0xac/0xe0 [ 159.483636] ? fput+0x130/0x1a0 [ 159.486905] ? ksys_write+0x1a6/0x250 [ 159.490702] ? ksys_ioctl+0x81/0xd0 [ 159.494323] SyS_sendmsg+0x29/0x30 [ 159.497852] ? __sys_sendmsg+0x270/0x270 [ 159.501903] do_syscall_64+0x29e/0x9d0 [ 159.505777] ? vmalloc_sync_all+0x30/0x30 [ 159.509928] ? _raw_spin_unlock_irq+0x27/0x70 [ 159.514414] ? finish_task_switch+0x1ca/0x820 [ 159.518899] ? syscall_return_slowpath+0x5c0/0x5c0 [ 159.523819] ? syscall_return_slowpath+0x30f/0x5c0 [ 159.528740] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 159.534095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.538932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.544109] RIP: 0033:0x455259 [ 159.547283] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.554980] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 159.562237] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 159.569503] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.576759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 159.584025] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000d 2018/04/09 20:04:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:45 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x2, 0x8000e, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000000040)=0xa5fe) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) readahead(r0, 0x40, 0x3a) 2018/04/09 20:04:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:45 executing program 0 (fault-call:1 fault-nth:14): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:45 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500b, &(0x7f0000000000)) 2018/04/09 20:04:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa5, 0x1000, 0x7300000000000000}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x2}, 0xfffffffffffffeaa) shutdown(r1, 0x0) [ 159.723483] FAULT_INJECTION: forcing a failure. [ 159.723483] name failslab, interval 1, probability 0, space 0, times 0 [ 159.734781] CPU: 0 PID: 11970 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 159.741715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.751074] Call Trace: [ 159.753686] dump_stack+0x1b9/0x294 [ 159.757339] ? dump_stack_print_info.cold.2+0x52/0x52 [ 159.762558] ? __save_stack_trace+0x7e/0xd0 [ 159.766903] should_fail.cold.4+0xa/0x1a [ 159.770983] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 159.776098] ? save_stack+0x43/0xd0 [ 159.779739] ? kasan_kmalloc+0xc4/0xe0 [ 159.783639] ? kmem_cache_alloc_trace+0x152/0x780 [ 159.788502] ? sctp_add_bind_addr+0xf9/0x4a0 [ 159.792934] ? sctp_copy_local_addr_list+0x499/0x690 [ 159.798051] ? sctp_copy_one_addr+0x5d/0x170 [ 159.802477] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 159.808211] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 159.813074] ? sctp_sendmsg+0x1888/0x1d70 [ 159.817235] ? inet_sendmsg+0x19f/0x690 2018/04/09 20:04:45 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x12) set_tid_address(&(0x7f0000000000)) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, "a399e9c558720d8d1f6728f1c5f07531dc6150defaca6ebcaf1b8b8c36184c8f147be96ea31efbf49ca9b9d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "655397eb4a90dc0d4bbdd330f3aa50c6a17a4cbe46f9a27f671d171c4a2c50f288493929c1e0fe9468a5eb556554a2803b25502ef5bc450d5f58f28b16e1198d", &(0x7f0000b0bfb2)="446465762f736e642f636f6e74726f6c4323009cb55a60fb8d54423e20546bd33125000000000000fd03e22965bb699aabcb8311b779fbf5497252581e19688501001a7898bd7751951d53b93ab1", 0x4e, [], [0x2]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000000000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)=""/250) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x10001, 0x40400) ioctl$TIOCCONS(r2, 0x541d) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @empty, 'teql0\x00'}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) 2018/04/09 20:04:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000006) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402040, 0x0) [ 159.821225] ? sock_sendmsg+0xd5/0x120 [ 159.825123] ? ___sys_sendmsg+0x805/0x940 [ 159.829287] ? __sys_sendmsg+0x115/0x270 [ 159.833365] ? SyS_sendmsg+0x29/0x30 [ 159.837092] ? do_syscall_64+0x29e/0x9d0 [ 159.841162] ? graph_lock+0x170/0x170 [ 159.844969] ? print_usage_bug+0xc0/0xc0 [ 159.849041] ? graph_lock+0x170/0x170 [ 159.852858] ? find_held_lock+0x36/0x1c0 [ 159.856945] ? lock_downgrade+0x8e0/0x8e0 [ 159.861114] __should_failslab+0x124/0x180 [ 159.865372] should_failslab+0x9/0x14 [ 159.869186] kmem_cache_alloc_trace+0x4b/0x780 2018/04/09 20:04:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) close(r0) 2018/04/09 20:04:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) r1 = open(&(0x7f0000001200)='./bus\x00', 0x0, 0x10) fallocate(r1, 0x0, 0xffff, 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) fallocate(r1, 0x1, 0x0, 0x4000003) keyctl$session_to_parent(0x12) write$rdma_cm(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="0c16a6ff14fe00fb3ce2ae7f5e021c38a57784aee90070610d5da83e5b7223e7518fd22ef3c9d23bd2fbf19a09111264ce8fe620266927777944f1c6963d2ed154fbbf584d50f79ab2c7c85ca909610a6b625bfd4ea6a47b0e20b7e998e68666049af414405cdb7a0000000000000001af33981d677c30fce6826187f8825755edfa81d04c68530247b1c0c3923dd7fbd9f88411940ebdab217584292222e5615dbf80020bad89ea98d34bf9475bf31f36b7c63c1e400313e2ba855a4ccbeea26eaf41a4717e4c3704bbbe678afe4cdf304bb424e0f2bf4ac7719828ae20a2c0c0d8151dd11f47a75ff785f99a6da768cadb5c2518426e5854242f10f388d537c5225e8b3ba12db52ca144df2ccf32802ad7399509406967a105486ecbf1559c2b38a393c4d419aa1806131f07649a82a7ccb3f36c131411e3e42f70301c350387b821a785cb11f33342269878351748db43bb3e95e681697318bc436dc024b28c3967c0c2eaf53f32e6e2faebc0e81eae1c35613d1c5d92d4ab87eb21034f4760a7deeb0901738cc037cf500425faa7a403e88872230be9ce29df5fba829c3dea9a958ade36d151eee1078a3469117eab0bf50cd2fc2d8b22361aa005e4fd44206dc08f0000000000000700bfdaef33b6b79328c0268b09e63ec4f4c5af797c5200a27f6054d61a55114f89f11f51553b7e7c3f82d67a000000"], 0x8) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x200000009) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f0000000040), 0xfe91) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001440), 0x4) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf9c, 0x40) syz_open_dev$binder(&(0x7f0000001800)='/dev/binder#\x00', 0x0, 0x2) r6 = request_key(&(0x7f0000001500)='.dead\x00', &(0x7f0000001540)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001580)='\x00', 0xfffffffffffffff9) r7 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="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", 0x64, r6) r8 = request_key(&(0x7f0000001140)='encrypted\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000012c0)="0000b7b286b1e60000", 0xfffffffffffffffe) keyctl$link(0x8, r7, r8) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001480)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x3ff, 0x0, 0x10000, 0xffff}) write$cgroup_int(r4, &(0x7f00000011c0)=ANY=[@ANYBLOB="383faa37"], 0x6) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$inet_sctp(r5, &(0x7f00000017c0)={&(0x7f0000001380)=@in6={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000013c0)="46a92cb8ac5e7880f0421750303caaa46981987da1cbf4ca8922b3fbc3035302da3a35a3e556ae24674aa66663ea8c25d5c0b000322dc6c94e6d24fb47b913cd9a9b923725ede31c5e984e8bd9f99fb7d94e9b4c11701f", 0x57}, {&(0x7f0000001640)="92f69f44f091026c318cb0b4b27fb5b72130400959898bcf447bbef125f53aed9e56f6807e42614c81eb3f46d84c0808080ce3c3a7c34183d004a09995850612f7adea6bc3162d31ad7a369cd0655e1df160352b09d20b19d4495df1270620d5fcf591d7b3", 0x65}], 0x2, 0x0, 0x0, 0x40000}, 0xc051) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000001300)=""/73, &(0x7f0000001280)=0x49) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000001180)) [ 159.873786] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.878993] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.884550] ? sctp_v6_cmp_addr+0x261/0x6f0 [ 159.888893] sctp_add_bind_addr+0xf9/0x4a0 [ 159.893147] ? sctp_bind_addr_free+0x20/0x20 [ 159.897570] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.902775] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.907981] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 159.915013] sctp_copy_local_addr_list+0x499/0x690 [ 159.919968] ? sctp_defaults_init+0xe50/0xe50 [ 159.924479] ? get_random_bytes+0x34/0x40 [ 159.928648] ? sctp_association_new+0x135/0x21e0 [ 159.933431] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 159.938635] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.944182] sctp_copy_one_addr+0x5d/0x170 [ 159.948411] ? sctp_copy_one_addr+0x5d/0x170 [ 159.952815] sctp_bind_addr_copy+0x16b/0x45b [ 159.957220] ? sctp_copy_one_addr+0x170/0x170 [ 159.961703] ? sctp_autobind+0x16d/0x1f0 [ 159.965761] ? sctp_do_bind+0x5f0/0x5f0 [ 159.969733] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 159.975258] ? security_sctp_bind_connect+0x99/0xc0 [ 159.980269] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 159.984930] ? sctp_sendmsg+0x125e/0x1d70 [ 159.989071] ? sctp_autobind+0x1f0/0x1f0 [ 159.993122] ? __local_bh_enable_ip+0x161/0x230 [ 159.997780] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 160.002786] ? lock_sock_nested+0x9f/0x120 [ 160.007010] ? trace_hardirqs_on+0xd/0x10 [ 160.011153] ? __local_bh_enable_ip+0x161/0x230 [ 160.015810] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 160.021334] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 160.026528] sctp_sendmsg+0x1888/0x1d70 [ 160.030489] ? do_raw_spin_unlock+0x9e/0x2e0 [ 160.034895] ? sctp_id2assoc+0x3e0/0x3e0 [ 160.038971] ? _raw_spin_unlock_bh+0x30/0x40 [ 160.043370] ? __release_sock+0x3a0/0x3a0 [ 160.047528] inet_sendmsg+0x19f/0x690 [ 160.051315] ? copy_msghdr_from_user+0x3a0/0x560 [ 160.056060] ? ipip_gro_receive+0x100/0x100 [ 160.060367] ? move_addr_to_kernel.part.18+0x100/0x100 [ 160.065632] ? security_socket_sendmsg+0x94/0xc0 [ 160.070372] ? ipip_gro_receive+0x100/0x100 [ 160.074682] sock_sendmsg+0xd5/0x120 [ 160.078386] ___sys_sendmsg+0x805/0x940 [ 160.082354] ? copy_msghdr_from_user+0x560/0x560 [ 160.087108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.092634] ? proc_fail_nth_write+0x96/0x1f0 [ 160.097120] ? __fget_light+0x2ef/0x430 [ 160.101083] ? fget_raw+0x20/0x20 [ 160.104522] ? find_held_lock+0x36/0x1c0 [ 160.108588] ? kasan_check_write+0x14/0x20 [ 160.112826] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.118351] ? sockfd_lookup_light+0xc5/0x160 [ 160.122840] __sys_sendmsg+0x115/0x270 [ 160.126718] ? SyS_shutdown+0x30/0x30 [ 160.130507] ? __sb_end_write+0xac/0xe0 [ 160.134468] ? fput+0x130/0x1a0 [ 160.137738] ? ksys_write+0x1a6/0x250 [ 160.141533] ? ksys_ioctl+0x81/0xd0 [ 160.145149] SyS_sendmsg+0x29/0x30 [ 160.148674] ? __sys_sendmsg+0x270/0x270 [ 160.152724] do_syscall_64+0x29e/0x9d0 [ 160.156596] ? vmalloc_sync_all+0x30/0x30 [ 160.160728] ? _raw_spin_unlock_irq+0x27/0x70 [ 160.165211] ? finish_task_switch+0x1ca/0x820 [ 160.169694] ? syscall_return_slowpath+0x5c0/0x5c0 [ 160.174611] ? syscall_return_slowpath+0x30f/0x5c0 [ 160.179543] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 160.184901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.189736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 160.194912] RIP: 0033:0x455259 [ 160.198084] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.205779] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 160.213037] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 160.220302] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 160.227560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 160.234814] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000e 2018/04/09 20:04:45 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) syslog(0xf, &(0x7f0000000280)=""/25, 0x19) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000200)=""/2, 0x2}], 0x4, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:45 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xffffff7f, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000800)) 2018/04/09 20:04:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080044d76, &(0x7f0000000000)) 2018/04/09 20:04:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r0, 0x1000000000016) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x100, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x8) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x7ff, 0x1, 0x4, 0x8, "a58155c9e5d50e6e72f66ddbb0c694ab3d38e233743990d61606ff1103f4584a"}) 2018/04/09 20:04:45 executing program 6: r0 = socket$inet6(0xa, 0x80f, 0x6) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0xfffffffffffffecc) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@dev, @remote, @rand_addr}, &(0x7f0000000040)=0xc) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}, 0x1f}, @in6={0xa, 0x4e21, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x40}, @in6={0xa, 0x4e23, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, @in6={0xa, 0x4e23, 0x1f, @empty, 0x5}], 0xd8) r2 = dup3(r1, r1, 0x80000) accept$netrom(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 2018/04/09 20:04:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r0, 0x0, 0x0, 0xffff) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r1, r2) r3 = socket(0x1e, 0x804, 0x0) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/rt_cache\x00') ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000100)) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r5) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"02001f080000fc"}}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) 2018/04/09 20:04:45 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1500000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:45 executing program 0 (fault-call:1 fault-nth:15): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005460, &(0x7f0000000000)) 2018/04/09 20:04:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) [ 160.609123] FAULT_INJECTION: forcing a failure. [ 160.609123] name failslab, interval 1, probability 0, space 0, times 0 [ 160.620496] CPU: 1 PID: 12032 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 160.627436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.636803] Call Trace: [ 160.639407] dump_stack+0x1b9/0x294 [ 160.643055] ? dump_stack_print_info.cold.2+0x52/0x52 [ 160.648259] ? __save_stack_trace+0x7e/0xd0 [ 160.652609] should_fail.cold.4+0xa/0x1a [ 160.656692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 160.661811] ? zap_class+0x720/0x720 [ 160.665537] ? perf_trace_lock+0x900/0x900 [ 160.669782] ? sctp_sendmsg+0x1888/0x1d70 [ 160.673945] ? sock_sendmsg+0xd5/0x120 [ 160.677842] ? ___sys_sendmsg+0x805/0x940 [ 160.682003] ? __sys_sendmsg+0x115/0x270 [ 160.686073] ? SyS_sendmsg+0x29/0x30 [ 160.689793] ? do_syscall_64+0x29e/0x9d0 [ 160.693860] ? graph_lock+0x170/0x170 [ 160.697672] ? print_usage_bug+0xc0/0xc0 [ 160.701733] ? perf_trace_lock_acquire+0xe3/0x980 [ 160.706582] ? graph_lock+0x170/0x170 [ 160.710390] ? find_held_lock+0x36/0x1c0 [ 160.714473] ? lock_downgrade+0x8e0/0x8e0 [ 160.718639] __should_failslab+0x124/0x180 [ 160.722885] should_failslab+0x9/0x14 [ 160.726693] kmem_cache_alloc_trace+0x4b/0x780 [ 160.731288] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 160.736489] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 160.741522] sctp_add_bind_addr+0xf9/0x4a0 [ 160.745778] ? sctp_bind_addr_free+0x20/0x20 [ 160.750199] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 160.755401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.760950] ? sctp_v4_scope+0x19b/0x1c0 [ 160.765020] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 160.770234] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 160.775248] sctp_copy_local_addr_list+0x499/0x690 [ 160.780171] ? sctp_defaults_init+0xe50/0xe50 [ 160.784655] ? get_random_bytes+0x34/0x40 [ 160.788794] ? sctp_association_new+0x135/0x21e0 [ 160.793547] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 160.798726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.804256] sctp_copy_one_addr+0x5d/0x170 [ 160.808477] ? sctp_copy_one_addr+0x5d/0x170 [ 160.812878] sctp_bind_addr_copy+0x16b/0x45b [ 160.817280] ? sctp_copy_one_addr+0x170/0x170 [ 160.821764] ? sctp_autobind+0x16d/0x1f0 [ 160.825813] ? sctp_do_bind+0x5f0/0x5f0 [ 160.829779] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 160.835311] ? security_sctp_bind_connect+0x99/0xc0 [ 160.840322] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 160.844981] ? sctp_sendmsg+0x125e/0x1d70 [ 160.849126] ? sctp_autobind+0x1f0/0x1f0 [ 160.853179] ? __local_bh_enable_ip+0x161/0x230 [ 160.857841] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 160.862845] ? lock_sock_nested+0x9f/0x120 [ 160.867065] ? trace_hardirqs_on+0xd/0x10 [ 160.871209] ? __local_bh_enable_ip+0x161/0x230 [ 160.875868] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 160.881397] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 160.886580] sctp_sendmsg+0x1888/0x1d70 [ 160.890543] ? do_raw_spin_unlock+0x9e/0x2e0 [ 160.894950] ? sctp_id2assoc+0x3e0/0x3e0 [ 160.899009] ? _raw_spin_unlock_bh+0x30/0x40 [ 160.903416] ? __release_sock+0x3a0/0x3a0 [ 160.907566] inet_sendmsg+0x19f/0x690 [ 160.911353] ? copy_msghdr_from_user+0x3a0/0x560 [ 160.916100] ? ipip_gro_receive+0x100/0x100 [ 160.920410] ? move_addr_to_kernel.part.18+0x100/0x100 [ 160.925681] ? security_socket_sendmsg+0x94/0xc0 [ 160.930424] ? ipip_gro_receive+0x100/0x100 [ 160.934738] sock_sendmsg+0xd5/0x120 [ 160.938445] ___sys_sendmsg+0x805/0x940 [ 160.942415] ? copy_msghdr_from_user+0x560/0x560 [ 160.947170] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 160.952694] ? proc_fail_nth_write+0x96/0x1f0 [ 160.957184] ? __fget_light+0x2ef/0x430 [ 160.961161] ? fget_raw+0x20/0x20 [ 160.964599] ? find_held_lock+0x36/0x1c0 [ 160.968652] ? kasan_check_write+0x14/0x20 [ 160.972891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.978421] ? sockfd_lookup_light+0xc5/0x160 [ 160.982912] __sys_sendmsg+0x115/0x270 [ 160.986790] ? SyS_shutdown+0x30/0x30 [ 160.990579] ? __sb_end_write+0xac/0xe0 [ 160.994545] ? fput+0x130/0x1a0 [ 160.997814] ? ksys_write+0x1a6/0x250 [ 161.001616] ? ksys_ioctl+0x81/0xd0 [ 161.005238] SyS_sendmsg+0x29/0x30 [ 161.008769] ? __sys_sendmsg+0x270/0x270 [ 161.012821] do_syscall_64+0x29e/0x9d0 [ 161.016696] ? vmalloc_sync_all+0x30/0x30 [ 161.020836] ? _raw_spin_unlock_irq+0x27/0x70 [ 161.025338] ? finish_task_switch+0x1ca/0x820 [ 161.029824] ? syscall_return_slowpath+0x5c0/0x5c0 [ 161.034746] ? syscall_return_slowpath+0x30f/0x5c0 [ 161.039671] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 161.045042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.049887] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.055068] RIP: 0033:0x455259 2018/04/09 20:04:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000000000)) [ 161.058245] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.065959] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 161.073219] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 161.080477] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.087735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 161.094993] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 000000000000000f 2018/04/09 20:04:46 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x17, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:46 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x400) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3f, 0x20800) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast1}, &(0x7f0000000080)=0xc) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:46 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:46 executing program 3: r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000040)=0x1a) ioctl$void(r0, 0xc0045878) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/200}], 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x2) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000100)="2372419f710370b7dd8dd3bd98281cf897ab2226908323644d1e32c08a9076b8a06162d3e21acb2241050fe61296594467ede277487dbabc52130bb520077baa62ed1df48c4742163b8140f18b3723ce9d26361e41ba3febca1db622aee70eb7c8623c6d8e6e88b82ba302d7d6", 0x6d) ptrace(0x4207, r1) ptrace(0x18, r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x60000, 0x0) 2018/04/09 20:04:46 executing program 5: mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='.', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000008c0)="75fcce334b6ffedb6d4facd020ff8740bfd342b4799564be206548eb050821dcd15bc77b108b95b6a0d7bc40ec7171a2c9dfdc0be622ca339dbda81bd930fdfaead6cf486c969267df82c6efb841e28da3e0294f5d42222393266790023ccbdb09fcb8889de80223dc31ddd519c78346b2022eed9d0e0c9d48330829a533abe393d75785f5da98abd94a6466d95c00818d0c5ce3783758550260aafce20a4ce0671bded0032e48b9dbecfa1f") mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000000000, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80800, 0x7992676d, &(0x7f0000000040)) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xd68, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='rootfs\x00', 0x1000, &(0x7f00000002c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='nsfs\x00', 0x20, &(0x7f00000004c0)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000001840)='./file1\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x4c, 0x5c, &(0x7f0000000540)="cb40a10eceab2673b1b10d32d602b6ac99ba57e642e7a39d975d5c600ef96b6e08944aa442042b81748d5db438c5dd2ccc931b2ec8c73dabe7c57247e3af08bb6918a53833a062c8edf39a8c", &(0x7f0000000600)=""/92, 0x7, 0x5}, 0x28) mount(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='overlay\x00', 0x10000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x50, &(0x7f00000003c0)}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mount(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='xfs\x00', 0x220004a, &(0x7f00000002c0)="93cdd250f3245eb3353ca2d4abefe0db64b49641f396ea3563c4737336b1cd1c16ca6a4871828e1c6cb804b15664d769f0d01cf492333fa6ce0bb5abdaeef401de3c0c8239b5135612d2a21c27832a54cd4f4373c32da205c3e1a9460d3c7ebc3750db872bca9c584abda344c9d09fe3af550453283729f6744e420272cbbae11c1c417c1115a296ced13e7479da37430e169ea770c7a47af3d8") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x28, &(0x7f0000000a00)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={r3, 0x3, 0x8}, 0xfffffffffffffdd3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x28, &(0x7f00000001c0)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x50, &(0x7f00000006c0)}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0xf4, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r5, 0x28, &(0x7f0000000ac0)}, 0x10) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) r7 = accept(r6, &(0x7f0000000780)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000440)=0x80) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000980)=""/117, &(0x7f00000005c0)=0x75) 2018/04/09 20:04:46 executing program 0 (fault-call:1 fault-nth:16): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c020660b, &(0x7f0000000000)) [ 161.330959] FAULT_INJECTION: forcing a failure. [ 161.330959] name failslab, interval 1, probability 0, space 0, times 0 [ 161.342311] CPU: 0 PID: 12066 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 161.349250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.358637] Call Trace: [ 161.361241] dump_stack+0x1b9/0x294 [ 161.364894] ? dump_stack_print_info.cold.2+0x52/0x52 [ 161.370105] ? __save_stack_trace+0x7e/0xd0 [ 161.374454] should_fail.cold.4+0xa/0x1a [ 161.378542] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 161.383656] ? save_stack+0x43/0xd0 [ 161.387289] ? kasan_kmalloc+0xc4/0xe0 [ 161.391194] ? perf_trace_lock+0x900/0x900 [ 161.395432] ? sctp_sendmsg+0x1888/0x1d70 [ 161.399570] ? sock_sendmsg+0xd5/0x120 [ 161.403451] ? ___sys_sendmsg+0x805/0x940 [ 161.407588] ? __sys_sendmsg+0x115/0x270 [ 161.411633] ? SyS_sendmsg+0x29/0x30 [ 161.415334] ? do_syscall_64+0x29e/0x9d0 [ 161.419388] ? graph_lock+0x170/0x170 [ 161.423180] ? print_usage_bug+0xc0/0xc0 [ 161.427248] ? perf_trace_lock_acquire+0xe3/0x980 [ 161.432081] ? graph_lock+0x170/0x170 [ 161.435872] ? find_held_lock+0x36/0x1c0 [ 161.439926] ? lock_downgrade+0x8e0/0x8e0 [ 161.444067] __should_failslab+0x124/0x180 [ 161.448290] should_failslab+0x9/0x14 [ 161.452077] kmem_cache_alloc_trace+0x4b/0x780 [ 161.456649] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 161.461827] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 161.466921] sctp_add_bind_addr+0xf9/0x4a0 [ 161.471145] ? sctp_bind_addr_free+0x20/0x20 [ 161.475542] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 161.480718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.487633] ? sctp_v4_scope+0x19b/0x1c0 [ 161.491687] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 161.496865] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 161.501875] sctp_copy_local_addr_list+0x499/0x690 [ 161.506795] ? sctp_defaults_init+0xe50/0xe50 [ 161.511985] ? get_random_bytes+0x34/0x40 [ 161.516126] ? sctp_association_new+0x135/0x21e0 [ 161.520873] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 161.526048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.531573] sctp_copy_one_addr+0x5d/0x170 [ 161.535792] ? sctp_copy_one_addr+0x5d/0x170 [ 161.540187] sctp_bind_addr_copy+0x16b/0x45b [ 161.544668] ? sctp_copy_one_addr+0x170/0x170 [ 161.549147] ? sctp_autobind+0x16d/0x1f0 [ 161.553192] ? sctp_do_bind+0x5f0/0x5f0 [ 161.557152] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 161.562678] ? security_sctp_bind_connect+0x99/0xc0 [ 161.567681] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 161.572335] ? sctp_sendmsg+0x125e/0x1d70 [ 161.576472] ? sctp_autobind+0x1f0/0x1f0 [ 161.580518] ? __local_bh_enable_ip+0x161/0x230 [ 161.585172] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 161.590170] ? lock_sock_nested+0x9f/0x120 [ 161.594386] ? trace_hardirqs_on+0xd/0x10 [ 161.598517] ? __local_bh_enable_ip+0x161/0x230 [ 161.603172] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 161.608692] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 161.613867] sctp_sendmsg+0x1888/0x1d70 [ 161.617826] ? do_raw_spin_unlock+0x9e/0x2e0 [ 161.622222] ? sctp_id2assoc+0x3e0/0x3e0 [ 161.626273] ? _raw_spin_unlock_bh+0x30/0x40 [ 161.630667] ? __release_sock+0x3a0/0x3a0 [ 161.634809] inet_sendmsg+0x19f/0x690 [ 161.638597] ? copy_msghdr_from_user+0x3a0/0x560 [ 161.643345] ? ipip_gro_receive+0x100/0x100 [ 161.647660] ? move_addr_to_kernel.part.18+0x100/0x100 [ 161.652925] ? security_socket_sendmsg+0x94/0xc0 [ 161.657666] ? ipip_gro_receive+0x100/0x100 [ 161.661976] sock_sendmsg+0xd5/0x120 [ 161.665679] ___sys_sendmsg+0x805/0x940 [ 161.669646] ? copy_msghdr_from_user+0x560/0x560 [ 161.674395] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 161.679923] ? proc_fail_nth_write+0x96/0x1f0 [ 161.684408] ? __fget_light+0x2ef/0x430 [ 161.688375] ? fget_raw+0x20/0x20 [ 161.691813] ? find_held_lock+0x36/0x1c0 [ 161.695864] ? kasan_check_write+0x14/0x20 [ 161.700097] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.705622] ? sockfd_lookup_light+0xc5/0x160 [ 161.710108] __sys_sendmsg+0x115/0x270 [ 161.713983] ? SyS_shutdown+0x30/0x30 [ 161.717769] ? __sb_end_write+0xac/0xe0 [ 161.721733] ? fput+0x130/0x1a0 [ 161.725003] ? ksys_write+0x1a6/0x250 [ 161.728801] ? ksys_ioctl+0x81/0xd0 [ 161.732418] SyS_sendmsg+0x29/0x30 [ 161.735945] ? __sys_sendmsg+0x270/0x270 [ 161.739994] do_syscall_64+0x29e/0x9d0 [ 161.743870] ? vmalloc_sync_all+0x30/0x30 [ 161.748007] ? kasan_check_write+0x14/0x20 [ 161.752236] ? syscall_return_slowpath+0x5c0/0x5c0 [ 161.757151] ? syscall_return_slowpath+0x30f/0x5c0 [ 161.762072] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 161.767428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.772260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.777443] RIP: 0033:0x455259 [ 161.780617] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.788314] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 161.795574] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 161.802828] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.810080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 161.817333] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000010 [ 161.868494] EXT4-fs (sda1): re-mounted. Opts: [ 161.886919] overlayfs: missing 'lowerdir' [ 161.958222] overlayfs: missing 'lowerdir' 2018/04/09 20:04:47 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x11000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:47 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x100000000000, 0x3, 0x80000000, 0x1, "f7714e0da282704484e129652bd382ca269f2167d5da2fb9bba7cf0dcb7b0944d584748d8980daaa8fcaab65", 0x2}) shutdown(r1, 0x0) 2018/04/09 20:04:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r3, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)) 2018/04/09 20:04:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000014000102000000000000000000000000000000000000000000000001fe80000000b9d3a206e9c733ad00000000000000000000000200a0a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1}, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x420400) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x1) 2018/04/09 20:04:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045013, &(0x7f0000000000)) 2018/04/09 20:04:47 executing program 0 (fault-call:1 fault-nth:17): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/247) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x40080) ustat(0x8, &(0x7f0000000240)) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000140)={0x8, 0x8, "b96027c77f9358c3"}) [ 162.074792] FAULT_INJECTION: forcing a failure. [ 162.074792] name failslab, interval 1, probability 0, space 0, times 0 [ 162.086143] CPU: 0 PID: 12092 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 162.093081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.102440] Call Trace: [ 162.105047] dump_stack+0x1b9/0x294 [ 162.108696] ? dump_stack_print_info.cold.2+0x52/0x52 [ 162.113903] ? __save_stack_trace+0x7e/0xd0 [ 162.118247] should_fail.cold.4+0xa/0x1a 2018/04/09 20:04:47 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfe80, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) [ 162.122335] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 162.127453] ? save_stack+0x43/0xd0 [ 162.131100] ? kasan_kmalloc+0xc4/0xe0 [ 162.135008] ? kmem_cache_alloc_trace+0x152/0x780 [ 162.139868] ? sctp_add_bind_addr+0xf9/0x4a0 [ 162.144293] ? sctp_copy_local_addr_list+0x499/0x690 [ 162.149413] ? sctp_copy_one_addr+0x5d/0x170 [ 162.153836] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 162.159563] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 162.164423] ? sctp_sendmsg+0x1888/0x1d70 [ 162.168585] ? inet_sendmsg+0x19f/0x690 [ 162.172572] ? sock_sendmsg+0xd5/0x120 [ 162.176471] ? ___sys_sendmsg+0x805/0x940 [ 162.180631] ? __sys_sendmsg+0x115/0x270 [ 162.184710] ? SyS_sendmsg+0x29/0x30 [ 162.188440] ? do_syscall_64+0x29e/0x9d0 [ 162.192525] ? graph_lock+0x170/0x170 [ 162.196355] ? print_usage_bug+0xc0/0xc0 [ 162.200448] ? graph_lock+0x170/0x170 [ 162.204268] ? find_held_lock+0x36/0x1c0 [ 162.208365] ? lock_downgrade+0x8e0/0x8e0 [ 162.212537] __should_failslab+0x124/0x180 [ 162.216788] should_failslab+0x9/0x14 [ 162.220608] kmem_cache_alloc_trace+0x4b/0x780 [ 162.225209] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.230410] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 162.235446] sctp_add_bind_addr+0xf9/0x4a0 [ 162.239704] ? sctp_bind_addr_free+0x20/0x20 [ 162.244133] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.249344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.254897] ? sctp_v4_scope+0x19b/0x1c0 [ 162.258975] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.264188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 162.269231] sctp_copy_local_addr_list+0x499/0x690 [ 162.274184] ? sctp_defaults_init+0xe50/0xe50 [ 162.278700] ? get_random_bytes+0x34/0x40 [ 162.282869] ? sctp_association_new+0x135/0x21e0 [ 162.287654] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.292856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.298410] sctp_copy_one_addr+0x5d/0x170 [ 162.302655] ? sctp_copy_one_addr+0x5d/0x170 [ 162.307077] sctp_bind_addr_copy+0x16b/0x45b [ 162.311505] ? sctp_copy_one_addr+0x170/0x170 [ 162.316002] ? sctp_autobind+0x16d/0x1f0 [ 162.320071] ? sctp_do_bind+0x5f0/0x5f0 [ 162.324051] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 162.329582] ? security_sctp_bind_connect+0x99/0xc0 [ 162.334597] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 162.339255] ? sctp_sendmsg+0x125e/0x1d70 [ 162.343398] ? sctp_autobind+0x1f0/0x1f0 [ 162.347452] ? __local_bh_enable_ip+0x161/0x230 [ 162.352113] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 162.357123] ? lock_sock_nested+0x9f/0x120 [ 162.361346] ? trace_hardirqs_on+0xd/0x10 [ 162.365483] ? __local_bh_enable_ip+0x161/0x230 [ 162.370143] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 162.375676] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 162.380862] sctp_sendmsg+0x1888/0x1d70 [ 162.384827] ? do_raw_spin_unlock+0x9e/0x2e0 [ 162.389233] ? sctp_id2assoc+0x3e0/0x3e0 [ 162.393291] ? _raw_spin_unlock_bh+0x30/0x40 [ 162.397698] ? __release_sock+0x3a0/0x3a0 [ 162.401851] inet_sendmsg+0x19f/0x690 [ 162.405642] ? copy_msghdr_from_user+0x3a0/0x560 [ 162.410393] ? ipip_gro_receive+0x100/0x100 [ 162.414712] ? move_addr_to_kernel.part.18+0x100/0x100 [ 162.419982] ? security_socket_sendmsg+0x94/0xc0 [ 162.424730] ? ipip_gro_receive+0x100/0x100 [ 162.429047] sock_sendmsg+0xd5/0x120 [ 162.432754] ___sys_sendmsg+0x805/0x940 [ 162.436729] ? copy_msghdr_from_user+0x560/0x560 [ 162.441485] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 162.447013] ? proc_fail_nth_write+0x96/0x1f0 [ 162.451507] ? __fget_light+0x2ef/0x430 [ 162.455469] ? fget_raw+0x20/0x20 [ 162.458905] ? find_held_lock+0x36/0x1c0 [ 162.462957] ? kasan_check_write+0x14/0x20 [ 162.467197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.472724] ? sockfd_lookup_light+0xc5/0x160 [ 162.477212] __sys_sendmsg+0x115/0x270 [ 162.481089] ? SyS_shutdown+0x30/0x30 [ 162.484876] ? __sb_end_write+0xac/0xe0 [ 162.488842] ? fput+0x130/0x1a0 [ 162.492112] ? ksys_write+0x1a6/0x250 [ 162.495910] ? ksys_ioctl+0x81/0xd0 [ 162.499530] SyS_sendmsg+0x29/0x30 [ 162.503057] ? __sys_sendmsg+0x270/0x270 [ 162.507109] do_syscall_64+0x29e/0x9d0 [ 162.510990] ? vmalloc_sync_all+0x30/0x30 [ 162.515134] ? _raw_spin_unlock_irq+0x27/0x70 [ 162.519628] ? finish_task_switch+0x1ca/0x820 [ 162.524119] ? syscall_return_slowpath+0x5c0/0x5c0 [ 162.529044] ? syscall_return_slowpath+0x30f/0x5c0 [ 162.533974] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 162.539336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.544176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.549371] RIP: 0033:0x455259 [ 162.552548] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.560256] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 162.567520] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 [ 162.574821] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 162.582090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 162.589347] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000011 2018/04/09 20:04:48 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x10, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:48 executing program 3: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}], 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) setsockopt$inet_buf(r0, 0x0, 0x400000000000040, &(0x7f0000000000), 0x0) signalfd4(r0, &(0x7f0000000040)={0x67}, 0x8, 0x800) 2018/04/09 20:04:48 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x44) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = dup2(r1, r0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x100, 0xfffffffffffffff7}) shutdown(r1, 0x0) 2018/04/09 20:04:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045018, &(0x7f0000000000)) 2018/04/09 20:04:48 executing program 0 (fault-call:1 fault-nth:18): r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x100) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xf8, 0x178, 0x1c8, [@statistic={'statistic\x00', 0x18}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x428) 2018/04/09 20:04:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r3, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)) [ 162.767649] FAULT_INJECTION: forcing a failure. [ 162.767649] name failslab, interval 1, probability 0, space 0, times 0 [ 162.778986] CPU: 1 PID: 12118 Comm: syz-executor0 Not tainted 4.16.0+ #14 [ 162.785924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.795282] Call Trace: [ 162.797885] dump_stack+0x1b9/0x294 [ 162.801527] ? dump_stack_print_info.cold.2+0x52/0x52 [ 162.806730] ? __save_stack_trace+0x7e/0xd0 [ 162.811082] should_fail.cold.4+0xa/0x1a [ 162.815162] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 162.820275] ? save_stack+0x43/0xd0 [ 162.823912] ? kasan_kmalloc+0xc4/0xe0 [ 162.827807] ? kmem_cache_alloc_trace+0x152/0x780 [ 162.832659] ? sctp_add_bind_addr+0xf9/0x4a0 [ 162.837079] ? sctp_copy_local_addr_list+0x499/0x690 [ 162.842190] ? sctp_copy_one_addr+0x5d/0x170 [ 162.846605] ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 162.852330] ? sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 162.857166] ? sctp_sendmsg+0x1888/0x1d70 [ 162.861314] ? inet_sendmsg+0x19f/0x690 [ 162.865290] ? sock_sendmsg+0xd5/0x120 [ 162.869164] ? ___sys_sendmsg+0x805/0x940 [ 162.873301] ? __sys_sendmsg+0x115/0x270 [ 162.877350] ? SyS_sendmsg+0x29/0x30 [ 162.881050] ? do_syscall_64+0x29e/0x9d0 [ 162.885100] ? graph_lock+0x170/0x170 [ 162.888889] ? print_usage_bug+0xc0/0xc0 [ 162.892942] ? graph_lock+0x170/0x170 [ 162.896735] ? find_held_lock+0x36/0x1c0 [ 162.900795] ? lock_downgrade+0x8e0/0x8e0 [ 162.904943] __should_failslab+0x124/0x180 [ 162.909167] should_failslab+0x9/0x14 [ 162.912953] kmem_cache_alloc_trace+0x4b/0x780 [ 162.917530] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.922711] ? __sanitizer_cov_trace_cmp2+0x18/0x20 [ 162.927723] sctp_add_bind_addr+0xf9/0x4a0 [ 162.931955] ? sctp_bind_addr_free+0x20/0x20 [ 162.936356] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.941536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.947062] ? sctp_v4_scope+0x19b/0x1c0 [ 162.951111] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.956293] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 162.961308] sctp_copy_local_addr_list+0x499/0x690 [ 162.966232] ? sctp_defaults_init+0xe50/0xe50 [ 162.970726] ? get_random_bytes+0x34/0x40 [ 162.974865] ? sctp_association_new+0x135/0x21e0 [ 162.979616] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 162.984795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.990326] sctp_copy_one_addr+0x5d/0x170 [ 162.994549] ? sctp_copy_one_addr+0x5d/0x170 [ 162.998949] sctp_bind_addr_copy+0x16b/0x45b [ 163.003354] ? sctp_copy_one_addr+0x170/0x170 [ 163.007836] ? sctp_autobind+0x16d/0x1f0 [ 163.011887] ? sctp_do_bind+0x5f0/0x5f0 [ 163.015855] sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0 [ 163.021384] ? security_sctp_bind_connect+0x99/0xc0 [ 163.026394] sctp_sendmsg_new_asoc+0x3c1/0x1120 [ 163.031050] ? sctp_sendmsg+0x125e/0x1d70 [ 163.035189] ? sctp_autobind+0x1f0/0x1f0 [ 163.039242] ? __local_bh_enable_ip+0x161/0x230 [ 163.043909] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 163.048913] ? lock_sock_nested+0x9f/0x120 [ 163.053135] ? trace_hardirqs_on+0xd/0x10 [ 163.057272] ? __local_bh_enable_ip+0x161/0x230 [ 163.061935] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 163.067467] ? sctp_endpoint_lookup_assoc+0x183/0x290 [ 163.072648] sctp_sendmsg+0x1888/0x1d70 [ 163.076612] ? do_raw_spin_unlock+0x9e/0x2e0 [ 163.081021] ? sctp_id2assoc+0x3e0/0x3e0 [ 163.085079] ? _raw_spin_unlock_bh+0x30/0x40 [ 163.089480] ? __release_sock+0x3a0/0x3a0 [ 163.093629] inet_sendmsg+0x19f/0x690 [ 163.097419] ? copy_msghdr_from_user+0x3a0/0x560 [ 163.102162] ? ipip_gro_receive+0x100/0x100 [ 163.106473] ? move_addr_to_kernel.part.18+0x100/0x100 [ 163.111743] ? security_socket_sendmsg+0x94/0xc0 [ 163.116485] ? ipip_gro_receive+0x100/0x100 [ 163.120818] sock_sendmsg+0xd5/0x120 [ 163.124522] ___sys_sendmsg+0x805/0x940 [ 163.128489] ? copy_msghdr_from_user+0x560/0x560 [ 163.133241] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 163.138766] ? proc_fail_nth_write+0x96/0x1f0 [ 163.143254] ? __fget_light+0x2ef/0x430 [ 163.147217] ? fget_raw+0x20/0x20 [ 163.150654] ? find_held_lock+0x36/0x1c0 [ 163.154708] ? kasan_check_write+0x14/0x20 [ 163.158951] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.164478] ? sockfd_lookup_light+0xc5/0x160 [ 163.168966] __sys_sendmsg+0x115/0x270 [ 163.172844] ? SyS_shutdown+0x30/0x30 [ 163.176633] ? __sb_end_write+0xac/0xe0 [ 163.180612] ? fput+0x130/0x1a0 [ 163.183891] ? ksys_write+0x1a6/0x250 [ 163.187685] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 163.192514] ? ksys_ioctl+0x81/0xd0 [ 163.196133] SyS_sendmsg+0x29/0x30 [ 163.199660] ? __sys_sendmsg+0x270/0x270 [ 163.203711] do_syscall_64+0x29e/0x9d0 [ 163.207591] ? vmalloc_sync_all+0x30/0x30 [ 163.211732] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 163.216562] ? syscall_return_slowpath+0x5c0/0x5c0 [ 163.221480] ? syscall_return_slowpath+0x30f/0x5c0 [ 163.226410] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 163.231765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.236606] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 163.241785] RIP: 0033:0x455259 [ 163.244961] RSP: 002b:00007f089bf8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.252657] RAX: ffffffffffffffda RBX: 00007f089bf8e6d4 RCX: 0000000000455259 [ 163.259915] RDX: 0000000000000040 RSI: 0000000020000a00 RDI: 0000000000000013 2018/04/09 20:04:48 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x100000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 163.267171] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 163.274426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 163.281684] R13: 00000000000004cc R14: 00000000006fa3c0 R15: 0000000000000012 2018/04/09 20:04:48 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect(r0, &(0x7f0000000000)=@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80) socketpair(0xb, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) shutdown(r1, 0x0) 2018/04/09 20:04:48 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20100, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x40, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x15}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x36, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x1000, &(0x7f0000000080)="dbc1b60f4d72c52ef441d4d1da12", &(0x7f00000002c0)=""/4096}, 0x28) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002800)) socket$vsock_stream(0x28, 0x1, 0x0) 2018/04/09 20:04:48 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x14, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:48 executing program 4 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000000)) 2018/04/09 20:04:48 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x34000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:48 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000000)="a5c8a411a9bcd387abbd14d232e94e742ebacb5daa716802104e79dc02711969411aef6641d712c221cd42bc1dca60ccf6bf38829469047dc7733718f446a07bef6f", 0x42, 0x1, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r3, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) socketpair(0x10, 0x5, 0x3f, &(0x7f0000000840)) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x146}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000b997b2550a5ae1668c020000000000000000000095000000000000004f38e310d060105d08004f811c85ea58939dde2b91e0cb01ec5e602b2353b55da9be3a1754d9bb622d672b1777e64dbda3ca5bf8b60d7615e6e2e1c6dc3de61e3b50a3e6ca5821223cdd1f06000000121605bce236e2ea7965064bef4d2b9aa4503c0041ca9440e4f9487d9dcc7ef2aab3806c7d49fcfc0423107f786d2a87dddd33152722"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1000000000000, 0x20000) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000240)=0x8, 0x4) exit_group(0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x4, 0x705000, 0x4, &(0x7f0000000300)) 2018/04/09 20:04:49 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x3f00, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000000000)) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x5, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$netlink(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000040)={0x19c, 0x1d, 0x800, 0x70bd2a, 0x25dfdbff, "", [@generic="5577b7116705a59745ca649ac0db64406e6db6fc8a82071ad1ae8f9ed7cf891fb10199f1ece5160c0d768930ad8df5286b57169079a60c74fc43bb8c025fa45e9a3e51a108d20d0eae49cea1f8a07325c4da7865e11864f6d15a0731649b16e6b97d5e10cd1dae9cfe952d2e3c7b5bc915ab567abebbae964a37725e8460c4", @generic="9f374e82bf4b3167cdc08a1c11b62d65c8528f7db3690d7f3baaa096dcebc343ec2b1384661a8fc75b8200387f6d988480a91250bdc53dc96782f14b9cb9e83fe67c2ff48a7ad8226ac399cf01e107160dfc94a50f8bd213961886d4578bbb90ef3da3cc19b38359d0089a3a7479862c0953d3bc65a96ae63242f7", @typed={0xc, 0xc, @u64}, @generic="d080fbe6ec793220c5a40f2a8a87c9d1d6e574562c493f086c4b0e8eccf167c62513dcaa62305fb76d43b17ae692267f87e0b529f8f3f0c4c2f844cbfd01ee2e919f802d8a3092b79276ed", @generic="855c58aad5bda35d78bcaa9b2880a2fbe81bd0c94bd22f61de93cd9d4dcbad720d0381bbdb353862cf19e9e261f771fa1ef460c2fe7da40244"]}, 0x19c}, {&(0x7f0000000200)={0x114, 0x18, 0x22, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x104, 0x48, @binary="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"}]}, 0x114}], 0x2, 0x0, 0x0, 0x20000040}, 0x8000) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000000)) 2018/04/09 20:04:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000d4fd4)={0x5, 0x1, 0x4, 0x9}, 0x2c) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x4b, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="860edae038cf684b25c61a0c8d4f362aae663f0457eb5b637c58bf263da57f0c16e4834379156ef88b3456f7274d164d8863fe9f8131de6313e8ce93c8e405401dce860565d77608ac495cc85de81660244dbffc62064ff49aee9e4153d9fba95321e707b3f47aba42d763cf81b048bc4be3560b57244a1ea08e35d29fa1d988dea8ff79198ff5a9b677c86f6c17e4cf89ec9b8a1390438a429698316160d910c1345fb9ec97d0a98c986e2ca0ca166f058b66025363b4a4328bfb282af5e9f794be1b9344bb92b9537580d0753ae0f236da", 0xd2, 0x8}, {&(0x7f0000000180)="a418aa12d8b1b65453259974f82db9984859295154d91700ccd9646a95733422671002deadf6d8971f8ca5bed0ecc603636b8324d349f42f5dac65d0c3e176e5103038786bb205e87f905d3ac6b183ec18306812743cf94a3a7c3c649e04f054337c6c107c1b23fad5af9999bb019f35be2428a05217fe76d19358195c3fde2fa05e9f67223f4ea26235df0d9eb13e", 0x8f}], 0x4, &(0x7f0000000280)={[{@hide='hide', 0x2c}, {@hide='hide', 0x2c}]}) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1) 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 163.874251] ISOFS: Unable to identify CD-ROM format. 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x3, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0xc3ff, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 163.964826] ISOFS: Unable to identify CD-ROM format. 2018/04/09 20:04:49 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = dup3(r0, r1, 0x80000) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x400, 0x0) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f0000000040)=""/107) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x1, 0x4) shutdown(r1, 0x0) fsync(r0) 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x4, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 3: r0 = socket(0x400000010, 0x802, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x2, 0x101a00) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x20000005}) write(r0, &(0x7f0000000040)="240000002a00ffffffffffffdffa0000000000000400000000000000090081f20400006c", 0xffffffffffffff9e) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x20000140, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xf, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x19}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x4000000006) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r3, 0x0) 2018/04/09 20:04:49 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x600000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:49 executing program 3: r0 = socket(0x4000000000000a, 0x7, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x57f) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000ffc)=0x90) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0xffc3, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000)) 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x14, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfec0000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x500000000000000, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:49 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'yam0\x00', 0x0}) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev={0xac, 0x14, 0x14, 0x17}, @in, 0x4e24, 0x9, 0x4e20, 0x6, 0xa, 0x20, 0xa0, 0xfb, r2, r3}, {0x2, 0x1f, 0x6, 0x4, 0x3, 0x80, 0x7f, 0x2}, {0x2, 0x2, 0x3ff, 0x2}, 0x985, 0x6e6bb6, 0x3, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d6, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x3504, 0x6, 0x0, 0x1000, 0x9ae1, 0x8, 0xbd}}, 0xe8) 2018/04/09 20:04:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000000000)) 2018/04/09 20:04:49 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x8, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x2, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x15, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x147353cc7eb91fe4) shutdown(r1, 0x0) 2018/04/09 20:04:50 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x4001002000000000, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x10, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x2000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x7, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0xc3ff000000000000, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x4, 0x6, 0x6}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x4000000006) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000004020940d, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:50 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7800, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xfffffffd, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x5, 0x2}) r1 = socket$inet6(0xa, 0x9, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x10001, 0x20, 0x20, 0x1}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x4000000006) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x64) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000000c0)={0xfff, 0x6, 0x7, 0x4, [], [], [], 0xac1, 0x4, 0x9, 0x70c3, "1b9a73842661675a930a560b0088aeaf"}) 2018/04/09 20:04:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x5000000, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:50 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x4) setsockopt(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:50 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x6, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1800000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045017, &(0x7f0000000000)) 2018/04/09 20:04:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x40010020, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:50 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x8, 0x2, 0x81d6) setsockopt$inet_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r3, 0x0) 2018/04/09 20:04:50 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x700000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x9, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0xc3ff0000, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:51 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa15, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:51 executing program 3: perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xb, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x500, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) shutdown(r1, 0x0) 2018/04/09 20:04:51 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0x5, 0x0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[r0]) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfc, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x5000000, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005451, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1a00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x6, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x2800, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, [], 0x15}, 0x81}}, 0x5, 0x2, 0x3, "a9763c078ce8902e1540a05deb9624163a791ff04f3f03182762486f38f906d0f87712993cf9e047778ab6c8cd6f7a44aca4415f7dc19c6f0b493c44b8dd12e89667a6a7939c972cecbd7d13b687c45e"}, 0xd8) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, r0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000500)={'ipvs\x00'}, &(0x7f0000000540)=0x1e) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000000c0)=""/219, &(0x7f00000004c0)=0xdb) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000007051d8cf401266", @ANYRES16=r4, @ANYBLOB="200025bd7000ffdbdf250900000008000500050000003800030008000300040000000800030004000000140002006c6f0000000000000000000000000000080001000200000008000400ff0700006800010008000b007369700014000300000000040000000000000000000000001400030000000000000000000000000000000000080006007772720008000500030000000800010002000000080008000000010014000300ff02000000000000000000000000000108000400f9ffffff"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) shutdown(r2, 0x80000000000) 2018/04/09 20:04:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0xc3ff0000, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045014, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 5: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf5ffffff, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x500, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xb2df, 0x0, 0x5}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x7}, &(0x7f0000000240)=0x8) fstatfs(r0, &(0x7f0000000140)=""/19) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x8a9a725a01faee22) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000040)=""/219) 2018/04/09 20:04:51 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x101000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000000)) 2018/04/09 20:04:51 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf00, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:51 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x101000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:52 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x3f00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x19aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x5, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:52 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) fgetxattr(r1, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f0000000040)=""/75, 0x4b) 2018/04/09 20:04:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:52 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x100000000000000) r2 = socket(0x10, 0x6, 0x10001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/09 20:04:52 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x700000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf5ffffff00000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0xffc3, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500d, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) r8 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:52 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:52 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x0, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:52 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x19, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x4001002000000000, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x0, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:52 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa00, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x78000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x4010) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x40010020, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0xc3ff, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:52 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x521680) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0xec, 0x0, 0x6, 0x6, 0x8, "7e0ba979f9162a83ab1b56e853d166b13fe1894352e71842b415503bd967f43f04b1e2b438b4f2f5efea973e6f211e3866b86ddc1706eeea6d71893591264b46", "6759a692c286b6425ff73c3e1b6bfad4eb81aa6a833d4edca488d4eacbf7f7b2cf16cd5f5405b8e505d78489af612a077cdef8e2355e3b413e401bce0c767b02", "ce9a65addc69d4a381bf7bd3d114118e262f037cefe18960f410efdd1426adbf", [0x3, 0x3f]}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x80000) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:52 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:52 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1100000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xbb8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000000000)) 2018/04/09 20:04:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20000140, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) timerfd_create(0x4, 0x80800) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xa00, 0x100) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001540)=""/177) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, &(0x7f0000000040)) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000380)) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x4) sendmmsg$nfc_llcp(r5, &(0x7f0000000440)=[{&(0x7f0000000040)={0x27, 0x0, 0x0, 0x5, 0x6, 0x3f, "a344a806572ab642889eb17c6c95f7829d622c0af53bab49796bf723b662cca602cac9748a0bde8f5f0320db52f442b20aecbc4ac5a29739a5ba4237912fab", 0xf}, 0x60, &(0x7f0000000100)=[{&(0x7f00000000c0)="e51f13a86424d5ad0921caa157b4e7a811731ca1f7fe3cdc2656b4bc4cb6545b4bcf833f89ee70546b41ce57b4b5704d9c10f5d37227203be3d4075ae5389cc7", 0x40}], 0x1, &(0x7f0000000140)={0x70, 0x11a, 0x2, "1a7035f7785f29240d903c6b649132221abf9c0b775adf383ebfe356abe1405b812da99d362787d8507b2bee1e2222840f8bdac03e117429d90c97b9872b1b87a13a08e43d24b6f8cc155ae066a235be5e57d91a644691b718"}, 0x70, 0x4000001}, {&(0x7f00000001c0)={0x27, 0x1, 0x1, 0x2, 0xd818, 0x1ff, "d28a4d3eb5b6b72f12943badcfb3d07a6964958e7a76a1f9b53dc4cafe2fd7af0bf6c892400f9c3167063b1f7e84f69faeea1962c6faf578ab9525a9d6d222", 0x8}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000240)="5b2e252a3d05ead701ca80b9b21c25c21196922d06c93b5860cd5462f907eba54459a83ca78097953eb3a08428388787785c154bc9465e971b51ffb9d3f1e2c17c0ae143db6cbfd3dd120f7f4e13927f1972fc8add7902337d04641deda2bef501424ee8205bc77c02951ee1920b159e58d076f30ded7c073ea9d60b71c92f92f29c910cb5cae8cc4184c23506eb570856992081714134da5a3ccef6152b1cc6881bcf5f1d825b64ef1778fae7f680bd85f0a22f9f3897a1b1b9fc72a549e24ba1ee9debd36ca664568b47ee5c7264858f265d", 0xd3}], 0x1, &(0x7f00000003c0)={0x58, 0x10f, 0x4, "8ac2e038338898c14425fd871da0db93e11d7418a8d5bcd3756cdc408caef1b1189d371c4ed9ceaf2efdd8e75d25328d1f6f5555f8915234324196207b3678dc687ff26913615ca2"}, 0x58, 0x8804}], 0x2, 0x20000800) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000540)=""/4096) 2018/04/09 20:04:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r6 = getuid() r7 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r6, r7) accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r5, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:53 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x0, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:53 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x40030000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4cf9c8feff24f558, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0xc3ff000000000000, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x0, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:53 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x13, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfc00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 167.735076] binder_alloc: binder_alloc_mmap_handler: 12707 20000000-20001000 already mapped failed -16 2018/04/09 20:04:53 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000), 0x0) 2018/04/09 20:04:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x500000000000000, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x30000, 0x0) accept4$ipx(r2, 0x0, &(0x7f0000000040), 0x800) 2018/04/09 20:04:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xc, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e", 0x2) 2018/04/09 20:04:53 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa10, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0xffc3, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045008, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 6: r0 = socket$inet6(0xa, 0x7, 0x80) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = accept4(r0, &(0x7f0000000140)=@nl, &(0x7f00000001c0)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000200)=0xfffffffffffffff9) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x800) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000300)={r3, &(0x7f00000002c0)=""/24}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r4, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) 2018/04/09 20:04:53 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e33", 0x3) 2018/04/09 20:04:53 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x16, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfec0, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x500000000000000, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:53 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x13, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, r0}) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x11, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000040)=[@flat={0x73622a85, 0xa, r2, 0x1}], &(0x7f0000000080)=[0x40, 0x38, 0x30]}}, @exit_looper={0x630d}, @acquire={0x40046305, 0x1}], 0xa2, 0x0, &(0x7f0000000140)="1830d33932ffec949505714607cca6bf7ed64aee8451ed49ec436b1c1d6c821cb2992006d10be8d5ca7b239620b231b6021b38fb3d3acc1247179635cf835b42e7330ac8b7ea3d31de5887773ad5d4b56c6238e2b637ab27bf8fac53edced4b75140ddeec45dd992fc1d3117f235fb38c2b92866225c818ad3070d49b8807aedec5baa22f84d4dcbdea74772221b52543305758d513bb05f9a69b8c59fa4b177c8fe"}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x24000000006) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/09 20:04:53 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1600000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 2018/04/09 20:04:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0xc3ff000000000000, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:53 executing program 5 (fault-call:2 fault-nth:0): syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) getuid() request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:53 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)="043ef206dadbbbdb16e5b96acede7d5f07b4d74b54853fdbdb78367f9358ac46b67d56a96010855a4574e491ddfef210d9ecea479c60e1a759", &(0x7f00000003c0)="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", 0x1}, 0x20) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000040)="4e61a2a9ce1391ad51be6a8b9f435c15606a78e7e49bf1652b9ea87585a0c7387136c64b1061509c694ef5596919eb757423ce563097c0053933584ddd88b46f4121a0b13a3450696042dbe15e94db9a79b032913d6952cc1e07b5fe597911bbf0d5ce228e32fcfd4f47aa334bfbe21d9359c7885cf27db9e6503f34bad53e1eb00620a1e412d84a8446a50bfa85e9c7165b715a9a9fbe7906a118f623cc66d1a69a82da1bc6d6a69c3dfae6110a22ac44f38bbc0e8d7ed9b8767fddc1fbce843ea030f6cba1f96d9ab2849902a2b2fc8ffc21c5bc2e2629357f0ca90921d40c31d371da12fd2d77", 0xe8) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty, 0x4000}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, 0x401, 0x0, 0xff, 0xc, 0xdb98, 0x80000001, 0x9}, 0x20) listen(r1, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x10000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0xc3ff0000, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040049409, &(0x7f0000000000)) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x5, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1a, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xff000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) pselect6(0x40, &(0x7f0000000100)={0x80000000, 0xdc3, 0x1, 0x3, 0xbb, 0x3e8a, 0xe143, 0x100000000}, &(0x7f0000000140)={0xfff, 0xfffffffffffffffb, 0x3, 0xffff, 0x8, 0x5, 0x8, 0xbe21}, &(0x7f0000000180)={0x0, 0xffff, 0x7, 0xffff, 0x1000, 0x3, 0x9}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={0x8}, 0x8}) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000280)="2e5b8a3d7105f24be63066ff5813dc212f9a6f297b3b67380c439b355f079230d29cd6f80ba776acc206506b446807a38f13d3fe8bf70fd98fe58a6e0be0ee69ad450663e0e4261b9ff75d8268325310b9") lookup_dcookie(0x6, &(0x7f0000000000)=""/243, 0x93) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x500, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) getuid() request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x6, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045007, &(0x7f0000000000)) 2018/04/09 20:04:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x7, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf5ffffff, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0xc3ff, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0189436, &(0x7f0000000000)) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfe80000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x8, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') ioctl$TCXONC(r2, 0x540a, 0x5) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000000)={@broadcast, @multicast2, @remote}, &(0x7f0000000040)=0xc) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) getsockopt(r1, 0xf9, 0x5, &(0x7f00000000c0)=""/251, &(0x7f00000001c0)=0xfb) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xc00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x20000140, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004507d, &(0x7f0000000000)) 2018/04/09 20:04:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) getuid() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x78, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0xa, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) r5 = getuid() r6 = request_key(&(0x7f0000000bc0)='logon\x00', &(0x7f0000000c00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c40)='.(ppp1cpusetvboxnet1\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r5, r6) r7 = accept4(r4, &(0x7f0000000a40)=@nl=@unspec, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff00000000}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff]}, 0x400}], 0x90) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xf, 0x100000001, 0x3, 0x5, 0x2}, 0x2c) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:54 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x15, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x17, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:54 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x2, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x5, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x2000) 2018/04/09 20:04:54 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200580, 0x11f) write$tun(r1, &(0x7f0000000040)={@pi={0x0, 0x11}, @hdr={0x2, 0x80, 0xff, 0x7, 0x7fff, 0x1}, @ipx={0xffff, 0x24, 0x800, 0x4, {@random=0x1, @current, 0x5}, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x10001}, "ebafbcf089e6"}}, 0x32) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:55 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfe800000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:55 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xe00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:55 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x3, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xa000000) 2018/04/09 20:04:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x4001002000000000, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:55 executing program 6: r0 = socket$inet6(0xa, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x13, 0x10}, 0xc) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0xad}}}, 0x88) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000001c0), 0x1) 2018/04/09 20:04:55 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:55 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1300000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) getuid() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:55 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x400300, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 169.828579] FAULT_INJECTION: forcing a failure. [ 169.828579] name failslab, interval 1, probability 0, space 0, times 0 [ 169.840086] CPU: 0 PID: 12995 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 169.847022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.856383] Call Trace: [ 169.858983] dump_stack+0x1b9/0x294 [ 169.862628] ? dump_stack_print_info.cold.2+0x52/0x52 [ 169.867834] ? rcu_read_lock+0x70/0x70 [ 169.871740] should_fail.cold.4+0xa/0x1a [ 169.875813] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 169.880928] ? page_add_new_anon_rmap+0x850/0x850 [ 169.885779] ? print_usage_bug+0xc0/0xc0 [ 169.889845] ? print_usage_bug+0xc0/0xc0 [ 169.893914] ? graph_lock+0x170/0x170 [ 169.897720] ? print_usage_bug+0xc0/0xc0 [ 169.901786] ? __wake_up_common_lock+0x1c2/0x300 [ 169.906547] ? find_held_lock+0x36/0x1c0 [ 169.910616] ? __lock_is_held+0xb5/0x140 [ 169.914700] ? check_same_owner+0x320/0x320 [ 169.919032] ? rcu_note_context_switch+0x710/0x710 [ 169.923962] ? __mutex_lock+0x7d9/0x17f0 [ 169.928025] ? alloc_set_pte+0x1077/0x16a0 [ 169.932267] __should_failslab+0x124/0x180 [ 169.936510] should_failslab+0x9/0x14 [ 169.940318] kmem_cache_alloc_trace+0x2cb/0x780 [ 169.944998] ? mutex_trylock+0x2a0/0x2a0 [ 169.949076] snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 [ 169.954712] ? debug_check_no_locks_freed+0x310/0x310 [ 169.960003] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 169.965202] ? print_usage_bug+0xc0/0xc0 [ 169.969270] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 169.975152] ? print_usage_bug+0xc0/0xc0 [ 169.979211] ? debug_check_no_locks_freed+0x310/0x310 [ 169.984398] ? __lock_acquire+0x7f5/0x5130 [ 169.988623] ? debug_check_no_locks_freed+0x310/0x310 [ 169.993806] ? graph_lock+0x170/0x170 [ 169.997596] ? __lock_acquire+0x7f5/0x5130 [ 170.001823] ? debug_check_no_locks_freed+0x310/0x310 [ 170.006999] ? print_usage_bug+0xc0/0xc0 [ 170.011055] ? find_held_lock+0x36/0x1c0 [ 170.015114] snd_pcm_oss_change_params+0x80/0xe0 [ 170.019859] snd_pcm_oss_make_ready+0xbe/0x170 [ 170.024432] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 170.029870] ? __lock_acquire+0x7f5/0x5130 [ 170.034091] ? snd_pcm_oss_make_ready+0x170/0x170 [ 170.038922] ? __might_sleep+0x95/0x190 [ 170.042890] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 170.047285] ? _parse_integer+0x190/0x190 [ 170.051420] ? graph_lock+0x170/0x170 [ 170.055206] ? snd_pcm_oss_release+0x290/0x290 [ 170.059778] ? find_held_lock+0x36/0x1c0 [ 170.063828] ? graph_lock+0x170/0x170 [ 170.067621] ? find_held_lock+0x36/0x1c0 [ 170.071677] ? lock_downgrade+0x8e0/0x8e0 [ 170.075815] ? kasan_check_read+0x11/0x20 [ 170.079950] ? rcu_is_watching+0x85/0x140 [ 170.084086] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 170.089271] ? __fget+0x40c/0x650 [ 170.092713] ? match_held_lock+0x881/0x8b0 [ 170.096933] ? expand_files.part.8+0x9a0/0x9a0 [ 170.101502] ? kasan_check_write+0x14/0x20 [ 170.105725] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 170.110650] ? wait_for_completion+0x870/0x870 [ 170.115222] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 170.120398] ? snd_pcm_oss_release+0x290/0x290 [ 170.124968] do_vfs_ioctl+0x1cf/0x1650 [ 170.128847] ? ioctl_preallocate+0x2e0/0x2e0 [ 170.133243] ? fget_raw+0x20/0x20 [ 170.136685] ? __sb_end_write+0xac/0xe0 [ 170.140649] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 170.146167] ? fput+0x130/0x1a0 [ 170.149436] ? ksys_write+0x1a6/0x250 [ 170.153228] ? security_file_ioctl+0x94/0xc0 [ 170.157630] ksys_ioctl+0xa9/0xd0 [ 170.161073] SyS_ioctl+0x24/0x30 [ 170.164424] ? ksys_ioctl+0xd0/0xd0 [ 170.168041] do_syscall_64+0x29e/0x9d0 [ 170.171916] ? vmalloc_sync_all+0x30/0x30 [ 170.176048] ? _raw_spin_unlock_irq+0x27/0x70 [ 170.180529] ? finish_task_switch+0x1ca/0x820 [ 170.185017] ? syscall_return_slowpath+0x5c0/0x5c0 [ 170.189943] ? syscall_return_slowpath+0x30f/0x5c0 [ 170.194867] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 170.200225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.205061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.210234] RIP: 0033:0x455259 [ 170.213408] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.221106] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 2018/04/09 20:04:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x300) 2018/04/09 20:04:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="88e93f436517a4c4454849c9075b5432e4f2bad1392ccee50aaeb4aa76b275336bd2c78c1bd21f464fb724aa4597df6e573d1929cacd82ca68ade35a5735e15869384e3be8efdcbe3ec686f46c12ad3fd06a8f3d916375b64f2d9c8706251e4fbb1e7a98bfd7e974e0d5211094d85aefdceb74db343a43dcd9b49fb1a9a2d9af0f9b013c241d395e11cc780cdc237d7ab13126d353074e177e1a247f95a9013dea1514f4becff3779f8dbe9fd65a1ab583bd05a8481674778ced77c9fdace8c3e366dff96bd4f809cb61202fc4", 0xcd, 0xff}, {&(0x7f0000000240)="fabc8110c259931660d654c6e7b1a343c9513fe7747db03541331d85c0430ce8a45ddb851bac4ae2fdbae01c63f5fe804898734477cb68db5b0cc641b34a19916ba7a2a30b24ba014a70659ae7a3d71cea493af862cdd2f3d2b8d30f351d89fc17895f5e22d6ca2c9a61c54366ac8b2037a93291fc59219339695592f90e6442e800dfb396100eafa5dc84feb9", 0x8d, 0xa0d}, {&(0x7f0000000300)="1153cf13142ef5e8918b345e5e8b6d3d070e73276049dc214acb4337be1be21f3131c1cf9490988f20c855943eb72de1ba28ae0835040fbb03e076c761414d46771adb2489d1647570ff74d55b3854c5a59351882d8aef7d6f58f563badd0aa427c762977da427d61309ee", 0x6b, 0x9}], 0x100000, &(0x7f00000000c0)={[{@sys_immutable='sys_immutable', 0x2c}]}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000440)=@ioapic) r1 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x9, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x5000000, @multicast2=0xe0000002}, 0x10) [ 170.228367] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 170.235631] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.242889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 170.250158] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000000 2018/04/09 20:04:55 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x16aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:55 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1100000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:55 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:55 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/144, &(0x7f00000000c0)=0x90) 2018/04/09 20:04:55 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xfffffdfd) [ 170.474762] FAULT_INJECTION: forcing a failure. [ 170.474762] name failslab, interval 1, probability 0, space 0, times 0 [ 170.486092] CPU: 1 PID: 13039 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 170.493027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.502391] Call Trace: [ 170.504995] dump_stack+0x1b9/0x294 [ 170.508628] ? dump_stack_print_info.cold.2+0x52/0x52 [ 170.513816] ? perf_trace_lock_acquire+0xe3/0x980 [ 170.518652] ? __save_stack_trace+0x7e/0xd0 [ 170.522968] should_fail.cold.4+0xa/0x1a [ 170.527030] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 170.532125] ? save_stack+0x43/0xd0 [ 170.535740] ? kasan_kmalloc+0xc4/0xe0 [ 170.539613] ? kmem_cache_alloc_trace+0x152/0x780 [ 170.544447] ? snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 [ 170.550231] ? snd_pcm_oss_change_params+0x80/0xe0 [ 170.555150] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 170.559895] ? graph_lock+0x170/0x170 [ 170.563681] ? SyS_ioctl+0x24/0x30 [ 170.567206] ? do_syscall_64+0x29e/0x9d0 [ 170.571256] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.576610] ? find_held_lock+0x36/0x1c0 [ 170.580658] ? __lock_is_held+0xb5/0x140 [ 170.584714] ? check_same_owner+0x320/0x320 [ 170.589111] ? rcu_note_context_switch+0x710/0x710 [ 170.594041] __should_failslab+0x124/0x180 [ 170.598267] should_failslab+0x9/0x14 [ 170.602056] kmem_cache_alloc_trace+0x2cb/0x780 [ 170.606715] ? mutex_trylock+0x2a0/0x2a0 [ 170.610772] snd_pcm_oss_change_params_locked+0x231/0x3ce0 [ 170.616383] ? debug_check_no_locks_freed+0x310/0x310 [ 170.621733] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 170.626909] ? print_usage_bug+0xc0/0xc0 [ 170.630959] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 170.636834] ? perf_trace_lock_acquire+0xe3/0x980 [ 170.641664] ? debug_check_no_locks_freed+0x310/0x310 [ 170.646846] ? perf_trace_lock+0x900/0x900 [ 170.651076] ? perf_trace_lock+0x900/0x900 [ 170.655302] ? graph_lock+0x170/0x170 [ 170.659090] ? __lock_acquire+0x7f5/0x5130 [ 170.663314] ? debug_check_no_locks_freed+0x310/0x310 [ 170.668493] ? find_held_lock+0x36/0x1c0 [ 170.672551] snd_pcm_oss_change_params+0x80/0xe0 [ 170.677296] snd_pcm_oss_make_ready+0xbe/0x170 [ 170.681869] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 170.687305] ? snd_pcm_oss_make_ready+0x170/0x170 [ 170.692135] ? __might_sleep+0x95/0x190 [ 170.696104] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 170.700501] ? _parse_integer+0x190/0x190 [ 170.704637] ? graph_lock+0x170/0x170 [ 170.708425] ? snd_pcm_oss_release+0x290/0x290 [ 170.712994] ? find_held_lock+0x36/0x1c0 [ 170.717055] ? graph_lock+0x170/0x170 [ 170.720846] ? find_held_lock+0x36/0x1c0 [ 170.724902] ? lock_downgrade+0x8e0/0x8e0 [ 170.729046] ? kasan_check_read+0x11/0x20 [ 170.733182] ? rcu_is_watching+0x85/0x140 [ 170.737322] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 170.742690] ? __fget+0x40c/0x650 [ 170.746131] ? match_held_lock+0x881/0x8b0 [ 170.750355] ? expand_files.part.8+0x9a0/0x9a0 [ 170.754925] ? kasan_check_write+0x14/0x20 [ 170.759148] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 170.764070] ? wait_for_completion+0x870/0x870 [ 170.768644] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 170.773821] ? snd_pcm_oss_release+0x290/0x290 [ 170.778392] do_vfs_ioctl+0x1cf/0x1650 [ 170.782268] ? ioctl_preallocate+0x2e0/0x2e0 [ 170.786661] ? fget_raw+0x20/0x20 [ 170.790099] ? __sb_end_write+0xac/0xe0 [ 170.794069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 170.799596] ? fput+0x130/0x1a0 [ 170.802863] ? ksys_write+0x1a6/0x250 [ 170.806652] ? security_file_ioctl+0x94/0xc0 [ 170.811062] ksys_ioctl+0xa9/0xd0 [ 170.814502] SyS_ioctl+0x24/0x30 [ 170.817857] ? ksys_ioctl+0xd0/0xd0 [ 170.821473] do_syscall_64+0x29e/0x9d0 [ 170.825347] ? vmalloc_sync_all+0x30/0x30 [ 170.829482] ? _raw_spin_unlock_irq+0x27/0x70 [ 170.833963] ? finish_task_switch+0x1ca/0x820 [ 170.838446] ? syscall_return_slowpath+0x5c0/0x5c0 [ 170.843365] ? syscall_return_slowpath+0x30f/0x5c0 [ 170.848286] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 170.853643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.858482] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.863658] RIP: 0033:0x455259 [ 170.866833] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.874530] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 170.881790] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 170.889050] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.896307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 170.903565] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000001 [ 170.921646] IPVS: length: 144 != 24 [ 170.953776] IPVS: length: 144 != 24 2018/04/09 20:04:56 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x40010020, @multicast2=0xe0000002}, 0x10) 2018/04/09 20:04:56 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x8000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:56 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1900000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x7) setsockopt(r0, 0x8000114, 0x800, &(0x7f0000000140)="2a8e339ce2f8bfbb000000000000023594f3a2ccc637266107f13ed23d747be6ac4528fd60186a03d8c176b88acb2278d759de94f7e2c4c9037fe7f5820464aa7bad15af17829fede27f9e6205eb184d0ea06cfe3d7767121a38ccded4780fa413d2043e214dccd5eed8a0fd", 0xffffffffffffff55) 2018/04/09 20:04:56 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) 2018/04/09 20:04:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xffffffffffffffff) 2018/04/09 20:04:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:56 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 171.119757] FAULT_INJECTION: forcing a failure. [ 171.119757] name failslab, interval 1, probability 0, space 0, times 0 [ 171.131075] CPU: 1 PID: 13064 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 171.138004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.147364] Call Trace: [ 171.149969] dump_stack+0x1b9/0x294 [ 171.153613] ? dump_stack_print_info.cold.2+0x52/0x52 [ 171.158817] ? __save_stack_trace+0x7e/0xd0 [ 171.163165] should_fail.cold.4+0xa/0x1a [ 171.167248] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 171.172367] ? save_stack+0x43/0xd0 [ 171.176003] ? kasan_kmalloc+0xc4/0xe0 [ 171.179906] ? kmem_cache_alloc_trace+0x152/0x780 [ 171.184760] ? snd_pcm_oss_change_params_locked+0x231/0x3ce0 [ 171.190565] ? snd_pcm_oss_change_params+0x80/0xe0 [ 171.195509] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 171.200279] ? graph_lock+0x170/0x170 [ 171.204084] ? SyS_ioctl+0x24/0x30 [ 171.207632] ? do_syscall_64+0x29e/0x9d0 [ 171.211706] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/09 20:04:56 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x5]}, 0x10) 2018/04/09 20:04:56 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:56 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1a, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xffffffff00000000) [ 171.217082] ? find_held_lock+0x36/0x1c0 [ 171.221158] ? __lock_is_held+0xb5/0x140 [ 171.225247] ? check_same_owner+0x320/0x320 [ 171.229588] ? rcu_note_context_switch+0x710/0x710 [ 171.234538] __should_failslab+0x124/0x180 [ 171.238789] should_failslab+0x9/0x14 [ 171.242609] kmem_cache_alloc_trace+0x2cb/0x780 [ 171.247288] ? mutex_trylock+0x2a0/0x2a0 [ 171.251369] snd_pcm_oss_change_params_locked+0x269/0x3ce0 [ 171.257011] ? debug_check_no_locks_freed+0x310/0x310 [ 171.262222] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.267430] ? print_usage_bug+0xc0/0xc0 [ 171.271509] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 171.277403] ? print_usage_bug+0xc0/0xc0 [ 171.281479] ? debug_check_no_locks_freed+0x310/0x310 [ 171.286681] ? __lock_acquire+0x7f5/0x5130 [ 171.290926] ? debug_check_no_locks_freed+0x310/0x310 [ 171.296128] ? graph_lock+0x170/0x170 [ 171.299933] ? __lock_acquire+0x7f5/0x5130 [ 171.304170] ? debug_check_no_locks_freed+0x310/0x310 [ 171.309352] ? print_usage_bug+0xc0/0xc0 [ 171.313420] ? find_held_lock+0x36/0x1c0 [ 171.317492] snd_pcm_oss_change_params+0x80/0xe0 [ 171.322261] snd_pcm_oss_make_ready+0xbe/0x170 [ 171.326845] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 171.332302] ? __lock_acquire+0x7f5/0x5130 [ 171.336547] ? snd_pcm_oss_make_ready+0x170/0x170 [ 171.341927] ? __might_sleep+0x95/0x190 [ 171.345911] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 171.350325] ? _parse_integer+0x190/0x190 [ 171.354483] ? graph_lock+0x170/0x170 [ 171.358287] ? snd_pcm_oss_release+0x290/0x290 [ 171.362881] ? find_held_lock+0x36/0x1c0 [ 171.366950] ? graph_lock+0x170/0x170 [ 171.370751] ? find_held_lock+0x36/0x1c0 [ 171.374823] ? lock_downgrade+0x8e0/0x8e0 [ 171.378979] ? kasan_check_read+0x11/0x20 [ 171.383133] ? rcu_is_watching+0x85/0x140 [ 171.387285] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.392490] ? __fget+0x40c/0x650 [ 171.395950] ? match_held_lock+0x881/0x8b0 [ 171.400185] ? expand_files.part.8+0x9a0/0x9a0 [ 171.404771] ? kasan_check_write+0x14/0x20 [ 171.409015] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 171.413962] ? wait_for_completion+0x870/0x870 [ 171.418554] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 171.423755] ? snd_pcm_oss_release+0x290/0x290 [ 171.428347] do_vfs_ioctl+0x1cf/0x1650 [ 171.432248] ? ioctl_preallocate+0x2e0/0x2e0 [ 171.436663] ? fget_raw+0x20/0x20 [ 171.440126] ? __sb_end_write+0xac/0xe0 [ 171.444108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 171.449648] ? fput+0x130/0x1a0 [ 171.452935] ? ksys_write+0x1a6/0x250 [ 171.456746] ? security_file_ioctl+0x94/0xc0 [ 171.461166] ksys_ioctl+0xa9/0xd0 [ 171.464627] SyS_ioctl+0x24/0x30 [ 171.468001] ? ksys_ioctl+0xd0/0xd0 [ 171.471634] do_syscall_64+0x29e/0x9d0 [ 171.475520] ? vmalloc_sync_all+0x30/0x30 [ 171.479671] ? _raw_spin_unlock_irq+0x27/0x70 [ 171.484172] ? finish_task_switch+0x1ca/0x820 [ 171.488672] ? syscall_return_slowpath+0x5c0/0x5c0 [ 171.493605] ? syscall_return_slowpath+0x30f/0x5c0 [ 171.498538] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 171.503900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.508747] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.513923] RIP: 0033:0x455259 [ 171.517098] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.524792] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 171.532049] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 171.539306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.546563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 171.553820] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000002 2018/04/09 20:04:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7800, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x20000140]}, 0x10) 2018/04/09 20:04:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0xfffffffffffffe88) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x15aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd0fb, 0x0) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000080)=0x8, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f00000000c0)={0xe, 0x1, 0x9}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r2 = socket(0x40000000012, 0x0, 0xfffd) ioctl$int_out(r0, 0x5462, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) setsockopt(r2, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xb00020000000000) 2018/04/09 20:04:57 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xe, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) listen(r0, 0x4000000006) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@broadcast=0xffffffff, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x24baf1df}, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x32, r2, r3}, {0x4, 0x1, 0x9e7d, 0xffffffff, 0x4f, 0xff, 0x10000, 0x101}, {0x81, 0x1f, 0x8000, 0x1ff}, 0x80, 0x6e6bbc, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback=0x7f000001, 0x4d6}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3501, 0x4, 0x0, 0x1, 0xac0c, 0x7, 0x7}}, 0xe8) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='*$\x00', r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipddp0\x00', r5}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r5}, 0x10) [ 171.641092] FAULT_INJECTION: forcing a failure. [ 171.641092] name failslab, interval 1, probability 0, space 0, times 0 [ 171.652416] CPU: 1 PID: 13097 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 171.659351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.668710] Call Trace: [ 171.671311] dump_stack+0x1b9/0x294 [ 171.674954] ? dump_stack_print_info.cold.2+0x52/0x52 [ 171.680168] should_fail.cold.4+0xa/0x1a [ 171.684244] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 171.689368] ? debug_check_no_locks_freed+0x310/0x310 [ 171.694574] ? graph_lock+0x170/0x170 [ 171.698386] ? debug_check_no_locks_freed+0x310/0x310 [ 171.703593] ? find_held_lock+0x36/0x1c0 [ 171.707668] ? __lock_is_held+0xb5/0x140 [ 171.711754] ? check_same_owner+0x320/0x320 [ 171.716092] ? rcu_note_context_switch+0x710/0x710 [ 171.721037] ? graph_lock+0x170/0x170 [ 171.724855] __should_failslab+0x124/0x180 [ 171.729105] should_failslab+0x9/0x14 [ 171.732916] __kmalloc+0x2c8/0x760 [ 171.736472] ? constrain_params_by_rules+0x141/0x1360 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x80fe, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 171.741671] ? find_held_lock+0x36/0x1c0 [ 171.745752] constrain_params_by_rules+0x141/0x1360 [ 171.750780] ? lock_downgrade+0x8e0/0x8e0 [ 171.754945] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 171.760147] ? rcu_is_watching+0x85/0x140 [ 171.764307] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.769507] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.774714] ? is_bpf_text_address+0xd7/0x170 [ 171.779218] ? kernel_text_address+0x79/0xf0 [ 171.783634] ? __unwind_start+0x166/0x330 [ 171.787795] ? graph_lock+0x170/0x170 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa16, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 171.791612] ? unwind_get_return_address+0x61/0xa0 [ 171.796549] ? __save_stack_trace+0x7e/0xd0 [ 171.800889] ? __lock_is_held+0xb5/0x140 [ 171.804972] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 171.810005] ? snd_interval_refine+0x428/0x700 [ 171.814605] snd_pcm_hw_refine+0x8e9/0x1180 [ 171.818934] ? __wake_up_common_lock+0x1c2/0x300 [ 171.823711] ? constrain_params_by_rules+0x1360/0x1360 [ 171.829004] ? graph_lock+0x170/0x170 [ 171.832807] ? __lock_is_held+0xb5/0x140 [ 171.836885] ? __lock_is_held+0xb5/0x140 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xaaaaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x715000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) connect(r0, &(0x7f0000000080)=@ethernet={0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}}, 0x80) [ 171.840960] ? snd_pcm_oss_change_params_locked+0x269/0x3ce0 [ 171.846771] ? rcu_read_lock_sched_held+0x108/0x120 [ 171.851799] ? _snd_pcm_hw_param_min+0x330/0x570 [ 171.856560] snd_pcm_oss_change_params_locked+0x901/0x3ce0 [ 171.862191] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.867390] ? print_usage_bug+0xc0/0xc0 [ 171.871462] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 171.877355] ? print_usage_bug+0xc0/0xc0 [ 171.881427] ? debug_check_no_locks_freed+0x310/0x310 [ 171.886623] ? __lock_acquire+0x7f5/0x5130 [ 171.890862] ? debug_check_no_locks_freed+0x310/0x310 [ 171.896055] ? graph_lock+0x170/0x170 [ 171.899858] ? __lock_acquire+0x7f5/0x5130 [ 171.904102] ? debug_check_no_locks_freed+0x310/0x310 [ 171.909294] ? print_usage_bug+0xc0/0xc0 [ 171.913360] ? find_held_lock+0x36/0x1c0 [ 171.917432] snd_pcm_oss_change_params+0x80/0xe0 [ 171.922191] snd_pcm_oss_make_ready+0xbe/0x170 [ 171.926776] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 171.932230] ? __lock_acquire+0x7f5/0x5130 [ 171.936477] ? snd_pcm_oss_make_ready+0x170/0x170 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x15aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0xffc3]}, 0x10) [ 171.941326] ? __might_sleep+0x95/0x190 [ 171.945309] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 171.949728] ? _parse_integer+0x190/0x190 [ 171.953882] ? graph_lock+0x170/0x170 [ 171.957694] ? snd_pcm_oss_release+0x290/0x290 [ 171.962284] ? find_held_lock+0x36/0x1c0 [ 171.966354] ? graph_lock+0x170/0x170 [ 171.970159] ? find_held_lock+0x36/0x1c0 [ 171.974229] ? lock_downgrade+0x8e0/0x8e0 [ 171.978383] ? kasan_check_read+0x11/0x20 [ 171.982554] ? rcu_is_watching+0x85/0x140 [ 171.986715] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.991922] ? retint_kernel+0x10/0x10 [ 171.995825] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 172.000855] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 172.005629] ? retint_kernel+0x10/0x10 [ 172.009537] ? do_vfs_ioctl+0x169/0x1650 [ 172.013613] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 172.018467] ? snd_pcm_oss_release+0x290/0x290 [ 172.023064] do_vfs_ioctl+0x1cf/0x1650 [ 172.026976] ? ioctl_preallocate+0x2e0/0x2e0 [ 172.031397] ? fget_raw+0x20/0x20 [ 172.034856] ? __sb_end_write+0xac/0xe0 [ 172.038840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 172.044380] ? fput+0x130/0x1a0 [ 172.047669] ? ksys_write+0x1a6/0x250 [ 172.051478] ? security_file_ioctl+0x94/0xc0 [ 172.055896] ksys_ioctl+0xa9/0xd0 [ 172.059357] SyS_ioctl+0x24/0x30 [ 172.062723] ? ksys_ioctl+0xd0/0xd0 [ 172.066357] do_syscall_64+0x29e/0x9d0 [ 172.070247] ? vmalloc_sync_all+0x30/0x30 [ 172.074401] ? _raw_spin_unlock_irq+0x27/0x70 [ 172.078907] ? finish_task_switch+0x1ca/0x820 [ 172.083416] ? syscall_return_slowpath+0x5c0/0x5c0 [ 172.088370] ? syscall_return_slowpath+0x30f/0x5c0 [ 172.093316] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 172.098699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.103573] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.108768] RIP: 0033:0x455259 [ 172.112042] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.119758] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 172.127031] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 172.134301] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.141573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 172.148844] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000003 2018/04/09 20:04:57 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x44000) sendto(r0, &(0x7f0000001c00)="088c7659f0cedd28b4a2b2655d521b60c4530741db1aed377da010ee6c36623f37d810112e367bcc4c4ccbfacd88e6a1eb59d21837a20ce64843731131613a37301cb3190bdad3c71c009c98fb2fc0ea26aa8ad18cb215673cb474c739b99db7281ec378295a5f8ede56ac0a850ded9d667d3c3aa81650cd4e8d0ec55c4ec652faa880a045002b35ec59e421434afecc40dbd4fd1a079d65850c4f7d610efea2d8fc7f43f9b47edf46a9d0c2e45d048a36f7701484d35d7691f49e9cb923", 0xbe, 0x81, &(0x7f0000001cc0)=@llc={0x1a, 0x30b, 0x8, 0xff, 0x1, 0x7f, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) sendmmsg$alg(r2, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3e4f0c17b530d25418fb45b9799759b4e000b485ff0a66e578e1d2d7d33c5c51a9b6fe45c04301bd85c3ebf60703c503c67c90e7b58b1b46d652e1bbb24c19533cc856dc4091665e3668069312ea8922647f34f5ed8f459554d9a360613646ebeb906d4d232e2f7b53aa3c9e4939b5f00f87e75c1adaedce39b84f1304", 0x7d}], 0x1}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="8bf3a387436ea8beb6", 0x9}, {&(0x7f0000000140)="833847c4b2ff19c5f08267bdee284efe5110bd931c3775fe8e988274c79762724fdaecad625ec1c19ae530a58a45407c89048346c6e5f1f7cfb11b7166a7463ea8c71992b5a727732116eeac018b2e037e23741fa272379d9b7728a494ed091f97cf7921289644603f87fdc113a4de3740a8ea620ee2d5dd82073dc8019912748d8393c54e9b1c8bb020d93a9b9876bfd179c3473ce9a16d27bae44881c4060645193f3248e84bb9e7a82a65b134801e4c0d2a9ceff5d03fd9ed8050a97cad", 0xbf}, {&(0x7f0000000200)="70e0d01fb6cb1fadbd99d726a3300377eff2deb5ee324479340338c83fff86386f7cc10af5ad", 0x26}, {&(0x7f0000000240)="e105cb9def17d3dad62f0d4afb3afd73b3b1628329adb04b218d2e485e7dd6eeb7dd5a19b5005f1982236a0f7799547634150aded231bc9b35e519f9639cc7fe0692f327418c9d535c826cfc1bca3b1d4047ae463ce6b16e2ee0317ee0a9599ce08181bdbfb97f9b996d264b85c759234e237efa2132eeaf00bf5464c67cced8572bed77f40dfd9dc1c056867a62f1021420bf1870c46dd70868ab32d8fe27e2d6960574e83de33e58f201fc5cb6c6725753636a267a6bde9963561d80", 0xbd}], 0x4, &(0x7f00000003c0)=[@iv={0x48, 0x117, 0x2, 0x33, "3b9fe65fd286168e84ca13f0d6adbf9fe25d3eae591ad12118406a393046aa2d14884cf52adc767cf88550892038a8035251be"}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x20}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7ff}], 0xc0, 0x4000000}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="16c3d61781d3c5946d14cf4200ed1377696ed9c5db0c57be706d033f23c498b618579fbd2ea84fd7766b14191ca82ba3323d2892171aa942313d61f77cacda43df87d6099875d5905bb27e262ab5eda5eabc7183319d0b8840383b7e3cb8e35d2026644ab7db", 0x66}, {&(0x7f0000000340)="11a7492083ff6c94dc8cd9", 0xb}, {&(0x7f0000000500)="675bccf384d9675dd88a6e", 0xb}], 0x3, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3}, @iv={0xc0, 0x117, 0x2, 0xaa, "0458ed4d715b4f2f9024d0ced9fd47fcadba26e5ab58eba8a923d0d8dc600455ee9929f88f53b805c9541d9929562ac729a805f6a2ff38b71b0e742f5daa80b3873b76ef01053330fa1547bb3883732eae9bc183ae703bcb94a2db394012e29eebc77ece5da8bee0617f2e7cd1a0a2889f120ce16a6f21b6a9cd07de134ce57e3052bf0127c4f3550b9315f06e53153eeac16d6971cde497203af87299a62ee4149d07b613b6776c068a"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb5, "6b9a528c24ecae27ebc44ff82074df205435d253dce88edac2d47c4c263713845f2e714b421ced48394872e87b65a2f5389a97bedb4d6d97c0b9c1ecf194e9e4d805bbb9e4858e3f28a1c312fa4ef4351077bab95af76a3e7f84593d1ee100e7eb0a5c7c518ccd0f3a7e6cae5b7f05bb6639c27f187f362e707df32600dffe762187d8f94fa81dcb4623f6f05543a2bb37a5a3b76256be327d0077447e6999244ba84ef76ab06608f93d2a92ce89e717eb7effdba1"}], 0x1c0, 0x4008000}, {0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000740)="754dc566335c67c1fedb605f315c0205dc416ffee592f8f9f3ebca99a3b49eb32f43bddfacd9d249dc33c045c45c9b9b679e8adfec4adfedc56ae7a95a311b9cf97fa31182eb2db72f562c5ba29f916a8794a551bcca40fae66efc1e56e6d0c51c4780d56ecf29b9f2ab64f143a742e0944ce3c7601b85c3ac8ac60e1554c9a6ebd2a6345b5e3074f3a50c55ef6210c46700fefe", 0x94}, {&(0x7f0000000800)}, {&(0x7f0000000840)="17c2b6d13fbc6c542b8b562d8d2494fd397e414817f92fcd7a947e0d15bf49213c483f936b1c78379bb7403aa3f1a5dc38a59b7927587e3111874897a487448e2c34f690528a51bd48c87c23947d2d26850b076e7ad7aafe286ef211", 0x5c}, {&(0x7f00000008c0)="a94699418ad9c71628dacb36a13ed12957c74a1a5bf82345af95", 0x1a}, {&(0x7f0000000900)="e6ef5ec3b020c6c8307ef85ab22dcc05e974f5889230b00ffa3fc9015f1f67b67f33ceaedf0579d7480701fcdf0eca15394b639aba1bb9590cc3e29b44fe3be54721e0df93ec9790d65ad8744033f327a6b133263961b1903c04fd6a33b6444d9a3fd796", 0x64}, {&(0x7f0000000980)="0ffe3f7ae1b1fb581f7e0d5130d1e96a5accc5bf81aefbf78b006fadea6e15a7e1fa2fef8c520f98641c6c995081d2d30a3fad7b2138dce1334bdf8bffe1007c8b134115c5632067e1fef4ad7f6101660e858287055497ddda90f0dbd161ccf34ad065553a1449131bf55f4d525d6cca1c6b5d97536484a0b17ed9f3dd4dd82590c38a8bc8b7f58cff1059fc6e156b3514a97c09457672a7df879ddb005042d7fe788bd9ec4a458e9460856ec85813583d920e5374e9aff6cf883c8f18adebe8efe28dfbb60e7fc9b88b022881c618906b82d0863293cb69f5e101b84b3f3b2c53e0a574117330b94b004b7a7e48a192c8f8f007b6db791d7562268c442b1f2d4d7c29e0b99c1d62f9012c4719aadf7050cf4303d67d4d63f6a95dfa9b10bfafd4427520f19c4af4772f11f299182644fe0d56d18f1dbc962c0a6e2863917cb842075e0461f2fef929b4214e5a299af227f00584bd0744b4b3c5c654c90524aef0d59397dccffb83b080c54b3901d6c098562555b74bd8b11419f455fb39ba848cd33d9d54c0b8af2b07ab6717714a11a3d10ba285f7846f207e1d6fbcb837a77e543ce825bdae0d5f20c141cca62d7a7c99f1b3316a7c5616dcf82af60de63f8d342360dec6a7f8bf4cabd00d46d370f3f65107d2600da837aa9d9c422a0db1d1f65b989c5a6d96a0971fd3e2a3068547afd9c8b9c0091a1e31f0aa3d2e68685bf976e962690845225fd71c14d75bd03d48bbf3e118bb85197934faf5f8af594799d74400b68b17792ff5c194562b7809e10558bc359a85d9be50f2d22d05bed5d4672e45d051afbed3bca24f9df32e487e0b5c6e94a84246c4f4f9e4ee46aaf0666ae636b85f6333c116f726b36f7f7ab6941445d8c78783202eb0ba4ea9b7bbc846b2a7c6e43ccd80b244d7cd0cc5c33a4e5fd530a2ecfb0b93aa4817eed625e4e6d105a55e666e142b9dd0be1e462c00db423cbd9b889e50fb92a3999a774be2ef2cc77b7d974c752a4a8862d703abeacc76c462665876983f891ee56b64347e8119bec8ed0cb891a70bb2ae60215b4effa10e0f014d1d3e722023247a04fed288c513fe4f9e7ba4a0b8025187a6fa694debd3125fd8ce5eeeefcaffbf4bb2ca43710261e174101ca1b5c00d881bdc182009d8cb1f80f97ae84000d0827e59ae5617cbecefe6862539ce3a73bfceb6c5dc1e09bfedc612e45f00cd6ecb40aa725ec4f88bf7a244720b0da3c45e977a346a4064831b560d91bbb207e66244c1f0d685b190cc3eb69512c7c9e093a7c5119ad6cf645d11473ca816d553864fcc213eaf51d429cba01d59edd3e30a16c62a69a3d84a5a122b3569f5a2f56c0f1bc098b81138404b09649c3494795a33ce7137a6779f2c92b140ca258343e764d6e88720377d129260220057fb68f70f354020071143380d8ad60064c4e956df759736255fbd1c616ddf7f3ec7519ff79ef085ba2f8f55657a73ce96c5e99014db1eca2bb27a0b1e247a2ffb359e70b34104d116d20f09181faeb8e3e0cdbf5a1237b0bc634661bf17184dcae30656c92e327710d8d5070d1876cf77fda3db1bc72daf3f8712041025e90174d7293e0889666640ddb410101b786d0006521da63151796af6ef9a958602525008325f6b25c74892ba4c16a6fd0687e4f4cf9e687c2c40dfa620141ce403def7b4c882cecdd87dac44fa17708f94163ddc1a8dfb7c30119f5c38ae8dd4422c8fa81275e7c5b0d5de90d9c0c46b371456833d3115fb1423df6d5bdcfa126485a2f39008aa9e24475d51d9690d9df3cc496fe93f1cf41c1126ac70aaa721b673d122e23082df51da73e2fa45bbb1697222d861c8eada8d1c4c35ad27a1dba5be56f99ced3bffa7948f8e19d382b763034de1a102a432c31d90debf1bc2a9c6ba6b9240ef1aa911d9bfcb65937ffe8a3871ee5e0b549bb6f78a0f287382b1b82fd2c88449d68414198251e6ead36f14d9cb749774f1d3ccd868a1be28212dbd2e2d0e8f6efabe515b5135166f93106e4252218ab1b81a7bde147faa329dcc36d5c257b49d552e584b4a9e94e626004404ac6680092d402b9d76383b9c5be29ba2b9023ab1082fe6717522788fbb1e90f433750b5636d79c36866f5d1877597dfede3717e5f72695eaf243cb6c2337bb7b5af579e0d5cbddd499327ba40a2af7e1a02c79ff05475dbfea710782d5dc8aac16c68ef14b43780aecab23464f1f4d9e069c3294975b113394ec623fd9e2a6cb4299e000c32386c8cb0ca0ab33a4b7bbfeb6d8b037e452ca2ed317cda698aa2a7e54e81f65b2df37387ce8c7015e7dc800c28e55a9442170271a648eeef6804ff4bc589825f44e40cbfc5d050e4d9e0f0e69e44bb6f6a4e3ab77abd747d0e6a00efbcdea80316e0ebf9897d587ac5e3926597754dfeb918bb6e986b74a149badd26533cf6482dd97d25ca3a40c1002b9dcd6a5899293a66b7a2a494cb8d3509ba80c20e0e35aa8506764bd0d15bd71e1fd66d4777cfe1f2ff1d28504157ee162f3add58061236775911358e7512615b32f237848adae498a189349eb349f4035bdbbba757c3659fd1c221f955718091a54283c76b7fc18579bc56ce7b18634a42244ce4790ab7ef1a1efc85d523d6748bed3a28a9fe86be41aa475ae482771002ae7f5f5a454f579779f7dbeef5d0c7b4d61846bffb68c521a33c2a4796ad09fa1618b782f36616ea6d441066993b4d74890a99397cd89ddcee4d0dfbd7251ecf1b06c887d7a1334c16b936d810e8b51334febe893920b2eda242b16d311e5cf278464ccf096e31b9bde5c096902436e7556af0953799c60e9b947771320e9cd2d734b975c5f6c0f0d39526b7975027eaa377a1a9f34b5fa867dd4511d8400c30288178d91f7dc33ae9b0522d04c53a3b9a74a2aafba6eb11426fa7ee8962ac219af2da588d94bbfc35330a4cecf41fa37f86dc2a563a7cf1f94b2dab4e70d3c90607e724d53329fc6f8dde3412f8512db3929c56e269671356d5ceb940db8c23e38b378567dbd0516954980d84009112da4e7fb3d0114dfea7f21539b7a092342dc52d0ae78c078fe3d7911c3c609d73bd4f622d4416af55a09141ae8105ef67128916cb71e9555ea6e900483742d4fa2c960a46cd0444208d93839062c390aa61b6f509a72c944abc2eb2d7551dae592b6da0d1111070b36ff6d4affea51372aceefd4fea2b9685d46bf56c5b230f83711bf018d00421786b8119a3c5f1611797722fb4c0e4274921d535cfd7cbd271d7adcf7792383931d35534f376cf92608ed76afad8d52410eb8cb068eea500798bf38c0382f45c6ea0da0e8781e6bea0657d9501c4db30f34dda1c79725c80aa264d7fb716d8223724bfdf361229278bfb1ba8be9d59c28848d55ae12a9c0e7e6b6806026a008d59860807e1f1975c7cde719633196fe30020a14796ba4945e4b7e5209cdc6cf5b3e6a252b97f86b2b1b0a1b87ce53320ce52266665850581dca13b331552303aff9601dd92bf475583798bf04f8624abce28597279613a7866b2a866f0627c5e4776d67659846f07c471e2f0a43727fade07706d6deb4c19ac8d36186a18780884d2d257cc8169e21a8a3993c7ba1350482192693a8c7b04961655fb58e573c1d99be33276ee34be5ab8147cc8d5d3f1f72793fbc527ada6f7cb7f7ca284aed3bfa5630df2677b87d7ae357951fa43f52003c78195d7a9c152181717884d2483a8d082ebf4c98e8cb92baf268f34ea131bf776ecd3fb4c54c1f09db69465887b14e7e0c3d453d6cda97135b093a725fcb29c9044f4e6013acc03aaabec6d9651ec4b4e4c86078e024becaf1a05cff6695541c4e665b1d0a466445cf8aad64c56879410efa73101297557d8c0aaf1228194543e0f5193506a2fc1f93fc060c42353b04d932a19f36ea62bdfb34e8c79fc321f17e2a2ba11d2c503e41034bae67dab6f492eee73cab33c35a4019a537dc6af6dd31a9f0f66641eb0847060dc0e43ddebb522cbfe2d15664d0b5fa28589be7df85eca97949c8de9b868f58de9568751edfc43ea7a4b2053d6b8bf56de2b24a81b9acf5915770ef8f3ae5e59562bcc50b12d7b579738b168d447cbd87c746da57e1652c3b09bf06456fb16c8c76e1be6612c7a63a39dacd3996b989f69899966a1a859a289544049ad0d394397f3849d8c9b17c6dba4a1903998ac70c7ae899fc667c7ced2983838995c5630ddf23d8e1510faf88ed95caf81ed1b8604a8d49f5cef020a434f8f84dd5deb2aab7e8c179c5c1ff0f8efcd38a1682c492053c453f4f7d44d736fd8169b4c7c9fbb723de2e461c162297cd39366cc50f577eba4cfd1c5bea3f3f597546778c953ca8e6d6ca13b65d9e664e9ed9aa0c3f69577cc6c375e2e93f67683c81ea40bc21ed3c135447ea84ef69c510fdca90d3ca5e4248ed24b6a2f3683e7ad89ff22d7dee6aff78a735750c3079189329776186cb673ede31a5807c2abced7bedf90a15c3e4e0998b09d40f87ef6b878c3b3fc9cb965438a5cf192015a957843060e1d4e3d494ec9af9ac12e113bfe8f165f33978d2398651e30ef70ad06c9a75120f9955b475a22b26c814d6f5163d7cfeb8b1af10e34f501f4f644d39b4d3d3881710e8fbdbc8010c365e100f900ca9df18240a82118b7e151060223abd0d35d4499df82401f92317debdb75abb4c5b5524c8614d78fa7cac78332dde317e06f673741ce6338e0c17cffb51d7aff2d3813ba865c12b1aab09d092a4094bbe6ca7134bab8db7ca9ca884897551cbfa7d1f2884c1b15d04d37116260d96154e3ecedc813238f93d7f139dde9f9b02d519b897645a5861dda951266b73716420da3084216b0845f9315d64624e8121bd30e72263b1abc4658534821dd8668af117e519d43240b434fce476bed21ae7c31025cec4862e564e98908b0382d1a2f9cdd6fb56f53dde4b5e065c8283205db017339ad7e02f0c57085862d2d3dc3a85efe88a2f936d77f517f659893f1a724b8d5d7eb0aa7e65f64e9c35cba215a960e03e18985d545bdb3cfb82caab3c3e5798fce1c38692206876a00507403be35112be6203ec392eca0a2c3465c9f7d65050be57bd0166dc027f2cbb03f44a2584d0852cf290273bf1dcaa185e8f78946140313a1888f1cc0748e17fba87f7ba80c1461be0a89fe0a420ea94adf346cd81134e255b3b7f3615986a52dd3814e27961aff53f4b3123759407ef8dba124a0f2d1a99dc9e32ccbbdc1b9dcbcb8b030cfeed090f9fc4ff0b500a24ebe3e8645582eab077177b2dd9ea9fd8dffd4df386b63ea3bc2e86a6fd840d9dbb7d9b64cb702e5dc6bd341c0ff0de83863e709b4baa22485dbbc0c99760dc67e9c23e64c7c12fb255c5e7a61dc431176f32979fa2ab6e3162843e6a00effaaf16de61fd9ac6d377906b96dbadbe4bf28c9a17d7b46aa7963678fc344b8e3fb4dbfd5679604fca6f1214cf897fe95990819f7dcbaad968cf3fb9dd2fdd0eb58acb128457cf64e9a93675a2b2ba07ec0a3b994d85c9368acf323c8aeaf01f269e3715434415d5e50f7d2d20995d50981ec28b25c5d37887c342426e0e422c6866a4b4e707b5fa9c575b01774bcf7f6499939606d0b7b64066456955fd696461a4131d9686802b2771cac1fcc8d37d66303182f836a2245e6be3b010b8aded887d777aff230d3f4da2fd159063504eaa79112de1bb3ffbf550c8cf022e4e6d5541d108602ecc33cc85f90880264ecce2fa40504d307badda04e5967a1ca2023befe989195ab0c87a33b8", 0x1000}, {&(0x7f0000001980)="8c03907bfe31e7815acb70c1296dce49e139b31bcd76adf7c8eee8047e766685533da3f01188b838db6848d9fa02808cc5a07543e2d09c11c85807571879bd1ed37d7a44812de1bbe5370d7c81068ad07defb589b6b677d8a41ec6184e56c55cf26090242ede73f99456d438e9fcb65ceaa48a85fee7b962761592cf44c5a81e708d6ee86c5aefda6cd83b268fe8833d69287997c3290b2a6711e9f058ee36355d454ae31b2b0ad81647c74707196aa2a1e9be121424774f7a4af14abaa662e62651183f66b68c5d7884bc358ded2f3905f8573d37342478f1e959", 0xdb}], 0x7, 0x0, 0x0, 0x40001}], 0x4, 0x4000) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xf000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xffffff7f00000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x4001002000000000]}, 0x10) 2018/04/09 20:04:57 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606060900070000000000000000000300ffff00009c03000038000000c802000002000000008020000200000101000200000000000000007030ea00000900000001000000010000000800000002000000070000003fa8c52b4fc581045b3bc26defd08f10c75f5ff02818e323ac0d6dcc30b0ee790dc08b527080dcaa6e13d0e68295e4297844afceabe2a1bc39edb50f6bdf839f69a74279775853dfc7653c0925a5546f946a5c267b97ea8abc5d8164670a58aa285ccc0d3a4bfc06edc3cb6e539f0325eb5898a695b3ac7a08192a0dfc53e3eaa5a915b816224490d73b87bbfb572c9bb6c8446c0559fecebc363804b06612a74da4217a0008614ef2f0052eb94da78a3af970710720dfec7eb2e439fe30286c113661facbb8b4226b63fc4532b8c2a67e7050befd0d56acc4c92db7d4ca6ad0a51cfeac70161164a15cdcb4f11f2e344e58954232e4535b2339f10161af25ecec472561e40382c6eb5c05150029d2017f1421d5d0639786427d888f42dda82fa513adc646552e7202805b0a055b9097c50af5d33a58360e05d46d4ed4c3fafd2944f6596a7d1f1038f53b7fb07c869c44cda173bcc486aee80ba60463315df8cba51cada85df6b1816fb30dc90fb2a3c67b58788eac644a3240f4d925f228ca64620e178e74e3f50950237213f795b4191533517f66b2462804d0279d35af38aea979faaabde29d6dbd33842752313198cde4f1b59942cb68c4599f29a56b92ba6e2781c26baaec7a6e77dab49a5fb31afc06bfa0e4912090a0048f785901662f6a3f30e1865ca7f87c2b8f923d3c12ea35c3b41823e6cd11084792318f31e338cdd7b02f3cbd22479d7d0e0215d50b37da6c492364a21f8b0b2db6e668d605ddc22b82e5542a009b8f4e7a399cca3b622f0bec7ecc63936df2a877ba52b46628a2925e7881cc587d67483af4234d3b3872dbeb3cc36a3f9ee7e24b19e51ec6450af9f1393ec9e1e9aa7895d4f34224572b9545c58b81a2bfee3be3beb888c06452cdc8f96b57d35d0326766e0a1ca10f1331b9fa30301de2be608e529696fe5b5b8eabaad34579ac640ef5ccf2a544a20acff49194489ffbef229a8f80fd598d65da1f3db19f2f8f3433ad3e2dca56eb5314bc356fe6b306a57b732d9885055d2fb41de2e474695b185cffe6a4f5b82f74d64589e05419de3180dbf6a4e58ab70bb0c3bc7971d8bd163701dfd9196bdca93fdfd10f283bd52cd77c3e2a81e64198d53801d8860e8288515f6fa80f55752d80288f3b00eecac8462245a36c6f5860db7b028f3104ef4aa79a97e98603bebde5c543cbddf0926e68aaea190f39825ed4bfeebe8a559ba4fce375ece79eda66e0c955d1c40b5e713abb737d23e73804f2dc9bf4fe84231af9403f4e504dca592508212f795da7cb52fb39680846e5056d9b371a4069121e3e100bd932dbccfdcf4b7030812d845268722729ea71e9bfb877528845c90eaefceca94224c3d5e6dd69cca1fcd26f830d599f66f82fb9f96ba3301964ef0429178e6bc34c9e1a90813483952b9d6d2b3ffa3596dca361a86e80026c7dc2d711b5a82e28d57e579cfd665dff45da9d16b561a64a6cd4da032b024b7cfca2aa4c068c169ede9ce24858751c93f817af8717c9b9710f3ebfb55e61afece3f96bf558d86081b656a51c15f39ee85c420d37dcd829c9ccbfd1956e150100ee258e0f7d6abfbf244614efa7f72390de1561c95be24c4cf1c46006e9c61d7fd25f9badec73573db8851643f070a8fe876b76cc92b393f3b478f05db79e89ee88f6c4ef05461e87a440b9c0f0a95fa159df50f56958f62a9f77e6c5ee088a39116ad8fde83c66694e419d7f047d03d42a05b74a92bba532028816a2afd7d424745ad596fa7c63bc080743eab365d3613647ae64b86a2502c2a7f9a93c2b07c80ed7017c210cecdadb7fae309d00154b0c79b1f9ab45282b8263e332bc3a17fc2ed40ed0c3f48f71a15727eec060713130024725c034249ca33ccc97653b5a91fc54300b87fe6dae293eb296fae8420406c12aebd14e7d460c6e6156e0d16d10c119594538bcb24335a96910744024293cc351658bbb9541a566dfe927a8cfaa9f609eb229ca8b5ba167f2e12e79011e6e9c27e1d03217c4ad10e6f2bef3ffd90376b61d66299c1af77336d522fa6966de1b652d99f0602ec0269e8d7fdf68e9f7f5844dd9df44dec87adec68e43da4e4570dc13b95cba895086468f5b9f7101584e1fb08bd109f580cde13babd0064e811c25279133e46b02ed0db085ea8014ca4865ed75c34357de8ea4c9f5ac5b88f6932a6aef4836d64cc43f66a7f0885b141b27aee655874cef574ac19c89dc14cf9d571c29635b87a05b509292f079d521342c5fb42bf7713abecd4dcbe8d0852e69806f05bc954a528ae72117fd55bfc6ddd2e094ff7753c4640b5ebc3dd0b3ea5e300fa7de071e170fac9413bfbc21cce60f58f1a25974dd88ae375e433bc8c24ee8b57be33b9a9a611d5143de65e518d99180ba30b4cd1a532cfbe65ddc5b1c11ad92f690f268d9c808a5ea24fb588b6c2be29859af8475d4154685a36f46ff58bfdf30252b36a32980c78cacc3acaee01ec986119a720f67ca3700039df86dcf1ab1641ec4be6e702b99d934bf8f44460b2b6eafbb88acbbaefd5ae48bd9f41b3ecf456ceee3cfc45393d27fe56df2cf9112a655b18418e94343e4aac4b360cb65b9698b8889d405faf99870ad506ea43451988d20638fe34504f86551b01ccf99e4c9d92eba1834680978d2b1de5d2fe6a17cf19770ca01bb85222c48613878d77e26bc2bf9b6a896c799d33aff87f92ff4033650a9753ffe6df584f1ec24140cd08c163ffdb1a9201372b9d4371cf2596fb4e99264d84df7173985e26ca643c563ce3777c03b7ca90ccd536d9d757556e64ea8d4271142d97de50f4e381bddd2b69d2e9a55ea54be3cef544e0ea79d0ae8a9bb80cc9e950aaf408eca3149d6c1eefb9ed54783f559892b00dda16f23ed80db0038bc31a5464e94439b9daaaa73a51bcede7baf4b492ed8c2cd83cf786917ae8a4ab65eae8be1d7acce2adecfe24a6e61df020b5f789fe355ac1d01807cf08a72800857b641a5ca9fbe2f6d93ccc5857df923519c94caef787a1cf982bc0ea80d310c48bdfe5db6d45ba771879ad6eab2c8e33409686375aa875c7c6026bdd4ad091b500169325075e7099ddf1559585ebef004c6d1905d6f5a12215074c1fb84877abb7ef7ebfb423f03a19c625e2b4934e4efbf6e0e158e44a94a79245962468a3b2446db65499e0757fca585fdc556c7eb37bed7ec3da2301b1e2b35c459f7a278dd988b1d802b1d105d8f5386cce5551a2dbbe64d8ea673e30bda567c1faf6bf09bb0f13fe6075cfab21db6e311ce691285394a31728f9c270ad58c0cfeca535350c491ced14c08ccdb8e57993cd9c0eddfdf75188e9b597d0afc98695b08d3ee69d59679a2814e19ec1c32e10f4f31ef79824f1bda892f037578be3b754005a5dfff9aeeaf7a526e373751027a96f101d09c51d0dc9b414e77029a402b9c36e1cc784d4c0d3a5ee828e21a8f495c37de214afa01a3fec656aed131ade678c24dd449cbcaf6af1f77e2ba353e9b2a3ea0ae23886fbead219c33883ede50c2b9fee5aa44903b5ef07d2122f74a158e3f41e3bb0e7439849d8e502b99883315ff3c2b352bcc712f8f542f2bfcc2da98f55421feacfed655633902b6fe076f5e4a2e6725d320d270131a26d03e25b39670a76c44bcbe9353a5d1700803048ce5f57a555fb73040c0c7b804dc8c2a3a981f3da70f0180231f5baf6ae6770155bca65f83e98fb6a659cca253ccea9407315056e4c25ec1798022bd3dd99d0de1480c6294bfd0e35e7526d9ade91ed90953bcb5f0282d77b07dfe21e6a04fff8cc54d4faf5c7d287dabc61f1d594d09a20b9f4240451731a1ba575f68a5d2a402ca648e9462efc5a1622d33e97b96b72adf9b13ea6813ba4270cb18f99ec9dd4bcc36875dad813e441a559224cd5e299019a6ee084d0dba3bc2ba6dde47e0cbf71ea98f424dee5fe9218d3a6d6685f2e7f2050303fdc5893bcc41b0a4a4ecf7466113b1d218eaa841165804d664142a51a44239eed633e9af17195d934a29a16b3ed294ee47aa065c9aaba276f506c85b53d12c392c4cf5d371dce6e33aa0e621dd10fdd6332c81ab402fb83fbd6c43e6aad7d41a6a371d5d1a3cd77daa4909447221eb06d50144c9d57bd4daf3bdaedb4a5a919cdff14373fa9d31af3af51ca45ca60d7981f6ffc3b949d9b03d398cd94db22c2e25740cc3d628d11cb6c2a91175f90817d7bebab2efd4447b9a86e2f433b9dd11e47dca4ed066a2aca8b60cf730847a138557c33595de02504aa143743ccd0723af7d5ed98568cc95be0e8ac5c7fa7366569a1bf499aae34ff8d729272efccbda3d4e915db0773b0b9f136b6aaa3fda4dcec7bb385a43236bdae287228501c1d55b88a95563b28b8d144365ed0aa328e432676f479f953a7f8b953f2fab7fb64ffcbce38af928fcce107e3ade5a90fc6265f8bd2462c50b12e0fc7a7f163132fb833203d70e7a326f3dc4dca130d83ef9ee8a0a8d703563a7bbd0fca0b41a8e30c39394986ea6ebddddf84a93d1c5aff0531032043ab3a10d3c6430b5c49a4e1c7b021a1e1f69b3bf283e8f4880ac3516bddb1b6590787c9e064acada62ccddcb7699383bd4ad111e18a8682a01964e9de1c7dc3f75a9148cca82bf5fb4e575a340fc074033b6c4a39f4a2d08c28c7d63a1d7fa09a0a58526e3c7b09564093bb87e873bd64cf91389229ddaf38bbd912dca02eff48ae361b6a2563d4b06bd2a4261880a2b03733dc234b82e54580c5f6f5699cdc3aaf5d758ec3dd37e93f8ab76f2eda231020c73825f568c5ed93bc2033e5ca604183496625302652ce35e93fa27ee348966126ab0ffd742dc92c7044be62b73192f13509784671580e46ac7152dd73a21a7cdc8add15c3b3b724808d6dacaef2e44111de0e3a6539e64feffdc3d49e3a3e02196dbae23860ec6c1718148fdad5b4ed8a8712c6b24392054c7a04ddb3936a168f626e7108e3dfc4ed3b3cdba630db6a98704dcc784b38592322d8e243bd7dda6594e82e7261b05c15ff79a3fc0c18a0c6702dd2b247abbeebba2d7ad9bd13171c13be88cd9258f6d21137739392baa9175ae1004910ead69ce75ab9451bf5b2d8f096cae4e6ecf81d0b09924bd9f0906c38863772c6b225f300eecb473532b778b966677039b79065f02100ee23cdce55c6b5a897ebb5ba4150052cfb9567c54403575be6d0f6cbdab62c1e3278fcd8a7d449287f9c8de549c5fd48f81d6cbbaa165dae95520230c4ff97c9c1ed9b7e24d5343108ce7ba28980592be55e95740df2e5f1d84ae2e616064d4fa6d4569ec3376d829a39d3ff9bdf4b44bd4bcd58147e635080d55125f4eb52a5868a96b0410b1f6e4b042578a7e97466253d2b4a18665fc265a55783583863ec028768a7eb496b3b39ceab654dedbf9b45ee02b3dcc8f406c74a426f105787ef3122c4aae0fc886b3673cf26d3997acaf750ed8bbaf8e56782e92a4fb06b03d88d4c6696fb95a8b2c0d0253452411aca164f056cea963d29180eff79fc2d1e6e7bd13f8b19d6e5e160d68a5b4bfde894ce42e35f06f7e08347c0a79ecd2df0242c4433add0ae28bb30974cd96000ceacc0f2b020a4db2fdc1db52d43dc3f3f8a1522bcca3138da3ae67e819cf8341e71fce20e62a65acaad06f65227d2cd66139c36e1eeda33231c449680cc25b88530984d358d49c334e1a0536644344a420286503d02518cb4e4b88f2bfd9747c8c6579107734b2e10e321f228b60615961369197e3d282690b4fc5bf547711c0cf"], 0x1058) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x4) 2018/04/09 20:04:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r4, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:57 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfec00000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) connect(r0, &(0x7f0000000040)=@ax25={0x3, {"f8fb65a594f9ed"}, 0x2}, 0x80) [ 172.294158] FAULT_INJECTION: forcing a failure. [ 172.294158] name failslab, interval 1, probability 0, space 0, times 0 [ 172.305471] CPU: 1 PID: 13159 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 172.312405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.321765] Call Trace: [ 172.324367] dump_stack+0x1b9/0x294 [ 172.328011] ? dump_stack_print_info.cold.2+0x52/0x52 [ 172.333220] ? __save_stack_trace+0x7e/0xd0 [ 172.337569] should_fail.cold.4+0xa/0x1a [ 172.341651] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.346771] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 172.351801] ? snd_interval_refine+0x428/0x700 [ 172.356403] ? graph_lock+0x170/0x170 [ 172.360221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.365778] ? snd_pcm_hw_refine+0x362/0x1180 [ 172.370293] ? __wake_up_common_lock+0x1c2/0x300 [ 172.375070] ? find_held_lock+0x36/0x1c0 [ 172.379154] ? __lock_is_held+0xb5/0x140 [ 172.383244] ? check_same_owner+0x320/0x320 [ 172.387590] ? rcu_note_context_switch+0x710/0x710 2018/04/09 20:04:57 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb80b0000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:57 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x1}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x4c) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 172.392547] __should_failslab+0x124/0x180 [ 172.396803] should_failslab+0x9/0x14 [ 172.400619] kmem_cache_alloc_trace+0x2cb/0x780 [ 172.405303] ? _snd_pcm_hw_param_min+0x330/0x570 [ 172.410075] snd_pcm_oss_change_params_locked+0x99b/0x3ce0 [ 172.415724] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 172.420933] ? print_usage_bug+0xc0/0xc0 [ 172.425014] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 172.430918] ? print_usage_bug+0xc0/0xc0 [ 172.435001] ? debug_check_no_locks_freed+0x310/0x310 [ 172.440205] ? __lock_acquire+0x7f5/0x5130 2018/04/09 20:04:57 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0xc3ff000000000000]}, 0x10) [ 172.444448] ? debug_check_no_locks_freed+0x310/0x310 [ 172.449654] ? graph_lock+0x170/0x170 [ 172.453561] ? __lock_acquire+0x7f5/0x5130 [ 172.457818] ? debug_check_no_locks_freed+0x310/0x310 [ 172.463022] ? print_usage_bug+0xc0/0xc0 [ 172.467099] ? find_held_lock+0x36/0x1c0 [ 172.471185] snd_pcm_oss_change_params+0x80/0xe0 [ 172.475959] snd_pcm_oss_make_ready+0xbe/0x170 [ 172.480558] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 172.486031] ? __lock_acquire+0x7f5/0x5130 [ 172.490281] ? snd_pcm_oss_make_ready+0x170/0x170 2018/04/09 20:04:57 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x200000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 172.495138] ? __might_sleep+0x95/0x190 [ 172.499126] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 172.503547] ? _parse_integer+0x190/0x190 [ 172.507710] ? graph_lock+0x170/0x170 [ 172.511523] ? snd_pcm_oss_release+0x290/0x290 [ 172.516118] ? find_held_lock+0x36/0x1c0 [ 172.520188] ? graph_lock+0x170/0x170 [ 172.523998] ? find_held_lock+0x36/0x1c0 [ 172.528070] ? lock_downgrade+0x8e0/0x8e0 [ 172.532238] ? kasan_check_read+0x11/0x20 [ 172.536391] ? rcu_is_watching+0x85/0x140 2018/04/09 20:04:57 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) shutdown(r1, 0x0) [ 172.540544] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 172.545746] ? __fget+0x40c/0x650 [ 172.549212] ? match_held_lock+0x881/0x8b0 [ 172.553461] ? expand_files.part.8+0x9a0/0x9a0 [ 172.558058] ? kasan_check_write+0x14/0x20 [ 172.562304] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 172.567251] ? wait_for_completion+0x870/0x870 [ 172.571851] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 172.577048] ? snd_pcm_oss_release+0x290/0x290 [ 172.581748] do_vfs_ioctl+0x1cf/0x1650 [ 172.585658] ? ioctl_preallocate+0x2e0/0x2e0 [ 172.590079] ? fget_raw+0x20/0x20 2018/04/09 20:04:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x500000000000000) [ 172.593543] ? __sb_end_write+0xac/0xe0 [ 172.597532] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 172.603082] ? fput+0x130/0x1a0 [ 172.606366] ? ksys_write+0x1a6/0x250 [ 172.610173] ? security_file_ioctl+0x94/0xc0 [ 172.614584] ksys_ioctl+0xa9/0xd0 [ 172.618043] SyS_ioctl+0x24/0x30 [ 172.621409] ? ksys_ioctl+0xd0/0xd0 [ 172.625041] do_syscall_64+0x29e/0x9d0 [ 172.628946] ? vmalloc_sync_all+0x30/0x30 [ 172.633108] ? _raw_spin_unlock_irq+0x27/0x70 [ 172.637610] ? finish_task_switch+0x1ca/0x820 2018/04/09 20:04:58 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x500]}, 0x10) [ 172.642107] ? syscall_return_slowpath+0x5c0/0x5c0 [ 172.647043] ? syscall_return_slowpath+0x30f/0x5c0 [ 172.651991] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 172.657367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.662221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.667412] RIP: 0033:0x455259 [ 172.670600] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.678316] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 172.685598] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 172.692868] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.700152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 172.707429] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000004 2018/04/09 20:04:58 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:58 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x40000, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1ff, 0x7, 0x401, 0x80000000, 0xffff, 0x3, 0x0, 0x80000000, 0xd0, 0x40, 0x2fa, 0x80000001, 0x1f, 0x38, 0x2, 0x0, 0x8, 0xffffffffffffffff}, [{0x6, 0x3, 0x1, 0x800, 0x7, 0x21, 0x557, 0x4b}], "9124a88a7780c48e02c052b5c2167a351b86fe973b26d9d4f50a6d4e9ab0fc14cccea3821c201bddf8a206199982ae1171a13e4f06873a2917b92b54df5c447040c26f9b1cf1ae9aa050a94911cb78a3ea526b8a80f576dff365df4614ec7f9984f89bde65f3c063dc4e71e4dd913991f4a8daa4d2496765b5d942", [[], [], [], [], []]}, 0x5f3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x90000000}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:58 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:04:58 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x18aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:58 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x7, 0x802, 0xfffffffffffffffc) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:58 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0xc3ff]}, 0x10) 2018/04/09 20:04:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x2000000) [ 172.905259] FAULT_INJECTION: forcing a failure. [ 172.905259] name failslab, interval 1, probability 0, space 0, times 0 [ 172.916574] CPU: 0 PID: 13215 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 172.923512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.932868] Call Trace: [ 172.935472] dump_stack+0x1b9/0x294 [ 172.939116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 172.944327] should_fail.cold.4+0xa/0x1a [ 172.948405] ? __save_stack_trace+0x7e/0xd0 [ 172.952741] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.957861] ? debug_check_no_locks_freed+0x310/0x310 [ 172.963067] ? graph_lock+0x170/0x170 [ 172.966879] ? save_stack+0x43/0xd0 [ 172.970506] ? __kasan_slab_free+0x11a/0x170 [ 172.974913] ? kasan_slab_free+0xe/0x10 [ 172.978894] ? find_held_lock+0x36/0x1c0 [ 172.982967] ? __lock_is_held+0xb5/0x140 [ 172.987049] ? check_same_owner+0x320/0x320 [ 172.991374] ? debug_check_no_obj_freed+0x2ff/0x584 [ 172.996394] ? rcu_note_context_switch+0x710/0x710 [ 173.001319] ? graph_lock+0x170/0x170 [ 173.005115] __should_failslab+0x124/0x180 [ 173.009339] should_failslab+0x9/0x14 [ 173.013131] __kmalloc+0x2c8/0x760 [ 173.016664] ? constrain_params_by_rules+0x141/0x1360 [ 173.021839] ? find_held_lock+0x36/0x1c0 [ 173.025892] constrain_params_by_rules+0x141/0x1360 [ 173.030900] ? lock_downgrade+0x8e0/0x8e0 [ 173.035043] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 173.040217] ? rcu_is_watching+0x85/0x140 [ 173.044352] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 173.049543] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 173.054725] ? is_bpf_text_address+0xd7/0x170 [ 173.059210] ? kernel_text_address+0x79/0xf0 [ 173.063628] ? __unwind_start+0x166/0x330 [ 173.067762] ? __kernel_text_address+0xd/0x40 [ 173.072246] ? unwind_get_return_address+0x61/0xa0 [ 173.077162] ? __save_stack_trace+0x7e/0xd0 [ 173.081481] ? save_stack+0xa9/0xd0 [ 173.085095] ? save_stack+0x43/0xd0 [ 173.088710] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 173.094233] ? snd_interval_refine+0x428/0x700 [ 173.098809] snd_pcm_hw_refine+0x8e9/0x1180 [ 173.103119] ? __wake_up_common_lock+0x1c2/0x300 [ 173.109958] ? constrain_params_by_rules+0x1360/0x1360 [ 173.115222] ? graph_lock+0x170/0x170 [ 173.119007] ? __lock_is_held+0xb5/0x140 [ 173.123072] ? __lock_is_held+0xb5/0x140 [ 173.127123] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 173.132646] ? snd_interval_refine+0x428/0x700 [ 173.137218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.142749] ? _snd_pcm_hw_param_set.constprop.34+0x259/0x610 [ 173.148621] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.153626] ? snd_pcm_hw_param_max+0x730/0x730 [ 173.158283] ? _snd_pcm_hw_param_min+0x330/0x570 [ 173.163037] snd_pcm_oss_change_params_locked+0x2883/0x3ce0 [ 173.168743] ? print_usage_bug+0x37/0xc0 [ 173.172796] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 173.178667] ? print_usage_bug+0xc0/0xc0 [ 173.182720] ? debug_check_no_locks_freed+0x310/0x310 [ 173.187898] ? __lock_acquire+0x7f5/0x5130 [ 173.192120] ? debug_check_no_locks_freed+0x310/0x310 [ 173.197297] ? graph_lock+0x170/0x170 [ 173.201086] ? __lock_acquire+0x7f5/0x5130 [ 173.205314] ? debug_check_no_locks_freed+0x310/0x310 [ 173.210486] ? print_usage_bug+0xc0/0xc0 [ 173.214537] ? find_held_lock+0x36/0x1c0 [ 173.218598] snd_pcm_oss_change_params+0x80/0xe0 [ 173.223346] snd_pcm_oss_make_ready+0xbe/0x170 [ 173.227918] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 173.233357] ? __lock_acquire+0x7f5/0x5130 [ 173.237581] ? snd_pcm_oss_make_ready+0x170/0x170 [ 173.242410] ? __might_sleep+0x95/0x190 [ 173.246377] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 173.250774] ? _parse_integer+0x190/0x190 [ 173.254910] ? graph_lock+0x170/0x170 [ 173.258697] ? snd_pcm_oss_release+0x290/0x290 [ 173.263267] ? find_held_lock+0x36/0x1c0 [ 173.267317] ? graph_lock+0x170/0x170 [ 173.271115] ? find_held_lock+0x36/0x1c0 [ 173.275170] ? lock_downgrade+0x8e0/0x8e0 [ 173.279313] ? kasan_check_read+0x11/0x20 [ 173.283448] ? rcu_is_watching+0x85/0x140 [ 173.287584] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 173.292774] ? __fget+0x40c/0x650 [ 173.296217] ? match_held_lock+0x881/0x8b0 [ 173.300442] ? expand_files.part.8+0x9a0/0x9a0 [ 173.305016] ? kasan_check_write+0x14/0x20 [ 173.309244] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 173.314163] ? wait_for_completion+0x870/0x870 [ 173.318733] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 173.323913] ? snd_pcm_oss_release+0x290/0x290 [ 173.328484] do_vfs_ioctl+0x1cf/0x1650 [ 173.332365] ? ioctl_preallocate+0x2e0/0x2e0 [ 173.336771] ? fget_raw+0x20/0x20 [ 173.340225] ? __sb_end_write+0xac/0xe0 [ 173.344194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 173.349718] ? fput+0x130/0x1a0 [ 173.352985] ? ksys_write+0x1a6/0x250 [ 173.356781] ? security_file_ioctl+0x94/0xc0 [ 173.361180] ksys_ioctl+0xa9/0xd0 [ 173.364625] SyS_ioctl+0x24/0x30 [ 173.367976] ? ksys_ioctl+0xd0/0xd0 [ 173.371634] do_syscall_64+0x29e/0x9d0 [ 173.375510] ? vmalloc_sync_all+0x30/0x30 [ 173.379658] ? _raw_spin_unlock_irq+0x27/0x70 [ 173.384141] ? finish_task_switch+0x1ca/0x820 [ 173.388624] ? syscall_return_slowpath+0x5c0/0x5c0 [ 173.393541] ? syscall_return_slowpath+0x30f/0x5c0 [ 173.398466] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 173.403822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.408658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.413835] RIP: 0033:0x455259 [ 173.417014] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.424714] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 173.431970] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 173.439226] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.446487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/04/09 20:04:58 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x54d153feff31a1fc, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:58 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x500000000000000]}, 0x10) [ 173.453747] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000005 2018/04/09 20:04:58 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x600, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:58 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000040)=0x80000000, 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) 2018/04/09 20:04:58 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000011, 0x3, 0x9) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:59 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x5000000]}, 0x10) 2018/04/09 20:04:59 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xaa00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x400000) 2018/04/09 20:04:59 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x11, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt(r4, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:59 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffffff, 0xc00) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x100) 2018/04/09 20:04:59 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa18, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x40010020]}, 0x10) 2018/04/09 20:04:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xe00) 2018/04/09 20:04:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:04:59 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 173.917972] FAULT_INJECTION: forcing a failure. [ 173.917972] name failslab, interval 1, probability 0, space 0, times 0 [ 173.929342] CPU: 1 PID: 13278 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 173.936383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.945744] Call Trace: [ 173.948362] dump_stack+0x1b9/0x294 [ 173.952010] ? dump_stack_print_info.cold.2+0x52/0x52 [ 173.957221] ? lock_downgrade+0x8e0/0x8e0 [ 173.961398] should_fail.cold.4+0xa/0x1a [ 173.965480] ? rcu_is_watching+0x85/0x140 [ 173.969646] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.974770] ? graph_lock+0x170/0x170 [ 173.978584] ? is_bpf_text_address+0xd7/0x170 [ 173.983088] ? kernel_text_address+0x79/0xf0 [ 173.987513] ? __unwind_start+0x166/0x330 [ 173.991679] ? find_held_lock+0x36/0x1c0 [ 173.995758] ? __lock_is_held+0xb5/0x140 [ 173.999855] ? check_same_owner+0x320/0x320 [ 174.004189] ? snd_pcm_oss_change_params+0x80/0xe0 [ 174.009133] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 174.013902] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 174.019534] ? rcu_note_context_switch+0x710/0x710 [ 174.024466] ? SyS_ioctl+0x24/0x30 [ 174.028013] ? do_syscall_64+0x29e/0x9d0 [ 174.032078] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.037439] __should_failslab+0x124/0x180 [ 174.041668] should_failslab+0x9/0x14 [ 174.045458] kmem_cache_alloc_trace+0x2cb/0x780 [ 174.050114] ? do_raw_spin_lock+0xc1/0x200 [ 174.054339] ? trace_hardirqs_off+0xd/0x10 [ 174.058570] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 174.064273] ? _snd_pcm_hw_param_min+0x570/0x570 [ 174.069018] ? mark_held_locks+0xc9/0x160 [ 174.073160] ? kfree+0x111/0x260 [ 174.076514] ? snd_pcm_oss_change_params_locked+0x2c1e/0x3ce0 [ 174.082388] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 174.087393] ? trace_hardirqs_on+0xd/0x10 [ 174.091535] snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 174.097158] ? print_usage_bug+0x37/0xc0 [ 174.101216] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 174.107091] ? print_usage_bug+0xc0/0xc0 [ 174.111147] ? debug_check_no_locks_freed+0x310/0x310 [ 174.116330] ? __lock_acquire+0x7f5/0x5130 [ 174.120563] ? debug_check_no_locks_freed+0x310/0x310 [ 174.125740] ? graph_lock+0x170/0x170 [ 174.129538] ? __lock_acquire+0x7f5/0x5130 [ 174.133773] ? debug_check_no_locks_freed+0x310/0x310 [ 174.138950] ? print_usage_bug+0xc0/0xc0 [ 174.143006] ? find_held_lock+0x36/0x1c0 [ 174.147072] snd_pcm_oss_change_params+0x80/0xe0 [ 174.151820] snd_pcm_oss_make_ready+0xbe/0x170 [ 174.156395] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 174.161834] ? __lock_acquire+0x7f5/0x5130 [ 174.166060] ? snd_pcm_oss_make_ready+0x170/0x170 [ 174.170890] ? __might_sleep+0x95/0x190 [ 174.174866] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 174.179265] ? _parse_integer+0x190/0x190 [ 174.183401] ? graph_lock+0x170/0x170 [ 174.187190] ? snd_pcm_oss_release+0x290/0x290 [ 174.191766] ? find_held_lock+0x36/0x1c0 [ 174.195821] ? graph_lock+0x170/0x170 [ 174.199609] ? find_held_lock+0x36/0x1c0 [ 174.203667] ? lock_downgrade+0x8e0/0x8e0 [ 174.207807] ? kasan_check_read+0x11/0x20 [ 174.211941] ? rcu_is_watching+0x85/0x140 [ 174.216077] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 174.221264] ? __fget+0x40c/0x650 [ 174.224715] ? match_held_lock+0x881/0x8b0 [ 174.228944] ? expand_files.part.8+0x9a0/0x9a0 [ 174.233515] ? kasan_check_write+0x14/0x20 [ 174.237739] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 174.242662] ? wait_for_completion+0x870/0x870 [ 174.247234] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 174.252412] ? snd_pcm_oss_release+0x290/0x290 [ 174.256983] do_vfs_ioctl+0x1cf/0x1650 [ 174.260864] ? ioctl_preallocate+0x2e0/0x2e0 [ 174.265264] ? fget_raw+0x20/0x20 [ 174.268708] ? __sb_end_write+0xac/0xe0 [ 174.272673] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 174.278197] ? fput+0x130/0x1a0 [ 174.281468] ? ksys_write+0x1a6/0x250 [ 174.285262] ? security_file_ioctl+0x94/0xc0 [ 174.289665] ksys_ioctl+0xa9/0xd0 [ 174.293111] SyS_ioctl+0x24/0x30 [ 174.296467] ? ksys_ioctl+0xd0/0xd0 [ 174.300084] do_syscall_64+0x29e/0x9d0 [ 174.303958] ? vmalloc_sync_all+0x30/0x30 [ 174.308096] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.312580] ? finish_task_switch+0x1ca/0x820 [ 174.317064] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.321982] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.326902] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.332258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.337094] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.342272] RIP: 0033:0x455259 [ 174.345446] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.353142] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 174.360397] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 2018/04/09 20:04:59 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1100, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 174.367652] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.374907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 174.382163] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000006 2018/04/09 20:04:59 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x122ffc) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:04:59 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = accept(r1, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000003c0)={r1, r0, 0x80, 0x9, &(0x7f00000000c0)="4d613392f53b39cda01e23b5749171883b5a31884e53446056101c0899c329751705b161e39aeb22fba0c5fd7b83e7c7066e15a0bb6df8a5a47f1e2a130e0fcf16d1141d0d18064191f0a4b91b9eda2f33f7b5864ac43eb807ef7d926eed40a3d3bc182732971daa3822b8a97805a5582ba3917d7440b4f278f191f7d7c3447bfe9dc78d1412a625096510147306d8005aa57be4148d7cf8d037c1fa580cf69ba4b8cc7d", 0x7, 0x4a, 0x80, 0x3, 0x5, 0xcafd, 0x2, "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"}) accept4$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x9, r4}) shutdown(r1, 0x0) 2018/04/09 20:04:59 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1800000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0xc3ff0000]}, 0x10) 2018/04/09 20:04:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x500) 2018/04/09 20:04:59 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1400000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:04:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xd5, {0x100000001, 0x38, 0x4, 0x5, 0x1, 0x80000000}, 0x5, 0x80000001}, 0xe) 2018/04/09 20:05:00 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1500000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:00 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x1ffffffffd}, 0xffffffffffffff8c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0xa0040, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x4d97013c}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000480)={r3, 0x332c}, 0x8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000003c0)={0x1, 'U'}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x410000) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000140)={0xb2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x3, 0xba}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x40) recvfrom$llc(r1, &(0x7f0000000280)=""/140, 0x8c, 0x40000000, &(0x7f0000000200)={0x1a, 0x30c, 0x3f, 0xb5, 0x6, 0x39, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000001c0)=0x40) faccessat(r0, &(0x7f00000004c0)='./file0\x00', 0x100, 0x400) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000340)=0xc) ioctl$VT_RELDISP(r5, 0x5605) shutdown(r1, 0x0) 2018/04/09 20:05:00 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x500]}, 0x10) 2018/04/09 20:05:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1100) 2018/04/09 20:05:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x200000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1, r0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 2018/04/09 20:05:00 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x34000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:00 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xbb8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000cc0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:05:00 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) [ 174.802920] FAULT_INJECTION: forcing a failure. [ 174.802920] name failslab, interval 1, probability 0, space 0, times 0 [ 174.814237] CPU: 1 PID: 13331 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 174.821169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.830530] Call Trace: [ 174.833132] dump_stack+0x1b9/0x294 [ 174.836774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 174.841981] should_fail.cold.4+0xa/0x1a [ 174.846056] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/09 20:05:00 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x5]}, 0x10) 2018/04/09 20:05:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xb) [ 174.851171] ? __lock_acquire+0x7f5/0x5130 [ 174.855420] ? graph_lock+0x170/0x170 [ 174.859231] ? debug_check_no_locks_freed+0x310/0x310 [ 174.864428] ? find_held_lock+0x36/0x1c0 [ 174.868518] ? __lock_is_held+0xb5/0x140 [ 174.872596] ? check_same_owner+0x320/0x320 [ 174.876926] ? rcu_note_context_switch+0x710/0x710 [ 174.881867] __should_failslab+0x124/0x180 [ 174.886117] should_failslab+0x9/0x14 [ 174.889924] __kmalloc+0x2c8/0x760 [ 174.893478] ? __lock_acquire+0x7f5/0x5130 [ 174.897725] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 174.902317] ? constrain_params_by_rules+0x141/0x1360 [ 174.907529] constrain_params_by_rules+0x141/0x1360 [ 174.912570] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 174.917886] ? lock_downgrade+0x8e0/0x8e0 [ 174.922047] ? kasan_check_read+0x11/0x20 [ 174.926204] ? rcu_is_watching+0x85/0x140 [ 174.930364] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 174.935564] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 174.940772] ? is_bpf_text_address+0xd7/0x170 [ 174.945275] ? kernel_text_address+0x79/0xf0 [ 174.949696] ? __unwind_start+0x166/0x330 2018/04/09 20:05:00 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x500000000000000]}, 0x10) [ 174.953855] ? __kernel_text_address+0xd/0x40 [ 174.958368] ? unwind_get_return_address+0x61/0xa0 [ 174.963308] ? __save_stack_trace+0x7e/0xd0 [ 174.967636] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 174.973179] ? snd_interval_refine+0x428/0x700 [ 174.977774] snd_pcm_hw_refine+0x8e9/0x1180 [ 174.982113] ? constrain_params_by_rules+0x1360/0x1360 [ 174.987395] ? snd_pcm_oss_change_params+0x80/0xe0 [ 174.992333] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 174.997097] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 175.002731] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 175.007327] ? do_vfs_ioctl+0x1cf/0x1650 [ 175.011392] ? ksys_ioctl+0xa9/0xd0 [ 175.015025] ? SyS_ioctl+0x24/0x30 [ 175.018570] ? do_syscall_64+0x29e/0x9d0 [ 175.022634] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.028004] ? kasan_check_read+0x11/0x20 [ 175.032159] ? do_raw_spin_unlock+0x9e/0x2e0 [ 175.036574] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 175.041163] ? print_usage_bug+0xc0/0xc0 [ 175.045235] ? kasan_check_write+0x14/0x20 [ 175.049476] ? do_raw_spin_lock+0xc1/0x200 [ 175.053721] ? trace_hardirqs_off+0xd/0x10 [ 175.057960] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 175.063070] ? debug_check_no_obj_freed+0x2ff/0x584 [ 175.068104] ? mark_held_locks+0xc9/0x160 [ 175.072263] ? quarantine_put+0xeb/0x190 [ 175.076339] snd_pcm_hw_param_first+0x30e/0x680 [ 175.081025] snd_pcm_hw_param_near.constprop.35+0x6e2/0xb10 [ 175.086756] ? _snd_pcm_hw_param_min+0x570/0x570 [ 175.091521] ? mark_held_locks+0xc9/0x160 [ 175.095677] ? kfree+0x111/0x260 [ 175.099052] ? snd_pcm_oss_change_params_locked+0x2c1e/0x3ce0 [ 175.104942] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 175.109964] ? trace_hardirqs_on+0xd/0x10 [ 175.114122] snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 175.119757] ? print_usage_bug+0x37/0xc0 [ 175.123862] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 175.129755] ? print_usage_bug+0xc0/0xc0 [ 175.133826] ? debug_check_no_locks_freed+0x310/0x310 [ 175.139024] ? __lock_acquire+0x7f5/0x5130 [ 175.143264] ? debug_check_no_locks_freed+0x310/0x310 [ 175.148458] ? graph_lock+0x170/0x170 [ 175.152257] ? __lock_acquire+0x7f5/0x5130 [ 175.156487] ? debug_check_no_locks_freed+0x310/0x310 [ 175.161667] ? print_usage_bug+0xc0/0xc0 [ 175.165727] ? find_held_lock+0x36/0x1c0 [ 175.169790] snd_pcm_oss_change_params+0x80/0xe0 [ 175.174536] snd_pcm_oss_make_ready+0xbe/0x170 [ 175.179107] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 175.184543] ? __lock_acquire+0x7f5/0x5130 [ 175.188766] ? snd_pcm_oss_make_ready+0x170/0x170 [ 175.193595] ? __might_sleep+0x95/0x190 [ 175.197563] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 175.201959] ? _parse_integer+0x190/0x190 [ 175.206096] ? graph_lock+0x170/0x170 [ 175.209917] ? snd_pcm_oss_release+0x290/0x290 [ 175.214488] ? find_held_lock+0x36/0x1c0 [ 175.218538] ? graph_lock+0x170/0x170 [ 175.222328] ? find_held_lock+0x36/0x1c0 [ 175.226384] ? lock_downgrade+0x8e0/0x8e0 [ 175.230525] ? kasan_check_read+0x11/0x20 [ 175.234659] ? rcu_is_watching+0x85/0x140 [ 175.238843] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 175.244036] ? __fget+0x40c/0x650 [ 175.247479] ? match_held_lock+0x881/0x8b0 [ 175.251702] ? expand_files.part.8+0x9a0/0x9a0 [ 175.256272] ? kasan_check_write+0x14/0x20 [ 175.260493] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 175.265412] ? wait_for_completion+0x870/0x870 [ 175.269983] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 175.275168] ? snd_pcm_oss_release+0x290/0x290 [ 175.279735] do_vfs_ioctl+0x1cf/0x1650 [ 175.283614] ? ioctl_preallocate+0x2e0/0x2e0 [ 175.288013] ? fget_raw+0x20/0x20 [ 175.291461] ? __sb_end_write+0xac/0xe0 [ 175.295426] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 175.300947] ? fput+0x130/0x1a0 [ 175.304217] ? ksys_write+0x1a6/0x250 [ 175.308010] ? security_file_ioctl+0x94/0xc0 [ 175.312415] ksys_ioctl+0xa9/0xd0 [ 175.315857] SyS_ioctl+0x24/0x30 [ 175.319209] ? ksys_ioctl+0xd0/0xd0 [ 175.322823] do_syscall_64+0x29e/0x9d0 [ 175.326695] ? vmalloc_sync_all+0x30/0x30 [ 175.330829] ? _raw_spin_unlock_irq+0x27/0x70 [ 175.335311] ? finish_task_switch+0x1ca/0x820 [ 175.340652] ? syscall_return_slowpath+0x5c0/0x5c0 [ 175.345576] ? syscall_return_slowpath+0x30f/0x5c0 [ 175.350501] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.355853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.360692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.365882] RIP: 0033:0x455259 [ 175.369065] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.376760] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 175.384019] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 175.391278] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.398533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 175.405794] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000007 2018/04/09 20:05:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x400000000000000) 2018/04/09 20:05:00 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0xc3ff000000000000]}, 0x10) 2018/04/09 20:05:00 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:00 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x14, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:00 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:05:00 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x873, @loopback={0x0, 0x1}, 0x1}, 0x3ba) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = gettid() r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x29, 0x40000) perf_event_open(&(0x7f0000000100)={0x4, 0x20, 0x0, 0x992, 0x0, 0x1ff, 0x0, 0x9, 0x20080, 0xec3f696ababbdc87, 0x1, 0x5, 0x9, 0x3, 0x6, 0x7f, 0x5, 0x0, 0x7, 0x2, 0x0, 0xfffffffffffffffc, 0x9, 0x6, 0x3, 0x0, 0x3, 0x2, 0x0, 0x7fffffff, 0x4, 0x729f, 0x1ff, 0x1, 0x1, 0xb40d, 0x20, 0x1ff, 0x0, 0x5a6, 0x1, @perf_config_ext={0x5, 0x1}, 0x60, 0x5, 0x20, 0x4, 0x0, 0x2731, 0x3}, r2, 0xa, r3, 0x3) shutdown(r1, 0x0) [ 175.561286] FAULT_INJECTION: forcing a failure. [ 175.561286] name failslab, interval 1, probability 0, space 0, times 0 [ 175.572762] CPU: 1 PID: 13369 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 175.579699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.589064] Call Trace: [ 175.591673] dump_stack+0x1b9/0x294 [ 175.595317] ? dump_stack_print_info.cold.2+0x52/0x52 [ 175.600526] should_fail.cold.4+0xa/0x1a [ 175.604605] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.609726] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 175.614937] ? graph_lock+0x170/0x170 [ 175.618751] ? is_bpf_text_address+0xd7/0x170 [ 175.623251] ? find_held_lock+0x36/0x1c0 [ 175.627323] ? __lock_is_held+0xb5/0x140 [ 175.631404] ? check_same_owner+0x320/0x320 [ 175.635736] ? rcu_note_context_switch+0x710/0x710 [ 175.640676] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 175.646311] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 175.650898] ? do_vfs_ioctl+0x1cf/0x1650 [ 175.654968] __should_failslab+0x124/0x180 [ 175.659211] should_failslab+0x9/0x14 [ 175.663013] __kmalloc+0x2c8/0x760 [ 175.666552] ? print_usage_bug+0xc0/0xc0 [ 175.670615] ? kasan_check_write+0x14/0x20 [ 175.674863] ? do_raw_spin_lock+0xc1/0x200 [ 175.679108] ? snd_pcm_plugin_build+0x64/0x670 [ 175.683703] snd_pcm_plugin_build+0x64/0x670 [ 175.688122] snd_pcm_plugin_build_linear+0x29d/0x900 [ 175.693235] ? linear_transfer+0xa20/0xa20 [ 175.697588] snd_pcm_plug_format_plugins+0x7c8/0x1a60 [ 175.702803] ? snd_pcm_plug_slave_format+0x760/0x760 [ 175.707909] ? snd_interval_refine+0x428/0x700 [ 175.712494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.718037] ? snd_pcm_hw_param_max+0x730/0x730 [ 175.722705] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 175.727892] snd_pcm_oss_change_params_locked+0x11bd/0x3ce0 [ 175.733607] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 175.739483] ? print_usage_bug+0xc0/0xc0 [ 175.743534] ? debug_check_no_locks_freed+0x310/0x310 [ 175.748711] ? __lock_acquire+0x7f5/0x5130 [ 175.752932] ? debug_check_no_locks_freed+0x310/0x310 [ 175.758107] ? graph_lock+0x170/0x170 [ 175.761893] ? __lock_acquire+0x7f5/0x5130 [ 175.766116] ? debug_check_no_locks_freed+0x310/0x310 [ 175.771293] ? print_usage_bug+0xc0/0xc0 [ 175.775343] ? find_held_lock+0x36/0x1c0 [ 175.779400] snd_pcm_oss_change_params+0x80/0xe0 [ 175.784144] snd_pcm_oss_make_ready+0xbe/0x170 [ 175.788718] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 175.794157] ? __lock_acquire+0x7f5/0x5130 [ 175.798379] ? snd_pcm_oss_make_ready+0x170/0x170 [ 175.803209] ? __might_sleep+0x95/0x190 [ 175.807182] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 175.811579] ? _parse_integer+0x190/0x190 [ 175.815716] ? graph_lock+0x170/0x170 [ 175.819502] ? snd_pcm_oss_release+0x290/0x290 [ 175.824073] ? find_held_lock+0x36/0x1c0 [ 175.828122] ? graph_lock+0x170/0x170 [ 175.831909] ? find_held_lock+0x36/0x1c0 [ 175.835965] ? lock_downgrade+0x8e0/0x8e0 [ 175.840107] ? kasan_check_read+0x11/0x20 [ 175.844239] ? rcu_is_watching+0x85/0x140 [ 175.848374] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 175.853560] ? __fget+0x40c/0x650 [ 175.857003] ? match_held_lock+0x881/0x8b0 [ 175.861231] ? expand_files.part.8+0x9a0/0x9a0 [ 175.865800] ? kasan_check_write+0x14/0x20 [ 175.870026] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 175.874946] ? wait_for_completion+0x870/0x870 [ 175.879515] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 175.884691] ? snd_pcm_oss_release+0x290/0x290 [ 175.889261] do_vfs_ioctl+0x1cf/0x1650 [ 175.893141] ? ioctl_preallocate+0x2e0/0x2e0 [ 175.897535] ? fget_raw+0x20/0x20 [ 175.900976] ? __sb_end_write+0xac/0xe0 [ 175.904939] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 175.910460] ? fput+0x130/0x1a0 [ 175.913729] ? ksys_write+0x1a6/0x250 [ 175.917524] ? security_file_ioctl+0x94/0xc0 [ 175.921919] ksys_ioctl+0xa9/0xd0 [ 175.925362] SyS_ioctl+0x24/0x30 [ 175.928715] ? ksys_ioctl+0xd0/0xd0 [ 175.932341] do_syscall_64+0x29e/0x9d0 [ 175.936215] ? vmalloc_sync_all+0x30/0x30 [ 175.940349] ? _raw_spin_unlock_irq+0x27/0x70 [ 175.944830] ? finish_task_switch+0x1ca/0x820 [ 175.949318] ? syscall_return_slowpath+0x5c0/0x5c0 [ 175.954236] ? syscall_return_slowpath+0x30f/0x5c0 [ 175.959157] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.964511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.969347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.974521] RIP: 0033:0x455259 [ 175.977695] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.985403] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 175.992658] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 175.999911] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/09 20:05:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xe00000000000000) 2018/04/09 20:05:01 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x6000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 176.007164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 176.014417] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000008 2018/04/09 20:05:01 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7800000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x2000000000000000) 2018/04/09 20:05:01 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x2000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x898f, 0x0) socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x3f, 0x8, &(0x7f00000003c0)="3398657fed2f40c79791120fee9ef4b23305b6dc177fc06b5eca3d7ba59a5cab8815f0959bb7224ef550bb0fe8cc255b587232c661003b000000000000000000000044a00e3cb2d8b0340b46ca07308afb7b9268c52f2125cdd9c96b8701fe786f851bfa6a2c89b807860c8b84142bb04149253dca66dd835c0561dbc2497798989420bea07f5db7464343728b5c872ac6fef42b15af84a3b989b00afb8ed0236553be500ecd1765fa872f4d676525ecb2a128609e83967f00000000000000000000000000000000", 0x5a3) ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff) 2018/04/09 20:05:01 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x40010020]}, 0x10) 2018/04/09 20:05:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003400)=""/251, 0xfb}, {&(0x7f0000003500)=""/14, 0xe}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, 0x0, 0x0, 0x3ff}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:05:01 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x3, r1}) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:01 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x400, 0x9) r3 = socket$inet_dccp(0x2, 0x6, 0x0) fsetxattr(r2, &(0x7f0000000140)=@random={'trusted.', 'selfwlan0(#vmnet1\x00'}, &(0x7f0000000180)='%trusted{}\x00', 0xb, 0x3) listen(r0, 0x4000000006) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) shutdown(r3, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x80, 0xa00) 2018/04/09 20:05:01 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x6, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:01 executing program 3 (fault-call:2 fault-nth:9): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x401f0000) [ 176.348565] FAULT_INJECTION: forcing a failure. [ 176.348565] name failslab, interval 1, probability 0, space 0, times 0 [ 176.359888] CPU: 0 PID: 13434 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 176.366823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.376185] Call Trace: [ 176.378789] dump_stack+0x1b9/0x294 [ 176.382435] ? dump_stack_print_info.cold.2+0x52/0x52 [ 176.387642] ? __save_stack_trace+0x7e/0xd0 [ 176.392078] should_fail.cold.4+0xa/0x1a 2018/04/09 20:05:01 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:01 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x1, 0x8000, 0x3f, 0x6, 0x2, 0x80, 0x4, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x7fffffff}, 0xfffffffffffffe5a) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r3, &(0x7f0000000180)='net/icmp6\x00') connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r2, 0x0) [ 176.396157] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 176.401529] ? save_stack+0x43/0xd0 [ 176.405165] ? kasan_kmalloc+0xc4/0xe0 [ 176.409058] ? __kmalloc+0x14e/0x760 [ 176.412785] ? snd_pcm_plugin_build+0x64/0x670 [ 176.417471] ? snd_pcm_plugin_build_linear+0x29d/0x900 [ 176.422757] ? snd_pcm_plug_format_plugins+0x7c8/0x1a60 [ 176.428134] ? graph_lock+0x170/0x170 [ 176.431946] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 176.436535] ? do_vfs_ioctl+0x1cf/0x1650 [ 176.440603] ? ksys_ioctl+0xa9/0xd0 [ 176.444236] ? SyS_ioctl+0x24/0x30 [ 176.447781] ? do_syscall_64+0x29e/0x9d0 [ 176.451847] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.457216] ? find_held_lock+0x36/0x1c0 [ 176.461288] ? __lock_is_held+0xb5/0x140 [ 176.465365] ? check_same_owner+0x320/0x320 [ 176.469700] ? rcu_note_context_switch+0x710/0x710 [ 176.474642] __should_failslab+0x124/0x180 [ 176.478882] should_failslab+0x9/0x14 [ 176.482695] __kmalloc+0x2c8/0x760 [ 176.486239] ? print_usage_bug+0xc0/0xc0 [ 176.490304] ? kasan_check_write+0x14/0x20 [ 176.494546] ? do_raw_spin_lock+0xc1/0x200 [ 176.498793] ? snd_pcm_plugin_build+0x448/0x670 [ 176.503479] snd_pcm_plugin_build+0x448/0x670 [ 176.507990] snd_pcm_plugin_build_linear+0x29d/0x900 [ 176.513105] ? linear_transfer+0xa20/0xa20 [ 176.517362] snd_pcm_plug_format_plugins+0x7c8/0x1a60 [ 176.522563] ? snd_pcm_plug_slave_format+0x760/0x760 [ 176.527667] ? snd_interval_refine+0x428/0x700 [ 176.532258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 176.537807] ? snd_pcm_hw_param_max+0x730/0x730 [ 176.542489] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 176.547686] snd_pcm_oss_change_params_locked+0x11bd/0x3ce0 [ 176.553412] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 176.559300] ? print_usage_bug+0xc0/0xc0 [ 176.563370] ? debug_check_no_locks_freed+0x310/0x310 [ 176.568566] ? __lock_acquire+0x7f5/0x5130 [ 176.572804] ? debug_check_no_locks_freed+0x310/0x310 [ 176.577998] ? graph_lock+0x170/0x170 [ 176.581799] ? __lock_acquire+0x7f5/0x5130 [ 176.586044] ? debug_check_no_locks_freed+0x310/0x310 [ 176.591242] ? print_usage_bug+0xc0/0xc0 [ 176.595310] ? find_held_lock+0x36/0x1c0 [ 176.599385] snd_pcm_oss_change_params+0x80/0xe0 [ 176.604148] snd_pcm_oss_make_ready+0xbe/0x170 [ 176.608767] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 176.614220] ? __lock_acquire+0x7f5/0x5130 [ 176.618460] ? snd_pcm_oss_make_ready+0x170/0x170 [ 176.623309] ? __might_sleep+0x95/0x190 [ 176.627294] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 176.631706] ? _parse_integer+0x190/0x190 [ 176.635847] ? graph_lock+0x170/0x170 [ 176.639638] ? snd_pcm_oss_release+0x290/0x290 [ 176.644213] ? find_held_lock+0x36/0x1c0 [ 176.648270] ? graph_lock+0x170/0x170 [ 176.652063] ? find_held_lock+0x36/0x1c0 [ 176.656119] ? lock_downgrade+0x8e0/0x8e0 [ 176.660261] ? kasan_check_read+0x11/0x20 [ 176.664395] ? rcu_is_watching+0x85/0x140 [ 176.668533] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 176.673720] ? __fget+0x40c/0x650 [ 176.677161] ? match_held_lock+0x881/0x8b0 [ 176.681386] ? expand_files.part.8+0x9a0/0x9a0 [ 176.685959] ? kasan_check_write+0x14/0x20 [ 176.690205] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 176.695125] ? wait_for_completion+0x870/0x870 [ 176.699696] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 176.704872] ? snd_pcm_oss_release+0x290/0x290 [ 176.709444] do_vfs_ioctl+0x1cf/0x1650 [ 176.713326] ? ioctl_preallocate+0x2e0/0x2e0 [ 176.717723] ? fget_raw+0x20/0x20 [ 176.721164] ? __sb_end_write+0xac/0xe0 [ 176.725131] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 176.730692] ? fput+0x130/0x1a0 [ 176.733963] ? ksys_write+0x1a6/0x250 [ 176.737755] ? security_file_ioctl+0x94/0xc0 [ 176.742154] ksys_ioctl+0xa9/0xd0 [ 176.745600] SyS_ioctl+0x24/0x30 [ 176.748954] ? ksys_ioctl+0xd0/0xd0 [ 176.752570] do_syscall_64+0x29e/0x9d0 [ 176.756445] ? vmalloc_sync_all+0x30/0x30 [ 176.760579] ? kasan_check_write+0x14/0x20 [ 176.764805] ? syscall_return_slowpath+0x5c0/0x5c0 [ 176.769723] ? syscall_return_slowpath+0x30f/0x5c0 [ 176.774645] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 176.780015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.784864] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.790047] RIP: 0033:0x455259 [ 176.793221] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.800919] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 176.808177] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 176.815433] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.822689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 176.829943] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000009 2018/04/09 20:05:02 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x5000000]}, 0x10) 2018/04/09 20:05:02 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xaaaaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x7fffffff, 0x7, 0x9, 0x0, "363e66e5df72b50651927e55661587c776c6ae3e01c74ffc1bb863cc06502aa989bf5643c2ea1a44b6914db0", 0x51c3}, 0x0, 0x0, 0x46, r2, 0x5, 0xfffffffffffffffb, "7530edf5661e032046b860d4ee2d19fab976e9706663f423f087fc8a50177cb28b559e5d584031c193a29701879e33b1eca4dd16e4d9922a55a8f5d57dfc3048", &(0x7f0000000040)='/dev/sg#\x00', 0x9, [], [0x401, 0x800, 0x8, 0x1]}) waitid(0x2, r2, &(0x7f0000000080), 0x21000000, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:02 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x40030000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0xff, {{0xa, 0x4e24, 0x1b2d, @remote={0xfe, 0x80, [], 0xbb}, 0xc4e}}, {{0xa, 0x4e20, 0x8, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) 2018/04/09 20:05:02 executing program 3 (fault-call:2 fault-nth:10): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xfb2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:05:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x11000000) [ 176.956303] FAULT_INJECTION: forcing a failure. [ 176.956303] name failslab, interval 1, probability 0, space 0, times 0 [ 176.967648] CPU: 0 PID: 13459 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 176.974582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.983942] Call Trace: [ 176.986545] dump_stack+0x1b9/0x294 [ 176.990445] ? dump_stack_print_info.cold.2+0x52/0x52 [ 176.995641] ? finish_task_switch+0x1ca/0x820 [ 177.000140] ? finish_task_switch+0x182/0x820 [ 177.004645] should_fail.cold.4+0xa/0x1a [ 177.008718] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.013833] ? __schedule+0x80f/0x1e40 [ 177.017737] ? __sched_text_start+0x8/0x8 [ 177.021890] ? find_held_lock+0x36/0x1c0 [ 177.025961] ? __lock_is_held+0xb5/0x140 [ 177.030048] ? check_same_owner+0x320/0x320 [ 177.034378] ? snd_pcm_plugin_build+0x4d0/0x670 [ 177.039062] __should_failslab+0x124/0x180 [ 177.043306] should_failslab+0x9/0x14 [ 177.047110] __kmalloc+0x2c8/0x760 [ 177.050656] ? linear_transfer+0xa20/0xa20 [ 177.054906] ? snd_pcm_plugin_build+0x64/0x670 [ 177.059501] snd_pcm_plugin_build+0x64/0x670 [ 177.063917] snd_pcm_plugin_build_io+0x28c/0x720 [ 177.068677] ? io_playback_transfer+0x310/0x310 [ 177.073354] ? snd_pcm_hw_param_max+0x730/0x730 [ 177.078038] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 177.083241] snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 177.088976] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 177.094875] ? print_usage_bug+0xc0/0xc0 [ 177.098955] ? debug_check_no_locks_freed+0x310/0x310 2018/04/09 20:05:02 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x4004, 0x2000, 0x7, 0x4, 0x8}) shutdown(r1, 0x0) 2018/04/09 20:05:02 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1000000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0xc3ff]}, 0x10) 2018/04/09 20:05:02 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x11000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) signalfd(r0, &(0x7f0000000040)={0x9}, 0x8) [ 177.104156] ? __lock_acquire+0x7f5/0x5130 [ 177.108400] ? debug_check_no_locks_freed+0x310/0x310 [ 177.113602] ? graph_lock+0x170/0x170 [ 177.117413] ? __lock_acquire+0x7f5/0x5130 [ 177.121663] ? debug_check_no_locks_freed+0x310/0x310 [ 177.126860] ? print_usage_bug+0xc0/0xc0 [ 177.130928] ? find_held_lock+0x36/0x1c0 [ 177.135009] snd_pcm_oss_change_params+0x80/0xe0 [ 177.139771] snd_pcm_oss_make_ready+0xbe/0x170 [ 177.144363] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 177.149818] ? __lock_acquire+0x7f5/0x5130 [ 177.154062] ? snd_pcm_oss_make_ready+0x170/0x170 [ 177.158910] ? __might_sleep+0x95/0x190 [ 177.162898] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 177.167313] ? _parse_integer+0x190/0x190 [ 177.171467] ? graph_lock+0x170/0x170 [ 177.175272] ? snd_pcm_oss_release+0x290/0x290 [ 177.179860] ? find_held_lock+0x36/0x1c0 [ 177.183928] ? graph_lock+0x170/0x170 [ 177.187738] ? find_held_lock+0x36/0x1c0 [ 177.191811] ? lock_downgrade+0x8e0/0x8e0 [ 177.195972] ? kasan_check_read+0x11/0x20 [ 177.200131] ? rcu_is_watching+0x85/0x140 2018/04/09 20:05:02 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfffffff5, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xd000000) [ 177.204288] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 177.209492] ? __fget+0x40c/0x650 [ 177.212968] ? match_held_lock+0x881/0x8b0 [ 177.217230] ? expand_files.part.8+0x9a0/0x9a0 [ 177.221817] ? kasan_check_write+0x14/0x20 [ 177.226053] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 177.230989] ? wait_for_completion+0x870/0x870 [ 177.235580] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 177.240770] ? snd_pcm_oss_release+0x290/0x290 [ 177.245362] do_vfs_ioctl+0x1cf/0x1650 [ 177.249257] ? ioctl_preallocate+0x2e0/0x2e0 [ 177.253672] ? fget_raw+0x20/0x20 2018/04/09 20:05:02 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x4000000000004) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000000)) [ 177.257133] ? __sb_end_write+0xac/0xe0 [ 177.261118] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 177.266656] ? fput+0x130/0x1a0 [ 177.269937] ? ksys_write+0x1a6/0x250 [ 177.273744] ? security_file_ioctl+0x94/0xc0 [ 177.278159] ksys_ioctl+0xa9/0xd0 [ 177.281612] SyS_ioctl+0x24/0x30 [ 177.284977] ? ksys_ioctl+0xd0/0xd0 [ 177.288615] do_syscall_64+0x29e/0x9d0 [ 177.292509] ? vmalloc_sync_all+0x30/0x30 [ 177.296661] ? _raw_spin_unlock_irq+0x27/0x70 [ 177.301164] ? finish_task_switch+0x1ca/0x820 [ 177.305668] ? syscall_return_slowpath+0x5c0/0x5c0 [ 177.310599] ? syscall_return_slowpath+0x30f/0x5c0 [ 177.315539] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.320918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.325771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.330957] RIP: 0033:0x455259 [ 177.334151] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.341862] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 177.349132] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 2018/04/09 20:05:02 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) open_by_handle_at(r0, &(0x7f0000000040)={0x61, 0x5, "14230c7727d0657ab0278e518c0ba206bdf53dc37d7915c47574d1cf23f14d4eade3f4a1f39b0809b2166b70373d6092c21a05680f3078922b5ad76f46d226ae86e34a6648411bd38d5cb52d9e6a06840c10580e1d6fd10db3"}, 0x200) 2018/04/09 20:05:02 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1400000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 177.356407] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.363680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 177.370950] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000a 2018/04/09 20:05:02 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x20000140]}, 0x10) 2018/04/09 20:05:02 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xff00, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:02 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty, 0x81}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200000000, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0xfffffffffffffffd) 2018/04/09 20:05:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) 2018/04/09 20:05:03 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:03 executing program 3 (fault-call:2 fault-nth:11): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:03 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:05:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x401f) 2018/04/09 20:05:03 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x2, 0x3) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:03 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0xffc3]}, 0x10) [ 177.715772] FAULT_INJECTION: forcing a failure. [ 177.715772] name failslab, interval 1, probability 0, space 0, times 0 [ 177.727102] CPU: 1 PID: 13542 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 177.734037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.743396] Call Trace: [ 177.745994] dump_stack+0x1b9/0x294 [ 177.749632] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.754833] ? __save_stack_trace+0x7e/0xd0 [ 177.759169] should_fail.cold.4+0xa/0x1a [ 177.763237] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.768344] ? save_stack+0x43/0xd0 [ 177.772008] ? kasan_kmalloc+0xc4/0xe0 [ 177.775898] ? __kmalloc+0x14e/0x760 [ 177.779604] ? snd_pcm_plugin_build+0x64/0x670 [ 177.784177] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 177.789102] ? snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 177.794985] ? graph_lock+0x170/0x170 [ 177.798777] ? do_vfs_ioctl+0x1cf/0x1650 [ 177.802823] ? ksys_ioctl+0xa9/0xd0 [ 177.806437] ? SyS_ioctl+0x24/0x30 [ 177.809968] ? do_syscall_64+0x29e/0x9d0 [ 177.814027] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.819388] ? find_held_lock+0x36/0x1c0 [ 177.823444] ? __lock_is_held+0xb5/0x140 [ 177.827506] ? check_same_owner+0x320/0x320 [ 177.831819] ? rcu_note_context_switch+0x710/0x710 [ 177.836744] __should_failslab+0x124/0x180 [ 177.840976] should_failslab+0x9/0x14 [ 177.844764] __kmalloc+0x2c8/0x760 [ 177.848295] ? linear_transfer+0xa20/0xa20 [ 177.852521] ? snd_pcm_plugin_build+0x448/0x670 [ 177.857183] snd_pcm_plugin_build+0x448/0x670 [ 177.861670] snd_pcm_plugin_build_io+0x28c/0x720 [ 177.866417] ? io_playback_transfer+0x310/0x310 [ 177.871080] ? snd_pcm_hw_param_max+0x730/0x730 [ 177.875746] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 177.880934] snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 177.886651] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 177.892525] ? print_usage_bug+0xc0/0xc0 [ 177.896579] ? debug_check_no_locks_freed+0x310/0x310 [ 177.901758] ? __lock_acquire+0x7f5/0x5130 [ 177.905982] ? debug_check_no_locks_freed+0x310/0x310 [ 177.911160] ? graph_lock+0x170/0x170 [ 177.914949] ? __lock_acquire+0x7f5/0x5130 [ 177.919176] ? debug_check_no_locks_freed+0x310/0x310 [ 177.924351] ? print_usage_bug+0xc0/0xc0 [ 177.928405] ? find_held_lock+0x36/0x1c0 [ 177.932470] snd_pcm_oss_change_params+0x80/0xe0 [ 177.937222] snd_pcm_oss_make_ready+0xbe/0x170 [ 177.941799] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 177.947237] ? __lock_acquire+0x7f5/0x5130 [ 177.951472] ? snd_pcm_oss_make_ready+0x170/0x170 [ 177.956305] ? __might_sleep+0x95/0x190 [ 177.960277] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 177.964676] ? _parse_integer+0x190/0x190 [ 177.968815] ? graph_lock+0x170/0x170 [ 177.972607] ? snd_pcm_oss_release+0x290/0x290 [ 177.977182] ? find_held_lock+0x36/0x1c0 [ 177.981233] ? graph_lock+0x170/0x170 [ 177.985035] ? find_held_lock+0x36/0x1c0 [ 177.989095] ? lock_downgrade+0x8e0/0x8e0 [ 177.993236] ? kasan_check_read+0x11/0x20 [ 177.997375] ? rcu_is_watching+0x85/0x140 [ 178.001513] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 178.006700] ? __fget+0x40c/0x650 [ 178.010142] ? match_held_lock+0x881/0x8b0 [ 178.014366] ? expand_files.part.8+0x9a0/0x9a0 [ 178.018939] ? kasan_check_write+0x14/0x20 [ 178.023162] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 178.028085] ? wait_for_completion+0x870/0x870 [ 178.032658] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 178.037840] ? snd_pcm_oss_release+0x290/0x290 [ 178.042414] do_vfs_ioctl+0x1cf/0x1650 [ 178.046310] ? ioctl_preallocate+0x2e0/0x2e0 [ 178.050707] ? fget_raw+0x20/0x20 [ 178.054152] ? __sb_end_write+0xac/0xe0 [ 178.058122] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 178.063650] ? fput+0x130/0x1a0 [ 178.066922] ? ksys_write+0x1a6/0x250 [ 178.070718] ? security_file_ioctl+0x94/0xc0 [ 178.075119] ksys_ioctl+0xa9/0xd0 [ 178.078568] SyS_ioctl+0x24/0x30 [ 178.081927] ? ksys_ioctl+0xd0/0xd0 [ 178.085547] do_syscall_64+0x29e/0x9d0 [ 178.089426] ? vmalloc_sync_all+0x30/0x30 [ 178.093568] ? _raw_spin_unlock_irq+0x27/0x70 [ 178.098058] ? finish_task_switch+0x1ca/0x820 [ 178.102548] ? syscall_return_slowpath+0x5c0/0x5c0 [ 178.107484] ? syscall_return_slowpath+0x30f/0x5c0 [ 178.112410] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.117776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.122629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.127806] RIP: 0033:0x455259 [ 178.130982] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.138685] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 178.145944] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 178.153208] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.160471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/04/09 20:05:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x16d, 0x2, 0x1, 0x72}, {0x0, 0x4, 0x4, 0x69}, {0x100, 0x0, 0x1, 0x3}, {0x4, 0x3, 0xbaa, 0xfff}, {0x8, 0x8000, 0x8001, 0x1}, {0x8, 0x7ff, 0x2, 0x7f}, {0x3, 0xff, 0x7, 0xe873}]}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0xe5, 0xfffffffffffffffc, 0x0, 0x6, 0x8, 0x3f}}, 0x8) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 178.167729] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000b 2018/04/09 20:05:03 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfc000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:03 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x12, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x11) 2018/04/09 20:05:03 executing program 6: r0 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000000)=0x1d8, 0x4) 2018/04/09 20:05:03 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sysfs$3(0x3) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:03 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x4001002000000000]}, 0x10) 2018/04/09 20:05:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)) 2018/04/09 20:05:03 executing program 3 (fault-call:2 fault-nth:12): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x6, [@empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="ce6ecd17725c", @random="a3a684c86294"]}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0xe) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 178.372491] FAULT_INJECTION: forcing a failure. [ 178.372491] name failslab, interval 1, probability 0, space 0, times 0 [ 178.383824] CPU: 0 PID: 13577 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 178.390761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.400119] Call Trace: [ 178.402725] dump_stack+0x1b9/0x294 [ 178.406377] ? dump_stack_print_info.cold.2+0x52/0x52 [ 178.411592] should_fail.cold.4+0xa/0x1a [ 178.415669] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/09 20:05:03 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x700, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:03 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa10, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 178.420787] ? snd_pcm_plugin_build+0x448/0x670 [ 178.425597] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 178.430544] ? snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 178.436447] ? snd_pcm_oss_change_params+0x80/0xe0 [ 178.441391] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 178.446156] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 178.451794] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 178.456391] ? graph_lock+0x170/0x170 [ 178.460208] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.465583] ? find_held_lock+0x36/0x1c0 [ 178.469656] ? __lock_is_held+0xb5/0x140 [ 178.473739] ? check_same_owner+0x320/0x320 [ 178.478076] ? rcu_note_context_switch+0x710/0x710 [ 178.483022] __should_failslab+0x124/0x180 [ 178.487356] should_failslab+0x9/0x14 [ 178.491243] kmem_cache_alloc_trace+0x2cb/0x780 [ 178.495931] ? snd_pcm_plugin_build+0x448/0x670 [ 178.500614] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 178.506333] ? _snd_pcm_hw_param_min+0x570/0x570 [ 178.511100] ? snd_pcm_hw_param_max+0x730/0x730 [ 178.515780] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 178.520984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.526528] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 178.531474] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 178.537208] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 178.543099] ? print_usage_bug+0xc0/0xc0 [ 178.547173] ? debug_check_no_locks_freed+0x310/0x310 [ 178.552371] ? __lock_acquire+0x7f5/0x5130 [ 178.556609] ? debug_check_no_locks_freed+0x310/0x310 [ 178.561801] ? graph_lock+0x170/0x170 [ 178.565606] ? __lock_acquire+0x7f5/0x5130 [ 178.569853] ? debug_check_no_locks_freed+0x310/0x310 [ 178.575045] ? print_usage_bug+0xc0/0xc0 [ 178.579105] ? find_held_lock+0x36/0x1c0 [ 178.583167] snd_pcm_oss_change_params+0x80/0xe0 [ 178.587917] snd_pcm_oss_make_ready+0xbe/0x170 [ 178.592496] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 178.597936] ? __lock_acquire+0x7f5/0x5130 [ 178.602162] ? snd_pcm_oss_make_ready+0x170/0x170 [ 178.607011] ? __might_sleep+0x95/0x190 [ 178.610986] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 178.615389] ? _parse_integer+0x190/0x190 [ 178.619528] ? graph_lock+0x170/0x170 [ 178.623316] ? snd_pcm_oss_release+0x290/0x290 [ 178.627898] ? find_held_lock+0x36/0x1c0 [ 178.631948] ? graph_lock+0x170/0x170 [ 178.635737] ? find_held_lock+0x36/0x1c0 [ 178.639795] ? lock_downgrade+0x8e0/0x8e0 [ 178.643934] ? kasan_check_read+0x11/0x20 [ 178.648070] ? rcu_is_watching+0x85/0x140 [ 178.652204] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 178.657392] ? __fget+0x40c/0x650 [ 178.660833] ? match_held_lock+0x881/0x8b0 [ 178.665057] ? expand_files.part.8+0x9a0/0x9a0 [ 178.669632] ? kasan_check_write+0x14/0x20 [ 178.673854] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 178.678775] ? wait_for_completion+0x870/0x870 [ 178.683348] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 178.688526] ? snd_pcm_oss_release+0x290/0x290 [ 178.693098] do_vfs_ioctl+0x1cf/0x1650 [ 178.696989] ? ioctl_preallocate+0x2e0/0x2e0 [ 178.701389] ? fget_raw+0x20/0x20 [ 178.704831] ? __sb_end_write+0xac/0xe0 [ 178.708795] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 178.714316] ? fput+0x130/0x1a0 [ 178.717583] ? ksys_write+0x1a6/0x250 [ 178.721377] ? security_file_ioctl+0x94/0xc0 [ 178.725776] ksys_ioctl+0xa9/0xd0 [ 178.729218] SyS_ioctl+0x24/0x30 [ 178.732571] ? ksys_ioctl+0xd0/0xd0 [ 178.736198] do_syscall_64+0x29e/0x9d0 [ 178.740071] ? vmalloc_sync_all+0x30/0x30 [ 178.744207] ? _raw_spin_unlock_irq+0x27/0x70 [ 178.748688] ? finish_task_switch+0x1ca/0x820 [ 178.753172] ? syscall_return_slowpath+0x5c0/0x5c0 [ 178.758088] ? syscall_return_slowpath+0x30f/0x5c0 [ 178.763011] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.768373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.773211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.778386] RIP: 0033:0x455259 [ 178.781561] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.789259] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 178.796513] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 178.803767] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.811027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 178.818286] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000c 2018/04/09 20:05:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xf) 2018/04/09 20:05:04 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb80b000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:04 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffff, 0x242802) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xfa9) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) dup3(r1, r1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) timerfd_create(0x3, 0x800) r4 = socket(0x40000000015, 0xaea26365aae92e9c, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000680), &(0x7f0000000600)=0x980be4a83ff8c049) signalfd4(r3, &(0x7f0000000140)={0x8000}, 0x8, 0x800) setsockopt(r4, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x80) r5 = socket$inet6(0xa, 0x80000, 0xffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x3, @empty, 0x5}, @in6={0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x7}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x40}, @in6={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0xb}, 0x4}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}], 0xb0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000001c0)=0x4) 2018/04/09 20:05:04 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:04 executing program 3 (fault-call:2 fault-nth:13): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:04 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0xc3ff0000]}, 0x10) 2018/04/09 20:05:04 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) shutdown(r1, 0x0) r3 = dup3(r1, r1, 0x80000) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="a4341be15efaa1ce3e376d79faf4196bab9c1219662a47a179cc255fd6324531a32b85406b1d5dd0da1f5a2550c119b8c3e04d3c85c4ed77779dcad6fc7815fdbb5897778ac5b49ec5cda56491818fddc657784614f42cb548279fa42916d4a3ffbbcaecaa3080786f47648acfc777a9", 0x70}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000001c0)="01ce725bc84ceb986f38c10d812745576203977b0834648466e3", 0x1a}, {&(0x7f0000000200)="89623df9be580880f4c420cb0dc50998d1a71aee60391972516619410e4a713cacc974ae1142aaa552db2562727caf364e115aa1c89299d4399d7048d1bc36055eeb094bd91671b40c23b5027c8194daa8e46353bde59a6d192e222fa41b3485003285b0c40e9c14dac6df4343f35dc652842880a16a90d450c40273a6af4b4a137247735afb661bfcf6c6b3cd4c73acbefdf6e31bc447c7de3230f2214020bbf0776059c8dbaae041db1255c969287216055141d63b79065a09a6095305a290a8e07efc61343a35febb688e99020f5eb6fec657ca4066c9d48f252ad40d8f96deef0b7e4a6d9f7cd5e0255941f1d6ca096e370c1523a32bc3b4c916fcd199", 0xff}, {&(0x7f00000013c0)="6e337716d976fae9064e99ff1c36ecc5754fa24d304359cb3f7a5103841950c7fca61bbc5eb5173294b6e012f5a4dc24478e4238948cea86f5bfe1268b9071e4b48952456ad97a9611a7cd1a7e9480e0135085ba8ade1f10a4078ecebbe179e19fba9d6691a9f52ceb2c6dd892a6fb6f3dbadafc3ecd5a3a332219e31c6abbfb292d3ffb2ff08b1f58e16258de36800e90a46d70156cadd1856754eaa43070b32c164fd7eec84e9fa5f91931246e2b086b2267", 0xb3}, {&(0x7f0000001480)="5eb34ec90c9981be8358158af7795c119722a793fcef93c1d8d4b25f315e99a6f4aa8440b3824cc23fa01f5e45e2b0b961f21ae1297d8b3c15acf5dbbfcd46569567ca506f9843b5f0ae2f426c44fb7563487e9cb4fa9b3c06187e7ecd6264b2d57f530c1aeaa0e454eed1571b6c2c0928660d362a05aa21d2467cfed84b5a2de8726df0db68f5f01ffca47f628f11abef5437728d2e1ae8991299290ceb55dce5e1aefa950db02f7d1ee2", 0xab}, {&(0x7f0000000300)="0fdec30ad3e431701453d753", 0xc}, {&(0x7f0000000340)="fc8d1bd78004fb5c452c3ab749ce53c5e4eccc1ca6e42035609694969352b9cd55", 0x21}, {&(0x7f0000001540)="d19503292890a0b31f8fe4946c18dc7e84e2ca79d08688e3d67e7fd8551780d434715be17dc1d49e3465aa6f5e8d1ce775fdc0397a2d0c508cdf84d5dc3e0b99e4ede6e7e6a906a29fdf0beb46f9d38b5a00c1f0a14af480cfc06efe9d154261a6f8803f254bd44bbdacf70524553488a9f137d742dda539016c2706b48183437f747bbe5224a508ff3eccaff9fc7b2f979fe7d43abb9bb3ecaf420bed97afe6ad92d2fcf63361fe133ab7b035887d22b9f9aabd53934a1d59cbbb286adb8b78b3b5d7b30801888a00b37b4c80cca023c4ccd6cfe7fd93952ae61c439331c15a3f211dd5125f8273986d271bafc717497a8d98378f12", 0xf6}], 0x9, &(0x7f0000001700)=[{0xa8, 0x10d, 0x80000000, "6b15f542bd1f2604376d57a71060aa0f993bd05ebb31b310c4a8bd9d97086302db1dd715569fb7f8607810b5e665de6687cda92ead30db6119ac186819254357fb6d9c46f06cf79b7fff0a7d06c8d5780640c80c5f80d560197ceb6744a1c7ad9375089fde24ff30222bb36519506f461fe41e65056f2cd8ff7146bd953407a585a14f7627f785c43d91acfbe054169622"}], 0xa8, 0x40}, 0x14) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0x943e) 2018/04/09 20:05:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)) [ 178.977458] FAULT_INJECTION: forcing a failure. [ 178.977458] name failslab, interval 1, probability 0, space 0, times 0 [ 178.988824] CPU: 1 PID: 13612 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 178.995758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.005119] Call Trace: [ 179.007717] dump_stack+0x1b9/0x294 [ 179.011363] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.016574] should_fail.cold.4+0xa/0x1a [ 179.020646] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 179.025756] ? debug_check_no_locks_freed+0x310/0x310 [ 179.030945] ? kfree+0xd9/0x260 [ 179.034225] ? graph_lock+0x170/0x170 [ 179.038030] ? snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 179.043833] ? snd_pcm_oss_change_params+0x80/0xe0 [ 179.048765] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 179.053531] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 179.059163] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 179.063754] ? do_vfs_ioctl+0x1cf/0x1650 [ 179.067822] ? find_held_lock+0x36/0x1c0 [ 179.071881] ? __lock_is_held+0xb5/0x140 [ 179.075946] ? check_same_owner+0x320/0x320 [ 179.080265] ? rcu_note_context_switch+0x710/0x710 [ 179.085185] ? graph_lock+0x170/0x170 [ 179.088979] __should_failslab+0x124/0x180 [ 179.093202] should_failslab+0x9/0x14 [ 179.096989] __kmalloc+0x2c8/0x760 [ 179.100523] ? constrain_params_by_rules+0x141/0x1360 [ 179.105698] ? find_held_lock+0x36/0x1c0 [ 179.109751] constrain_params_by_rules+0x141/0x1360 [ 179.114758] ? lock_downgrade+0x8e0/0x8e0 [ 179.118899] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 179.124076] ? rcu_is_watching+0x85/0x140 [ 179.128209] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.133396] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.138581] ? is_bpf_text_address+0xd7/0x170 [ 179.143064] ? kernel_text_address+0x79/0xf0 [ 179.147460] ? __unwind_start+0x166/0x330 [ 179.151594] ? __kernel_text_address+0xd/0x40 [ 179.156076] ? unwind_get_return_address+0x61/0xa0 [ 179.160993] ? __save_stack_trace+0x7e/0xd0 [ 179.165318] ? save_stack+0xa9/0xd0 [ 179.168936] ? save_stack+0x43/0xd0 [ 179.172549] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 179.177552] ? snd_interval_refine+0x428/0x700 [ 179.182125] snd_pcm_hw_refine+0x8e9/0x1180 [ 179.186446] ? constrain_params_by_rules+0x1360/0x1360 [ 179.191712] ? graph_lock+0x170/0x170 [ 179.195494] ? __lock_is_held+0xb5/0x140 [ 179.199558] ? __lock_is_held+0xb5/0x140 [ 179.203615] ? snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 179.209499] ? rcu_read_lock_sched_held+0x108/0x120 [ 179.214501] ? kmem_cache_alloc_trace+0x616/0x780 [ 179.219336] ? _snd_pcm_hw_param_min+0x330/0x570 [ 179.224083] snd_pcm_hw_param_near.constprop.35+0x2cf/0xb10 [ 179.229785] ? _snd_pcm_hw_param_min+0x570/0x570 [ 179.234531] ? snd_pcm_hw_param_max+0x730/0x730 [ 179.239190] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 179.244365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 179.249887] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 179.254804] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 179.260513] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 179.266383] ? print_usage_bug+0xc0/0xc0 [ 179.270433] ? debug_check_no_locks_freed+0x310/0x310 [ 179.275611] ? __lock_acquire+0x7f5/0x5130 [ 179.279839] ? debug_check_no_locks_freed+0x310/0x310 [ 179.285021] ? graph_lock+0x170/0x170 [ 179.288811] ? __lock_acquire+0x7f5/0x5130 [ 179.293044] ? debug_check_no_locks_freed+0x310/0x310 [ 179.298217] ? print_usage_bug+0xc0/0xc0 [ 179.302264] ? find_held_lock+0x36/0x1c0 [ 179.306325] snd_pcm_oss_change_params+0x80/0xe0 [ 179.311067] snd_pcm_oss_make_ready+0xbe/0x170 [ 179.315639] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 179.321077] ? __lock_acquire+0x7f5/0x5130 [ 179.325298] ? snd_pcm_oss_make_ready+0x170/0x170 [ 179.330139] ? __might_sleep+0x95/0x190 [ 179.334107] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 179.339052] ? _parse_integer+0x190/0x190 [ 179.343189] ? graph_lock+0x170/0x170 [ 179.346978] ? snd_pcm_oss_release+0x290/0x290 [ 179.351547] ? find_held_lock+0x36/0x1c0 [ 179.355595] ? graph_lock+0x170/0x170 [ 179.359384] ? find_held_lock+0x36/0x1c0 [ 179.363440] ? lock_downgrade+0x8e0/0x8e0 [ 179.367580] ? kasan_check_read+0x11/0x20 [ 179.371713] ? rcu_is_watching+0x85/0x140 [ 179.375847] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.381036] ? __fget+0x40c/0x650 [ 179.384477] ? match_held_lock+0x881/0x8b0 [ 179.388702] ? expand_files.part.8+0x9a0/0x9a0 [ 179.393268] ? kasan_check_write+0x14/0x20 [ 179.397489] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 179.402406] ? wait_for_completion+0x870/0x870 [ 179.406976] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 179.412151] ? snd_pcm_oss_release+0x290/0x290 [ 179.416717] do_vfs_ioctl+0x1cf/0x1650 [ 179.420595] ? ioctl_preallocate+0x2e0/0x2e0 [ 179.424991] ? fget_raw+0x20/0x20 [ 179.428436] ? __sb_end_write+0xac/0xe0 [ 179.432399] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 179.437921] ? fput+0x130/0x1a0 [ 179.441189] ? ksys_write+0x1a6/0x250 [ 179.444981] ? security_file_ioctl+0x94/0xc0 [ 179.449379] ksys_ioctl+0xa9/0xd0 [ 179.452824] SyS_ioctl+0x24/0x30 [ 179.456176] ? ksys_ioctl+0xd0/0xd0 [ 179.459789] do_syscall_64+0x29e/0x9d0 [ 179.463659] ? vmalloc_sync_all+0x30/0x30 [ 179.467792] ? _raw_spin_unlock_irq+0x27/0x70 [ 179.472273] ? finish_task_switch+0x1ca/0x820 [ 179.476758] ? syscall_return_slowpath+0x5c0/0x5c0 [ 179.481675] ? syscall_return_slowpath+0x30f/0x5c0 [ 179.486684] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 179.492043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.496879] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 179.502053] RIP: 0033:0x455259 [ 179.505226] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.512934] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 179.520199] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 2018/04/09 20:05:04 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0xe, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f00001c1000)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="ddd478e5b69e772f28106abc77251120b7c6d6af7a36b56dfc9cc53c483f1f22fbff311ca142cc9992ca5b79ce73ae64cdccd357f251b763a16cef0343564d241ff7e864748dd21b8c6eddcb7e6055dae3ef98956ca00539f062f8390c37440800d96f7087348ac18eae495f66e7c9adc1381c158aaf6cbc2660659e3d9f2a1f342df14387b14a4032e6816ce0f42adaf4830518ac775a30e776f4e0dc156c687b656e65131603638780044c5a493de55bee694f2f5042271ea070a3e211a22ff232441cabc9e527cf3df49160c97f04b05cac9a407c5ac5b43342a6497c73825c47", 0xe2, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x100000000, @loopback={0x0, 0x1}}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="b6", 0xf}], 0x1000021c) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="a0", 0xfffffffffffffd50}], 0x1) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x84) shutdown(r1, 0x1) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:04 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x100000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xff00, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 179.527453] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.534709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 179.541971] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000d 2018/04/09 20:05:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:05 executing program 3 (fault-call:2 fault-nth:14): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:05 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0xffc3]}, 0x10) 2018/04/09 20:05:05 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xfffffff5, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xb80b000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 179.776550] FAULT_INJECTION: forcing a failure. [ 179.776550] name failslab, interval 1, probability 0, space 0, times 0 [ 179.787890] CPU: 1 PID: 13640 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 179.794827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.804187] Call Trace: [ 179.806792] dump_stack+0x1b9/0x294 [ 179.810434] ? dump_stack_print_info.cold.2+0x52/0x52 [ 179.815637] ? perf_trace_lock_acquire+0xe3/0x980 [ 179.820516] should_fail.cold.4+0xa/0x1a [ 179.824597] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 179.829715] ? __lock_acquire+0x7f5/0x5130 [ 179.833969] ? graph_lock+0x170/0x170 [ 179.837783] ? find_held_lock+0x36/0x1c0 [ 179.841858] ? __lock_is_held+0xb5/0x140 [ 179.845942] ? check_same_owner+0x320/0x320 [ 179.850282] ? do_raw_spin_lock+0xc1/0x200 [ 179.854533] ? rcu_note_context_switch+0x710/0x710 [ 179.859473] ? perf_trace_lock_acquire+0xe3/0x980 [ 179.864333] __should_failslab+0x124/0x180 [ 179.868584] should_failslab+0x9/0x14 [ 179.872392] __kmalloc+0x2c8/0x760 [ 179.875942] ? __lock_acquire+0x7f5/0x5130 [ 179.880181] ? mark_held_locks+0xc9/0x160 [ 179.884341] ? constrain_params_by_rules+0x141/0x1360 [ 179.889548] constrain_params_by_rules+0x141/0x1360 [ 179.894585] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 179.899791] ? lock_downgrade+0x8e0/0x8e0 [ 179.903957] ? kasan_check_read+0x11/0x20 [ 179.908114] ? rcu_is_watching+0x85/0x140 [ 179.912277] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.917480] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 179.922694] ? is_bpf_text_address+0xd7/0x170 [ 179.927198] ? kernel_text_address+0x79/0xf0 [ 179.931617] ? __unwind_start+0x166/0x330 [ 179.935775] ? __kernel_text_address+0xd/0x40 [ 179.940286] ? unwind_get_return_address+0x61/0xa0 [ 179.945230] ? __save_stack_trace+0x7e/0xd0 [ 179.949570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 179.955115] ? snd_interval_refine+0x428/0x700 [ 179.959714] snd_pcm_hw_refine+0x8e9/0x1180 [ 179.964059] ? constrain_params_by_rules+0x1360/0x1360 [ 179.969347] ? snd_pcm_oss_change_params+0x80/0xe0 [ 179.974291] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 179.979054] ? snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 179.984683] ? snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 179.989282] ? do_vfs_ioctl+0x1cf/0x1650 [ 179.993354] ? ksys_ioctl+0xa9/0xd0 [ 179.996985] ? SyS_ioctl+0x24/0x30 [ 180.000526] ? do_syscall_64+0x29e/0x9d0 [ 180.004589] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.009961] ? kasan_check_read+0x11/0x20 [ 180.014117] ? do_raw_spin_unlock+0x9e/0x2e0 [ 180.018533] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 180.023126] ? print_usage_bug+0xc0/0xc0 [ 180.027193] ? kasan_check_write+0x14/0x20 [ 180.031433] ? do_raw_spin_lock+0xc1/0x200 [ 180.035682] ? trace_hardirqs_off+0xd/0x10 [ 180.039926] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 180.045038] ? debug_check_no_obj_freed+0x2ff/0x584 [ 180.050069] ? mark_held_locks+0xc9/0x160 [ 180.054223] ? quarantine_put+0xeb/0x190 [ 180.058310] snd_pcm_hw_param_first+0x30e/0x680 [ 180.062993] snd_pcm_hw_param_near.constprop.35+0x6e2/0xb10 [ 180.068717] ? _snd_pcm_hw_param_min+0x570/0x570 [ 180.073487] ? snd_pcm_hw_param_max+0x730/0x730 [ 180.078164] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 180.083362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.088910] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 180.093846] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 180.099579] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 180.105454] ? perf_trace_lock_acquire+0xe3/0x980 [ 180.110283] ? debug_check_no_locks_freed+0x310/0x310 [ 180.115463] ? perf_trace_lock+0x900/0x900 [ 180.119685] ? perf_trace_lock+0x900/0x900 [ 180.123910] ? graph_lock+0x170/0x170 [ 180.127700] ? __lock_acquire+0x7f5/0x5130 [ 180.131938] ? debug_check_no_locks_freed+0x310/0x310 [ 180.137120] ? find_held_lock+0x36/0x1c0 [ 180.141178] snd_pcm_oss_change_params+0x80/0xe0 [ 180.145920] snd_pcm_oss_make_ready+0xbe/0x170 [ 180.150491] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 180.155932] ? snd_pcm_oss_make_ready+0x170/0x170 [ 180.160766] ? __might_sleep+0x95/0x190 [ 180.164735] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 180.169135] ? _parse_integer+0x190/0x190 [ 180.173270] ? graph_lock+0x170/0x170 [ 180.177059] ? snd_pcm_oss_release+0x290/0x290 [ 180.181717] ? find_held_lock+0x36/0x1c0 [ 180.185769] ? graph_lock+0x170/0x170 [ 180.189556] ? find_held_lock+0x36/0x1c0 [ 180.193613] ? lock_downgrade+0x8e0/0x8e0 [ 180.197755] ? kasan_check_read+0x11/0x20 [ 180.201891] ? rcu_is_watching+0x85/0x140 [ 180.206031] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 180.211214] ? __fget+0x40c/0x650 [ 180.214658] ? match_held_lock+0x881/0x8b0 [ 180.218881] ? expand_files.part.8+0x9a0/0x9a0 [ 180.223450] ? kasan_check_write+0x14/0x20 [ 180.227674] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 180.232590] ? wait_for_completion+0x870/0x870 [ 180.237158] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 180.242344] ? snd_pcm_oss_release+0x290/0x290 [ 180.246915] do_vfs_ioctl+0x1cf/0x1650 [ 180.250801] ? ioctl_preallocate+0x2e0/0x2e0 [ 180.255199] ? fget_raw+0x20/0x20 [ 180.258640] ? __sb_end_write+0xac/0xe0 [ 180.262604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 180.268127] ? fput+0x130/0x1a0 [ 180.271396] ? ksys_write+0x1a6/0x250 [ 180.275196] ? security_file_ioctl+0x94/0xc0 [ 180.279592] ksys_ioctl+0xa9/0xd0 [ 180.283039] SyS_ioctl+0x24/0x30 [ 180.286392] ? ksys_ioctl+0xd0/0xd0 [ 180.290008] do_syscall_64+0x29e/0x9d0 [ 180.293887] ? vmalloc_sync_all+0x30/0x30 [ 180.298027] ? _raw_spin_unlock_irq+0x27/0x70 [ 180.302510] ? finish_task_switch+0x1ca/0x820 [ 180.306995] ? syscall_return_slowpath+0x5c0/0x5c0 [ 180.311915] ? syscall_return_slowpath+0x30f/0x5c0 [ 180.316842] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.322197] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/09 20:05:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x600000000000000) 2018/04/09 20:05:05 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f00000051c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000050c0)=[{{&(0x7f00000000c0)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/78, 0x4e}], 0x2, &(0x7f00000003c0)=""/213, 0xd5, 0x400}, 0x7}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000002900), 0x0, 0x0, 0x0, 0x81}, 0x4}, {{&(0x7f00000029c0)=@can, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002a40)=""/56, 0x38}, {&(0x7f0000002a80)=""/80, 0x50}, {&(0x7f0000002b00)=""/200, 0xc8}, {&(0x7f0000002c00)=""/163, 0xa3}, {&(0x7f0000002cc0)=""/93, 0x5d}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/157, 0x9d}], 0x7, &(0x7f0000003e80)=""/66, 0x42, 0x291}, 0x1}, {{&(0x7f0000003f00)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003f80)=""/90, 0x5a}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/12, 0xc}], 0x3, &(0x7f0000005080)}, 0x3f}], 0x4, 0x2040, &(0x7f0000005200)={r1, r2+30000000}) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') fchmodat(r6, &(0x7f0000000040)='./file0\x00', 0x9) listen(r5, 0x4000000006) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r5, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [{0x20}, {0x20, 'net/ip_mr_vif\x00'}], 0xa, "5869eb276b407d1afdec755ca3d88639ab879a8aab50c3e1b9bd9a6a199b368d8e2d3392f44120b2ad9f02067c5ba17b9d"}, 0x4c) 2018/04/09 20:05:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x1d, &(0x7f00000001c0)="448020041a2c6794f60fff8ea8f1279f4f8f98ca787bba9e4c089a1d0528c7e961b35e2090ec0297018dc72b8843828463ea2bf1f6ffb8c97c4ea760f21948a5e25fc614e21c164817826c553e50f4e79c1dff6ccf8696f0010046e146", 0x5d) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10000, 0x301000) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) 2018/04/09 20:05:05 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1200000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x7800000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x16aaaafeffaaaaa8, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 180.327043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.332218] RIP: 0033:0x455259 [ 180.335396] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.343093] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 180.350348] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 180.357601] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.364855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 180.372110] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000e 2018/04/09 20:05:05 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x500000000000000]}, 0x10) 2018/04/09 20:05:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) close(r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)) 2018/04/09 20:05:05 executing program 3 (fault-call:2 fault-nth:15): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:05 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0x5, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt(r2, 0x2a, 0x800, &(0x7f0000000000)="2a8e339c", 0x320) recvfrom$ax25(r1, &(0x7f0000000140)=""/221, 0xdd, 0x2040, &(0x7f0000000040)={0x3, {"974403bebb6b14"}, 0x60}, 0x10) getgroups(0x1, &(0x7f0000000240)=[0x0]) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setgroups(0x4, &(0x7f0000000400)=[r3, r4, r5, r6]) 2018/04/09 20:05:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x100000000000000) 2018/04/09 20:05:05 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x81, 0x1f, 0x1a}) shutdown(r1, 0x0) 2018/04/09 20:05:05 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x40000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:05 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1700000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 180.569398] FAULT_INJECTION: forcing a failure. [ 180.569398] name failslab, interval 1, probability 0, space 0, times 0 [ 180.580759] CPU: 1 PID: 13696 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 180.587691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.597049] Call Trace: [ 180.599653] dump_stack+0x1b9/0x294 [ 180.603303] ? dump_stack_print_info.cold.2+0x52/0x52 [ 180.608511] ? perf_trace_lock_acquire+0xe3/0x980 [ 180.613376] ? kernel_text_address+0x79/0xf0 [ 180.617819] ? __unwind_start+0x166/0x330 [ 180.621985] should_fail.cold.4+0xa/0x1a [ 180.626068] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 180.631186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.636745] ? snd_pcm_hw_refine+0x362/0x1180 [ 180.641257] ? graph_lock+0x170/0x170 [ 180.645070] ? find_held_lock+0x36/0x1c0 [ 180.649145] ? __lock_is_held+0xb5/0x140 [ 180.653219] ? check_same_owner+0x320/0x320 [ 180.657530] ? debug_check_no_obj_freed+0x2ff/0x584 [ 180.662540] ? rcu_note_context_switch+0x710/0x710 [ 180.667468] __should_failslab+0x124/0x180 [ 180.671696] should_failslab+0x9/0x14 [ 180.675483] kmem_cache_alloc_trace+0x2cb/0x780 [ 180.680142] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 180.684977] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 180.690681] ? _snd_pcm_hw_param_min+0x570/0x570 [ 180.695429] ? snd_pcm_hw_param_max+0x730/0x730 [ 180.700090] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 180.705270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 180.710797] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 180.715719] snd_pcm_oss_change_params_locked+0x1bb1/0x3ce0 [ 180.721431] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 180.727308] ? perf_trace_lock_acquire+0xe3/0x980 [ 180.732140] ? debug_check_no_locks_freed+0x310/0x310 [ 180.737320] ? perf_trace_lock+0x900/0x900 [ 180.741545] ? perf_trace_lock+0x900/0x900 [ 180.745769] ? graph_lock+0x170/0x170 [ 180.749557] ? __lock_acquire+0x7f5/0x5130 [ 180.753784] ? debug_check_no_locks_freed+0x310/0x310 [ 180.758965] ? find_held_lock+0x36/0x1c0 [ 180.763030] snd_pcm_oss_change_params+0x80/0xe0 [ 180.767775] snd_pcm_oss_make_ready+0xbe/0x170 [ 180.772349] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 180.777790] ? snd_pcm_oss_make_ready+0x170/0x170 [ 180.782623] ? __might_sleep+0x95/0x190 [ 180.786593] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 180.790991] ? _parse_integer+0x190/0x190 [ 180.795129] ? graph_lock+0x170/0x170 [ 180.798918] ? snd_pcm_oss_release+0x290/0x290 [ 180.803488] ? find_held_lock+0x36/0x1c0 [ 180.807539] ? graph_lock+0x170/0x170 [ 180.811328] ? find_held_lock+0x36/0x1c0 [ 180.815384] ? lock_downgrade+0x8e0/0x8e0 [ 180.819523] ? kasan_check_read+0x11/0x20 [ 180.823659] ? rcu_is_watching+0x85/0x140 [ 180.827796] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 180.832982] ? __fget+0x40c/0x650 [ 180.836425] ? match_held_lock+0x881/0x8b0 [ 180.840646] ? expand_files.part.8+0x9a0/0x9a0 [ 180.845215] ? kasan_check_write+0x14/0x20 [ 180.849437] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 180.854355] ? wait_for_completion+0x870/0x870 [ 180.858924] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 180.864100] ? snd_pcm_oss_release+0x290/0x290 [ 180.868672] do_vfs_ioctl+0x1cf/0x1650 [ 180.872552] ? ioctl_preallocate+0x2e0/0x2e0 [ 180.876951] ? fget_raw+0x20/0x20 [ 180.880393] ? __sb_end_write+0xac/0xe0 [ 180.884357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 180.889877] ? fput+0x130/0x1a0 [ 180.893148] ? ksys_write+0x1a6/0x250 [ 180.896940] ? security_file_ioctl+0x94/0xc0 [ 180.901340] ksys_ioctl+0xa9/0xd0 [ 180.904782] SyS_ioctl+0x24/0x30 [ 180.908133] ? ksys_ioctl+0xd0/0xd0 [ 180.911759] do_syscall_64+0x29e/0x9d0 [ 180.915633] ? vmalloc_sync_all+0x30/0x30 [ 180.919767] ? _raw_spin_unlock_irq+0x27/0x70 [ 180.924250] ? finish_task_switch+0x1ca/0x820 [ 180.928735] ? syscall_return_slowpath+0x5c0/0x5c0 [ 180.933663] ? syscall_return_slowpath+0x30f/0x5c0 [ 180.938583] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.943938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.948772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.953946] RIP: 0033:0x455259 [ 180.957120] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.964815] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 180.972071] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 180.979326] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.986583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 180.993837] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000f 2018/04/09 20:05:06 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x3f000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:06 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r0 = socket(0xf, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000400)="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", 0x1000, 0x4000002, 0x0, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000000)) setsockopt(r0, 0x114, 0x7, &(0x7f0000000200)="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", 0x1e4) 2018/04/09 20:05:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xe000000) 2018/04/09 20:05:06 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x3c}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20}}, 0xffff, 0x2, 0xa563, 0x6, 0x40}, 0x98) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) 2018/04/09 20:05:06 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x5000000]}, 0x10) 2018/04/09 20:05:06 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x78, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:06 executing program 3 (fault-call:2 fault-nth:16): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") r2 = perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r3}) [ 181.128610] FAULT_INJECTION: forcing a failure. [ 181.128610] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 181.140485] CPU: 0 PID: 13722 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 181.147415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.156775] Call Trace: [ 181.159374] dump_stack+0x1b9/0x294 [ 181.163012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 181.168212] ? constrain_params_by_rules+0xa3d/0x1360 [ 181.173419] should_fail.cold.4+0xa/0x1a [ 181.177494] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.182612] ? debug_check_no_locks_freed+0x310/0x310 [ 181.187815] ? kasan_check_read+0x11/0x20 [ 181.191966] ? rcu_is_watching+0x85/0x140 [ 181.196122] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 181.201401] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 181.206595] ? is_bpf_text_address+0xd7/0x170 [ 181.211088] ? __unwind_start+0x166/0x330 [ 181.215235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.220773] ? should_fail+0x21b/0xbcd [ 181.224658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 181.230186] __alloc_pages_nodemask+0x34e/0xd70 [ 181.234845] ? snd_pcm_hw_refine+0x362/0x1180 [ 181.239343] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 181.244353] ? find_held_lock+0x36/0x1c0 [ 181.248406] ? __lock_is_held+0xb5/0x140 [ 181.252465] ? check_same_owner+0x320/0x320 [ 181.256779] ? debug_check_no_obj_freed+0x2ff/0x584 [ 181.261788] cache_grow_begin+0x72/0x6c0 [ 181.265846] kmem_cache_alloc_trace+0x6a5/0x780 [ 181.270506] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 181.275341] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 181.281050] ? _snd_pcm_hw_param_min+0x570/0x570 [ 181.285799] ? snd_pcm_hw_param_max+0x730/0x730 [ 181.290459] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 181.295643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.301169] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 181.306089] snd_pcm_oss_change_params_locked+0x1bb1/0x3ce0 [ 181.311800] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 181.317673] ? print_usage_bug+0xc0/0xc0 [ 181.321727] ? debug_check_no_locks_freed+0x310/0x310 [ 181.326906] ? __lock_acquire+0x7f5/0x5130 [ 181.331131] ? debug_check_no_locks_freed+0x310/0x310 [ 181.336308] ? graph_lock+0x170/0x170 [ 181.340103] ? __lock_acquire+0x7f5/0x5130 [ 181.344330] ? debug_check_no_locks_freed+0x310/0x310 [ 181.349507] ? print_usage_bug+0xc0/0xc0 [ 181.353557] ? find_held_lock+0x36/0x1c0 [ 181.357614] snd_pcm_oss_change_params+0x80/0xe0 [ 181.362360] snd_pcm_oss_make_ready+0xbe/0x170 [ 181.366932] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 181.372367] ? __lock_acquire+0x7f5/0x5130 [ 181.376589] ? snd_pcm_oss_make_ready+0x170/0x170 [ 181.381420] ? __might_sleep+0x95/0x190 [ 181.385386] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 181.389782] ? _parse_integer+0x190/0x190 [ 181.393918] ? graph_lock+0x170/0x170 [ 181.397707] ? snd_pcm_oss_release+0x290/0x290 [ 181.402275] ? find_held_lock+0x36/0x1c0 [ 181.406325] ? graph_lock+0x170/0x170 [ 181.410115] ? find_held_lock+0x36/0x1c0 [ 181.414171] ? lock_downgrade+0x8e0/0x8e0 [ 181.418312] ? kasan_check_read+0x11/0x20 [ 181.422446] ? rcu_is_watching+0x85/0x140 [ 181.426580] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 181.431764] ? __fget+0x40c/0x650 [ 181.435204] ? match_held_lock+0x881/0x8b0 [ 181.439428] ? expand_files.part.8+0x9a0/0x9a0 [ 181.443995] ? kasan_check_write+0x14/0x20 [ 181.448221] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 181.453139] ? wait_for_completion+0x870/0x870 [ 181.457711] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 181.462886] ? snd_pcm_oss_release+0x290/0x290 [ 181.467455] do_vfs_ioctl+0x1cf/0x1650 [ 181.471332] ? ioctl_preallocate+0x2e0/0x2e0 [ 181.475731] ? fget_raw+0x20/0x20 [ 181.479172] ? __sb_end_write+0xac/0xe0 [ 181.483136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 181.488660] ? fput+0x130/0x1a0 [ 181.491927] ? ksys_write+0x1a6/0x250 [ 181.495716] ? security_file_ioctl+0x94/0xc0 [ 181.500112] ksys_ioctl+0xa9/0xd0 [ 181.503558] SyS_ioctl+0x24/0x30 [ 181.507547] ? ksys_ioctl+0xd0/0xd0 [ 181.511163] do_syscall_64+0x29e/0x9d0 [ 181.515038] ? vmalloc_sync_all+0x30/0x30 [ 181.519173] ? kasan_check_write+0x14/0x20 [ 181.523396] ? syscall_return_slowpath+0x5c0/0x5c0 [ 181.528313] ? syscall_return_slowpath+0x30f/0x5c0 [ 181.533236] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 181.538589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.543423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 181.548597] RIP: 0033:0x455259 [ 181.551773] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.559488] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 181.566743] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 2018/04/09 20:05:07 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xaa00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xc0fe, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 181.573997] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 181.581254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 181.588507] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000010 2018/04/09 20:05:07 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f000031cff7)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x8008700b, &(0x7f000098dffa)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) shutdown(r1, 0x0) 2018/04/09 20:05:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0xc3ff0000]}, 0x10) 2018/04/09 20:05:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000000) 2018/04/09 20:05:07 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xff00000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1b4351feff9aa404, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="5710ed81930db9cf0a085940ca999d4f5930b8d7cf9a9eecf2f10cf27776", 0x1e}, {&(0x7f0000000280)="f93bbd273611eb23256d1b5e4737fd87", 0x10}, {&(0x7f00000002c0)="c7b50686463cab06b2eb6c6753875644a3585d", 0x13}], 0x3, 0x5) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/133) r1 = open(&(0x7f0000000340)='./file0\x00', 0x20000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000009c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'ip6_vti0\x00', r2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5b) r3 = socket(0x40000000015, 0x5, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xfffffffffffffffd, 0x4, 0x1, 0x6, 0xa77a4366aea4895c, 0x3e, 0x2, 0x14e, 0x40, 0x308, 0x7, 0x3, 0x38, 0x1, 0x0, 0x100000003f, 0xc15}, [{0x6474e553, 0x672, 0x2020, 0x8, 0x9, 0x1ff, 0x8, 0x58}], "0d2c16b63b5992bbc8713cf541f63a85b5017173f82e222860abf06cfab8d719df96e8e6e17441b506eb322f1fb197177ca8efcb5026e02baf0f85e905d8d58742fcd70ae3ce98e032c3bac6c6f871df942345f60e0a1db1af739ca43d06e3e2b50c99f132ad5d79abe5ef55a4bce266bff8cb61b8a6f4e791f58d405a77784bedc00d6894c49955b7b58a53548f0cca0df628672ad7d6592495d046a43961341e21489ee53fe1cad044e4bd2918785cfd06d1725624889789200ecee8861e422a"}, 0x139) setsockopt(r3, 0x8, 0x9c, &(0x7f00000004c0)="2a8e339c", 0xfcce) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x50, &(0x7f0000000500)}, 0x10) 2018/04/09 20:05:07 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) shutdown(r1, 0x0) 2018/04/09 20:05:07 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x18, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x500]}, 0x10) 2018/04/09 20:05:07 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x600000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 5: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) 2018/04/09 20:05:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x700) 2018/04/09 20:05:07 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0xc3ff]}, 0x10) 2018/04/09 20:05:07 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x4a49afffe51431b, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:07 executing program 3 (fault-call:2 fault-nth:17): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r2}) 2018/04/09 20:05:07 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x0) [ 182.058409] FAULT_INJECTION: forcing a failure. [ 182.058409] name failslab, interval 1, probability 0, space 0, times 0 [ 182.069744] CPU: 0 PID: 13786 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 182.076684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.086047] Call Trace: [ 182.088653] dump_stack+0x1b9/0x294 [ 182.092299] ? dump_stack_print_info.cold.2+0x52/0x52 [ 182.097503] should_fail.cold.4+0xa/0x1a [ 182.101584] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.106694] ? rcu_is_watching+0x85/0x140 [ 182.110853] ? graph_lock+0x170/0x170 [ 182.114668] ? find_held_lock+0x36/0x1c0 [ 182.118737] ? __lock_is_held+0xb5/0x140 [ 182.122818] ? check_same_owner+0x320/0x320 [ 182.127153] ? rcu_note_context_switch+0x710/0x710 [ 182.132089] ? debug_check_no_locks_freed+0x310/0x310 [ 182.137285] __should_failslab+0x124/0x180 [ 182.141527] should_failslab+0x9/0x14 [ 182.145331] __kmalloc+0x2c8/0x760 [ 182.148883] ? do_raw_spin_unlock+0x9e/0x2e0 [ 182.153298] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 182.157887] ? print_usage_bug+0xc0/0xc0 [ 182.161953] ? print_usage_bug+0xc0/0xc0 [ 182.166026] ? constrain_params_by_rules+0x141/0x1360 [ 182.171220] ? kasan_check_write+0x14/0x20 [ 182.175469] constrain_params_by_rules+0x141/0x1360 [ 182.180493] ? __lock_acquire+0x7f5/0x5130 [ 182.184733] ? __lock_is_held+0xb5/0x140 [ 182.188809] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 182.194006] ? debug_check_no_locks_freed+0x310/0x310 [ 182.199197] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 182.204216] ? find_held_lock+0x36/0x1c0 [ 182.208277] ? lock_downgrade+0x8e0/0x8e0 [ 182.212425] ? kasan_check_read+0x11/0x20 [ 182.216565] ? rcu_is_watching+0x85/0x140 [ 182.220703] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 182.225706] ? snd_interval_refine+0x428/0x700 [ 182.230281] snd_pcm_hw_refine+0x8e9/0x1180 [ 182.234603] ? constrain_params_by_rules+0x1360/0x1360 [ 182.239866] ? find_held_lock+0x36/0x1c0 [ 182.243915] ? print_usage_bug+0xc0/0xc0 [ 182.247967] ? lock_downgrade+0x8e0/0x8e0 [ 182.252102] ? lock_release+0xa10/0xa10 [ 182.256066] ? kasan_check_read+0x11/0x20 [ 182.260201] ? do_raw_spin_unlock+0x9e/0x2e0 [ 182.264600] ? mark_held_locks+0xc9/0x160 [ 182.268741] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 182.273750] snd_pcm_hw_params+0x2a9/0x1e20 [ 182.278060] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 182.283152] ? debug_check_no_obj_freed+0x2ff/0x584 [ 182.288160] ? snd_pcm_hw_refine+0x1180/0x1180 [ 182.292734] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 182.297738] ? snd_pcm_hw_param_value+0x112/0x550 [ 182.302574] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 182.307410] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 182.313287] ? _snd_pcm_hw_param_min+0x570/0x570 [ 182.318042] ? snd_pcm_hw_param_max+0x730/0x730 [ 182.322702] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 182.327881] snd_pcm_kernel_ioctl+0x6c/0x240 [ 182.332277] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 182.338001] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 182.343879] ? print_usage_bug+0xc0/0xc0 [ 182.347929] ? debug_check_no_locks_freed+0x310/0x310 [ 182.353115] ? __lock_acquire+0x7f5/0x5130 [ 182.357337] ? debug_check_no_locks_freed+0x310/0x310 [ 182.362512] ? graph_lock+0x170/0x170 [ 182.366354] ? __lock_acquire+0x7f5/0x5130 [ 182.370609] ? debug_check_no_locks_freed+0x310/0x310 [ 182.375788] ? print_usage_bug+0xc0/0xc0 [ 182.379841] ? find_held_lock+0x36/0x1c0 [ 182.383903] snd_pcm_oss_change_params+0x80/0xe0 [ 182.388646] snd_pcm_oss_make_ready+0xbe/0x170 [ 182.393220] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 182.398661] ? __lock_acquire+0x7f5/0x5130 [ 182.402884] ? snd_pcm_oss_make_ready+0x170/0x170 [ 182.407714] ? __might_sleep+0x95/0x190 [ 182.411683] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 182.416223] ? _parse_integer+0x190/0x190 [ 182.420362] ? graph_lock+0x170/0x170 [ 182.424152] ? snd_pcm_oss_release+0x290/0x290 [ 182.428724] ? find_held_lock+0x36/0x1c0 [ 182.432781] ? graph_lock+0x170/0x170 [ 182.436571] ? find_held_lock+0x36/0x1c0 [ 182.440634] ? lock_downgrade+0x8e0/0x8e0 [ 182.444775] ? kasan_check_read+0x11/0x20 [ 182.448912] ? rcu_is_watching+0x85/0x140 [ 182.453052] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 182.458243] ? __fget+0x40c/0x650 [ 182.461687] ? match_held_lock+0x881/0x8b0 [ 182.465913] ? expand_files.part.8+0x9a0/0x9a0 [ 182.470485] ? kasan_check_write+0x14/0x20 [ 182.474709] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 182.479631] ? wait_for_completion+0x870/0x870 [ 182.484208] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 182.489389] ? snd_pcm_oss_release+0x290/0x290 [ 182.493965] do_vfs_ioctl+0x1cf/0x1650 [ 182.497850] ? ioctl_preallocate+0x2e0/0x2e0 [ 182.502252] ? fget_raw+0x20/0x20 [ 182.505700] ? __sb_end_write+0xac/0xe0 [ 182.509666] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 182.515190] ? fput+0x130/0x1a0 [ 182.518465] ? ksys_write+0x1a6/0x250 [ 182.522260] ? security_file_ioctl+0x94/0xc0 [ 182.526660] ksys_ioctl+0xa9/0xd0 [ 182.530108] SyS_ioctl+0x24/0x30 [ 182.533466] ? ksys_ioctl+0xd0/0xd0 [ 182.537084] do_syscall_64+0x29e/0x9d0 [ 182.540966] ? vmalloc_sync_all+0x30/0x30 [ 182.545107] ? _raw_spin_unlock_irq+0x27/0x70 [ 182.549595] ? finish_task_switch+0x1ca/0x820 [ 182.554080] ? syscall_return_slowpath+0x5c0/0x5c0 [ 182.559001] ? syscall_return_slowpath+0x30f/0x5c0 [ 182.563929] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 182.569287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.574128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.579305] RIP: 0033:0x455259 [ 182.582480] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.590180] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 182.597436] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 2018/04/09 20:05:08 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x20000140]}, 0x10) 2018/04/09 20:05:08 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x19, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x400000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000040)=""/121, &(0x7f00000000c0)=0x79) r1 = socket(0x40000000015, 0x5, 0x10000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1}}, 0x3, 0x81, 0x81, 0x400, 0x79}, &(0x7f00000002c0)=0x98) setsockopt(r1, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 182.604704] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 182.611962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 182.619221] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000011 2018/04/09 20:05:08 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x80000000, 0x420600) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x64c) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) listen(r0, 0x4000000006) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) times(&(0x7f0000000100)) shutdown(r2, 0x0) 2018/04/09 20:05:08 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xa8aaaafffeaaaa19, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x1, 0xe6}, {0x9, 0x4}, 0x5f590002, 0x6, 0x3}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) recvfrom$inet(r1, &(0x7f00000001c0)=""/167, 0xa7, 0x40012002, &(0x7f00000000c0)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000380)={0x2, 0x530d9f7b, 0x5}) execveat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000380), 0x1000) r3 = socket(0x40000000015, 0x4, 0x0) setsockopt(r3, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) 2018/04/09 20:05:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0xd00) 2018/04/09 20:05:08 executing program 0: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x700, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x5]}, 0x10) 2018/04/09 20:05:08 executing program 3 (fault-call:2 fault-nth:18): r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) 2018/04/09 20:05:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, [0x140]}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x6, 0x1, r0, 0x6773}, 0x2c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x8001, 0x10, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="a3261c57", &(0x7f0000000500)="cd8249bf39d6176ef7346799ac199e6cf9e7fe02418812a394d9c874384d4ba7bd9d3b261f1a018d54c20e688a5dc8a23babc41d618eab351795754d5fa3ad297aec7e01f2990b", 0x2}, 0x20) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1e}], 0x1000000000000020}, 0x8000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="654e8525c3d8a3a269fffab981c018ecd1ed1d41250e8cefbd5ee4bae370ceb76f18994299803c8f3c007db0b506d27a8d38bfd14b9dbdb9ab629de7de0672b365dce9cc2ecdff6971cd9b53ca275ecf9b426cade30df9ed069f246ad81f0fb4cef7a4d8504b908dddbad5235664fb43456c105d465f9e08de48116686d69255a3fb4d9f00907b0d2bb8743018c8568cdd1a098362e9db2beb107321a56d3b31b84590e0ea80d526985b20473a7c", 0xae}], 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000680), &(0x7f00000006c0)=""/166}, 0x18) mount(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='pstore\x00', 0x4, &(0x7f0000000640)="afb63e3ff55419f9e9572aabeb90d8184a20d3c850fa576f0f0d376978dcd77395a8eb26002ef5146d") perf_event_open(&(0x7f00000008c0)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000880)={r2}) 2018/04/09 20:05:08 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) memfd_create(&(0x7f0000000080)=':keyringem0}', 0x3) getpeername$inet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) shutdown(r1, 0x0) 2018/04/09 20:05:08 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0xffffff7f00000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x10) 2018/04/09 20:05:08 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000e6ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000"], 0x68) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0xb77}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r1, 0x3, 0x0, 0x1, 0x1f0c5b2e}, &(0x7f0000000380)=0x18) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r3 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000500)=""/157) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x5, 0x7, 0x3280000, "70feacb711271b0e270ead8196c45a7c429b96cd6d115508f2172eb5cbb71c6c5dc311bb210037b1d8786cde441cca64855861ead5dace955a0a3a0901b092", 0x10}, 0x60) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000840)) r4 = request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)='/dev/sg#\x00', 0xfffffffffffffffa) keyctl$revoke(0x3, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000480)={0x3f, 0xa54, 0xfff, {0x0, 0x989680}, 0x8, 0x5}) r5 = socket(0x40000000017, 0x5, 0x0) write$binfmt_elf64(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x457) setsockopt(r5, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 182.943534] FAULT_INJECTION: forcing a failure. [ 182.943534] name failslab, interval 1, probability 0, space 0, times 0 [ 182.954864] CPU: 1 PID: 13835 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 182.961796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.971149] Call Trace: [ 182.973748] dump_stack+0x1b9/0x294 [ 182.977395] ? dump_stack_print_info.cold.2+0x52/0x52 [ 182.982602] should_fail.cold.4+0xa/0x1a [ 182.986673] ? kernel_text_address+0x79/0xf0 [ 182.991095] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.996207] ? __save_stack_trace+0x7e/0xd0 [ 183.000543] ? graph_lock+0x170/0x170 [ 183.004352] ? find_held_lock+0x36/0x1c0 [ 183.008418] ? __lock_is_held+0xb5/0x140 [ 183.012493] ? check_same_owner+0x320/0x320 [ 183.016821] ? do_raw_spin_lock+0xc1/0x200 [ 183.021064] ? rcu_note_context_switch+0x710/0x710 [ 183.026007] ? trace_hardirqs_off+0xd/0x10 [ 183.030267] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 183.035367] __should_failslab+0x124/0x180 [ 183.039591] should_failslab+0x9/0x14 [ 183.043372] __kmalloc+0x2c8/0x760 [ 183.046898] ? mark_held_locks+0xc9/0x160 [ 183.051030] ? quarantine_put+0xeb/0x190 [ 183.055077] ? constrain_params_by_rules+0x141/0x1360 [ 183.060254] constrain_params_by_rules+0x141/0x1360 [ 183.065252] ? trace_hardirqs_on+0xd/0x10 [ 183.069392] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 183.074568] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 183.079743] ? debug_check_no_locks_freed+0x310/0x310 [ 183.084914] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 183.089916] ? find_held_lock+0x36/0x1c0 [ 183.093963] ? lock_downgrade+0x8e0/0x8e0 [ 183.098099] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.103620] ? snd_interval_refine+0x428/0x700 [ 183.108192] snd_pcm_hw_refine+0x8e9/0x1180 [ 183.112496] ? snd_interval_refine+0x428/0x700 [ 183.117066] ? constrain_params_by_rules+0x1360/0x1360 [ 183.122329] ? constrain_params_by_rules+0x1360/0x1360 [ 183.127587] ? find_held_lock+0x36/0x1c0 [ 183.131633] ? print_usage_bug+0xc0/0xc0 [ 183.135680] ? graph_lock+0x170/0x170 [ 183.139461] ? lock_downgrade+0x8e0/0x8e0 [ 183.143593] ? lock_release+0xa10/0xa10 [ 183.147552] ? kasan_check_read+0x11/0x20 [ 183.151683] ? __lock_is_held+0xb5/0x140 [ 183.155728] snd_pcm_hw_param_first+0x30e/0x680 [ 183.160383] snd_pcm_hw_params+0x340/0x1e20 [ 183.164694] ? snd_pcm_hw_refine+0x1180/0x1180 [ 183.169262] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 183.174260] ? snd_pcm_hw_param_value+0x112/0x550 [ 183.179088] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 183.183918] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 183.189788] ? _snd_pcm_hw_param_min+0x570/0x570 [ 183.194530] ? snd_pcm_hw_param_max+0x730/0x730 [ 183.199184] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 183.204357] snd_pcm_kernel_ioctl+0x6c/0x240 [ 183.208748] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 183.214452] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 183.220319] ? print_usage_bug+0xc0/0xc0 [ 183.224364] ? debug_check_no_locks_freed+0x310/0x310 [ 183.229537] ? __lock_acquire+0x7f5/0x5130 [ 183.233766] ? debug_check_no_locks_freed+0x310/0x310 [ 183.238938] ? graph_lock+0x170/0x170 [ 183.242722] ? __lock_acquire+0x7f5/0x5130 [ 183.246940] ? debug_check_no_locks_freed+0x310/0x310 [ 183.252108] ? print_usage_bug+0xc0/0xc0 [ 183.256152] ? find_held_lock+0x36/0x1c0 [ 183.260200] snd_pcm_oss_change_params+0x80/0xe0 [ 183.264940] snd_pcm_oss_make_ready+0xbe/0x170 [ 183.269506] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 183.274938] ? __lock_acquire+0x7f5/0x5130 [ 183.279158] ? snd_pcm_oss_make_ready+0x170/0x170 [ 183.283986] ? __might_sleep+0x95/0x190 [ 183.287947] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 183.292342] ? _parse_integer+0x190/0x190 [ 183.296474] ? graph_lock+0x170/0x170 [ 183.300256] ? snd_pcm_oss_release+0x290/0x290 [ 183.304824] ? find_held_lock+0x36/0x1c0 [ 183.308868] ? graph_lock+0x170/0x170 [ 183.312651] ? find_held_lock+0x36/0x1c0 [ 183.316702] ? lock_downgrade+0x8e0/0x8e0 [ 183.320835] ? kasan_check_read+0x11/0x20 [ 183.324975] ? rcu_is_watching+0x85/0x140 [ 183.329105] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 183.334285] ? __fget+0x40c/0x650 [ 183.337720] ? match_held_lock+0x881/0x8b0 [ 183.341941] ? expand_files.part.8+0x9a0/0x9a0 [ 183.346507] ? kasan_check_write+0x14/0x20 [ 183.350729] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 183.355645] ? wait_for_completion+0x870/0x870 [ 183.360211] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 183.365383] ? snd_pcm_oss_release+0x290/0x290 [ 183.369950] do_vfs_ioctl+0x1cf/0x1650 [ 183.373826] ? ioctl_preallocate+0x2e0/0x2e0 [ 183.378218] ? fget_raw+0x20/0x20 [ 183.381654] ? __sb_end_write+0xac/0xe0 [ 183.385614] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.391130] ? fput+0x130/0x1a0 [ 183.394392] ? ksys_write+0x1a6/0x250 [ 183.398178] ? security_file_ioctl+0x94/0xc0 [ 183.402571] ksys_ioctl+0xa9/0xd0 [ 183.406009] SyS_ioctl+0x24/0x30 [ 183.409361] ? ksys_ioctl+0xd0/0xd0 [ 183.412988] do_syscall_64+0x29e/0x9d0 [ 183.416860] ? vmalloc_sync_all+0x30/0x30 [ 183.420990] ? _raw_spin_unlock_irq+0x27/0x70 [ 183.425471] ? finish_task_switch+0x1ca/0x820 [ 183.429948] ? syscall_return_slowpath+0x5c0/0x5c0 [ 183.434864] ? syscall_return_slowpath+0x30f/0x5c0 [ 183.439778] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 183.445125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.449958] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.455129] RIP: 0033:0x455259 [ 183.458310] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.466004] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 183.473263] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 183.480515] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.487765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2018/04/09 20:05:08 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x16, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) 2018/04/09 20:05:08 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4000000006) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b7bff0)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x4001002000000000]}, 0x10) [ 183.495019] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000012 [ 183.502803] WARNING: CPU: 1 PID: 13835 at sound/core/pcm_native.c:620 snd_pcm_hw_params+0x65a/0x1e20 [ 183.512080] Kernel panic - not syncing: panic_on_warn set ... [ 183.512080] [ 183.519453] CPU: 1 PID: 13835 Comm: syz-executor3 Not tainted 4.16.0+ #14 [ 183.526379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.535732] Call Trace: [ 183.538328] dump_stack+0x1b9/0x294 [ 183.541967] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.547166] ? snd_pcm_hw_params+0x5f0/0x1e20 [ 183.551667] panic+0x22f/0x4de [ 183.554863] ? add_taint.cold.5+0x16/0x16 [ 183.559021] ? __warn.cold.8+0x148/0x1a3 [ 183.563091] ? snd_pcm_hw_params+0x65a/0x1e20 [ 183.567584] __warn.cold.8+0x163/0x1a3 [ 183.571480] ? snd_pcm_hw_params+0x65a/0x1e20 [ 183.575982] report_bug+0x252/0x2d0 [ 183.579620] do_error_trap+0x1de/0x490 [ 183.583521] ? math_error+0x420/0x420 [ 183.587326] ? print_usage_bug+0xc0/0xc0 [ 183.591398] ? graph_lock+0x170/0x170 2018/04/09 20:05:09 executing program 7: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@in6={0xa, 0x1700000000000000, 0x0, @dev={0xfe, 0x80}, 0xf}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="ea", 0x1}], 0x1, &(0x7f0000000900)}, 0x40) [ 183.595194] ? lock_downgrade+0x8e0/0x8e0 [ 183.599346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.604196] do_invalid_op+0x1b/0x20 [ 183.607924] invalid_op+0x1b/0x40 [ 183.611389] RIP: 0010:snd_pcm_hw_params+0x65a/0x1e20 [ 183.616483] RSP: 0018:ffff8801879f71d0 EFLAGS: 00010246 [ 183.621837] RAX: 0000000000040000 RBX: 00000000fffffff4 RCX: ffffc90006aee000 [ 183.629268] RDX: 0000000000040000 RSI: ffffffff85a20a6a RDI: 0000000000000005 [ 183.636523] RBP: ffff8801879f7420 R08: ffff88018db5a140 R09: ffffed003b6246c2 [ 183.643779] R10: ffffed003b6246c2 R11: ffff8801db123613 R12: ffffffff8826949c [ 183.651034] R13: ffff8801ce450940 R14: ffff8801c6008940 R15: dffffc0000000000 [ 183.658312] ? snd_pcm_hw_params+0x65a/0x1e20 [ 183.662805] ? snd_pcm_hw_refine+0x1180/0x1180 [ 183.667381] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 183.672383] ? snd_pcm_hw_param_value+0x112/0x550 [ 183.677216] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 183.682053] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 183.687929] ? _snd_pcm_hw_param_min+0x570/0x570 [ 183.692678] ? snd_pcm_hw_param_max+0x730/0x730 [ 183.697333] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 183.702510] snd_pcm_kernel_ioctl+0x6c/0x240 [ 183.706905] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 183.712619] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 183.718491] ? print_usage_bug+0xc0/0xc0 [ 183.722542] ? debug_check_no_locks_freed+0x310/0x310 [ 183.727719] ? __lock_acquire+0x7f5/0x5130 [ 183.731943] ? debug_check_no_locks_freed+0x310/0x310 [ 183.737122] ? graph_lock+0x170/0x170 [ 183.740910] ? __lock_acquire+0x7f5/0x5130 [ 183.745135] ? debug_check_no_locks_freed+0x310/0x310 [ 183.750308] ? print_usage_bug+0xc0/0xc0 [ 183.754358] ? find_held_lock+0x36/0x1c0 [ 183.758421] snd_pcm_oss_change_params+0x80/0xe0 [ 183.763163] snd_pcm_oss_make_ready+0xbe/0x170 [ 183.767734] snd_pcm_oss_set_trigger.isra.25+0x41c/0x910 [ 183.773181] ? __lock_acquire+0x7f5/0x5130 [ 183.777400] ? snd_pcm_oss_make_ready+0x170/0x170 [ 183.782228] ? __might_sleep+0x95/0x190 [ 183.786195] snd_pcm_oss_ioctl+0x25e5/0x3f00 [ 183.790592] ? _parse_integer+0x190/0x190 [ 183.794726] ? graph_lock+0x170/0x170 [ 183.798515] ? snd_pcm_oss_release+0x290/0x290 [ 183.803083] ? find_held_lock+0x36/0x1c0 [ 183.807130] ? graph_lock+0x170/0x170 [ 183.810922] ? find_held_lock+0x36/0x1c0 [ 183.814976] ? lock_downgrade+0x8e0/0x8e0 [ 183.819114] ? kasan_check_read+0x11/0x20 [ 183.823247] ? rcu_is_watching+0x85/0x140 [ 183.827382] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 183.832567] ? __fget+0x40c/0x650 [ 183.836009] ? match_held_lock+0x881/0x8b0 [ 183.840236] ? expand_files.part.8+0x9a0/0x9a0 [ 183.844805] ? kasan_check_write+0x14/0x20 [ 183.849030] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 183.853950] ? wait_for_completion+0x870/0x870 [ 183.858523] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 183.863700] ? snd_pcm_oss_release+0x290/0x290 [ 183.868268] do_vfs_ioctl+0x1cf/0x1650 [ 183.872148] ? ioctl_preallocate+0x2e0/0x2e0 [ 183.876555] ? fget_raw+0x20/0x20 [ 183.879995] ? __sb_end_write+0xac/0xe0 [ 183.883962] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.889484] ? fput+0x130/0x1a0 [ 183.892752] ? ksys_write+0x1a6/0x250 [ 183.896543] ? security_file_ioctl+0x94/0xc0 [ 183.900939] ksys_ioctl+0xa9/0xd0 [ 183.904379] SyS_ioctl+0x24/0x30 [ 183.907729] ? ksys_ioctl+0xd0/0xd0 [ 183.911342] do_syscall_64+0x29e/0x9d0 [ 183.915217] ? vmalloc_sync_all+0x30/0x30 [ 183.919360] ? _raw_spin_unlock_irq+0x27/0x70 [ 183.923845] ? finish_task_switch+0x1ca/0x820 [ 183.928339] ? syscall_return_slowpath+0x5c0/0x5c0 [ 183.933254] ? syscall_return_slowpath+0x30f/0x5c0 [ 183.938175] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 183.943529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.948365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.953541] RIP: 0033:0x455259 [ 183.956713] RSP: 002b:00007fd2c8351c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.964409] RAX: ffffffffffffffda RBX: 00007fd2c83526d4 RCX: 0000000000455259 [ 183.971665] RDX: 0000000020000000 RSI: 0080000040045010 RDI: 0000000000000013 [ 183.978921] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.986174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 183.993441] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000012 [ 184.001227] Dumping ftrace buffer: [ 184.005066] (ftrace buffer empty) [ 184.008762] Kernel Offset: disabled [ 184.012374] Rebooting in 86400 seconds..