ev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x28000) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x322, 0x8000, 0x8, 0xb309, 0x3, @random="0f9a3d48bd32"}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x21, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60d9d00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 2018/04/15 15:57:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0xc09, 0x0, 0x0, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1}, 0x0) 2018/04/15 15:57:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x400a00, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x401, 0x8, 0x400, 0xffffffff, 0x6, 0x0, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, [], 0x18}, 0x80000000}}, 0x7, 0x665, 0x1, 0xffffffffffffffb6, 0x82}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x8}, &(0x7f0000000340)=0x8) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x41, 0x0, 0x0, 0xffffffff}]}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100), 0x12c}]) [ 150.871436] FAULT_INJECTION: forcing a failure. [ 150.871436] name failslab, interval 1, probability 0, space 0, times 0 [ 150.883258] CPU: 1 PID: 13115 Comm: syz-executor0 Not tainted 4.16.0+ #3 [ 150.890107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.890918] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 150.899470] Call Trace: [ 150.906927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 150.909471] dump_stack+0x1b9/0x294 [ 150.909492] ? dump_stack_print_info.cold.2+0x52/0x52 [ 150.909509] ? percpu_ref_put_many+0x132/0x230 [ 150.909530] ? memcg_kmem_charge_memcg+0x74/0x110 [ 150.936113] ? percpu_ref_tryget+0x2b0/0x2b0 [ 150.940529] should_fail.cold.4+0xa/0x1a [ 150.944641] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.949739] ? graph_lock+0x170/0x170 [ 150.953528] ? find_held_lock+0x36/0x1c0 [ 150.957589] ? __lock_is_held+0xb5/0x140 [ 150.961644] ? check_same_owner+0x320/0x320 [ 150.965949] ? print_usage_bug+0xc0/0xc0 [ 150.970007] ? rcu_note_context_switch+0x710/0x710 [ 150.974929] __should_failslab+0x124/0x180 [ 150.979148] should_failslab+0x9/0x14 [ 150.982932] kmem_cache_alloc+0x2af/0x760 [ 150.987091] ? check_noncircular+0x20/0x20 [ 150.991321] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 150.996853] ptlock_alloc+0x20/0x80 [ 151.000465] pte_alloc_one+0x6b/0x120 [ 151.004335] do_huge_pmd_anonymous_page+0xe7a/0x1e30 [ 151.009435] ? __thp_get_unmapped_area+0x180/0x180 [ 151.014348] ? __lock_acquire+0x7f5/0x5140 [ 151.018564] ? kasan_slab_alloc+0x12/0x20 [ 151.022694] ? kmem_cache_alloc+0x12e/0x760 [ 151.027008] ? __d_alloc+0xc0/0xd30 [ 151.030621] ? d_alloc+0x8e/0x370 [ 151.034067] ? debug_check_no_locks_freed+0x310/0x310 [ 151.039240] ? graph_lock+0x170/0x170 [ 151.043744] ? __lock_acquire+0x7f5/0x5140 [ 151.047971] ? print_usage_bug+0xc0/0xc0 [ 151.052023] ? __lock_acquire+0x7f5/0x5140 [ 151.056250] ? pud_val+0x80/0xf0 [ 151.059602] ? pmd_val+0xf0/0xf0 [ 151.062960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.068483] __handle_mm_fault+0x290b/0x4150 [ 151.072881] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 151.077621] ? graph_lock+0x170/0x170 [ 151.081410] ? find_held_lock+0x36/0x1c0 [ 151.085459] ? lock_downgrade+0x8e0/0x8e0 [ 151.089600] ? handle_mm_fault+0x8c0/0xc70 [ 151.093820] handle_mm_fault+0x53a/0xc70 [ 151.097866] ? __handle_mm_fault+0x4150/0x4150 [ 151.102435] ? find_vma+0x34/0x190 [ 151.105960] __do_page_fault+0x60b/0xe40 [ 151.110017] ? mm_fault_error+0x380/0x380 [ 151.114150] ? lock_acquire+0x1dc/0x520 [ 151.118111] ? graph_lock+0x170/0x170 [ 151.121900] do_page_fault+0xee/0x8a7 [ 151.125685] ? check_same_owner+0x320/0x320 [ 151.129991] ? vmalloc_sync_all+0x30/0x30 [ 151.134126] ? rcu_note_context_switch+0x710/0x710 [ 151.139042] ? find_held_lock+0x36/0x1c0 [ 151.143101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.147935] page_fault+0x25/0x50 [ 151.151378] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 151.157240] RSP: 0018:ffff88018a077678 EFLAGS: 00010202 [ 151.162586] RAX: 0000000000000000 RBX: 00000000000000a8 RCX: 00000000000000a8 [ 151.169842] RDX: 00000000000000a8 RSI: 0000000020000800 RDI: ffff88018a0776f0 [ 151.177098] RBP: ffff88018a0776b0 R08: ffffed003140eef3 R09: ffffed003140eef3 [ 151.184351] R10: ffffed003140eef2 R11: ffff88018a077797 R12: 00000000200008a8 [ 151.191606] R13: 0000000020000800 R14: ffff88018a0776f0 R15: 00007ffffffff000 [ 151.198881] ? _copy_from_user+0x10d/0x150 [ 151.203108] loop_set_status_old+0x9f/0x920 [ 151.207425] ? loop_set_status_compat+0xf0/0xf0 [ 151.212079] ? debug_check_no_locks_freed+0x310/0x310 [ 151.217262] ? graph_lock+0x170/0x170 [ 151.221045] ? lock_acquire+0x1dc/0x520 [ 151.225004] ? __fdget_pos+0x1a9/0x1e0 [ 151.228879] ? graph_lock+0x170/0x170 [ 151.232666] ? __lock_acquire+0x7f5/0x5140 [ 151.236885] ? find_held_lock+0x36/0x1c0 [ 151.240931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.246452] ? _parse_integer+0x13b/0x190 [ 151.250587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.256112] ? cap_capable+0x1f9/0x260 [ 151.259986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.265506] ? security_capable+0x99/0xc0 [ 151.269639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 151.275159] ? ns_capable_common+0x13f/0x170 [ 151.279556] lo_ioctl+0x5e8/0x1ec0 [ 151.283085] ? graph_lock+0x170/0x170 [ 151.286981] ? loop_clr_fd+0xb80/0xb80 [ 151.290856] blkdev_ioctl+0x9b6/0x2020 [ 151.294734] ? blkpg_ioctl+0xc40/0xc40 [ 151.298608] ? lock_downgrade+0x8e0/0x8e0 [ 151.302744] ? kasan_check_read+0x11/0x20 [ 151.306875] ? rcu_is_watching+0x85/0x140 [ 151.311008] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 151.316190] ? __fget+0x40c/0x650 [ 151.319629] ? match_held_lock+0x871/0x8b0 [ 151.323851] ? expand_files.part.8+0x9a0/0x9a0 [ 151.328418] ? kasan_check_write+0x14/0x20 [ 151.332638] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 151.337554] block_ioctl+0xee/0x130 [ 151.341168] ? blkdev_fallocate+0x400/0x400 [ 151.345483] do_vfs_ioctl+0x1cf/0x16a0 [ 151.349365] ? ioctl_preallocate+0x2e0/0x2e0 [ 151.353761] ? fget_raw+0x20/0x20 [ 151.357201] ? __sb_end_write+0xac/0xe0 [ 151.361164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 151.366692] ? fput+0x130/0x1a0 [ 151.369960] ? ksys_write+0x1a6/0x250 [ 151.373746] ? security_file_ioctl+0x94/0xc0 [ 151.378141] ksys_ioctl+0xa9/0xd0 [ 151.381584] SyS_ioctl+0x24/0x30 [ 151.384936] ? ksys_ioctl+0xd0/0xd0 [ 151.388548] do_syscall_64+0x29e/0x9d0 [ 151.392417] ? vmalloc_sync_all+0x30/0x30 [ 151.396551] ? _raw_spin_unlock_irq+0x27/0x70 [ 151.401038] ? finish_task_switch+0x1ca/0x810 [ 151.405518] ? syscall_return_slowpath+0x5c0/0x5c0 [ 151.410432] ? syscall_return_slowpath+0x30f/0x5c0 [ 151.415348] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 151.420706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.425538] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 151.430709] RIP: 0033:0x455319 [ 151.433879] RSP: 002b:00007f57ad253c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.441578] RAX: ffffffffffffffda RBX: 00007f57ad2546d4 RCX: 0000000000455319 [ 151.448831] RDX: 0000000020000800 RSI: 0000000000004c02 RDI: 0000000000000013 [ 151.456087] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.463343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/04/15 15:57:43 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)='\x00', 0x1, r1) r2 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149bd61bd78b506e8b", 0xc0, r1) r3 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='sha224-avx\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x28) sendto$unix(r4, &(0x7f00000004c0)="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", 0x1000, 0x8000, &(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket(0x12, 0x1, 0x80) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="700b131a8f9cef878b3515c6c51ec524861a1656656b7b5179c6e54e0c377a0f3af2746e3a858e0860432ccf39234c5cdda2dd627a5c068c7eba8a5aae25", 0x3e, r3) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000240), &(0x7f00000002c0)=0x4) keyctl$dh_compute(0x17, &(0x7f0000000440)={r2, r3, r3}, &(0x7f0000000340)=""/42, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={'sm4\x00'}, 0x0, 0xffffffffffffff48}) [ 151.470599] R13: 0000000000000280 R14: 00000000006f6ca0 R15: 0000000000000000 2018/04/15 15:57:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 151.507692] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 151.515246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 151.526612] skbuff: bad partial csum: csum=65535/0 len=290 [ 151.601470] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 151.608983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/15 15:57:43 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x3a) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x8002) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2, 0x2}) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000001c0)) 2018/04/15 15:57:43 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="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", 0x141) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x302, &(0x7f0000e4b000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 2018/04/15 15:57:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)=0x101, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={"f4716e6c30ff000000dc6d00"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x19}, [@generic="41815cade42800e0cf418f5a696dd776d4e7a03229c2dcd41a6fbbf8345ffcbc72b2cba2ea", @typed={0x8, 0x50, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, 0xfffffffffffffd11}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000001c0)={0x2, 0xc, [0xc5, 0x4, 0xc]}) 2018/04/15 15:57:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1276, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:57:43 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:43 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') prctl$seccomp(0x16, 0x1, &(0x7f00000001c0)={0x1fffffffffffff3b, &(0x7f0000000240)}) pkey_alloc(0x0, 0x0) sendfile(r0, r0, 0x0, 0x2000000000000044) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x4, 0x0, 0x1, 0x10000, "5317ac1492687a29f21ccd70c211191dd1e5b4e5691ce9b6468c75ee943bc22238acde9615b2448c6ab8ed5d", 0x5}, 0x0, 0x0, 0x100, r1, 0x0, 0x4, "24c1ada74bd7a96d75c2265cfab91fe923b60006332476e7878c0e120a1d980e5614f9724314e313ede405dead33fe52ab141f8d007e2967960e4fc0b9f8d38c", &(0x7f0000000080)='\x00', 0x1, [], [0xfffffffffffffffc, 0x0, 0x1, 0x3]}) [ 151.774914] audit: type=1326 audit(1523807864.003:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13163 comm="syz-executor7" exe="/root/syz-executor7" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/15 15:57:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21e}, 0xffffffffffffff4d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000c9e6778e4ec4e3875b3e844323d8520b29bfa7ba8b677b75313024cba9758fc37aca4a3f4c33f15109481301654dfbc611cb17d22d4efa4d92b7952203eb458ff42da84cc0c456e10e3e001ae2f82f5ff1c525e75a5c7fe9ca"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x29, 0x7, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x2, 0x4) 2018/04/15 15:57:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c09, &(0x7f0000000800)) 2018/04/15 15:57:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1261, &(0x7f0000000800)) 2018/04/15 15:57:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$sock_ifreq(r0, 0x89f5, &(0x7f0000000040)={'eql\a\x00', @ifru_settings={0x400000, 0x0, @sync}}) 2018/04/15 15:57:44 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2, 0x1258}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000057c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000005880)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$binfmt_elf64(r3, &(0x7f00000058c0)=ANY=[], 0x0) close(r0) 2018/04/15 15:57:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870cc, &(0x7f0000000800)) 2018/04/15 15:57:44 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:44 executing program 5: getpgid(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlockall(0x3) sendfile(r1, r1, &(0x7f0000000000)=0x200005, 0x200) 2018/04/15 15:57:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 152.673440] audit: type=1326 audit(1523807864.902:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13163 comm="syz-executor7" exe="/root/syz-executor7" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455319 code=0x0 2018/04/15 15:57:44 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x20000000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) prctl$intptr(0x8, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000d8000)={0x0, @multicast2, @rand_addr}, &(0x7f0000b34000)=0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/15 15:57:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070c9, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 4: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18000, 0x5feb5018cf901cab) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x2, 0x1, 0x7}) [ 152.811175] FAT-fs (loop7): bogus number of reserved sectors [ 152.817139] FAT-fs (loop7): Can't find a valid FAT filesystem 2018/04/15 15:57:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x125f, &(0x7f0000000800)) [ 153.638871] FAT-fs (loop7): bogus number of reserved sectors [ 153.644874] FAT-fs (loop7): Can't find a valid FAT filesystem 2018/04/15 15:57:45 executing program 2: mknod(&(0x7f000086c000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', 0x0, r1) r2 = memfd_create(&(0x7f0000000000)="2bab6d696d655f7479706565746831402900", 0x1) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x1000400) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8080, 0x100) 2018/04/15 15:57:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c00, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:45 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x9e2) r1 = gettid() process_vm_readv(r1, &(0x7f0000001480)=[{&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/91, 0x5b}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/29, 0x1d}], 0x7, &(0x7f0000002600)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/120, 0x78}, {&(0x7f0000002580)=""/71, 0x47}], 0x3, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="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", 0x118) 2018/04/15 15:57:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1279, &(0x7f0000000800)) 2018/04/15 15:57:45 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000018000)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7}}, 0x4c, &(0x7f0000000580), 0x0, &(0x7f00000004c0)}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) 2018/04/15 15:57:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000000100)=ANY=[]) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) close(r0) shutdown(r0, 0x1) 2018/04/15 15:57:46 executing program 5: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000001c0)) 2018/04/15 15:57:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c07, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870cc, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002400)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000023c0)={0xffffffff}, 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f00000001c0)=@notify={0xf, 0x8, 0xfa00, {r1}}, 0x10) r2 = dup3(r0, r0, 0x80000) r3 = accept$ipx(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10) bind(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x34}, 0x1, 0x4, 0x2, 0x2}}, 0x80) 2018/04/15 15:57:46 executing program 7: ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB]) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4100) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)=ANY=[@ANYBLOB="020300091000000000000000000000000200130002000000000000000000000005000600000000000a000000000000000000000000000000180780004000000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff0100000000000000000000000000090000000000000000"], 0x80}, 0x1}, 0x0) [ 153.871492] XFS (loop3): Invalid superblock magic number 2018/04/15 15:57:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125d, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:57:46 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) 2018/04/15 15:57:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f00006affd0)=[{r0}], 0x1, 0xfffffffffffffeff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7f) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r1, 0x10800) ioctl$TCFLSH(r1, 0x540b, 0x2) 2018/04/15 15:57:46 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000280)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x20004000000}) sendmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000001840)}}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x33, @empty, 0x4e21, 0x1, 'nq\x00', 0x8, 0x3, 0x2c}, 0x2c) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/04/15 15:57:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4020940d, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1260, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125d, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000ee6ff6)='/dev/ptmx\x00', 0x106, 0x0) writev(r0, &(0x7f000036bfd0)=[{&(0x7f0000b51000)="eb", 0x1}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000566ffc)=0x40000000007) ioctl$TIOCSCTTY(r0, 0x540e, 0x22a) read(r0, &(0x7f00001a4000)=""/1, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') fcntl$setflags(r1, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000004c0)={r3, 0x5c, "d8bce935bb09b4b8c748ff41af480ed5d92c5015f0d0a58b8fccc9f4a99717cd4372ebad6ed851c77d59d821e3d1f86cc9901a30c138698dc269eb9ef64e664f9bd6955f28afb120ce3ca7ac6434aa7cc936f61420a110360db8512b"}, &(0x7f0000000240)=0x64) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4dff1c174fcb05000000a85400c3f2b687abafbbba7d26d3c323ff104eeb8afe4d402593595e1141110242817e1eea28ac41f6e0dc5c1bbdd1690a8d94e3b1703a0887b5ded074cff6a11dcbb40006a16272cd3e7a000000000000000000000013e2ca12f873e51ccdf838032a06c41d21208a0f8ea9517412858c4f4f38c63f1c432da30ff4a3c361b217c02d6b6e435c37c67bae921a217d8c18517f92000b6ca7ee18a98dcf85bf8aede894bfcdec4ac3f767f085f7fd4b218de3db6344f4440f", @ANYRES16=r2, @ANYBLOB="000028bd7000fbdbdf25050000002c00010014000300ac1414aa00000000000000000000000014000300fe8000000000000000000000000000bb08000500060000000800040000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = memfd_create(&(0x7f0000000080)='\x00', 0x2) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000340)=0x8686) write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0x9) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fff, 0x20502) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0x1000, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl(r6, 0x5, &(0x7f0000000300)="0fe972b0cb6296279b2a1fe7") 2018/04/15 15:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x1, r0, 0x1}) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000f40ff4)={0x10}, 0xc, &(0x7f0000f90000)={&(0x7f0000000000)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IIF={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 2018/04/15 15:57:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:47 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x17b4, 0x0, 0x0, 0x0, 0x3693}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x60042, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000300)=0x80, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x400) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'ifb0\x00', 0x18f}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) getsockname$ax25(r1, &(0x7f0000001bc0), &(0x7f0000001c00)=0x10) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x80000000, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1ff}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)="c24969613b35677c8a04cd8de10b2f870e1d53a1d518243e862433c51a8c11b1677c1337298d29dbf6fd5f937a5a994519fdaf1849aa6d302f1de47f8e7a3440fd3e97789d5fdb48f2c5eff6e5e4cb518dadfd0ee303e6137d7fbc4ece38fc28a8381eb4302e83b70af3858f", 0x6c}, {&(0x7f0000000580)="c681263db7991b7767e440bf5f8e31cefa4d27f2e8b1c8d163ec62eeb48201a22426bc016c270de41c31cfedd1c7dee5028186634f4e26c6887d9eaa6f3216bb2531d045a87ffadda35354d8844f7b6e0994d431d728f679fbed5a91c555d0204c4893c82625a6f6b45e315d3b3c7262cf860f6d129d6e507ab6a4b067f8f98d39e67b4f5dca2772debae344593b382d0973e41003a4", 0x96}, {&(0x7f0000000640)="e5fa374dee94b9e8b30b3abebd28b5a4c6217706d13888d9aae52478b013f64b609b83be824b1df8089c06274e9035fbf648b6dab390f19dc1e39cf2eb00b4ee742f45687f29041f6b60c642355fed0af94ad65a8d56b0e4982abe2d6da9dc647bbd2026f6451ee51de5846f26801ec5c824f7f93eebf29bd13120ea7452f08efef7c1dbae8e22bc97803887f0180ac7463f6250ac6f15ce4ebf92c4630060ab0e83420a29a149dd9b1ed2cbd16cb7c1ff954e48b6ea0fe19bd7737bcce423bde5b7d44df49f053d2b42", 0xca}, {&(0x7f0000000180)="d268318901ab700552adee2a2cea744784f92668def524600ffcc353e0bd48a06f177845a34c7c69", 0x28}, {&(0x7f0000000740)="f8ce63c66f1227836e749491c74b383b36baf61eb2feb168a603e163dc793129da22cd47330db8a0bd85d5a5344ce225b84d2f1f23357d3d4564d9e1e70e9adb79634cc3b6bf20cdaf4b3d8607a098e851d399aa71454f28bc3ff6997f5de9f9", 0x60}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="f4250c2b0dc94ac4da7ef5abbb2ef83682f90c390f3925b7b93c4698f7d37ca81a9a37724e9f8e86fddee7cd41a700abcc6e54ef8fb783a028624e36b62635499b0d0500148e8ac06c3e86bf1bbd7579ad1d40e35e17ac4b29af4985e3ed932a08abd912bf900620027918d690235e2c89f82cd398925092e2ab4467db97f12b60d3793f604d24f5a4aa1d522b346c7063d4d80c519d310fab385e3363477bdda358554db4cea45baba2e91da495a6575e0d78aeea64cc5459d9b377b1ad53f373a19c849700b681e845b5ae26e05a76d4c58cfb4724ad7a0fa44fc5f91af477ee199729fd3ce80fb3d0e10babc8dbbd9f0b1debb5", 0xf5}], 0x7, &(0x7f0000001940)=[{0x98, 0x11f, 0x7, "6966d787c5183bc8cd6818804513d60647e177bbe831691365b9132e5bcbf916efb1cebeed766d5160bbd7e05f3f1a32c35ffbaca6c53701bd10424db0484e4320396b43c5bc5252f3d0ed493f015175b2c3728f30f595969b84ce411a93c26df243de7d37d3546de736ceb3c292b198fe5e8e35b48d5f749d3f24a20f39750e90205d"}, {0x30, 0x18f, 0x3f4, "f5b3c6ffa229719792606f40d8cca97bd06361d7446f96cd420b"}, {0xc8, 0x0, 0x3, "6ceac4ff14a944603774e7912c4c39dd1e1740846562ab2b443393eb3795d93b3375df7fa45cc254e3324f44700e9ef74fb7ef1497ad34e3e80fe3d9bcced22e42de711fd7a0ca9de7eded7b2b9822233641421c0ba6ec69bc355a89af6115d70f889e990ffa3c7f2774965f372e4963288057866891c80aaedbd62b989d81c178b539040956364c629ef99bdf817b81de6ac59bcacc132a1211d02cb94c5f31c5e16f4c2c5e3efd884c0e26a051c593bb"}, {0x58, 0x105, 0xfffffffeffffffff, "63dfe84ef904ff388ce58b149c5aa01c9eebf011642904c613c08691888ac1a5239f5eb63bcb0b9c967fac74ed9836b32840adbf6955f6aa0cba6987152f5fbdf7"}], 0x1e8}, 0x20000000) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000001c0)=0x9, &(0x7f0000000240)=0x2) r4 = socket$inet6(0xa, 0x100040000080806, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x2, 0x2, 0x6004, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r4, 0x3d) r5 = socket$inet6(0xa, 0x6, 0x84) acct(&(0x7f0000001b80)='./file0\x00') setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000080)={{0x7, 0x200000004}, 'port1\x00', 0x0, 0xc0000, 0x0, 0xfffffffffffffffc}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)) listen(r4, 0x80000000) openat(r3, &(0x7f0000000280)='./file0\x00', 0x101401, 0x140) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000380)={0x0, @time, 0x0, {0x1, 0x9}, 0xfffffffffffff69e, 0x2, 0x3}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000001b40)={0x1, ';'}, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/04/15 15:57:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1261, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125d, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 2: r0 = dup(0xffffffffffffff9c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000002c0)={0x0, 0x7530}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000640)={0x0, 0x2, 0x2, 0x4, 0x388aa0ca, 0x1f, 0x9, 0x0, 0x0, 0x5, 0x3}, 0xb) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff9, 0x0, 0x100, 0x8aa}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r2 = dup3(0xffffffffffffffff, r1, 0x80000) keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000800)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$VHOST_SET_LOG_BASE(r3, 0xaf01, &(0x7f0000000280)=&(0x7f0000989fff)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000000)=ANY=[]) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r4) io_setup(0x100, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x80000001, r1, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, r4}]) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000006c0)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={r6, @in={{0x2, 0x4e24}}, 0xfffffffffffffffb, 0x7ff}, 0x90) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x1, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @remote}, @in6}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) mknod(&(0x7f0000000380)='./file0\x00', 0x40, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') close(r7) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="c8000000", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000f82ffc)=0x4001) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000180)) 2018/04/15 15:57:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125d, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x5, 0x4, 0xeff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x1}, 0x20) 2018/04/15 15:57:47 executing program 5: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x2040) perf_event_open(&(0x7f0000348f88)={0x1, 0x70, 0xf9af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/143, 0x8f}], 0x1, 0xf0ffffff7f0000) 2018/04/15 15:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c04, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1268, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127f, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffe, 0x0) syz_open_pts(r1, 0x101702) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000b0200000000a2844b0000"], 0x10}, 0x1}, 0x0) 2018/04/15 15:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0101282, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) writev(r0, &(0x7f00000005c0), 0x0) r1 = getpgid(0x0) r2 = socket(0x19, 0x803, 0x5) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000580)=0x1, 0x4) ptrace$peek(0x1, r1, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0xc0) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x6535a483, 0x2, 0x3, 0x7, 0x80000001}, 0x14) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='j', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x80000000020}, 0xc) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="de", 0x1}], 0x1) shutdown(r0, 0x1) 2018/04/15 15:57:47 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000000c0), 0xfffffd7c) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000040)=0x986, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x410100, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000003c0), 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x80000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0xfc, "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"}, &(0x7f0000000240)=0x120) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000240000004d73043ba0e5b4c500bd95ef5e6ec33be49ed46f5468feff7546a6ec7e04b7f7b02a049277f0459dc579fe07701391"], &(0x7f0000000140)=0x48) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f0000000180)=0x3) 2018/04/15 15:57:47 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:47 executing program 2: r0 = socket(0x10, 0x802, 0x0) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x1, 0x2, 0x3, 0x67c, 0x4000000000000, "42f2d741e42237c7aeec92f897b884fb4a0c4c03002cd357c47551a5ff87a72d7eae186f4e100c9de4fb3f50fa74c630fb3a0c9b48612b9a934b1e87afeebe", 0x28}, 0x60) write(r0, &(0x7f0000000040)="220000001800071100be0000090007000a00013ff401000900f8ff0005000280ff45", 0x22) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000000)=0x80) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @loopback, @loopback}, &(0x7f0000000d00)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002580)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000025c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000026c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002740)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000002840)=0xe8) getpeername$packet(r0, &(0x7f0000003900)={0x0, 0x0, 0x0}, &(0x7f0000003940)=0x14) getpeername$packet(r0, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005200)=0x14) getpeername$packet(r0, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000005340)=0x14) accept$packet(r0, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000053c0)=0x14) accept4$packet(r0, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000005440)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005600)={'team0\x00', 0x0}) recvmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f0000005700)=@hci={0x0, 0x0}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005780)=""/190, 0xbe}], 0x1, 0x0, 0x0, 0x8000}, 0x4}, {{&(0x7f0000005880)=@can, 0x80, &(0x7f0000006940)=[{&(0x7f0000005900)=""/44, 0x2c}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x2, &(0x7f0000006980)=""/209, 0xd1, 0xb847}, 0x4364}, {{&(0x7f0000006a80)=@ax25, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006b00)=""/174, 0xae}], 0x1, &(0x7f0000006c00)=""/124, 0x7c, 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000008240)=[{&(0x7f0000006c80)=""/156, 0x9c}, {&(0x7f0000006d40)=""/79, 0x4f}, {&(0x7f0000006dc0)=""/163, 0xa3}, {&(0x7f0000006e80)=""/77, 0x4d}, {&(0x7f0000006f00)=""/231, 0xe7}, {&(0x7f0000007000)=""/4096, 0x1000}, {&(0x7f0000008000)=""/181, 0xb5}, {&(0x7f00000080c0)=""/80, 0x50}, {&(0x7f0000008140)=""/254, 0xfe}], 0x9, &(0x7f0000008300)=""/47, 0x2f, 0x1}, 0x5}, {{&(0x7f0000008340)=@nl=@proc, 0x80, &(0x7f0000008680)=[{&(0x7f00000083c0)=""/30, 0x1e}, {&(0x7f0000008400)=""/174, 0xae}, {&(0x7f00000084c0)=""/143, 0x8f}, {&(0x7f0000008580)=""/124, 0x7c}, {&(0x7f0000008600)=""/2, 0x2}, {&(0x7f0000008640)=""/39, 0x27}], 0x6, &(0x7f0000008700)=""/153, 0x99, 0x2}, 0x7f}], 0x5, 0x10100, &(0x7f0000008900)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000008e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008e40)={&(0x7f0000008940)={0x4c4, r2, 0x820, 0x70bd25, 0x25dfdbff, {0x3}, [{{0x8, 0x1, r3}, {0x16c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r12}, {0xac, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfbe5}}}]}}, {{0x8, 0x1, r14}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x100, 0x90, 0xffffffff, 0x1ff}, {0x7fff, 0x2, 0x401, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x58}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x48, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x24000000}, 0x4010) [ 155.551709] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.558989] IPv6: Can't replace route, no match found 2018/04/15 15:57:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x100000000, 0x10800) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff31436e2dc352a1d00156f1a61944e9ba3ebd962aaed0e6309e934289fa9cbd0afb7d5a0fed6a773577aab577c1d417c8244dd5fa2e5f163e9d5b176777bf11e98a2500064f89d3351e1a6d0db1f360ad1db503c", 0x72) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'lo\x00'}}) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000380)=0xffffffffffffff58) recvmmsg(r2, &(0x7f000000a700)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1, &(0x7f0000001500)=""/142, 0x8e}}, {{0x0, 0x0, &(0x7f000000a680)}}], 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x2, r0}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x3, 0x3}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x28, 0x3, 0x8}}) [ 155.638425] IPv6: Can't replace route, no match found 2018/04/15 15:57:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40049409, &(0x7f0000000800)) 2018/04/15 15:57:47 executing program 5: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prctl$setendian(0x14, 0x2) bind$inet(r0, &(0x7f0000f19ff0)={0x1e, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/15 15:57:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1279, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5460, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x8000000000000}, 0xe) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/52) r2 = memfd_create(&(0x7f0000000000), 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) kcmp(r3, r4, 0x3, r2, r0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffef0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000280)={0x648, {{0x2, 0x4e21}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) 2018/04/15 15:57:48 executing program 5: clock_gettime(0x400002000000000c, &(0x7f0000000040)) 2018/04/15 15:57:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1262, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000efdffc)=0x1, 0xd2) sendto$inet(r0, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {0xfffffffffffffffc}, {}, {}], 0x4) dup(r0) 2018/04/15 15:57:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5421, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x2b) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x200000000000d}, 0x1c) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=':', 0x1}], 0x1, &(0x7f0000000780)}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x28000, 0x94) accept$inet(r1, &(0x7f0000000080)={0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) 2018/04/15 15:57:48 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:48 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00009d3f6c)="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") r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x8, 0x20080) syz_open_pts(r1, 0x400000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x89, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/137}, &(0x7f0000000200)=0x78) 2018/04/15 15:57:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c07, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125e, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1264, &(0x7f0000000800)) 2018/04/15 15:57:48 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x6, 0x0, [{0x24c, 0x0, 0x2}, {0xabe, 0x0, 0x10000}, {0xbf3, 0x0, 0x101}, {0x99e}, {0x0, 0x0, 0xffffffffffffffe0}, {0x0, 0x0, 0x3}]}) recvmsg(r1, &(0x7f00000a6000)={&(0x7f0000074000)=@alg, 0x80, &(0x7f0000eecfc0)=[{&(0x7f000065efd2)=""/46, 0x10}], 0x1, &(0x7f0000f7ffca)=""/87, 0x57}, 0x0) 2018/04/15 15:57:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) sendmmsg(r0, &(0x7f0000006300), 0x400000000000144, 0x60040) accept4$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) 2018/04/15 15:57:48 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x8, 0x40010, r0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "33f210", 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "bc18ae66a43c4372117faf1c51afe5e56d6ed55ef692b1bed9f064d298766e54dcf745fe78a1373a3bba040986a769dd3ad74c2b6e64d44357a8730525"}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "098bd0d8496bf1724beabb14eacc7be8087e50d321c811445b88f9970163539de4c95b79746d8e792044f5fc278d754e7c9112981f1ec7f78ffa7a71045b3e12604cd81d196d3b0cf0a042545b89ae708e984fa4ccd180a7876bb4716f9a9dfe1ee76b021541c354aa7878798eda6e79f84da0355b69c0076d3926b781d7913624aeba4a09132e"}}}}}}}, 0x0) 2018/04/15 15:57:48 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@llc_tr={0x11, {@llc={0xd4, 0x0, "02", "5b97932999569078e72a7129a2798ed540884cdeb5c82bdb5f4824ce5b8f4b0b8cde406d28843f697ec6af4e6e543c86cdf5ce189b106601fb5c54bf40adc7eb0c7d701e70b4d7873d0fe68f1e13d810e2b70c96abc481f194cfdaf32efbe14e393cbe49359bf8d17af44c21aef2ebef6a77b7ad2530ebbc2d81b9265a9155f5f4f3113f773ab1c01f228dd02c2c2a5cacde7ada01d8ab329da6c79321d432cb3f75b457e18516e7d615de8193"}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000017000)={0xa}, 0x1c) socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000634000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xffffffbd) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0xbf, 0x6}, &(0x7f00000000c0)=0x10) pread64(r2, &(0x7f0000000180)=""/195, 0xc3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'sit0\x00', 0xa000}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x85, 0x10}, &(0x7f0000000140)=0xc) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x8) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, @dev}, &(0x7f00000002c0)=0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @broadcast}, &(0x7f0000000340)=0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492834, 0x0) connect$unix(r1, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) close(r1) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [], "fca967e17f791010"}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000003c0)={0xf8, 0xffffffff}) 2018/04/15 15:57:48 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/15 15:57:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5451, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1263, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000200)={0x10000, 0x10000, 0x4, 'queue0\x00', 0x4}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x2, 0x8, 0x9, 0x7, 0x1000, 0x1, 0x81, 0x100000000, 0xf2, 0x2c6, 0xfffffffffffffffc, 0x9}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) bind$inet(r1, &(0x7f0000003ff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{}]}) sendto$inet(r1, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x7) accept4(r1, 0x0, &(0x7f0000021000), 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x8, 0x400, &(0x7f0000000040)}) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1=0xe0000001}], 0x10) 2018/04/15 15:57:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40081271, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x80) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000240)=0xfffffffffffffff7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x1e, 0x3) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, 0x1, [0x2, 0xe8, 0x1, 0x8, 0x3, 0x1, 0x1000, 0x7e]}, 0x5c) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000200)=0xffffffffffffff7f) r4 = accept4(r3, 0x0, &(0x7f0000000280), 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc) getuid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x101000, 0x0) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0}, &(0x7f00000016c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in=@local, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0xe, 0x4) r7 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) fchownat(r5, &(0x7f0000000640)='./file0\x00', r6, r8, 0x1000) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f00000004c0)=0x7, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000018c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000019c0)=0xe8) r10 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000001ac0)=0xc) accept4$llc(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000480)=0x10, 0x800) sendmsg$unix(r4, &(0x7f0000001c00)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)="2236e07b4684bc89605ac56bd8811d5cdd3f98fc5a4fb5be93897f3b948f6f440d3c779c5f6f01c4afbae8e33e5290", 0x2f}], 0x1, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000800000000000000ba0000", @ANYBLOB="000000043690905a25246f10af1e2fd81bf76d6f63af077fdcdb71090ca3505f3d212137ecd1a759ab7c7910b94175433bb69b82516bbfe1db86a73b3e43a076c458c3aead80bedf12cd92eaed39818036cd92cafb4c985821a306a6893e0a7be50d10e25d615ea2eb8a79e404d83a7883b74f0db677b4b54eab0e0996d45e50c8a950dd3b9714da904f64f1cc419723cc71f7a9bcb255f758c4663f208c664ca1a134d0d7ea697c2469022bc173a034924ff60737127f3bee9ad4a2be56c422cd99edf7c31d0e8286352098ec8cf2d98fcf163454d2b74ce36365295d04ac21cdcbce8452c1000000000000000000"], 0x3e, 0x40000}, 0x20000080) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x1ff, 0x4b81, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}}, {0xa, 0x4e20, 0x33c, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x6, [0x0, 0x0, 0x0, 0x1000]}, 0x10) 2018/04/15 15:57:49 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000b, 0x31, 0xffffffffffffffff, 0x800000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x800452d2, &(0x7f0000000200)={"0000000000000000000000000000ed00"}) 2018/04/15 15:57:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5421, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x303000, 0x0) lseek(r0, 0x0, 0x1) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x92, 0x5cd, 0x7, 0x7, 0x80000000, 0xfffffffffffffeff}}, 0x8) mkdir(&(0x7f0000000180)='./file0//>le0\x00', 0x0) 2018/04/15 15:57:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/15 15:57:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070ca, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127d, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1267, &(0x7f0000000800)) 2018/04/15 15:57:49 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x44, 0x400000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8b6e, 0xc810, 0x234, 0x4}, {0xfff, 0x6, 0x81, 0x10001}]}) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r2 = socket(0x0, 0x4000000000080003, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) write(r1, &(0x7f00000001c0)="2700000014000707030e0000120f0a0011000000f6070000ff000000078a001f05080029007500", 0x27) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) 2018/04/15 15:57:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c01, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x2d, 0xafd, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/15 15:57:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0101282, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1274, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 7: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f636b70726f746f3d6c6f636b5f6e6f6c6f636b2c2c6f636b7461626c653d76666174002c00f99cba988c62d64ec7338b479fb1dfabb2b0076f610df30e8f0b44e230d8308e02aead3df8cc22d553c1209f856e7553661a27b0dae63eb817ec3af5c75d69cb24d7595207f2fb1c0e14cec08a7ee2415761ae2847c68194fffa9ec8828a588ef9513a7656f50000000000000000000000000000"]) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8001, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) 2018/04/15 15:57:50 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregs(0xe, r1, 0x1, &(0x7f0000000180)=""/92) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07f08f3fa400000000d1983a07c5593e0003f58214bc007bbe913e"]) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x101000) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000740)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$binfmt_elf32(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x0, 0x2, 0x3, 0x3, 0x3, 0x3, 0x2, 0x311, 0x38, 0x279, 0x1, 0x1c5f, 0x20, 0x1, 0x8641, 0x8, 0x7ff}, [{0x70000003, 0x6, 0x9, 0x5, 0x0, 0x82, 0x8001, 0x100000000}, {0x70000006, 0xed, 0x800, 0x3ff, 0xffffffffffff7a0a, 0x5, 0x40, 0x3}], "0b1f26c46c7e2e7977d62243c3490c303b25c9d809f95b4e35f72f0d9ef439b714c37bf3dd4e39b1281783f7219265c6fe797664ec421bb285951bf35686d406f1ada05706fc45", [[], [], [], []]}, 0x4bf) accept$alg(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/fi.e0 ', 0x0) 2018/04/15 15:57:50 executing program 3: r0 = epoll_create(0x80) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername(r1, &(0x7f0000000280)=@l2, &(0x7f0000000300)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000880)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={"697036746e6c300000e7ffffff00", 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) clone(0x42000000, &(0x7f00000001c0)="cb533f705964ffbcb1494ed4fead830d88f0bb615bd580d0419dc465c0c0d5e62c4eb9aa0b7286be831920873834642702a0f86ae62f19194420ede3657c33488de4668c4f1699", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f00000008c0)="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") sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x1a1}, 0x1}, 0x0) 2018/04/15 15:57:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 158.206954] FAT-fs (loop2): Unrecognized mount option "ð?¤" or missing value 2018/04/15 15:57:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c06, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070ca, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x301, &(0x7f0000000800)) [ 158.280801] gfs2: invalid mount option: ocktable=vfat [ 158.283582] FAT-fs (loop2): Unrecognized mount option "ð?¤" or missing value [ 158.286210] gfs2: can't parse mount arguments 2018/04/15 15:57:50 executing program 5: 2018/04/15 15:57:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081272, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 2: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x1000, r1, r2, 0x20, 0x800) rt_sigprocmask(0x1, &(0x7f0000000440), &(0x7f0000000480), 0x8) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r3 = gettid() fcntl$setown(r0, 0x8, r3) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r0, 0xa, 0x20) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) r5 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x20140) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000200)={0x5, 0xd0d9, 0x800, 0xffff0}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000140)={r6, 0x7, 0x20}, &(0x7f0000000180)=0xc) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 158.412663] IPVS: ftp: loaded support on port[0] = 21 2018/04/15 15:57:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081272, &(0x7f0000000800)) [ 158.462479] gfs2: invalid mount option: ocktable=vfat [ 158.467783] gfs2: can't parse mount arguments 2018/04/15 15:57:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x4, r0, 0x1}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb}, &(0x7f0000000100)=0x8) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/200, &(0x7f0000000300)=0xc8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={r3, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x7}, 0x8) sendmmsg$alg(r1, &(0x7f0000925000)=[{0x0, 0x0, &(0x7f0000d60f80), 0x0, &(0x7f0000f06000)=[@assoc={0x18, 0x117, 0x4, 0x20}], 0x18}], 0x1, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000523000)={0x1d}, 0x10, &(0x7f0000f9f000)={&(0x7f00002d5fb8)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "78107cf7ba34bb907619bca78c327758e0977d56a0428fcd2086f76c15e8bbf0272ad8184a3924c666339f8e3d1c1631d81bb612a655343ecf2221f317fc71e1"}, 0x36}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x3}], 0x2c) recvfrom(r1, &(0x7f000069cfc1)=""/63, 0x1a, 0x0, &(0x7f0000098000)=@ipx={0x4, 0x0, 0x0, "e262589dfba5"}, 0xfdbb) 2018/04/15 15:57:50 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000800)) 2018/04/15 15:57:50 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 158.806239] IPVS: ftp: loaded support on port[0] = 21 2018/04/15 15:57:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40049409, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127b, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 7: r0 = socket(0x2010, 0x2000000000803, 0xfffffffffffffffd) write(r0, &(0x7f0000000200)="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", 0xfffffffffffffe20) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x1}, &(0x7f00000000c0)=0xfffffffffffffffa) 2018/04/15 15:57:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c00, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 5: r0 = open(&(0x7f0000053000)='./file0\x00', 0x43, 0x0) fstatfs(r0, &(0x7f0000000200)=""/246) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000014000)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000000)=""/196) r2 = accept4(r0, &(0x7f0000000140)=@in6={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x80, 0x800) sendmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="360e40704641408b49cbc0dbe35948151991e5574db1e119bd791f2f4fa56a92852f8e0efeb61d429fd91916e8a6e39d407a7105f9dff3c2334f0685006297aa473e064ae4ed2cd525cbc33d3011f80ea94fd5b89c89b6", 0x57}, {&(0x7f0000000480)="2f675a75d69e1187ab5289d902756d5e6316b9ab77618f0528b5e1a5ee4e700bc2157d96c72aa83518bac7f96156d4400726efffa07f95df98b8a27615125d4dbc5a88dbc7b6f007cb0708288de7feb3274e244e5723139dafc50a36c4d8dd45d6011b91bbf9adde224c42b37c38326fd917210f00b011926c4d13", 0x7b}, {&(0x7f0000000500)="321565a665da7b3b78baafbf1274d834dbdf3c9ffd73af9d4ea169e81ab80b873e50d254a879a857be5205cd6056b321734e4bcdf8563ee829fda883d3d7e8b3beccfc9420b2967fb2d448f178fa074dc2ee877a3258d61ae245a7a4a3a8bc3d70acdcfe2c2afba0896b7a8ba9edce3c85f9288b2114d719240d0bf577da58704aad0c886b9b1661", 0x88}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="17946c24ee15993b990192cda8861f7cee9caa2c0987b6c188f86175bfdb26d08cefb333b2d69e2ca09d4a5386b26899fa244673ef8e6ee4e2a86f261f5e41f6bcb383f8", 0x44}], 0x5, &(0x7f0000000700)=[{0xd0, 0x114, 0xfe8, "72080e0ba6444d861d5f969c7a100077d2d9daccd9275c62433e94bca7656fe6ac7c40cf3aee24df1967d0623a17cf89163f1ee2d941bdab9fd87369ce89ebbd0d9dac44e52b525cc54845b145c52cf3a07e555da4c7b578b627b52777ecef8799f09e3b26f5a347463158087a8f1c32ad503aea58d537b1f8b389aa539cf57b09a715ad9319a4b9bfa06decdecca0e07eb26ff609ed6f94db5c2f3817539eba1f8daad858b7ab24fb89705b1c4b65bd1c98fc9479cd644ef45f77536c"}, {0x110, 0x117, 0xe986, "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"}, {0x38, 0x117, 0x10e, "c1104103884207d35a564729c4754ca78dfad31128b08d8cff85a4c255a01d7148ba8aba25"}], 0x218, 0x4000800}, 0x4000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000100)={{0x800, 0x1, 0x3, 0x5, 0x1, 0x10000}, 0x0, 0x3, 0x5}) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r1, 0x401) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000300)=""/217) 2018/04/15 15:57:51 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) r1 = socket$inet(0x2, 0x3, 0x2) close(r1) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) 2018/04/15 15:57:51 executing program 3: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x7ffffffef000}}) 2018/04/15 15:57:51 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/15 15:57:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127c, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/239) sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a"], 0x2}, 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") mount(&(0x7f0000000040)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000000100)) preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x88100) shutdown(r4, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) iopl(0x9) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000006c0)={0x1, 0x7f}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000003c0)) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x10, 0x6) accept$ax25(r1, &(0x7f0000000640), &(0x7f0000000680)=0x10) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000e73a1d2f1a18597d024451b920d9c1e5000000ce0000000000e4ffffff000000000000"]) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) recvfrom$packet(r4, &(0x7f00000002c0)=""/245, 0xf5, 0x1, &(0x7f0000000600)={0x11, 0xfd, r6, 0x1, 0x8, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/15 15:57:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070ca, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1262, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000180)=""/155) dup3(r2, r0, 0x0) 2018/04/15 15:57:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x2) flistxattr(r0, &(0x7f0000000000)=""/38, 0x26) writev(r0, &(0x7f0000000080)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff0600000001000000450000002000000019000a000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) 2018/04/15 15:57:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0xe9, "608347319b5a137e252aacd42b62418a4c89c78e032d3942e5aef00b05b52d04cfd9fc1bae1c116a8e4145473fe660f54f0bc1946d70b700a40bc3700cc0ccd11b7bc2e778a29f27d1111db9c0dcdc0dc7745c2567e1d66f02ce0256892d866fc1025aa642f6b6e8e3f9d8bb761045562ddae89c09018222cfe236156234127f31ff6715d9fd51f8eb8df7535c25fe33863c1f71d183a869f747e5af02f3f093c6b58c169b4ead541a75041fd10096964f288a2e0d5fe8f341a45a7a8ed2be7803cd961928d76c40a54744747416ca8afd48442957975aec25f87c5f331de250095e8f297fb49e6354"}, &(0x7f0000000500)=0xf1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r1, 0x7e}, 0x8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180019000000000000000000f68000006a0a00fffffff600611880"], &(0x7f0000000080)='GPL\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000ac0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000ab92b76c000000e7ff000000000000000005000000000000000000008717e8a515fb72cf3731a68e6d00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x80000001, 0xbb, &(0x7f00000003c0)=""/187, 0x41f00, 0x1, [], r2}, 0x10) 2018/04/15 15:57:51 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/15 15:57:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000800)) 2018/04/15 15:57:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 7: mkdir(&(0x7f0000109282)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000216000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f0000ffb000)) r0 = creat(&(0x7f00000ec000)='./file0/bus\x00', 0xbc9cc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10f, 0x2, 0xffffffff, 0x1da, 0x10, 0x1, 0x3d7, 0x1}, "d34bc6e11a8073d6370624d929bb86b530957e1c3d3b2305cdf4dba8dfb193b7f90bc22fcd5464cd0a7eff1d3d9884e4c6c9b9875331e7ca14", [[], [], [], [], [], [], [], [], [], []]}, 0xa59) ftruncate(r0, 0x7) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) 2018/04/15 15:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x2, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:57:52 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) getpeername(r0, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@quota='quota', 0x2c}]}) 2018/04/15 15:57:52 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x3c) accept4$ax25(r0, &(0x7f0000000000), &(0x7f0000000100)=0x311, 0x80880) sync_file_range(0xffffffffffffffff, 0xffffffffffffffbf, 0x7, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x4, 0x1000, &(0x7f00000001c0)="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"}) 2018/04/15 15:57:52 executing program 2: r0 = memfd_create(&(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xb0) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000d0e000), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000180)={[], 0xffff, 0x7812, 0x7f, 0x0, 0xde7, 0x107000, 0x6000, [], 0x8}) 2018/04/15 15:57:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0481273, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000001180)=""/4096, &(0x7f0000000000)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 160.045198] gfs2: not a GFS2 filesystem 2018/04/15 15:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4020940d, &(0x7f0000000800)) [ 160.082768] gfs2: not a GFS2 filesystem 2018/04/15 15:57:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081272, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 7: socket$inet6_sctp(0xa, 0x80000001, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001340)=[{0x3, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x1}], 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$void(r1, 0xc0045878) pwritev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000140)="57f497c07989c619e48c28775f63e222da551e9b", 0x14}], 0x1, 0x0) r2 = request_key(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001680)='\x00', 0xffffffffffffffff) r3 = request_key(&(0x7f0000001740)='logon\x00', &(0x7f0000001780)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000017c0)='&\x00', 0xfffffffffffffffd) keyctl$search(0xa, r2, &(0x7f00000016c0)='keyring\x00', &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x0}, r3) ftruncate(r1, 0x8000) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x200, 0x0, 0x2}, &(0x7f0000000100)=0x14) read(r1, &(0x7f0000000240)=""/4096, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000015c0)=0xe8) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='syzkaller1\x00', 0x8001, 0x0, 0x81}) epoll_wait(r6, &(0x7f0000000200)=[{}], 0x1, 0x10000) fcntl$setstatus(r1, 0x4, 0x0) pread64(r6, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$TIOCLINUX6(r6, 0x541c, &(0x7f0000001300)={0x6, 0x3}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001280)={0x2000000000005, 0x208, 0x0, 0xfffffffffffffffc, r5}, &(0x7f0000001240)=0x10) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a}, &(0x7f00000006c0)="7b2d23776c616e3076626f786e657431766d6e657430142400", 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000440)=r7, 0x4) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000500)) 2018/04/15 15:57:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045877, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:57:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x70}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{}]}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) 2018/04/15 15:57:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x805, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x1) 2018/04/15 15:57:52 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xcb, 0x8c, &(0x7f0000000080)="c11f9b2c8c8a8ecd23ccc87da44030ec2a40d2c86f9f1ba4c425c79afc1f12bbf740dde9e7d40e5e1a03d9c543a4c5da978a66d1940fb81a62c0524895ea98152d38642d5c72d75618101a4c44f1b074df1475ee6f0d5e964d2fc28cd3e2e58dabddd6a89deec0ef93714128413dbb4bac2baffcd4d2e4c48372707d95e29ea201ebacb9917b5d3593557a7d64c783ddb5d6f302426b9fe4d9c33ae5ca41cca3681312adbcce005833e59711759c92e7f2b1d0266dd3e6b4c8b0fd5ff63f1672613e4d1d35b4bdf400af00", &(0x7f0000000180)=""/140, 0x3e00000000, 0x4}, 0xfffffffffffffdff) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2, 0x80000000, 0x1, 0xffffffffffffff81, 0x3, 0x6, 0xb, 0x1c3, 0x40, 0x2b4, 0x0, 0x4, 0x38, 0x2, 0x20, 0x1, 0x200}, [{0x4, 0x8, 0xfffffffffffff74b, 0x4, 0x7ff, 0x2000000000000, 0xff, 0x8e2}, {0x6474e551, 0x6, 0x9, 0x7fff, 0x2, 0x0, 0xa3, 0xffffffff896615fa}], "3e9dc37d5fa5131150", [[], []]}, 0x2b9) 2018/04/15 15:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c08, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1264, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081270, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r3 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r3, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={&(0x7f000026cff4)={0x10}, 0xc, &(0x7f0000577000)={&(0x7f000057ad74)=ANY=[@ANYBLOB="3c0100001a000100020000000000000000000000000000000000ffffac14ffaaff02000000000000000000000000797ade874e00010000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c96d03b95a9c97d, 0x42) sendmsg$nl_crypto(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@del={0xf8, 0x11, 0x304, 0x70bd2d, 0x25dfdbff, {{'chacha20\x00'}, [], [], 0x2000, 0x2400}, [{0x8, 0x1, 0x8000}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xfff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x1) 2018/04/15 15:57:52 executing program 2: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000886ff0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000d59f8d), 0xfffffc6c, 0x20000804, &(0x7f0000e1e000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 2018/04/15 15:57:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000001300)={&(0x7f0000000140)={0x11a8, 0x6, 0x5, 0x12, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@nested={0xc4, 0x5c, [@typed={0x8, 0x11, @fd=r0}, @generic="05ab7d9fbe6e9f3080dfed226175c328c56c44f976abca713fc608bb8ba5dc695bb219f0c19a9864095d500f120d53d51a9a73d658a0bdde72d9318867d7c8e1dc7a556766050181b4b211893dc61d4920192dc1448bf18918b88d32918409766f0a5ce3041b0c730d1256cfc1f994b98ef101501508aacc1b9c4c46d4", @generic="6eb900a2b5acf2f513863a6854f6b1f832207c04d637b68f60a322343bc7", @typed={0xc, 0x61, @u64=0x1f}, @generic="ce674e95ecfe70", @typed={0x8, 0x2f, @uid=r2}]}, @typed={0x8, 0x3f, @binary='g'}, @generic="633aa076f7df4840ed16267dc5a4d6c61d6031391e2b570dba", @nested={0xc, 0x3a, [@typed={0x8, 0x32, @ipv4=@multicast2=0xe0000002}]}, @typed={0x4, 0x6c}, @typed={0x14, 0x54, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @generic, @generic="2a1f1387f02c94ad6b17827eccd1fb0943444f22f143bc68464073b343248c84d581b04cd4aa99a86b6a2c8dad650a4e1dfbeb27eb0e6ef9c99a62137d2e5ae4ffac30c90ff2df0cfe1cd75f32281b599ffa386a43ed0f4d17688de4a17f729887250a2a2881484f145f11c05c9eebd367b2e2573a0f9818ed90e56e863746bb57c24afc", @generic="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", @typed={0x4, 0x2b}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x440e) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffcd804ad3) socket(0x11, 0x0, 0x99f) syz_open_dev$tun(&(0x7f0000001380)='/dev/net/tun\x00', 0x0, 0x20a900) 2018/04/15 15:57:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001, r1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x3, [@multicast1=0xe0000001, @loopback=0x7f000001, @broadcast=0xffffffff]}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000006c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) 2018/04/15 15:57:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c06, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1269, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5450, &(0x7f0000000800)) 2018/04/15 15:57:52 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) prlimit64(r3, 0x0, 0x0, 0x0) 2018/04/15 15:57:52 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) 2018/04/15 15:57:52 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x0, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x90024}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x463a}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0//ile0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/227, 0xe3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001500)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000340)={'mangle\x00', 0x74, "629185ced1f2600fddab71fc00c081782815c833c5a3a32b23b5bb8696c45848b3f3c1d2b63bd02895016f4e39b9110cfb51e6d49a757dd15fa3044414b15b17f26a5eb1a05d2c93faa23005208d17ceed2ffc91b8629cfb8986bd7957a7f7fc6fd6fb403a29f0941d277747a1b2dec095cf8b17"}, &(0x7f0000000180)=0x98) mq_open(&(0x7f0000001700)="822647504c2c6d643573756dcc00", 0x0, 0x0, &(0x7f0000001740)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) lstat(&(0x7f0000001c40)='./file0//ile0\x00', &(0x7f0000001c80)) inotify_init() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x0) 2018/04/15 15:57:52 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x0) ftruncate(r0, 0x7fff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r1, 0x4, 0x8}, 0xc) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000340)='%\x00', 0x40, 0x84, &(0x7f0000000380)={0x0, 0x4, 0x3, 0x0, 0x5, 0x3, 0x3, 0x2}) ioctl(r0, 0xc0884123, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x10001, 0xc, 0x69f, 0x5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x1000, 0x1, 0x4, 0x32d, 0x9a78, 0x40cb, 0x2, r2}, &(0x7f0000000100)=0x20) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8}, 0x8) finit_module(r0, &(0x7f0000000000)=')mime_typeproc{\x00', 0x2) fdatasync(r0) 2018/04/15 15:57:52 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r2 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r2, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 160.900883] QAT: Invalid ioctl [ 160.960140] QAT: Invalid ioctl 2018/04/15 15:57:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1276, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 3: r0 = socket(0x3, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x4, &(0x7f0000001440)=[{&(0x7f0000000280)="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", 0x1000, 0x5}, {&(0x7f0000001280)="d8a25d87600b69f982db42d84d8741102e4b", 0x12, 0x6}, {&(0x7f00000012c0)="e19b7ec0a234376c943999f0c3ade4b7b628391f7af26f732b843d5731ac5d7fb03e969f01bb9f68723ecc6f171d664643352dc895f7f283edd68f6d5d7c0fbd79ca6997189dc344e99b2da4932764f0ae7914b4fb639a56e612d210b8361108a075fa6375397672d4605b4fad40ff0e40ea7f4549c3c33df0d99cdfbad337a56bc5416723c1fa8def12a43a8d2d0bfba71d4108d58249f26975ebf75b99eefdff05", 0xa2, 0x537}, {&(0x7f0000001380)="61a592f618c4d5354717de3d18bf3ab9868c06d3d184064388485e276ba962a8efc44719786f706ae86ef7db68a6dcaab8097a221ff4dc87f628c33476aeebb594de72e9f781f2dbcec08cee82add155869a94e1813ce379c2f5d1d434ff86b550691716f38a7bf29507bc0cbfa3b482ce31b0328b72fc05492570ca8c54035e3c90a54be322c74d71850e9cf2d0c3dce1d46b45be564676ddb5b58678b7b8f5ab5e", 0xa2, 0xfffffffffffffff9}], 0x22408, &(0x7f00000014c0)={[{@block={'block', 0x3d, [0x36, 0x0, 0x35, 0x37, 0x3c, 0x32, 0x32, 0x79, 0x0, 0x33]}, 0x2c}, {@utf8='utf8', 0x2c}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)) setreuid(0x0, r2) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x4200) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0xa65) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="81c0cbcec732d1668a8c4a17715366c5", 0x10) fchown(r0, 0x0, 0x0) 2018/04/15 15:57:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0101282, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0189436, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000e27000)='/dev/vcsa#\x00', 0x2, 0x1) write$vnet(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000200)=""/86, 0xffffffffffffff5a, &(0x7f0000000100)=""/11}}, 0x68) write(r0, &(0x7f0000000140)="03", 0x1) 2018/04/15 15:57:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000a75ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003fd0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f000000bf1f)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x272, 0x0, &(0x7f0000000040)=[@release={0x40046306}], 0x1c5, 0x0, &(0x7f00000e0f29)}) 2018/04/15 15:57:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r2 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r2, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:57:53 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eabff0)='/dev/sequencer2\x00', 0x800000000000002, 0x0) dup2(r0, r1) dup2(r1, r2) [ 161.092781] binder: 13860:13865 unknown command 0 2018/04/15 15:57:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081270, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870c8, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"d202b999cf85000000000088f301e710", 0x100}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) 2018/04/15 15:57:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1269, &(0x7f0000000800)) [ 161.128225] binder: 13860:13865 ioctl c0306201 20000000 returned -22 [ 161.163669] binder: BINDER_SET_CONTEXT_MGR already set [ 161.202775] binder: 13860:13865 ioctl 40046207 0 returned -16 2018/04/15 15:57:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000020000000000000000000008"], 0x10}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x269, 0x0) r2 = gettid() getpgrp(r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r3, 0x8000, 0x5, "b96d670ed2"}, 0xd) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 2018/04/15 15:57:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4053, r0, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x2}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x205, 0x100000001, 0x10001, r2}, &(0x7f0000000100)=0x10) 2018/04/15 15:57:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3ff, 0x8000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070c9, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5460, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r2 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r2, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:57:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x5dc9, 0xaaaaaaaaaaaac79, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e66617400020120000200808000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000040)=ANY=[]) open(&(0x7f00000001c0)='./file0/file0\x00', 0x3fffe, 0x0) 2018/04/15 15:57:53 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace(0xffffffffffffffff, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=ANY=[@ANYBLOB="e4000000210011040000000000000500e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001300e000000100000000000000000000000000000000000000000000ffff0000000000000000000000005c00110000000000000000000000000000000001e0000002000000000000000000000000000000000000000000000000ff010000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000c001000ff00000000000000"], 0xe4}, 0x1}, 0x0) 2018/04/15 15:57:53 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) pwrite64(r1, &(0x7f00000000c0)="d80f2ebd86420597b69706d24e688c8ad2ace55c5a9d62c30a935d03d0b3745446a11446b4f4b09327789b87d5fda4cb82e200c800519f290dd8eeee508145fac29d7bf511df79287666270a8edff5aa1c76a6eaf094c2e39b11f6b0bb97026d07ccd242ddf1890e0238fd630b5d978e247f2174952d4a3ced3e64c899991ec4", 0x80, 0xe) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1000, 0x400000) 2018/04/15 15:57:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)="650100", &(0x7f00000000c0)='/\x00', 0x0, 0x0, &(0x7f0000002540), 0x828020, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, [0x37]}, 0x2c}]}) getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000100)=""/8, 0x8) 2018/04/15 15:57:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1265, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125e, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40101283, &(0x7f0000000800)) 2018/04/15 15:57:53 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6009000000383a0000000000000000000000800000000000ff0200000000003fc4328b000000000000000001030090780000000060a9718800006c000000000000000000000000000000000100000000000000000000000000000001aabf21a21c6734cc"], 0x0) [ 161.732408] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 161.774277] EXT4-fs (sda1): Cannot specify journal on remount [ 161.838507] EXT4-fs (sda1): Cannot specify journal on remount [ 161.947501] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2018/04/15 15:57:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5450, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40049409, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7e000000000000, 0x40000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {r1, r2/1000+30000}}) r3 = semget(0x0, 0x5, 0x8) semctl$IPC_RMID(r3, 0x3f000000ff7f0000, 0x10) 2018/04/15 15:57:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000009000)=[{&(0x7f0000000100)="5500000018007ff4040000a80000409302060000000043097e2623693900080021006b21753c85489a9e0814be1100000000ca8a9848a3c72802c46bab31afdc1320d50014385884136ef75afb83de448daa7227c4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x9, 0xe, 0x1, 0xede, 0x2, 0x4, 0x2, r1}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000180)="2465ae88d27c3611c4b08b8d638220c6c2b569f141f442d1f940a9f99667f9bbbd1b439c9e6f400c78288b1bc6f9e91e1a71d6b2de5eef59eec105559a523738ba97d23eda2ba24e0e863f21b849868e223d50d06c994cca6fbf73f8a1a9f6264f94ed3b81287a42d39d1dcf2a7d92c5c192adef8f70620d1c9e4fd14695be5cf8915c08a74e57d5e6441f6757", 0x8d) 2018/04/15 15:57:54 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001140)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x400) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x5}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, r2, 0x1, 0x80000001, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) readv(r1, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) r3 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x404) inotify_rm_watch(r0, r3) 2018/04/15 15:57:54 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000640)='timers\x00') getdents64(r1, &(0x7f0000000040)=""/48, 0x293) getdents(r1, &(0x7f0000000080)=""/34, 0x22) getdents64(r1, &(0x7f0000000140)=""/120, 0x78) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000009380)={@multicast1, @multicast1, 0x0}, &(0x7f00000093c0)=0xc) getdents64(r1, &(0x7f0000000680)=""/202, 0xca) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000540)=0x44) sendmsg$nl_xfrm(r1, &(0x7f0000009740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000009700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc0200002400000025bd7000fbdbdf25090000000c001c00", @ANYRES32=r2, @ANYBLOB="02000000f00014007368613232342d737373653300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100500000000000085fdbfd792b2dc3e1f9ef218021a3510b6087171b5d552e7b9e23375b2f00145a9792d256fe613c365a81a8e85c31709208b4d6d4d7d8a2fa861b92cfe35a50543a9c6a7c20fb2ce464100c6e97cf23d04c43d3e97330ff497fd15bbfb392dceb13248dc560edd963812e09f67513e963a70b70a62d44c1064e12beacb16e542fdb9c76a24fc8cb02ebca40000a0001200726663343130362d67636d2d6165736e69000000000000000000000000000000000000000000000000f17acccf64bf374fd544000000000000730273352491ecba00000000000000000090020000000000006120d1e78c9c7f0543e402799e90a410f8c87632d68eeb11c77bd2d54420e56496f87a00b21bc234fa32719714616b72fec362760b9d28e5fcb872c4d8fdd66d5de0d8411d7a9edb2eb85f0e8a190b41fadf000008eb1700050000001401010063726333322d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006006000007c397480b81bef3a88ef0777f5affb89658a0666217c7d28a006bbdcace60fa2e74c5583f59ed8b3a7e6d49a68f019aa69c81ac6cb7e44af083f46217fe39cf8206df3bd3187d14d01362aeb604477d000557c501c73c26ed3e0cfddc7fe663af4a34fb76c7e751d22837200ab562e84f18afaf558fc54a09ecc1138403b976360fd87fd1facf5380e95a79266e33dd17a34f314e803ca37856e2a1169a7f6e1ea96a4ef7be724755f4c9c10e70551574c22746c86635f048d25eb8c6bc89f71d779b7790703485e8043f83498726702c769f260a00ca24b95305000000000000001facfd732b03c5526e3b2e1476bb39daf221c658e38d81c9c51f8b6ce2d926eaa562ffb7fbde9a5e336e3ea00e2f0c30c0479932fe526649679938bc2fea3d9c6f7bf56295d351d06284997f197ac33ddfb184b27b7685a66d490aff276cc50ff90caef7dbbf6223d6064acfd53d06c10f7db375a7cee14aa9ce9a0b512446db1ca1f582223d00000000000000000000"], 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2018/04/15 15:57:54 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/15 15:57:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0481273, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4020940d, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800000001, 0x0) write$fuse(r0, &(0x7f00000000c0)={0x28, 0x6, 0x0, @fuse_notify_delete_out}, 0x28) socket$inet(0x2, 0x3, 0x3) 2018/04/15 15:57:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f0000001000)=""/250) 2018/04/15 15:57:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0189436, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 5: pipe2(&(0x7f0000000300), 0x80000) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000001440)=""/238) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x204000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000019c0)=ANY=[@ANYBLOB="09000000000000000b0000c000100000010000000400000000000000000000000800000000000000000000000000000002000000030014f4571c4900000100000001000000000000000400000005000000000000000000000000000018070000c00b0a00000000000006000000070000000000000006000000000000000000000000000000000000000000000005000000008000004403000001000000c80c000000000000000b0000000000002d040000c00200000004000000001000000900000001000000070000000000000000000000000000000000000004000000060000005690ffff3f00000009000000ffffff7f000000000000000000000000070000c00000000004000000000000000100000003000000010000000000000000000000000000000100004000000000010000000001000006000000bd0000004c0b0000000000000000000000000000063dce00000000000400000001000000040000000c020000f9ffffff000000000000000000000000b22523b7137f9dab99ab25a1de8fa2ed5935bb8817842275d509f8fbad6d3da12adcbec78e9a3f6184a45a5a985eab0ae15feed9c1236e7b5c534f072fee8d8096afe184ca3c21f155284ebd7d01ec04de17475c0d49cb2ec197e72087bfd5b8886c332667e56d38ec0fdd4efbe51fa94d7fdd597fa51116526180d4ab2a9fd7b32ce4f591e8ab5188c4d903143b94ca1734ca07e46ce3696f3978ddd01877583a5a3fb6690724acdd57aa2bf287b7c1142bcb7ff5cea0c85bb548e7e3d5bc10f399c3143290c58d2b43d0136032c44e448a82aadca85a53c2290ab3453b4fcf38243424598041854dfc775e441b32ed707f4daa64ba21773967a0f634a47a3444273a"]) r1 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000400)={0xffffffffffeffffa, 0x2, 0x1, 0x0, 0x0, 0x80000003, 0x4, 0x101, 0x4, 0x0, 0x63}) r2 = dup2(r1, 0xffffffffffffffff) pipe2(&(0x7f0000000280), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0xa0000, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x10, 0x4, @thr={&(0x7f0000000080)="3e27aa2488ef8918d8366b99bba3f37e3fa4095e56081390aa23978a48c0499bb28f084bd2ab92fad5d8b80549b33b", &(0x7f0000000440)="2139a8e6bd5f32f31b22e8fae5d019dacd8e08ba0570d0457d924581eb5680566cc5ad59618c53c723ad7b19c93c5b4760e9e0621a3c0e8ffe813a6dd6ee4cf40806bcb0f8e31b4739cef2479aa69f2dfaace767ed90b2ee5340cb0cca9acb4687d461f36b16c5a465ba646783d83982a824587bc6f0e7e256e11951455354ba9c4da55906bc8800e18665c4bbc1ad0c7c52c2133f66d4056584a20a639990f9bc7e9d0de33d565246398f1ec135acf411a02ecfe23f5156fe4bd393f4e4c5ca1a35492ccddc7e16c412169726ca365c08a6ace8fb54515cdc66deb150f56bb1f4d4ba7cf8c7e134a0eeb9b443139d04c6beebd13fe28447b3682e3cec71de438ebb1bdd561305bf1a60e866672805e2222ee4b5f86821b3f74de35b443a3c6d98dd05de6c0a4e930b5bd0112582a7bdb9cade67d6b5b65b0aeaa083399ee8188cbe4f5ee79be7f4527c8947521bd7b2a363057c83181f3d553bc54883585dbd3c90b83fdb55bdcb4effdadf6e1ddce9e8d90a310211546eb2ab55017e53c48e2accdcb8aaa0700d85c3d467fb557b2bf7248e3f752d789a26ff5a3d602034e014814e9229845e448e6ab95e8599a5ef0179f0e241d09426a955402fa4630787dba5547f10f3b66a8f4d1370c2c84c0960188968eb0188fbf1687941bc370766f639599ad4e69533ba99552d0e6643eeb287bc7a7f3b69eeee8826abff4a7bef3827d5c6dfa095f4cc1c560f5b040b7e9c0ef85e356e1ca7417cc1d540a298dff585081ef32012463ce6d6fb347ba5d6283bd0831d1113adea136e61bb491a31057a14791966bd012eb57c9a591156ed6240f9e66ac7f60169b42a24e11ef7f8ec4b49c3dbb60c3a603e36ab199c322a4b454abdb0ac9b3b5d9380c535ef7448af96326bbe56d8771b2dc41f3dd99b25770a2ef7f4b9306e8ebf31ab56484a8331b4d587239075b1691846f4e4004d2e8cfce83c23db72b285597783f951e02dc4626c5bf90675fae10dbdc308dee5afab34201b70f8d50d4ca89e59c31682e9570572902574026a81562c3403694384b8b84d9801a8ebfbb75ca4b9c69f60ff6d5094a0b7d68eaf277da6e8e1ac3f8d8f67f7b80530f69440a0af4af320ce25b4e63bc53bb485e0b95713e89f77ffa186a16d0372447cefac1a9726f19f2c9aabe3b7c84aff46b49ca3c8b275594de0eff14b545b9eae71695cf2690b3754e4a87d1e50fa70861061511a924ce7001a26d001422bfd69038743997ae5560aca075123b7c7fe40a6962ea4a648dcac2e138dfd092174b1e262bcb1fdbd25f228e3c7681593dcad83eb170784c62dfbede73730599f42cecbed2e61c94c41bd8abf453cc491e1a7c0b15f39e6a1d63ac806ce946f6d4d7527a5370f3b17cc6d0f7c88eccabce0055ad120109aae3e417a0ee545e7be9e0e2869db948d55374a5706074b771c5fed7a6670bb29536c8f61795e33d5714cfc380567ad4b4be8331b32e4e707abbc9b85e153107112402a2f3e3d4f27c7c4af76483399cf1fa7ddf5dadf3c42e9087836890247a68d348ede21675d3704b4ed343cc24ec7fdf0488608c5b72af4f1927b8dc06b4d6d17b6f1f3a1dc54bf1617c78c23265b35e5c7f5a02feef4623e44a6e95e3fcef68b2c3306d7d541c9dbab2aba059060f0620db2a828061670de76e097de560a0f14135469ddadd2dc8add1737153ce8a2be25e73930fa0b10ab7d2f0923d97a667f6b09d00a02ec712d1d045432256ed5151fe95f383a52c546c590556a564c15b3f2e519aa80e083ec4f941a03cb66e2f8c2732ee36c687834507741b0d0798da366d754ef436f538f1173d4ddf4b57a339953c4e5b92cdce646de46c22ab52a3198df4f5200570080cae72e80acd38795298234b0cd749bca2e30cd75689c39622c96ae28783debd50330922dbc0e45ed34fc2fb608150d936414b2e3ab2f743c7dd8ed007dbd5beb85d21b3d0a5f6e3c3c6ad72f66170844f7d11fa00cc6d234864e970e326139de2ef0c08085306e2325d716bea020410f8f47cd82b805ba3d42fda3f37d62b51e50df3c8a47624263f9bcd2872da742639b3f6852a788d0a3d84cb83b7326097aaf0572a39ebfd0704a735af4c2c9ebb1d3b433f9d96d4a824332775c425bc77728274c0668147207dcd6ac82c013bd31703aac21879293dee6a9ab5e3d0cab46ff3da5a27a1dba4b2d251c91b4d550fa4fc3d30dc3958bb5fca0225955267a510dec1555fe4281974114673c1cbc3805db9b073e1a5b12c91038677a988c13a9f2980c6202bed384ba339df9a0959dd95069a14d570f7ad44fad5a628c79610acc697c5f2ff718a858afbdd407287af67067262cae1da0996b7ba826562edcb8bb3f04b8702b6eaf2a612dd3511c69b215b7f307271264fc02473f73f6a5d42f44cb0a1c4ab5f502c44bc25b1e71534899dd9fa8d7b579f955ec5daedbedbe5a2a28628faddd6d9899797ba62fd5654d209863b171944afda4504b2f368ba597db8eb9c359c9cf5834eb5b7e73b23a3d57c006a3117728855c45b359549d9e9a48a750e80a2950b9c520daa66a4db8287509607f1de19c2654fe301e7e25026dffa4f6f87c99aaaa9e5bd95dab1b6c3fe263566ba213f6747c5bbfe71da0a9889af69ed3a5fc54d43d3e1cd4e210c063213448dcdb9061395b0f22e168f324af4c24479503d14214281393138e685fa7e8122ca7145928b187a801be2c08a944dd9fe7d3ff36b3ca1b9f2b759bf1f80ae989b56d54aa8e9b46d889a6113cf16de2a7e5af166c0099f831fd488804393844f6aeb64cbef273dbb14b4018795cd91ab51aaa0845f1b6632c1bc4c6e432b52b4ac86e567f11f4e63087ae0869b4933de019e8e2dfb770d5ba0feb4f779b34dfa91071c913071256d8dfd8e028d08a1d944a4e0653db21412ecde101970039d9b1faf871dacc29057d5b4dcc73c7672de8acff3eee52e69aaff2f3e869d6d621339dd066c71beedd15b71bb8739295672f6abe80141bd24a28dd7ffbdad219c24617256539da3b7ee89d59e08e57bfa0c7d6c3f996dc8f5f77a0d7b7b9ee747220320b2a8e863eb44a6ce83a08ba6d93fe682ae996f169c6efe41e7a640e85dfe4de012e1200c3028319c402ae9beba2f5ecb82b282e49cee4d22a3bae1642d683f53cbe90414f46529389c1ea0f05a2c055ddad65674a2298865368926fcd4041e1c9c7a8de5c310c5272f3a29dedf53003389ac42f3c551404d8ca711bc94b31e740fb47dcb9b7152e059123a6df00eac55b27be16cb5e1933fd4a34706a68bc3d2203804c300e9edda9cec0f22b613c40a7d5de7365a381248b2331c0e7ff919a1e9388ecf637e5de287e8d01b264dbf6f799361f50da38942bcdf3b0ea566ed37b35a9997717fe82321d99741ac1132e214fb6f2a05b588e07a699b6cdc80146f4a496bd308d90961efcb927ed186919aea4d538259a8da71804a7489dd1ea690a3edf0a6dc485d702bf24eda87b7eb883fe82e63d021e57fcd4c211bd1febd2c8488d628959f1c53b1e605d63661e18f80e01a56963d96621f22191f717ce676937d516eef32456b25b12d64d6d2814e1007b72fafc5d82ee63ecad8677ab9e57e2295f7614dfba1515bcdffd7130e0feadfce0d5eab55db70aca5cead5afa0121a1932f27da9594b76a60d8b2083674568f537b05c2a63a38d00761d7529ab9627e7d359962a2f2df5d7c5fec719797cfe4bf9c1b047d02d9f1ac2e15b754dc00aa1497628b91074549e7ecd7fa1bcdace11cbdaa5e4df83ca1dd34ecbbb0b9ffc1cdff81eb7a55b7b6d00e4b6750084e2f67d57df7f837e88d3904921b5397f75c0c4163b52a9608b973db0cd3ba9e91e59b25596a105d2dc913eb0ee92a31dbcd9be65269f77388a2c81b184f6aecc5f251dc101f9c87df40cd4d08398294387953f5ab4cfc2a12aad8f25f580f850ff283fdcddd843d1176997b6324b2942f3003e747d1621849cffd74f7c6363c98010722d5ae709f6c42bfeb681676d9f8eef4c26287d3f1fa119cffeaa2b8d4e778164548b03fdc2dde6744ecd014c2eed475268bcaf9c56462bee6c4d7862465a5623286d9b03f99f10a1102faf5a75c4db04b1d7de4d625146fac2cc20d0747e216ca78f5bb65aa9c508e68abdc4c05a1b41d979828ead44bc48348b0c62e17e6f8182794343c88c3b5500755094930dceedb53dbea8020c8a85f42418acd3b695119e4ecf7d76543c81941ea0b6df92b8d0c95318d4226c51acffc31db4f3d3af7a19bdb4a61ed141fa4ab3caea52621d56aa519718c4371bfaed399c47ce19c0bbdae85be7c649724b60105f8a36300a960462b5da02f604121234eace28c5da3e4092d413f646aebcf73a4f2cac57e29acc1e1f222756218e64d49a5f7ca03458af008e9f31413211e7cc1294c4248d6f5779e2b658d4b433e176e1e34daa5f414ec63e9d0042f3b26617ebd0446fbacc380727b019b67e0e124110ad0771a4b0ef663595572cae31cf726d33ea8eb113e950e8a72c01b6512869f1022cb591cb9d04dc261baebad9be5d36a289c851c918ada97038a0513a1c19efcd92df06909dfc0eec471cce6be06a72d8b774ff0b39575e44d114d2090136db7a85f05d9376ae329c9e403fa078bacfbdb10fb3a798d1630f218cd125b0c0b34fcc49df74362ad516a097c7641ba3731cbc8fddd6f62c91bc735d8622189bb949a990e25f2da66787b79434b400a5d8088b01834064e00a0c9e23c86041eee81b8bd174a49bc5e79d16342bf212fdfedee612e08e0c7fc230c9ded0580767c56294ed636a4d2fbcb3cec26b6a652da024d74de8d4be65e7c23aff19422eca7ab55155e2e8271f111e7444b4348f79aeaf3cf6bdcad86da5543770fbaddcfbffbbaa6bf2059fed4daa851376051e2ab620ef7308fa874ca0326c479c262736bf7dfde0ec7a36b3b1a20f4941626acc7364916de4b7677c49703e8e169138013ae757d9e1a69a950eb9ed971db994befa9bd5a031370cf93ce0e05a88732b841db03c21913621db142c9c5de1d29a0054475c9b3694b2f4d2d7222b1cbc89335046d351a07c24c6a90710afdf1b41b95198dc6160acb2457a8af4094034781e5acbdc3a7b9dfd188628dddf1d12130bd83b7da8271ff633deabd4322f182caf45ccf7a6cdba76686688793c2a306966f2fc939e8467cc020abfaad3d47e9f4ffbc8eab28c29669378dd08e8bc117d7df6260d33efae064741397596d319082ad92b50704f6dca670cd6956a81e27aee8fc4df38db4a7f81a3a67e3946587b000e03ca4fb556c0c6eaa07560f9023d130704ecb8ad24825e64ca598e5754a37b7a7bd6351ed31e9c12a19cecc0e604a534247508edcaf7833c3bbba4e8452385c12751676bcf3be91f588e9b3447d16227a7798eeaa9e4ca4c4dcdee98feeb89cee726632bd491c0e11af3f197fc26fc0c07bbd25ddad3830b7b1ce3b9e0511c34d6893af4d75be4e218ca33a9b9ee47dc0cda8fe2146f6128a8b5af05cdd3c65ba5855d1d5d4acb497f439b974bbb9fcc015bd57cc4e60725dae6ff5f42cc22b09b8c76feb10d348a"}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r3, 0x3, 0x18}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x7f, 0x43ae, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0)="ae8164e0cea7603c30ddea4517f06655be3108260751b6a8d80ace407065b6fbff55a74b6084e4446a7b33f9ee3314c5d3d4fd51bf11aeb93d25ffa483b2b1de3b5196573a6ef12afb96d832d3ea5d2e64f28af05de16091add0faad94a58285c0391ed9d435f9284dbb9b60509c1a99b788a1c8849745760704073df99be444034ac5", &(0x7f0000000180)="0503", 0x40001}, 0x20) ioctl$KIOCSOUND(r2, 0x4b2f, 0x0) getrandom(&(0x7f00000000c0)=""/8, 0x8, 0x2) 2018/04/15 15:57:54 executing program 3: uselib(&(0x7f0000000000)='./file0\x00') r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xc9, &(0x7f00000009c0), 0x0, &(0x7f00000000c0)=[{0x0, 0x10c, 0x7, "95382bc53a79fab56b6404e8c52913b95e9e2c"}, {0x0, 0x84, 0x0, "9a13377fa0517f495ef1f08fd8078775d6440144aeb7804f6945578c0c800cb0681eaaf85772f861ee42c6b523581a349afba4fd50d99eef95fa69ae338602c847c1b3a6756a3a0e0d7c191d3604d3ae73314feb675d1d522a61a5f4b4de517c7d46a0098592c66e94e05754f020c9c563f1dd5fe553367225213314edfb5c58e485c4cc2d5f669151473e4d8ec2712436bce76a40a7a01940a4798535037eb46011f13d2dde018a3e0cf01bb156ea344c14e29d86a78f675d5286d576632dfe07839a10875339ea"}, {0x0, 0x11, 0x1, "d3cd4581f775dd27ace01c72057cf9b2ad3a1ada0320e614c0bdbfbd1023f10d1eb1112e3da5b4a2711b926f92c8bad32f2f04881c614e017897e5c49a86cb081a0452e22f70d36cf4298c3b13e40c64688066234dad9aa63296f1d51aa5ce2d83a1be0c36a2ad4290d6146d8f97e73c8c11272873ad44d3dbbd2bff1acbdb569878d1bb6aef6ff7093d82e48da62aa942149bf3ea81d5"}, {0x0, 0x11f, 0x4ab, "35a4fe5588716efc6c0e3f4d86c3ae3ab6d3dfb28e32b400e48880f9e460014c50d90bf5f080c95863c6329bc285d4ea4dacdb60fca1d7a23435323fb09e926b5cc757b53ba476b9e4ef1748682453bd6f6991b6aed6258080e8bb4ff019c9a9ed596cba1165e9"}, {0x0, 0x0, 0x1000, "5c6d36dadcbdf91244a16732b2a42d7f6508ba3686f775f31201fa29e98b8f1e75270e514fb7ad1a5f36c8d051dc13f6395547d310c2f63aeddf590b90f910647e7a83346938617f77015593812d02e2c2bccc8447af9d63adf5dbfd33b9aba09b2a3df4b4918ac9c2ee9d1ac8b5df12d538c95005c9e15f86e2450a5963ea2ceef1cb1c4253c62dd735e8b6cd39b21cb76e0c43907b9f9b42c06e89685762daa24e2e266004f6d5bd73d3888cf5fc6a79541dc8"}, {0x0, 0x111, 0x7, "747da0c473530ed3f3ba08bbe77a14"}, {0x0, 0x113, 0x1, "6b838b8a22607964f65c39263c0971"}, {0x0, 0x10d, 0x67, "3336be15146877c8be354911623e0066d4c4ad62b17e2af344b882cdef2f2f22b2f28a4c37641bc9e92ef5f85166feb9101decaf4a9de34afbc888642828f00e2a2efc"}]}, 0x0) 2018/04/15 15:57:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1263, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127c, &(0x7f0000000800)) 2018/04/15 15:57:54 executing program 2: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000002b1a24000000000000009500000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x5330, 0x6f2000, &(0x7f00000003c0)) 2018/04/15 15:57:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1267, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(r1, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/15 15:57:55 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xb9, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) recvmsg(r2, &(0x7f00000002c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=""/94, 0x5e, 0x6}, 0x60) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r2, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0xfff1}, 0x1, 0x0, 0x0, 0x8820}, 0x81) 2018/04/15 15:57:55 executing program 3: r0 = socket(0x10, 0x400000802, 0x0) write(r0, &(0x7f0000ff6fe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0xfffffffffffffd4c) r1 = getpgid(0x0) capget(&(0x7f0000000580)={0x20071026, r1}, &(0x7f00000005c0)={0x0, 0xe7, 0x0, 0x6b, 0x6042, 0x1000}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000ff3000)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x6, 0x1, 0x8001, 0xffffffff80000001, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x8001, 0x8, 0x9, 0x1000, 0x7, 0xd52, 0x0, 0x3, 0x1, 0x2, 0x96d, 0xffffffff, 0x9, 0x7, 0x8]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x3, 0x8537, 0x800, 0x8, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}, &(0x7f0000000100)=0x98) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000280)={{0x889, 0x8}, 'port0\x00', 0x6, 0x20000080000, 0x6, 0x100000001, 0x9, 0x5eda, 0x3948b980, 0x0, 0x7, 0x2}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/237, 0xed}], 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000380), &(0x7f0000000340)=0xffffff60) 2018/04/15 15:57:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x2, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 5: r0 = getpid() r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x100, 0x5, 0x1f, 0x0, 0x0, 0x40, 0x3, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9, 0x0, 0x90000, 0x0, 0x8, 0x0, 0xe2, 0x5d6dc871, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfffffffffffffffc}, 0x10000, 0x9, 0x1ff, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0}) recvmsg(r3, &(0x7f0000005180)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000005100)=""/93, 0x5d, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffffffffffffffff) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 2018/04/15 15:57:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0x2}, 0x8, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)=@ioapic) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xcc, r3, 0x300, 0x70bd26, 0x25dfdbfd, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1272}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa7c}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x8841) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) 2018/04/15 15:57:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127b, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000000080)=@random={'trusted.', 'syzkaller\x00'}, &(0x7f0000000140)=""/75, 0x4b) 2018/04/15 15:57:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1274, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:55 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000340)={0xfffb, 0x2000000000001a, 0x0, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000007000/0x4000)=nil, 0x4000}, 0x3}) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x400000) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x4, 0x6, 0x9, 0x65, 0x0, 0x6, 0x50820, 0x0, 0xfb23, 0x191, 0x10000, 0x4, 0x7, 0x2, 0x0, 0x5, 0x7, 0xd915, 0x3, 0x7ff, 0x1000, 0x6, 0x7, 0x2, 0x2, 0xff, 0xce3, 0x2, 0x9, 0x1, 0x0, 0x20, 0x3, 0x300000000, 0xff, 0x1, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x1002, 0x5, 0x2, 0x0, 0x9, 0x4, 0xac0}, r2, 0x6, r4, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0xc) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x31, 0x1, @tid=r2}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f00000003c0)={{r7, r8+10000000}, {0x77359400}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x401}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000000), 0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r5, 0x9}, 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mincore(&(0x7f0000005000/0x2000)=nil, 0x2000, &(0x7f000000d000)=""/253) symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') mlock(&(0x7f0000004000/0x4000)=nil, 0x4000) migrate_pages(r2, 0x20, &(0x7f0000000140)=0xb97, &(0x7f0000000180)=0x4) 2018/04/15 15:57:55 executing program 2: sysfs$1(0x1, &(0x7f0000001440)='GPL\'eth0/%#,trustedvboxnet1procbdev!vmnet1*wlan1/\x00') r0 = accept4(0xffffffffffffff9c, &(0x7f0000001480)=@l2, &(0x7f0000001500)=0x80, 0x80000) connect$rds(r0, &(0x7f0000001540)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4804}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)=ANY=[@ANYBLOB='?\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="38f8020000000000000002000001"], 0x14}, 0x1}, 0x0) r1 = getpid() ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000001640)={&(0x7f0000001580)=""/146, 0x92}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000001040)='./file0\x00', &(0x7f0000001140)=""/168, 0xa8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001300)=0x0) ptrace$getregset(0x4204, r4, 0x3, &(0x7f0000001400)={&(0x7f0000001340)=""/169, 0xa9}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000010c0)={0x4, 0x5ac71622, 0x6, 0x10001, 0x5, 0x3b, 0x5c34, 0x200, 0x0}, &(0x7f0000001280)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000012c0)={0x2, 0x20e, 0x5, 0x2b0c91cf, r5}, 0x10) fcntl$setstatus(r3, 0x4, 0x2400) accept4$alg(r2, 0x0, 0x0, 0x80800) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) 2018/04/15 15:57:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaff04ffffffff86dd60d8652b00140600fe8000000000000000a11900650a0f7d746600000000000000000000000000aa00004e07de99d76786f629ef28cb905ef6f23c18907b971a65cd73c1da31708e048763eb8059d9b93a7bb55191fc3193770bd84d0d379086bbf5d06fc4f40e8cd999a8544c9ab7eb75a2913f087e3aff7e272e7d2708980d2ff4e657889c4e76269e251aa55a2e2c0741a639ffbd69df23b6ddcd9e4d98a7b77f12fe6a7f13fddc9324bd429120aa8bbc194f44a7bfcfcd83142fc560d04273", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 163.767251] x86/PAT: syz-executor7:14067 map pfn RAM range req write-combining for [mem 0x195000000-0x195003fff], got write-back [ 163.876642] x86/PAT: syz-executor7:14067 map pfn RAM range req write-combining for [mem 0x1ab380000-0x1ab383fff], got write-back 2018/04/15 15:57:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1261, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045877, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r1, 0x3}, &(0x7f0000000540)=0x8) ioctl$fiemap(r0, 0x40086602, &(0x7f0000001940)=ANY=[]) restart_syscall() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) migrate_pages(r2, 0xffff, &(0x7f00000005c0)=0x8, &(0x7f0000000600)=0x8) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0x100) getsockname$ax25(r0, &(0x7f0000000640), &(0x7f0000000680)=0x10) fallocate(r0, 0x0, 0x40, 0x3000000001) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/90) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x5, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="52aa5da65b1111a6377e0653f494ef85d220887dc5d475a73a921b748c9bfa46382a6ef8fe613178f65cf94bb15550c1088918d833b2c5787b019b4dfb25bc2f9145dca63a54c1dc56322e8f0f1fbf9ae5719e0a606e1a46b29435", 0x5b, 0x2}, {&(0x7f0000000240)="2b27aedde9982d872899a85f18d31ff0eadff95b0342f0684303693e235be62b583bdbc7bab228b0f07708e93d5354fa2b2f30113c11288bf6f00aa863084d95c3aca5a29a13d9b66e5b47aa9ec1d095184eb798faba787e5859577bf14316601501ab247c72362d2225fd6b44e842eb72e2fc47b23aae8ad7ed1381d63bf4c8ad00211641e770c471fe394d88c54b920522eef71d533dc9993753602b", 0x9d, 0x7}, {&(0x7f0000000300)="8308038e317c5ab09d637af6eda88074beb32de32b910dcf0a88d90f7f92a1c45dd558341c7e05581e497008c29d83d6873773875ff3f87ec2b5e3834e9bd4bed7e9857effa72f393219e8be4e553088b395e4cbd1619ec1ef16d1fa2a43967928eac713c7cd9122228a30c4c27bc4ff1664dfc21cb0f42a06550a0f3880667713c1d0b6b143", 0x86, 0x4}], 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB="4c6f646907fff006000000"]) 2018/04/15 15:57:56 executing program 2: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000024007f0000001200000401000d0ff6ff010000000000f300f1ffffff1300ff10", 0x24) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000002c0)=0x80, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x22040, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000200)=0x100000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r2, &(0x7f0000000100)='net/netlink\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="ee", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000140)=@l2={0x1f}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000000000000000001ca01a9b5ea151da3dbd75a606e56cab80fab11299a8ab198aa4c47962efeb95f8ebfd81a67217baac9c00b2cdce1af9ec7560c7000000000000000000000000000000b5be"], 0x61}, 0x0) move_pages(0x0, 0x395, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xcd, 0x40002) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280)=0x3, 0x4) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1fffc0000000) 2018/04/15 15:57:56 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000140)) 2018/04/15 15:57:56 executing program 7: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000fb8000)=@generic={0x20000000001e, "01030000000000ff00000000ff03000009bf79df21d60c7bc8790405c7bad62e0a53a632ed4938f50006fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151314a8ef1f183bea5bdb9c8ead2000077aeb81c90001d6d5e980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000bd3000)=@generic={0x1e, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0x80) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xd8a) sendmsg(r0, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f000091d000), 0x0, &(0x7f0000d19000)}, 0x0) 2018/04/15 15:57:56 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 164.571746] jfs: Unrecognized mount option "Lodiÿð" or missing value 2018/04/15 15:57:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40081271, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5451, &(0x7f0000000800)) 2018/04/15 15:57:56 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000ee6000)='./file0\x00', &(0x7f0000000080)="6875676c626673000000b7", 0xfffffffffffffffe, &(0x7f0000000240)="a2a83c1921110ec041368b74e491af4de79eea97ed3d5f95b9ce52ed9ef33ddf483376788883977ae186c0f0e0a803b16e6e4c56e7acff03d68efcf023d7db3bc5921a2ed8a956e43e964f00b4abbf2a4a0dfc0b479fb35697f7556ddc32114550633324ab2d433ee4f102448d997100726eac25f0efd0a3db2bddd16e653755102d186075d399e59374eb4aad2e59cffa788a9abe87c98ff4b55b90c4e3f6ac530338f2f1daa4fcecf738316285fdb0cf20819c2019435f013999ef8e4e5b00809c90996564aa5bfdf72b554cfedd9f6a02f987a5c5d695311eecaa5c467345ac8c2776bc702aa10e20") r0 = open(&(0x7f000041d000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00003cdf66)=""/120, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000002a40)=""/51, 0x33}}, {{&(0x7f0000004080)=@nl, 0x80, &(0x7f0000004440)=[{&(0x7f0000004100)=""/212, 0xd4}], 0x1, &(0x7f0000004480)=""/41, 0x29}}], 0x2, 0x0, &(0x7f0000004740)) 2018/04/15 15:57:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$inet6(0xa, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 2018/04/15 15:57:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4a}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffff001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x245d}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x106, 0x70bd25, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048854) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000001c0)=0x6) [ 164.841804] QAT: Invalid ioctl [ 164.878915] QAT: Invalid ioctl 2018/04/15 15:57:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127e, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1278, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:57 executing program 3: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000001200)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, &(0x7f00002d4000)}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000e00), 0x80, &(0x7f0000000f80)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, &(0x7f0000000fc0)=""/112, 0x70}}], 0x400000000000043, 0x0, &(0x7f0000001180)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x4}, &(0x7f0000000280)=0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x10000005}) 2018/04/15 15:57:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079", 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000040)=""/93) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg(r1, &(0x7f000000ed00)=[{{&(0x7f00000008c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000ac0)="1679a43eb6e93f632ef1d3241014d5bd54a15b8e7dc409ca96c9346cd6236228", 0x20}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000180)=@pppol2tp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/58, 0x3a}], 0x1, &(0x7f0000000500)=""/37, 0x25}, 0x0) 2018/04/15 15:57:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 7: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000002bae979294e2923f7ac651"], &(0x7f0000f6bffb)='GPL\x00', 0x30000000000000, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x40044149, 0x6f2000, &(0x7f00000003c0)) 2018/04/15 15:57:57 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a", 0xb}, 0x60) rmdir(&(0x7f0000000080)='./file0\x00') listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2018/04/15 15:57:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127a, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = syz_open_dev$usbmon(&(0x7f000014a000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x370b}}, [0x0, 0x40, 0x4, 0x10000, 0x1000, 0x101, 0x8, 0x89, 0x6, 0x90e, 0x3ff, 0x0, 0x7, 0x2, 0x588000000]}, &(0x7f0000000200)=0x100) ioctl$sock_netrom_SIOCADDRT(r1, 0x9208, &(0x7f00000000c0)) 2018/04/15 15:57:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = getegid() setfsgid(r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="2e360f350f22d2c4e17d28ffc4c12dc6010e8fe900959c8816e014ab0f30b8010000000f01c1ea150000007100ea0f0000005463c4e3f55f90b4000000cb", 0x3e}], 0x1, 0x0, &(0x7f0000000640), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={0x6, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x88, 0x8300000000, 0x764, 0x3, 0x3, &(0x7f0000000140)='gre0\x00', 0x0, 0x8, 0x8e}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="660f38829ce00000000081660080cc00000f01d13edce00f07660f3881521ec4c1f56b821aea000066baf80cb8e2dd6488ef66bafc0c66b8680066ef8fc96801d12e660f388246e4", 0x48}], 0xaaaaaaaaaaaabe9, 0x0, &(0x7f0000000900), 0x0) 2018/04/15 15:57:57 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800470000600000000000009078fffffffcac142cbb44080600000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000000013c88caf957405812162be83"], &(0x7f0000001400)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xe8, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x297, @mcast1={0xff, 0x1, [], 0x1}, 0x1f}, @in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x80, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, @in6={0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101040) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r2, 0x3}, 0x2ee) 2018/04/15 15:57:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @loopback}, &(0x7f0000000200)=0xc) getsockname(r0, &(0x7f0000000240)=@ll={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000680), 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000940)={@remote, 0x0}, &(0x7f0000000980)=0x14) recvmmsg(r0, &(0x7f0000008ec0)=[{{&(0x7f0000000a40)=@sco, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000d00)=""/7, 0x7}], 0x4, &(0x7f0000000d80)=""/83, 0x53, 0x6}, 0x80000000}, {{&(0x7f0000000e00)=@sco, 0x80, &(0x7f0000001380)=[{&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f0000000f40)=""/155, 0x9b}, {&(0x7f0000001000)=""/217, 0xd9}, {&(0x7f0000001100)=""/120, 0x78}, {&(0x7f0000001180)=""/14, 0xe}, {&(0x7f00000011c0)=""/247, 0xf7}, {&(0x7f00000012c0)=""/168, 0xa8}], 0x7, &(0x7f0000001400)=""/140, 0x8c, 0xd6}, 0x101}, {{&(0x7f00000014c0)=@can={0x0, 0x0}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001540)=""/170, 0xaa}, {&(0x7f0000001600)=""/141, 0x8d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/154, 0x9a}, {&(0x7f0000002780)=""/189, 0xbd}], 0x5, &(0x7f00000028c0)=""/4096, 0x1000, 0x9}}, {{&(0x7f00000038c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003940)=""/105, 0x69}, {&(0x7f00000039c0)=""/155, 0x9b}, {&(0x7f0000003a80)}, {&(0x7f0000003ac0)=""/220, 0xdc}, {&(0x7f0000003bc0)=""/84, 0x54}], 0x5, 0x0, 0x0, 0x7}, 0xb1f}, {{&(0x7f0000003cc0)=@nfc_llcp, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003d40)=""/133, 0x85}, {&(0x7f0000003e00)=""/27, 0x1b}, {&(0x7f0000003e40)=""/215, 0xd7}], 0x3, &(0x7f0000003f80)=""/20, 0x14, 0x791}, 0x5}, {{&(0x7f0000003fc0)=@nfc, 0x80, &(0x7f0000004340)=[{&(0x7f0000004040)=""/148, 0x94}, {&(0x7f0000004100)=""/181, 0xb5}, {&(0x7f00000041c0)}, {&(0x7f0000004200)=""/54, 0x36}, {&(0x7f0000004240)=""/194, 0xc2}], 0x5, &(0x7f00000043c0)=""/7, 0x7, 0x5}, 0x4}, {{&(0x7f0000004400)=@nl=@unspec, 0x80, &(0x7f00000067c0)=[{&(0x7f0000004480)=""/56, 0x38}, {&(0x7f00000044c0)=""/174, 0xae}, {&(0x7f0000004580)=""/110, 0x6e}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/39, 0x27}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/22, 0x16}, {&(0x7f0000006680)=""/176, 0xb0}, {&(0x7f0000006740)=""/49, 0x31}, {&(0x7f0000006780)=""/47, 0x2f}], 0xa, 0x0, 0x0, 0x6}, 0x5}, {{&(0x7f0000006880)=@ll, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006900)=""/171, 0xab}], 0x1, &(0x7f0000006a00)=""/4096, 0x1000, 0x200}, 0x9}, {{&(0x7f0000007a00)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000007a80)=""/164, 0xa4}, {&(0x7f0000007b40)=""/96, 0x60}, {&(0x7f0000007bc0)=""/4096, 0x1000}, {&(0x7f0000008bc0)=""/20, 0x14}, {&(0x7f0000008c00)=""/199, 0xc7}, {&(0x7f0000008d00)=""/77, 0x4d}, {&(0x7f0000008d80)=""/93, 0x5d}], 0x7, &(0x7f0000008e80)=""/3, 0x3, 0xd1}, 0x5}], 0x9, 0x100, &(0x7f0000009100)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009140)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009180)={'rose0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000091c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000092c0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000009440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000009480)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000095c0)={@mcast2, 0x0}, &(0x7f0000009600)=0x14) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000440)) getsockname$packet(0xffffffffffffffff, &(0x7f0000009640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000009680)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000009700)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000009bc0)={'team_slave_1\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000009c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000009c40)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009c80)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000009d80)=0xe8) getsockopt$ax25_int(r12, 0x101, 0xd, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockname(r8, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000009e80)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000009f80)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f000000a680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10e8509d43d20863}, 0xc, &(0x7f000000a640)={&(0x7f0000009fc0)=ANY=[@ANYBLOB="74060000", @ANYRES16=r2, @ANYBLOB="0000006afd57555753250000000008000100", @ANYRES32=r3, @ANYBLOB="a801020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000005400040003000804f8ffffff02008d067f00000081000701040000000800b0000100000005000202ff01000008000700060000000800001503000000060009cd03000000dc3f81020200000002006302000000803800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="e00102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040099ffffff08000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="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", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040000f8ffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400c000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004004f0600003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="4400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r23], 0x674}, 0x1, 0x0, 0x0, 0x4040880}, 0x8000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x72868cb5}}, 0xfffffffffffffdf2) 2018/04/15 15:57:57 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40101283, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1267, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:57 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7f, 0x440940) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x33, "6e3bed9ff74072fbe16b161efef3859e627b6fe2fabb396a17b7203bbe5be55130be53873b8dee30332fc1fe71c95ab473bceb"}, &(0x7f0000000100)=0x3b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x2f9, 0x9}, 0x8) perf_event_open(&(0x7f000000a000)={0x2000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x47f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/04/15 15:57:58 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = memfd_create(&(0x7f0000000000)='/dev/snd/timer\x00', 0x3) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000040)={"3fdca66f415fffed24893b1ede05cc8c7bc727747ce5e5a3bae721095d1c386391fe5c33cc553076b27563e4e920bb3fc8a967ad58a7bf1c2fed1b35bc761e31a6d2ad80ab3b60662d2493067207fbfbd4ce3bc91794be5b62da65ad6d0f3182ae5738f3e786c38a8272c091353606814e22afed3969c1129a56257235b93badf6e4dab207f0473097794415a1c9a69f2ded6175c1dd6da2b82a803641a4ca3db9be6a9b5846687474e85a669081763920f1ceb1f590d02a165e85fe54fe719eea98c00d2f9c978260cb4de182c342f9f78394725bb098eb22ba385f13afd5c6dc8bb30c440d50e34a65913650bde9a0ca67b23b299dc414adbfb573f3d91b3effdb3c8ed5403aff9bace332f18e233ad33f9baf88ff6819fafe049384d136381373d4523a4681307385728859edf64346b7e8454d3a65927373f1ddda04749c4d6efb7dceb2b7fc7b335b52b850ce8b13a414d332109a9e0f46e0aadae12f8559ae13cd4f8fe2089e8c42fa62c89ea1ae66cadd86f9bd4300bddb6c8ec0d0cbbd696c87a2ccbf9fae3e72d8339207d93ef889bdf425ad640200687489652aee7c030c7771675dc4b9cbc3d190dacda3760575b72cc9df1ce6b0ed08b87cebcd18ac8b7683f2592c2645fcc410172d42b1d00f8e32d6034b03faa71771bd116d3ebc5048d9a75fb333d89565159099de7f3370867c77d8796b0444fe1888a773f438709970f36af5f7a3b1f42dc590d166bd1fd98ed5a454aa9bd042e3d34902b586aeb6004c5c33059cf1cda382bf211c18c33ad47c006091a465ff99cef944865500f72bd3ed5f375ca7505319d0022be6ec3ba670e4032da3e5c9ab50260d67ba14563232febe274a64bfafa76eab4c80238fb335329defbf95a0179b2b30a00a999732b77070b964a2c58d4aff99752516c42e62e8ee8dca742e4f52c4aeabeb7934f8548cda899506da7c8560febcb7cd230b2fc3c09f1f7930e1c15d7cfbaff95c3ef053618fa642223fbefd39f0c899c4df4404f3824cb8327e4cc423268b82177e7a079ac4470f49e0185d3e5aa0311225474a17deb30fd60adfcd539ce9cec8cce5ec4c62c66ad47f8fc1c764c3ea662a401d80537ca106f39e637b6a27ca4f7625570520f87d520525cd41854af9096699377fee3dfb057c79499badcf24084824604ac622dbb5bc836ec4ab38912a94f0e79a1fedcf9a296e57d0de6775c27ce17080af11d5d758cf8bf94d03699c559b4cf8bd2bdee891e5df811f20d35dd53565a6226248ef8e0edf72e88950e7d2984ae4e3ab417cc901e64d0771a3e477e65f6422e81d2c7f1dddd853c0bfac4492f39b206940e1bcac0ab9adcf851cb3ee38614ce21adbf97f630be2c58c8056fc33531f6b13d1e3108abba35d4f3c919fe4b331f524ecc58526031bb048773c2cde099b2cbc99ae0a06d9"}) 2018/04/15 15:57:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1260, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070c9, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:58 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x200, 0x28000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x6}, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000200), 0x3f) 2018/04/15 15:57:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={&(0x7f000087fff4)={0x10}, 0xc, &(0x7f0000a40000)={&(0x7f0000b9e000)=ANY=[@ANYBLOB="b8000100210011eae4baa4319470b900e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00110000000000000000000000000000000001e0000002000000000000000000000000000000000000000000000000ff010000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000c001000ff00000000000000"], 0xb8}, 0x1}, 0x0) 2018/04/15 15:57:58 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r1, 0x4, 0x2000) ioctl$int_in(r1, 0x5452, &(0x7f0000affff8)=0x2000003) dup2(r1, r3) 2018/04/15 15:57:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870c8, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x45, 0x1}, 0x3a7) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000f000000000000950000000000000079b6fd257a705a00c80fef1017930cfdd692d3b1c54d6a5784a310951557c8ce1d55a17f209d"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff1c, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r3 = getuid() getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) setreuid(r3, r4) sendmsg(r1, &(0x7f0000001440)={&(0x7f0000000040)=@nfc={0x27}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001240)="19", 0x1}], 0x1, &(0x7f00000062c0)}, 0x0) 2018/04/15 15:57:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870cb, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000f14000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x1) io_setup(0x7, &(0x7f0000a8aff8)=0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x1000200000000, @mcast1={0xff, 0x1, [], 0x1}, 0xab}, {0xa, 0x4e22, 0xfffffffffffffff7, @mcast1={0xff, 0x1, [], 0x1}, 0x400000000000000}, 0x1, [0x8, 0x734e, 0x2, 0x3, 0x400, 0x8, 0x3ff]}, 0x5c) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)='F\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}]) 2018/04/15 15:57:58 executing program 5: msgrcv(0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000340)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000745000)={0x0, ""/4096}, 0x12b8, 0x0, 0x0) lookup_dcookie(0xff, &(0x7f0000000140), 0x0) msgget(0x3, 0x10a) r0 = msgget(0x0, 0x271) msgsnd(r0, &(0x7f0000000000)={0x0, "f484540cba3dff387efe557135a850baf26e5634828eca0400000000003d028f6aab36d33d3400000bf033dc8e51c5143e62324504ad0100bab32aa23759801801b0ac3f42448efc03ac4c9a6f240b09c2c2f8a4b1f7f0138678d58d437b5f0215e77bbfaafd46ed3a4499f8e6bcf7c370fbf77ee2de8a5a4d19cac5ea59ee204b9bbef1ba84cb0d9c45c932e561c6d90f52520bbf206df4fd18d2c3db1af57e0ed822f800edac941737a7d034c4ff3b5f00841728ca881c8e5e341a146be312715eef6b3d73722b60dcb8c1f4eaed94609568f3a83aa922d207eebefa03511585c3ea51b8e2e9364e1d3d3f4b03ce00000000000000000000000000"}, 0x104, 0x800) 2018/04/15 15:57:58 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127a, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5460, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia-generic)\x00'}, 0x58) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x200, 0x70bd26, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfddc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) 2018/04/15 15:57:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)="05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x4, 0x9b8, 0x5205, {0x0, 0x1c9c380}, 0x3f, 0x3}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x7fffffff, 0x1, 0x9, 'queue0\x00', 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffffffffffffffb8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x32, @tick=0xfffffffffffffffc}) 2018/04/15 15:57:58 executing program 5: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000000000000052f2da071edde50384bd15f100000000"]) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl(r1, 0x1, &(0x7f00000000c0)="1b1d6584") r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bcsf0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000bc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000d00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000001080)=0xe8) getsockname$packet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000011c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000012c0)={@remote, 0x0}, &(0x7f0000001300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@rand_addr, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001c40)=0xe8) accept4$packet(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001cc0)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001e00)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001e40)={0x0, @rand_addr, @rand_addr}, &(0x7f0000001e80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11040}, 0xc, &(0x7f0000002400)={&(0x7f0000001ec0)={0x510, r2, 0x102, 0x70bd2c, 0x25dfdbff, {0x1}, [{{0x8, 0x1, r3}, {0x16c, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x1d0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0xea8b, 0x1, 0x7, 0x100000001}, {0x7f, 0x7fff, 0x9f7f, 0x5db43601}, {0x3, 0x80000000, 0x10000, 0x8}, {0x9, 0x3, 0x20, 0x8f41}]}}}]}}, {{0x8, 0x1, r11}, {0x4, 0x2}}, {{0x8, 0x1, r12}, {0x19c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x500000000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xde}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r14}}}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2018/04/15 15:57:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127f, &(0x7f0000000800)) 2018/04/15 15:57:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1268, &(0x7f0000000800)) [ 166.702802] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 2221219099 > max in inode 16537 [ 166.749015] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 2221219099 > max in inode 16537 2018/04/15 15:57:59 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x20000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1ff, 0x80, 0x4, 0x4, 0xfffffffffffffffe}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xff1, 0x200, 0x9, 0x81, r1}, 0x10) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x40501) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0xfffffffffffffffd, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000180)={0x1}, 0x8) socketpair$inet(0x2, 0x6, 0x9834, &(0x7f0000000080)) 2018/04/15 15:57:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1276, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2040, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x9, 0x1, "13"}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x8, 0x80000000, 0x1, 0xfffffffffffeffff, 0x5, 0x6}) keyctl$session_to_parent(0x12) 2018/04/15 15:57:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5450, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, r0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000ce000000000000000000e7544cb90000"]) 2018/04/15 15:57:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f000067f000), 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e23, 0x80000001, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x9}}}, 0x88) socketpair$inet6(0xa, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)=0x24) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x301040) sendmsg$nl_netfilter(r3, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x1194, 0x1, 0xf, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@generic="3a215b19253d1e652c4cfe9d5913146ca25a176f10252403ed6be279a9b6282bc5dc999edcdf0b97089e7848fc036c8c2a3b0f46c56dbad668ac76780d2e356eb68cad8a69d1113f5597978c66632f5782ab5098f93efba30130b170849e9a65ffdeb05a9ad2a2911b618792ae402ad3bf6528d1df83c3e529c7b693172b3d110b9e8f8d3d38cce5c31a354480d2c6db1e392dfd8d11561f6c0a49abf14946b99610a9e5b56b484525e55eb8e846cd615635b0625fa9bffa0e479854c4d2633a2600c1cea3060c8573a7c1", @generic="78ce893e6a5061de300cdfd99f4c6054db7faf7f448a9d93f4f57dd781249b5572319a49261f2288e2707185e12e1c4cb7e6528b894133a0498a527cbad121606bc3690671663a197a825c8f491b6f5a3013528198e8510d85de43abf8e0b9ad4e4962e0f719f2958aad68481e730267ec1e5b7bcfbe3e47d90bdd644759d3b5090c03add735eb4b8f9992bb5f800de21eee4e04ebdb938e", @typed={0x4, 0x1b}, @typed={0x14, 0x81, @str='/dev/input/mice\x00'}, @generic="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", @typed={0x4, 0x27}]}, 0x1194}, 0x1}, 0x1) 2018/04/15 15:57:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1265, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 2: unshare(0x40600) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendto(r0, &(0x7f0000000000)="50abb5d1fdcc11966c8c7b1cc3a59d0e97620620181b3ab00bd5c7006e08e62308152da70732e55319711eef06bfc618270b807e21a231ba972f799caaa1a22d42b9d531bf672f17da4aa1fa0407e180f76e6b8f8f8b5eb962773994f72e10b1a0afa7004beaf806ddc3553d626ee810094da60b2b532bf1db71462842b011075e9c2ac6ae8f0a588407b6ab582371222217570e55", 0x95, 0x0, &(0x7f00000000c0)=@l2={0x1f, 0x5, {0x8, 0xfa6, 0xffffffffffffffd3, 0x4, 0x1000, 0x7}, 0x100, 0x5}, 0x80) prctl$setendian(0x14, 0x1) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/138}], 0x0, &(0x7f0000000680)=""/130, 0x0, 0x101}}, {{&(0x7f0000000740)=@ethernet={0x0, @random}, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/145}, {&(0x7f00000008c0)=""/53}, {&(0x7f0000000900)=""/242}, {&(0x7f0000000a00)=""/106}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/60}], 0x0, 0x0, 0x0, 0x3ff}, 0xffffffff}, {{&(0x7f0000001b40)=@nl=@unspec, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/244}], 0x0, &(0x7f0000001d00)=""/168}, 0x8}, {{&(0x7f0000001dc0)=@nl, 0x0, &(0x7f0000002340)=[{&(0x7f0000001e40)=""/88}, {&(0x7f0000001ec0)=""/29}, {&(0x7f0000001f00)=""/36}, {&(0x7f0000001f40)=""/120}, {&(0x7f0000001fc0)=""/187}, {&(0x7f0000002080)=""/238}, {&(0x7f0000002180)=""/95}, {&(0x7f0000002200)=""/64}, {&(0x7f0000002240)=""/96}, {&(0x7f00000022c0)=""/72}], 0x0, &(0x7f0000002400)=""/127, 0x0, 0xbc31}, 0x9}, {{&(0x7f0000002480)=@in6={0x0, 0x0, 0x0, @local}, 0x0, &(0x7f0000002580)=[{&(0x7f0000002500)=""/94}], 0x0, &(0x7f00000025c0)=""/100, 0x0, 0x61b8}, 0x80000001}, {{&(0x7f0000002640)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x0, &(0x7f0000002d40)=[{&(0x7f00000026c0)=""/223}, {&(0x7f00000027c0)=""/186}, {&(0x7f0000002880)=""/239}, {&(0x7f0000002980)=""/179}, {&(0x7f0000002a40)=""/150}, {&(0x7f0000002b00)=""/240}, {&(0x7f0000002c00)=""/151}, {&(0x7f0000002cc0)=""/58}, {&(0x7f0000002d00)=""/63}], 0x0, 0x0, 0x0, 0x736f}, 0x7fff}, {{&(0x7f0000002e00)=@generic, 0x0, &(0x7f0000004280)=[{&(0x7f0000002e80)=""/253}, {&(0x7f0000002f80)=""/162}, {&(0x7f0000003040)=""/56}, {&(0x7f0000003080)=""/119}, {&(0x7f0000003100)=""/97}, {&(0x7f0000003180)=""/141}, {&(0x7f0000003240)=""/24}, {&(0x7f0000003280)=""/4096}], 0x0, &(0x7f0000004300)=""/159, 0x0, 0x9}, 0x5}], 0x40000000000009d, 0x0, 0x0) 2018/04/15 15:57:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127e, &(0x7f0000000800)) 2018/04/15 15:57:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) 2018/04/15 15:57:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x61c000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x100000001, {0x2, 0x4e23}, {0x2, 0x4e22}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x40, 0x0, 0x6, 0x6346, 0x3f, &(0x7f0000000100)='bcsh0\x00', 0x2, 0x7ff, 0xf51e}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x503000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) fanotify_init(0x14, 0x40001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x7) 2018/04/15 15:57:59 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}], 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/15 15:57:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1269, &(0x7f0000000800)) 2018/04/15 15:58:00 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in6={0xa, 0x4e24, 0xdab, @dev={0xfe, 0x80, [], 0xa}, 0x1ff}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @loopback=0x7f000001}], 0x6c) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x0, [0x5, 0x3ff, 0x8, 0x8]}, &(0x7f0000000200)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x8}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x91) 2018/04/15 15:58:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1260, &(0x7f0000000800)) 2018/04/15 15:58:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:00 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x200, 0x40002) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 2018/04/15 15:58:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000012000), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="f6737dac45156a6f1476b2b73d4fdcb14e74cb5f5c4a00003ee5c87f0002"], 0x10}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/15 15:58:00 executing program 5: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='::.ile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) personality(0x5000004) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x800) recvfrom$unix(r0, &(0x7f0000000140)=""/34, 0x22, 0x40002002, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 2018/04/15 15:58:00 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 168.235973] libceph: parse_ips bad ip '::.ile' 2018/04/15 15:58:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870cb, &(0x7f0000000800)) 2018/04/15 15:58:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1265, &(0x7f0000000800)) [ 168.258807] libceph: parse_ips bad ip '::.ile' 2018/04/15 15:58:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 7: r0 = socket(0x2, 0x1, 0x6) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/04/15 15:58:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870c8, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 5: setrlimit(0x6, &(0x7f0000000000)={0x80000000, 0x8}) r0 = socket(0x40000000016, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'ifb0\x00', @ifru_flags=0x7a03}) setreuid(r1, r1) clone(0x0, &(0x7f0000e02000), &(0x7f000006fffc), &(0x7f0000e9cffc), &(0x7f0000cd6f68)) 2018/04/15 15:58:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f0000000340)=""/146, 0x92}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0x186, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000054e684952c1e7ff06010200000000000000000280020100000000", @ANYRES32=0x0], 0xfffffe73}, 0x1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x1c}, 0x1}, 0x40000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$int_out(r3, 0x5462, &(0x7f0000000480)) 2018/04/15 15:58:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127f, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2000) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x200000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140)=0x6, 0x4) 2018/04/15 15:58:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c09, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000000)=@ipv4_getaddr={0x18, 0x16, 0x223, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getneigh={0x30, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x800, 0x8}, [@IFLA_LINKMODE={0x8, 0x11, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x8005) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000040)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=""/166, 0xa6}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x42, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000240)) 2018/04/15 15:58:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002100090a00000000000c0014000000fe279c0b677e73c140d86bdfdf46000000000000000000000000000000"], 0x1}, 0x1}, 0x0) 2018/04/15 15:58:01 executing program 2: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f00000054000d0000000000fc07ff1b0702000008000000070001ff5450d9", 0x1f) socketpair(0x1b, 0x80000, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000040)={@ipv4}, &(0x7f00000000c0)=0x14) 2018/04/15 15:58:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c90046b66732e66617400020401000080027400f8", 0xfffffe44, 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64, @ANYPTR64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0dd2", @ANYRES32], @ANYRES32], @ANYRES64]) r0 = open(&(0x7f0000000300)='./file0/file0\x00', 0x800000000002040, 0x0) open_by_handle_at(r0, &(0x7f0000000540)={0x8, 0x1}, 0x0) [ 169.444125] PF_BRIDGE: br_mdb_parse() with non-bridge 2018/04/15 15:58:01 executing program 3: r0 = socket$inet6(0x10, 0x80802, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10e, 0xb, &(0x7f0000000bc0)=@nat={'nat\x00', 0x1b, 0x4, 0x380, 0xf0, 0x1c0, 0xffffffff, 0x1c0, 0xf0, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x4, &(0x7f0000000fc0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0xf, 'REDIRECT\x00', 0x0, {0x0, @ipv6, @ipv4=@rand_addr, @gre_key}}}, {{@ipv6={@dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3}}, {{@ipv6={@dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2=0xe0000002, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3e0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x18200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x4400, 0x0) fstat(r0, &(0x7f0000000300)) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) getgid() sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="81961512b365b3298da4ef247d2af2d83e22771887f32cd2218b963bf19b3cc77c5364791e8efd30a8024d99c0fe8926d65324e312c8f1e1c63cd831d49f4768d1284c75964037d32aaeba880983a2e90a225faba0a299926af1af3a6dadfbc68db727d1f25646eac9dcb24a79d25159731a1d39478e3406269360e37dca0e28371556a34a3f1531f615dd50aa099d464878ebd3d807a987635832e78d24cc44f7fc15f2e6bbd651287ad29e47335d19ba0597c9c78f3590b905a048c6e271bddcafc0ce958f8a7db78ba9b86df106ec67531b283a27950d47d077802596aede56d140afdb687ae5051e1455f802f5e3bad46f09a8bbc0", 0xf7}], 0x1, &(0x7f00000004c0), 0x0, 0x40001}, 0x4000) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000001800030007fffd946fa283bc8020000000000006031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/15 15:58:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1263, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401870cc, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000006f80)=[{&(0x7f0000006a40)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0b8481dc9ba68657bf140526b33d582063efd32ee50e5df80133129367e8675e7f9e9d619aa50a5ef29ae63282692ace42e20c5758719f963782fedb62dd2a"}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000280)="252d2079a6377bfc951da2f6ef5465e1b67ff5dba6ce0106b68ccedd06605342a772da6b13086b2c26ca4d02ccb3f4364e1c53fcd0d2d1c77d6fa53db7743256b2b3a94d9a7a243be9eca85747cf6b9a97939efc18e0c94659044f3468202183e3927a1e4e70008fddfe62ab6948c6333a0ce45c65a676b1667b85962c649bb14e", 0x81}], 0x1, &(0x7f00000000c0)={0x10}, 0x10}], 0x119, 0x0) [ 169.541718] PF_BRIDGE: br_mdb_parse() with non-bridge 2018/04/15 15:58:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000e91000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x18}, 0x4000) recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000002c0)=""/193, 0xc1}], 0x5, &(0x7f0000000140)=""/151, 0x97}, 0x0) 2018/04/15 15:58:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0045877, &(0x7f0000000800)) 2018/04/15 15:58:01 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000680)=""/99, 0x63}], 0x6, 0x0, 0x0, 0x5a4}, 0x0) recvmsg$netrom(r0, &(0x7f0000000980)={&(0x7f00000007c0)=@full={{0x3, {"8cbda83d851202"}, 0xd0c0}, [{"9cec443052dd25"}, {"d9e6c0de365a53"}, {"fbcdaecd4139e7"}, {"c68927f0e63046"}, {"30f556c06bb137"}, {'Z/Df\vHL'}, {"dea9814f6f745f"}, {"e866b83475dfa8"}]}, 0x48, &(0x7f0000000940)=[{&(0x7f0000000840)="656932b92f6dab11f6e6be23ca49df848fad36922da137d8c93f2c565224a59b6041a4b380ae13bae8bec68fbd8883ecc6d6f958289f28e96d08152b68", 0x3d}, {&(0x7f0000000880)="350e753149b69b317067e6345796e47654d1753c23e4feeffe", 0x19}, {&(0x7f00000008c0)="de5e4487dbf3a09b2405ee58630cca77d09663ca5097fc915e132819fdc092899f553bb9fdd01b56ef7faf13a8499254add8838475af71e066cbf4a368210945afca86c6c49b5ae8dd0eb8bdc3cd3d12cfcaef0f0f0b3fe49ecb1a66d07457a5c3c8807b7daae4d428eda911864addc32dbc", 0x72}], 0x3, 0x0, 0x0, 0x14}, 0x40000000) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000180)=0x80, 0x80000) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000009c0)=""/4096) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200)=0xa62, 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000140), 0x4) 2018/04/15 15:58:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0)=0x3, 0x4) ioctl$TCFLSH(r0, 0x540b, 0xfff) ioctl$TCXONC(r0, 0x540a, 0x3) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x8}, 0x4) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/217) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file1\x00') r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) [ 169.836420] FAT-fs (loop5): Unrecognized mount option "@" or missing value [ 169.996884] FAT-fs (loop5): Unrecognized mount option "@" or missing value 2018/04/15 15:58:02 executing program 2: r0 = memfd_create(&(0x7f0000000000)="13", 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x413) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x40000000}) fcntl$notify(r0, 0x402, 0x4) 2018/04/15 15:58:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127d, &(0x7f0000000800)) 2018/04/15 15:58:02 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x60000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/196) r1 = socket(0x11, 0x100000802, 0x0) recvmsg$netrom(r1, &(0x7f00000004c0)={&(0x7f00000000c0)=@ax25={0x3, {"bc2ee3ab0a3522"}, 0x7}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)="80717c3a13c27d49592930417645df89fa15fa954f7f002e8f22c7231472d97e70eccbb2d50db9f0bb2ab7cefd57249ab136c7fb268d43005d16da4de8730035a868061dfd579e1fca2c6d5450753e8949aed63161d47bb928ee4984fa3d8d2b13f9cff5e308ab9903e7f020cc270cd4e5f8c9c8849a5a5a96d9fbbfc7063953a0159daf903c6376c3fa405264119411df1345fc1a01934043e3433ada23b35e8aa99b86a6699751d9a75d6076feb9", 0xaf}, {&(0x7f0000000340)="327179e6bb01cb79f845384a86c47fedb0ab704ae2b0c3930090d5db603bb6b48616780f83b520d53a78d6cb2ec5f4b63a07fd22ecdf01bc76d38c45db540fb132e63ff4d0682e5c865313088e60f1f9b695c03acb12c36a97864a9d1b2e6719b22aaca7bed4732f184dfa8a55ca6f3730a828378758ca6ebc781947ba0e3ac0149f4c60e9c7a1ae82ba75568143eb70aa8ef09a4f77b1097241438401a90eabdab1bdb82ec70605fe840339c6ca10fe85d2bb3050d2532c074d8d0bd5312dc637febe4d47147611d47d53ea1dbe0865430cf2e1825bece4362f3778c4d754a98f944dc23986f5cb", 0xe8}], 0x2, &(0x7f0000000440)=[{0x50, 0x108, 0x2, "a082229d85f3aeca009fbf0e4768b753436936d563a9714c70850af86486fd8cdfb62f59703dc0c6b4c730a853159e5481d02c8e86c1bc8759d9"}], 0x50, 0x40}, 0x103) fcntl$getownex(r1, 0x10, &(0x7f0000000600)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000640)={0x1, r2}) r3 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ipddp0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) getsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000500)=""/157, &(0x7f00000005c0)=0x9d) 2018/04/15 15:58:02 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) msgget(0x0, 0x200) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/4096) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x4, 0x0, 0x0, 0x0, 0x0, "6cb78209ad88b89d1fd309169f44812107130ee55da30510420aaa96759ecbc36eb9bb12b6126793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0xb) 2018/04/15 15:58:02 executing program 5: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000), 0x4) ioperm(0x1, 0x9, 0xfffffffffffffffc) 2018/04/15 15:58:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1264, &(0x7f0000000800)) 2018/04/15 15:58:02 executing program 5: move_pages(0x0, 0x7, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000080), &(0x7f00000000c0), 0x0) kexec_load(0x0, 0x2, &(0x7f0000000040), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="00e4e58dce6a0b5bd83660bee6d5efd4e7c5e719d0ecb34c9c24307a1edbaea9ade49f042390083615d221e0184305c60da532fdc20ee862323d17e811de08", 0x3f}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="77fa43daed1897b6e228522b823f764d331a9706f8ad43e646a9b6d3a74b7f0928f1a36b85acfc0864e143d4356c9dd224efdbc435e2c78d5d144a", 0x3b}], 0x3, 0x0) 2018/04/15 15:58:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc0481273, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 3: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000180)={0x2, 0x8, 0xf3}) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) r1 = geteuid() syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x6000, r1, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x300020, &(0x7f00000000c0)=ANY=[@ANYBLOB="14382d4b9c5a242b3c"]) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x200, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$sock_bt_hci(r0, 0x400448ef, &(0x7f00000001c0)="a267015e") bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081270, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x40}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x100000000, 0x0, 0x7, 0x2, 0x1, 0x1, 0x1000, r2}, &(0x7f0000000200)=0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"73c23fbae778bb000000092000", &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000007000000000000000000000000000000501c82730000000000000000000000000000000036"]}) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e74e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x60}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@ldst={0x3, 0x1, 0x7, 0xf, 0x0, 0x41, 0x5}, @jmp={0x5, 0x2, 0xd, 0x7, 0x7, 0x30, 0xfffffffffffffff0}, @ldst={0x0, 0x1, 0x0, 0x4, 0xf, 0xffffffe6, 0x8}, @map={0x18, 0x15f41d7f0fe764e5, 0x1, 0x0, r0}], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x4a4, &(0x7f0000000300)=""/251}, 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x500, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x6f2000, 0x6f2000, 0x1, &(0x7f0000000040)) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x127c, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x301, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 3: mq_open(&(0x7f0000000900)='-$\x00', 0xbeb64e84efe2069f, 0x0, &(0x7f0000dfdfc0)) r0 = accept$ipx(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x48400, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) 2018/04/15 15:58:03 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x76, "f2eeefd380699b018b17514538708772bb33aa3b5147292919775739f36c7971f4101cd4596cb9f7fe918e8ab41daecb48c65e3e1ecf64c09097824271c2a8e2283b5c7feeb83a0c77d47e7f6372f374f67b6ba80ea56f8dd010e1ccfd84093717d4566c873ffef1c0f51aa5abc618e06e5896540e99"}, &(0x7f0000000240)=0x7e) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r1, 0x0, 0x7, [0x3, 0xfffffffffffffff8, 0xffffffff7fffffff, 0x9b, 0x9, 0x9, 0xc591]}, &(0x7f0000000300)=0x16) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@local, @remote}, &(0x7f0000000440)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'yam0\x00', r3}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x9, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r5, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000007c0)={@remote={0xfe, 0x80, [], 0xbb}, r4}, 0x14) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 2: clone(0x200, &(0x7f00000003c0), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000000c0)) mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000340)) read$eventfd(0xffffffffffffffff, &(0x7f00000004c0), 0xffffff00) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x62101, 0x0) 2018/04/15 15:58:03 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000040)=0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x80}, {0x0, 0x1}, 0x0, 0x4}) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x240400) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="6cfc88cded1ad0bdf1c52e90e546ef88c7132198eeea93e8606410934f89a894a3e7e1501334c82422c58d1e8db30bfcf335", 0x32}, {&(0x7f0000000100)="560727a6f0c2978bd5dca16e2b1470e74e6a7d", 0x13}, {&(0x7f0000000140)="876d33cb7d5139fd54701166b5aa31d80e038349a62f60", 0x17}, {&(0x7f0000000240)}, {&(0x7f0000000280)="fd4dd2584eecbdcee4090befb11c95f9f85ae019d7fa9634d470a79b30f7e956e8cafe4f07ed133ead68ef31dff6513962eecadcaad4bc8454a9a7397d30ca50148887f4ce2153a992fbee1eed0d721c0e1f14b5bade49be93a8e6525b3ef9fceefb271acd1dd981f6d68c2b440309195587a65a6f6e66c06b675d4ea63cfeea032662908783a892e16e6852d95c827d39bc910906d6abe37066140f39a8b45b3385bf33fd1f30048226f6fd62a4754da442c460523f886717db11605c8aebfc59f4dbd9c89a0493b6ec0f9b426ee88010217c30dc7508f7556216b46e3fa55c1d4f6b", 0xe3}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="680000000000000017010000020000004e000000bb2e4dde2ff2c94318f7be931c6c093e60590412f684ae49c63bd0112869c94de8fa06db67dceae32078d4113f03e11fff399fdf4fc6ba1d386dd92acaa7cea75c4a5683c19182d4e5b53716735900000000000010010000000002000000000002000000fc000000e6d66fc69021502f0daf60d1aa6842de7be05c7a3367236c32cf7590b0265bf80ad97e6e0bb1bc4bf510cf571e4a8c09a984ca3322c5d201876d54f33fb87f06902f37df62378fca7f07ce6f34ee9c388c97938ea186173ac74c5caba9bed91244e45c7d3b5c68d1dad623f3dba1b21b4107ddb1b453c312a3c3ec722f9f56873b29b5817a50ee4824ff740ee4e3e9c067fe4a257fc3016063a9a45109a920d00278de13ea76764be229938d78d1f8fa8f1e6b7eacb422b60c4099fd27a3dc5f8161badbb7bfb652e9b5af584bfdef8450e1cb26181d9c345924307638fd19d7918faac2492dfd18e99df6d6cd216fd20b35921526d910245f14caec18000000000000001701000003000000000000000000000098000000000000001701000002000000820063334f9ee08dd34c4d20d4c437a28806d93e876fd52eb1e90ddc90e7d1e9bfa3d2881664703e8b1d614d7e0b6503f98a9b0404a9162c0ee7c9ee531efcb044b4c21c79ad9d00d77442077d66e8f6c10e2e309c997d955cb2a32bb84346dfc615c359f19aa0c2bc1b7efe5350d50162d269ef586a87e69090023d99355b0194621bab00001800000000000000170100000400000008000000000000001800000000000000170100000300000000000000000000002800000000000000170100000200000013000000676eb88a93a575ee7e6ee374a44f511db6a58600180000000000000017010000030000000000000000000000480000000000000017010000020000003000000028f99b8a8f3954523b9668b032dcec3069395b425e0f9e58133207e7a7754032b82e2b2603557ec35e500464f8164a070000000018000000000000001701000003000000010000000000000000000000000000eed2d1dce774616992c8fcf650bca81fed2d50601759728168c4d7eb67f0382317acf0e9446dd26c37dc454fcb21436d7d4405e3495055213c16f057d98e9895af685334054644f05f62d5164ace4bd57a4dbe65889f4f81cba72cf62d5d0b6e96bf263c40482a7d5dcd70374ccba45a4b5bae7fd1dd1aaca3"], 0x2f8, 0x4000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) move_pages(r1, 0x3, &(0x7f0000000240)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000480)=[0x0], 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1274, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000fdfe8)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000090a000)={0x58, 0x0, &(0x7f00000d6000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000a09fb0), &(0x7f0000711000)}}}, @free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000f97fde)}) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x1, 0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d4, 0x8, 0x80000000, 0x2a, 0x3, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x38}, 0x1}, 0x0) 2018/04/15 15:58:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 171.488297] device bridge_slave_1 left promiscuous mode [ 171.493944] bridge0: port 2(bridge_slave_1) entered disabled state 2018/04/15 15:58:03 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:03 executing program 5: r0 = socket(0xa, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xe1}, 0x10) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) [ 171.548072] device bridge_slave_0 left promiscuous mode [ 171.553659] bridge0: port 1(bridge_slave_0) entered disabled state 2018/04/15 15:58:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 171.714887] IPVS: ftp: loaded support on port[0] = 21 [ 171.736992] team0 (unregistering): Port device team_slave_1 removed [ 171.762708] team0 (unregistering): Port device team_slave_0 removed [ 171.778851] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 171.809061] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 171.838507] bond0 (unregistering): Released all slaves 2018/04/15 15:58:04 executing program 2: r0 = socket$unix(0x1, 0x80000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0xff, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x800, 0x5, 0xffffffffffffff83, 0x1, 0x8000000000000}) listen(0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0xffffffffffffffc8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)="e91f7189591e9233614b00", r2, r3, 0x800) [ 172.515341] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.521764] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.529592] device bridge_slave_0 entered promiscuous mode [ 172.567294] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.573712] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.581529] device bridge_slave_1 entered promiscuous mode [ 172.618808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.655715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.765169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.805521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.975458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.982897] team0: Port device team_slave_0 added [ 173.013504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.021120] team0: Port device team_slave_1 added [ 173.058512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.065687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.080931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.104438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.142957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.150282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.158895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.194303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.201405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.211059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.424875] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.431259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.437889] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.444246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.451538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.985152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.243609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.324832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.401754] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.407968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.416865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.490608] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/15 15:58:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="06fa60ef0000e9fc49"]}) sendmmsg$alg(r1, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002740)="c1", 0x1}], 0x1}], 0x1, 0x48001) sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/15 15:58:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8001, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x8000) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000001c0), 0x4) keyctl$clear(0x7, r0) 2018/04/15 15:58:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x40004e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1d}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="93bb9d804123", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 2018/04/15 15:58:07 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) pipe2(&(0x7f00000000c0), 0x84800) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}, 0x98) [ 174.931523] binder: 14950:14952 BC_FREE_BUFFER u00000000204edf8a no match [ 174.939275] binder: BINDER_SET_CONTEXT_MGR already set [ 174.945680] binder: 14950:14953 ioctl 40046207 0 returned -16 [ 174.952877] binder_alloc: 14950: binder_alloc_buf, no vma [ 174.958721] binder: 14950:14952 transaction failed 29189/-3, size 40-8 line 2963 [ 174.975154] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 175.017554] binder: release 14950:14952 transaction 43 out, still active [ 175.024536] binder: unexpected work type, 4, not freed [ 175.029862] binder: undelivered TRANSACTION_COMPLETE [ 175.035004] binder: undelivered TRANSACTION_COMPLETE [ 175.040219] binder: send failed reply for transaction 43, target dead [ 175.046854] binder: undelivered transaction 46, process died. 2018/04/15 15:58:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) 2018/04/15 15:58:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 7: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x2, 0x0, 0x1, 0x7, 0xfffffff4, 0x9f630f0331c1db53}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x6f, &(0x7f0000000180)=""/111, 0x41100, 0x1, [], r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x16}, 0xffffffffffffff54) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x6f2000, 0x400000, 0x400008, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x80000000004, 0x40000135}, 0x2c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x6f2000, 0x6f2000, 0x1, &(0x7f0000000480)) 2018/04/15 15:58:07 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000cc0)={'syz_tun\x00'}) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x1a}, &(0x7f00000003c0)=0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, &(0x7f0000000400)=0x3) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e1f, @broadcast=0xffffffff}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6f696a0008000000000000000000030e9c552a28b528e766ec198b0477fb5e14d4bae351c98d2952163a535384e5be113289d5d1365157252131a57994e6f5ebc83e9522e2f8cc898bc6b346b7311e800000000000000000000"], &(0x7f00000002c0)=0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000880)=@get={0x1, &(0x7f0000000700)=""/236, 0x6}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000900)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=r5, @ANYBLOB="d200000080ccc3877addf46b3fb87e84bd5cf01fb739c00149f80081c4c69cd7ca8d37fbb5b4c877e5fd27942e5fc9d3b58b1cd855e57c6b39d7de89195da1937c882279057d44de5383315df1d24887de08240943c7c5c3b0e119647d9ce08f257672f393093fa803ed2d3d83da997dc096adeb8b1b4cd6c655c50e2cbb32e6877fa8170903dc516e78dc03000000300000e1e5fa608370fa38356a8f71f8f99d3248bd994cc81b0de9801979772bd9b0bf4b85b0b8813e6001ba6076445272b7ca3c1490d74f248a17cf3c0139fcf8000000000000adceb576780000009086f7"], &(0x7f0000000940)=0x2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100fffe}, 0xc, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = socket(0x10, 0x2, 0x10) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000200)={'syz_tun\x00', 0xb6}) write(r8, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000600010423dcffdf00", 0x1f) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, r9, 0x20, 0x70bd28, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000480)={0x0, 0xff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000500)={0x9, 0x7bf, 0x8, 0x9, 0x4000, 0x8, 0x80000001, 0x6f, r10}, &(0x7f0000000540)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000001c0)={r11, 0xfffffffffffffff7, 0x9, 0x20, 0x7, 0x6d}, 0x14) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r12, 0x4010641a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) 2018/04/15 15:58:07 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x22002) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') ioctl$TUNSETLINK(r1, 0x400454cd, 0x33f) sendfile(r0, r1, &(0x7f0000000080), 0x100) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=""/81, &(0x7f0000000180)=0x51) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) tkill(r2, 0x5) 2018/04/15 15:58:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x7, 0x105040) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)) io_setup(0x3ff, &(0x7f0000000080)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x208000, 0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="cdbb5efd6bc2628336838416205ecd85dd57bddc703d2ccf7b54b7d1b1ecd780751595469c59996b5c512f7e449c774b1f7438cecd4c806ea882790240cf28dc77", 0x41, 0x4, 0x0, 0x1, r4}, &(0x7f0000000240)) 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffff81, {0x9, 0x14d1, 0x7, 0x10001, 0x180000000, 0x1}, 0x50a5, 0x100}, 0xe) 2018/04/15 15:58:07 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80004, 0xfffffffffffffffc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000100100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0xffffffff, 0x2, 'client1\x00', 0xffffffff80000000, "c0d332596c5b5619", "ff6b6848196c3fcf4f99c9386f2df79f92f105354367a112b9e2159f9d505bd7", 0x0, 0x8001}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r1, 0x0, 0x1}, 0x14) 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0xa, 0xa, 0x4, "d29990ce253378f5630154581e44bb1720da966c13eb8079495a1b68e2e57058d6b99cd24f5b1d0507581ec0d566d8aea5021ad1781a5442732af0a06cd60aa3", "93e12fddfe81554dd15080bf4aae3b3b459175a35448481a2a1d543750ae1ee261fe3f8691c7e2b64822170f6fb6ec3764ea6abbd54f44f8177db7ac337def6c", "bd8aa0871fb1a6d35583a7d3fa23ddb648ff1a485edffbf54165334c6a703510", [0x1ff, 0x81]}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x8, 0x30, 0x2, 0x48e}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x6}, &(0x7f0000000440)=0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x7, 0x1, 0x8, 0x100, 0x8, 0x7f, 0xad0}, 0x0) r4 = msgget(0x2, 0x1a0) msgrcv(r4, &(0x7f0000000300)={0x0, ""/49}, 0x39, 0x30160d95cfaf0d63, 0x1000) 2018/04/15 15:58:07 executing program 3: r0 = gettid() exit(0x0) capget(&(0x7f0000000480)={0x20071026, r0}, &(0x7f00000004c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 2018/04/15 15:58:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000180)={0x100000000, 0x2, 0x0, 0x0, 0xfffffffffffffff9, 0xf21}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/239, 0xef}], 0x1, 0x0) read$eventfd(r2, &(0x7f0000000100), 0x8) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 2018/04/15 15:58:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x5, 0x1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr}, @IFA_CACHEINFO={0x14, 0x6}]}, 0x34}, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffffe4) 2018/04/15 15:58:07 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, r0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x4118c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x4000000, 0xc75, 0x5, 0x401}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x2c, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3d5c60e5, 0xb9, 0x0, 0x727, 0x100, 0x4, 0x691}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x400, 0x70bd2c, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8a75f3e}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1e}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000300)={0x3, 0x2, 0x4, 0xfffffffffffffe01, 0x1, 0x570c}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r3, 0x20, 0x70bd26, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x480000000}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x10) r4 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0xa}, 0x9}], 0x1c) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000540)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x7, 0x401, 0x1f, 0x5}, {0x9, 0x100000001, 0x6, 0x5}]}, 0x10) r5 = accept4$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000640)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000680)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000740)={0x2, 0x8000, 0x8002, 0x2, 0x7, 0x2, 0x7, 0x7fffffff, r6}, 0x20) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000780)=0x40, 0x4) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f00000007c0)=""/249, 0xf9) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000008c0)={{0x6, 0x2, 0xffffffffffffff00, 0x9, "1f093f2570292604307e8cba2287f2f4145ede94976f4b53fb23789b20c9c09c011777bf6943c484df2b7ef5", 0x1}, 0x4, [0x4, 0xfffffffffffffffd, 0x0, 0x2, 0x688, 0x9, 0x80, 0x7, 0x40, 0x8, 0x3, 0x27, 0x0, 0x8, 0x9, 0x401, 0xffffffff, 0x800, 0x100000000, 0x3f, 0x9, 0xfd95, 0x9, 0xc4f5, 0x1, 0x3, 0x7fff, 0x7ff, 0x0, 0x200, 0xffff, 0x100000001, 0x970, 0x515, 0x3c4, 0x0, 0x5, 0x81, 0x81, 0x1, 0x9, 0x0, 0x0, 0x8, 0x301f, 0x8001, 0x9, 0x1, 0x8001, 0x8b, 0x8, 0x7, 0x3ec, 0x4, 0xff, 0x2, 0x8, 0x9, 0x9, 0x2, 0x4a6474e9, 0xba, 0x8, 0xc83, 0x100000001, 0x3, 0x0, 0xffffffff, 0x400, 0xa65, 0x69, 0x0, 0x53e6f7a4, 0x5, 0x1, 0x418f, 0x8a, 0x8, 0x2, 0x431, 0x20, 0x9, 0x6, 0x4738, 0x8, 0x2, 0x7, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff9, 0x4, 0x24, 0x10001, 0x2, 0x8, 0x4, 0x82c6, 0x9, 0x1, 0x6d, 0x32e7, 0x3, 0xd88b, 0x9, 0x2, 0x7ff, 0x8, 0xde0f, 0x4, 0x7, 0x9, 0x7, 0x3, 0x100, 0x2, 0x61c4, 0x2, 0xffff, 0x4, 0x4, 0x3, 0x10001, 0x56b9, 0x7fffffff, 0xffff, 0x0, 0xc0de, 0x9]}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) ioctl$VT_WAITACTIVE(r2, 0x5607) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$int_out(r5, 0x2, &(0x7f0000000e00)) 2018/04/15 15:58:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32", 0x43}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:07 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x8000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000200)='\x00!', 0x2}], 0x1, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0x8001, 0x3ff, 0x6, 0x5}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8000, 0x100, 0x0, r1}, &(0x7f0000000180)=0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) sched_setscheduler(r2, 0x7, &(0x7f0000000280)=0x200000000000000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x401, 0x5, 0x0, 0x3, 0x4449, 0x100}) 2018/04/15 15:58:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000abf000)=ANY=[@ANYBLOB="141700bfb86c715ae713250a71e304"], 0x14}, 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) 2018/04/15 15:58:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0599e47abd3af877be254e8c052f7e63044000000000"], 0x0, 0x0, &(0x7f0000002000)}) close(r0) socketpair(0x4, 0x0, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e24, @multicast1=0xe0000001}], 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40000040005ce6fd292513986ae8875f68259184a7d2a34dc799ea025ae2734b70c6dec0cdc283e5bc6e2042780ddea65560af90ba1ee24191b8406c99a1cf655e44ccdd286ddad90f5ef93eab1a922d68cbd90cd5e6cb20164a85768e161ce8db2ab769"], 0xffffffffffffffa8, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0e630c40630000"], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r4 = fcntl$dupfd(r0, 0x0, r1) accept$alg(r4, 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000180)) fgetxattr(r2, &(0x7f0000000000)=@random={'osx.', '/dev/binder#\x00'}, &(0x7f0000000040)=""/10, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310}], 0x0, 0x0, &(0x7f0000012000)}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x8, 0xffffffff, 0x9, 0x4, 0xd5}, 0x14) 2018/04/15 15:58:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 175.906352] binder: 15079:15081 unknown command 2061801733 [ 175.937850] binder: 15079:15081 ioctl c0306201 20007000 returned -22 [ 175.988765] binder: 15079:15081 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 176.696605] binder: 15079:15097 BC_REQUEST_DEATH_NOTIFICATION invalid ref 99 [ 176.703866] binder: 15079:15097 unknown command 0 [ 176.708770] binder: 15079:15097 ioctl c0306201 2000dfd0 returned -22 [ 176.735797] binder: 15079:15097 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 176.855074] binder: 15079:15097 unknown command 2061801733 [ 176.860945] binder: 15079:15097 ioctl c0306201 20007000 returned -22 [ 176.871479] binder: 15079:15097 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 176.879246] binder: 15079:15100 BC_REQUEST_DEATH_NOTIFICATION invalid ref 99 [ 176.886484] binder: 15079:15100 unknown command 0 [ 176.891367] binder: 15079:15100 ioctl c0306201 2000dfd0 returned -22 [ 176.907127] binder: 15079:15100 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/04/15 15:58:09 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:09 executing program 7: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x114c0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000000000)="dc", 0x1023404, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x20) unlink(&(0x7f00003b3000)='./file0\x00') fcntl$getown(r0, 0x9) dup2(r0, r1) 2018/04/15 15:58:09 executing program 3: r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000100000000000000000b50000007a5489381e889f5445a6a89a675e83b3d02fa867c47d6ada0215bcee72387a357a5b3058a6334a4ec1a0f0511dc174a6c4adf8723ef57189feb292e5435b83e298df06f132876b3d02a8eb3aa3944786a90700cf95376468536b6dcf777e7c3cd789fa27b5ac35c69e7b7a4e4c9ced3c7f492ee9da13d8c73b1b2ea2b994f4875c0a34072aa74468fad4fa6e6474b8c6145c929d8c2886e3fa071b8fff3dc6e5c2969fa40a4a30"], &(0x7f00000001c0)=0xd9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xc0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x194) pipe(&(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x80, 0x2, 0x6, 0x5, 0x4, 0x1, 0x6d7, 0xffffffff, 0x5, 0xdf53}) 2018/04/15 15:58:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x90000000, 0x103000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x91e9, 0xfff}, 0xc) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffff8, 0x101080) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 5: timerfd_create(0x8, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x280) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/147) 2018/04/15 15:58:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x40) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0xffffffff7fffffff}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x6) pwrite64(r3, &(0x7f0000000040)='9', 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x8000, 0x0) 2018/04/15 15:58:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 3: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2}, @in6={0xa, 0x0, 0x4, @mcast2={0xff, 0x2, [], 0x1}}], 0x2c) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000001000/0x2000)=nil) sigaltstack(&(0x7f0000002000/0x3000)=nil, 0x0) 2018/04/15 15:58:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x28401, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) ioctl$sock_ifreq(r1, 0x8936, &(0x7f00000001c0)={'bpq0\x00', @ifru_hwaddr=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xae, "a06b79aebfeb4fb9f9ae9fe95ff721b674463f0b80fd7899f36abf45bee1de99c655488e27fc9c3732eb70447de1d30b4ee94963da1ed2e0d7fa97af9e6195ffaaaafc59fbf94ce336716fa8e6419d3821a98ec7192958ff9d43d4d2d1ea4b7060425013e56625df2b1f1553564548563676aaf8ae6745f154c996be3c38870e1700fdd0bd5580aaeffaca2651bd17c95a93dbb00234003babbabaffaeb34a0beb799d6ebc7a90843c5f5e0f20e7"}, &(0x7f0000000100)=0xb6) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x784) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'ip6_vti0\x00', 0x3}, 0x18) 2018/04/15 15:58:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x2000c00) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sysinfo(&(0x7f0000000600)=""/46) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@mcast2={0xff, 0x2, [], 0x1}, 0x8, r2}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000540)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000200)) sync() fcntl$notify(0xffffffffffffffff, 0x402, 0x80000004) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockname(r0, &(0x7f0000000580)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000300)=0x80) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000800)=""/122, 0x7a, 0x10141, &(0x7f0000000740)={0x11, 0x17, r2, 0x1, 0x3, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) listen(r3, 0x20000003) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/171, 0xab}], 0x2) rt_sigpending(&(0x7f0000000500), 0x1f4) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000002c0)={0x0, 0x6, 0x7fffffff, &(0x7f0000000280)}) fcntl$setflags(r5, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4008641c, &(0x7f00000006c0)={r6, &(0x7f0000000680)=""/30}) keyctl$join(0x1, &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000240)=0x3, 0x4) close(r5) r7 = accept4(r3, &(0x7f0000660ff4)=@nl=@unspec, &(0x7f0000000040)=0xf5b19b4c0b1ce647, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0\x00') setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000700)='sit0\x00', 0xfffffffffffffff0) recvmsg$netrom(r7, &(0x7f0000000940)={&(0x7f0000000180)=@full={{0x3, {"cc71a2b0fc7562"}, 0xb81d}, [{"ca656386e14354"}, {"7876c075e97b96"}, {"4de983d35ba1d7"}, {"f6e8d540853f18"}, {"7af8c779376ac1"}, {"6e48af09618b41"}, {"cbed916ce34e67"}, {"83eff6f7aab7bc"}]}, 0x48, &(0x7f0000000580), 0x0, &(0x7f00000005c0), 0x0, 0x20000000}, 0x40010101) 2018/04/15 15:58:09 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2080, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x4, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$llc(r0, &(0x7f0000000180)="8d25da6ae0eee83473e89720f70ef01d55a9a5de72afa9ab2a3691aec60a32ac0cfc29d105cf0f4247b998cb19986b700687ebef91c965693d59563550109fa9c173e1f33b663eb1af4678b62c188bdda486aefcb125a2ccefa8bcd2e6c01739ecade878e252232a1d5f11cd6a66553ac3e5a01a45f8051f8c1f15d94270f7d753591ba16ae8ba61f4ef5902b0c4bf26cb26a80a1a4f3d746413bfa75c5092f7697668f5fe0563eb79a46f92c20a81bcf53804c42cef502ac652bebd3a5728b0193d1a453920432f92261dd3ee8a0ae2d2e7c8a3e36b525de63c72749d1fb98d8f6d596a3c06ebcb72", 0xe9, 0x8001, &(0x7f0000000280)={0x1a, 0xfffe, 0x5, 0x5, 0x2, 0x9, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x10) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000002c0)={0x8000, 0x8001}) r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000300)=""/249) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x4, 0x0, 0xc2c, 0x2}, &(0x7f0000000440)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r3, 0x9c, "f0f0d99fe7649ae6178a4a52bf8fe5acd58d4d4a61f89d0065927d79293feab932ba249c0e946811718667315ea1b78c6df6780d4d6e7227ebb4124bd1d9c7b974bf91734030dfe2f657d2ca0d2e7274ab24718d38d33fc6381a57d29cf979a5d80738403e59941cedf40766fee385fab1d41082c0deffb36406566f9ecad6f33e267023df5d3f872bda47302b95810cd92d37f69b6bb349394cbbf8"}, &(0x7f0000000540)=0xa4) ioctl$int_in(r0, 0x0, &(0x7f0000000580)=0x9) r4 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0x4, 0x400000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000006c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) setsockopt$inet_mreqsrc(r1, 0x0, 0x2e, &(0x7f0000000780)={@rand_addr=0x100, @multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000007c0)={0x0, 'veth1_to_team\x00', 0x1}, 0x18) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000800)=0x1, 0x4) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000840)={"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"}) fchmod(r1, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer2\x00', 0x40, 0x0) prctl$getreaper(0xb, &(0x7f0000000c80)) connect$llc(r0, &(0x7f0000000cc0)={0x1a, 0x109, 0x9, 0x4, 0x9, 0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x24190}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf262}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffffe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000e80)=0x1000, 0x4) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000ec0)={{{@in=@remote, @in=@multicast1}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000fc0)=0xe8) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000001000)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000001040)={'filter\x00', 0x4}, 0x68) 2018/04/15 15:58:09 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:09 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x442000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x10200000008) mremap(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b2a000/0x1000)=nil) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) userfaultfd(0x800) 2018/04/15 15:58:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000001000000ff030000000000000100000006000000090000000000000002000000000000000800290000000000040000000000008dd01c3d00000000000000000000000000080400000000000000000000000000003f00000000000000090000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000322000000800000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000900000000000000000000000000000000000000000000000001000000000000000000000000000000060000000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000000000000000000006000000000000000500000000000000020000000000000000000000000000000e000000000000000500000000000000000000000000000005000000000000000400000000000000000200000000000000000000000000000000000000000000040000000000000000000000000000000080000000000000ff01000000000000030000000000000000020100000000000000000000000000880100000000000000000000000000000200000000000000ffffffff000000000200000000000000000000000000000000000000000000000100000000000000000000000000000094beb4dabd913506f364a4c4418ab9d241092177f61e5274304ea0991937"]) 2018/04/15 15:58:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev={0xfe, 0x80}}], 0x32b) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x8}}, 0x7, 0x9, 0x10000, "28baf8537c2bf82ae5bb992350c2d9b9c4dfdef20f5bc3ea532883e714cefeb42e5019d3a3f0a91a6396d8cee3e8d0dbe508473bc48886e55b12c98f5b3195184177c7d1dc0b83c904cd71c021329182"}, 0xd8) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x14, "ca9e00293c6a36834983462bb8121f98c5e65bb8"}, &(0x7f0000000200)=0x38) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 2018/04/15 15:58:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:10 executing program 7: socketpair(0x19, 0x80806, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x1f, 0x5}, {0x8, 0x3ff}, 0x6, 0x7}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x40000141042, 0x0) fallocate(r1, 0x0, 0x0, 0x4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x2053, r2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$KVM_NMI(r1, 0xae9a) fadvise64(r1, 0x0, 0x0, 0x4) 2018/04/15 15:58:10 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000079dff1)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x14) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000021c000)={0x1, 0xee0}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 2018/04/15 15:58:10 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @empty, 0x5}}, 0xa3b, 0x3, 0x8, 0x4, 0x6}, &(0x7f0000000180)=0x98) recvmmsg(r1, &(0x7f0000003b00)=[{{&(0x7f0000000340)=@nl=@proc, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/149, 0x95}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/12, 0xc}, {&(0x7f0000000740)=""/58, 0x3a}], 0x8, 0x0, 0x0, 0x9}, 0x6}, {{&(0x7f0000000800)=@ax25, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/30, 0x1e}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/214, 0xd6}, {&(0x7f0000000ac0)=""/18, 0x12}, {&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/5, 0x5}], 0x6, &(0x7f0000000cc0)=""/207, 0xcf, 0x10000}, 0x8}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000dc0)=""/7, 0x7}, {&(0x7f0000000e00)=""/105, 0x69}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/42, 0x2a}, {&(0x7f0000001f80)=""/31, 0x1f}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000003040)=""/82, 0x52, 0x80000001}, 0x4}, {{&(0x7f00000030c0)=@nfc, 0x80, &(0x7f0000003680)=[{&(0x7f0000003140)=""/196, 0xc4}, {&(0x7f0000003240)=""/75, 0x4b}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/23, 0x17}, {&(0x7f0000003340)=""/163, 0xa3}, {&(0x7f0000003400)=""/15, 0xf}, {&(0x7f0000003440)=""/10, 0xa}, {&(0x7f0000003480)=""/47, 0x2f}, {&(0x7f00000034c0)=""/190, 0xbe}, {&(0x7f0000003580)=""/233, 0xe9}], 0xa, &(0x7f0000003740)=""/86, 0x56, 0x2}, 0x7}, {{&(0x7f00000037c0)=@can, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/235, 0xeb}, {&(0x7f0000003940)=""/151, 0x97}], 0x2, &(0x7f0000003a40)=""/165, 0xa5, 0xfff}, 0x7a292e97}], 0x5, 0x0, &(0x7f0000003c40)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x7ff, 0x3, 0x1, 0x3, 0x7}, 0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x6, 0xfffffffffffffffb, 0xb952, 0x16, 0x2}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x1, 0x3, 0x7, 0x80, 0x8, 0x9, 0x553, {r3, @in6={{0xa, 0x4e22, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x1, 0x0, 0x126, 0x4, 0x8001}}, &(0x7f0000000300)=0xb0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000003c0), 0x1) 2018/04/15 15:58:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) listen(r0, 0x4) 2018/04/15 15:58:10 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400040, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@nat={'nat\x00', 0x19, 0x3, 0x388, [0x20000280, 0x0, 0x0, 0x20000398, 0x200005d8], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'bcsf0\x00', 'gretap0\x00', 'ipddp0\x00', 'teql0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "cb8223d429379bb510bf58f48d9d9004ed4e793ddab8068e423150dde463473037597b956f573ee8a5e22a1fa00478caa054d64d681fe3877eabfd6cad393c6c"}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{{{0x0, 0x0, 0x0, 'ipddp0\x00', 'irlan0\x00', 'nr0\x00', 'teql0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @snat={'snat\x00', 0x10, {{@random="edf3432bd712"}}}}, {{{0x0, 0x0, 0x0, 'tunl0\x00', 'ip6_vti0\x00', 'yam0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xe0, 0x130}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x3}]}, 0x400) 2018/04/15 15:58:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x3, 0x4, 0x18000000, 0x10001, r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40101283, 0x0) 2018/04/15 15:58:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = getpid() ptrace$setregs(0xf, r1, 0x6e, &(0x7f00000008c0)="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") ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x7, 0x3, 0x5, 0x73}, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)=""/17) r1 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)=']\x00', 0xfffffffffffffff8) r2 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='eth0\x00', r1) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000240), 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x8, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000300)={0x1, 0x0, 0x7, 0x8, "507c3d25167b184e28d6df5ec4f3327e947abc5857aa3d4824c93a00bea4d73ec966850ea133b19af563ead1", 0x200}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000340)={0x1, 0x8, 0xfe, 0x4, 0x1, 0x597e}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'veth1_to_bond\x00', r4}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000580)=r5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000005c0)=0xd6b, 0x4) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000640), &(0x7f0000000680)=0x4) getpeername$llc(r6, &(0x7f00000006c0), &(0x7f0000000700)=0x10) keyctl$set_timeout(0xf, r2, 0x3ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', r6}, 0x10) chdir(&(0x7f00000007c0)='./file0\x00') ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000800)=""/4096) pivot_root(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)='./file0\x00') sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001880)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000018c0)={{0x2, 0x4e23, @multicast2=0xe0000002}, {0x307, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e20, @broadcast=0xffffffff}, 'gre0\x00'}) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001940)) accept4$llc(r0, &(0x7f0000001980), &(0x7f00000019c0)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a80)={0x0, 0x58, &(0x7f0000001a00)=[@in6={0xa, 0x4e20, 0xffffffffffff3099, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e21, 0x7f, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001b00)={r7, 0x6, 0x7, [0x10001, 0x8, 0x0, 0x1, 0x10001, 0xd6b, 0xc]}, 0x16) 2018/04/15 15:58:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r0, r0, 0x6}) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xac, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x7, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x4e21, 0xee, @empty, 0x3}, @in={0x2, 0x4e24, @rand_addr=0x6}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x8fba, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff}, @in6={0xa, 0x4e20, 0x101, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xb832}, @in6={0xa, 0x4e24, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x8}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r4, 0x18, "efb22501e84a836eb8240105b49f2a6da79014fb987fcfc1"}, &(0x7f0000000240)=0x20) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e00}, 0x2) 2018/04/15 15:58:10 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x8, &(0x7f0000001680)=[{&(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffc}, {&(0x7f0000001180)="b711474c935832225bb67295198f07f69370ad75eba8a4692227d53d10a99d9fc9769937", 0x24, 0x733}, {&(0x7f00000011c0)="34e3ee7514c34d137294f0549e8c69e243590ca6209bdad78bc44480702890c80fd37fcd24567a2052668e80e826813f137ff4fa3e10bcaaf2d3c88b1390d8ed8f84704529830bfbd5fd783d7fa38da9c9ffb6d634d86ac5a3994b42a34b90441b3d8a804dbf9e11c93840ce909284ccb11bfb42d6b1a70542ea6d753674e53cf5800c276d556e2dc2533918d0ca7461aa8b6b254c020d6186d1959de9126c03f07617ae5aaa93919101e194376c4f03aff61c08d9814ffa8a9301671107fa598f41a6c853450985aa8bef8904324ff1cb061f32e9edb6b92953666becd91dd3e31dced0826c26eedd04837e", 0xec, 0x1f3}, {&(0x7f00000012c0)="93cf103f7ee4002c98234d802c476395ea690de440ca7df5acb5061fa4721a696022592313d702dfde59e82a72f2f07be71f0b2f40ca596988c26c9c98ead6c31ede87723669e19b6da56fc2e2dc16b0de9567541a0abaf70432896254c0607077ff4b690f98572b6d5fec799553f3ce88ed922ae5", 0x75, 0x3}, {&(0x7f0000001340)="334846fbefaf63362601dff633e91d152810686bd4fcbfb0566b5511e9479fca2c16a92bda9bef70f55a40a5559a7f25f8df0ed19a06d9100752825f5523ee50c0fab78cc97de1810bef88887c872424cc555bca8b8cc0c003cfc4e81e4beb24cda86b8d272d1b7e28bb2d5db52ab72d0993606526090ac885a801755c95f2de0c650e7d73cd4ba6b4460c09132669050f2cfa6f08e763789901b7f5627cee76c52a13df423edee99fc48b2965a2b3e6ea1c021cab0e37b37b5ada398e3c117a0ce1833a3d0f3f512d8af63cee8317ca623008984cafc782f0955d3f1fac16420f8b59754d1c17a4047e", 0xea, 0x10001}, {&(0x7f0000001440)="6884ae84e9933bbeae24c00db1b9f91fb5eecda614b1d7ab55cd6af50c4e69006c9c761002c9c4a6ea057872fc9d0a234f78277eef9279e17ee5ead6d7233b713f2c37d570ede933d9e333ff647fdbce14e73b5fa9725c4af5cef09a3f2cda4047762bdb4619c2da7f1b0d4838401f0f2b0d7191ceab2e780639ce5b416b31f416c0fc55ef6eb8408cf8d216d542982fe06373888fdb5d229114e1608569f6bbc0b811055f4c87487e785817d6602217067bbe0271f7790113bfefbb0c301c8e7d58e8c8e96ad828c9bd79566eb9051d06efd264388b19e6", 0xd8, 0x5}, {&(0x7f0000001540)="48dd64f0602bed43d5ab85a6de9e80c02ebc027d2c1cc00600d5958ad743f9976e56efee5fb62afce5cefcfdf171", 0x2e, 0x4}, {&(0x7f0000001580)="e4d0dd0da713c18e031af5db2beb1031d5edb144f2a204bf552d62a9e654d730bb549774002d8885721ee1bf80e6390057bce643ad839c76ea1c603a78fbd2b0a33620d9fc828a045193ecdd152fc1e36f29f2d457002323cc6b857274203c37268f116d1ba1d1b2042a5d6150887b000930422516838aef816d256e82da20f05cebc6e4c8f9e6e193523bce22a7017b694d98972ee081e738d0b04663ad488a36f2876b3b10d1fa007d3ca3b67de192087fc374c73eea320adae0d9d9871ba5860346112506867ee83083774c66832cf8dc", 0xd2, 0x8e9}], 0x200000, &(0x7f0000001740)) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x21, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a0600000000000000f22a2ce3cb58fa63c42a238cb85f1023fa81", 0x38}]) 2018/04/15 15:58:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400080) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 2018/04/15 15:58:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:10 executing program 5: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x1c91768b) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x3, 0x0, 0xffff) [ 178.460897] hfsplus: unable to find HFS+ superblock 2018/04/15 15:58:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x2920ff) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000040)) fcntl$getflags(r0, 0x40b) 2018/04/15 15:58:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:10 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8000) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='a', 0x1}]) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x7, 0x100000000, r0, &(0x7f0000000180)="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", 0x1000, 0x5, 0x0, 0x1, r0}]) 2018/04/15 15:58:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x80000001, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000002c0)={r2, 0x1d}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x80000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff00b1", 0x9) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000280)}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000180)={0xffffffffffffff7f, 0x5f8, 0x8, 0x1, 0x8, 0xfffffffffffffd33}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = dup(r0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000340)) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f00000000c0)) [ 178.559899] hfsplus: unable to find HFS+ superblock 2018/04/15 15:58:10 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00004ee000)=@req3={0x6000, 0x0, 0x1, 0x7ff}, 0x1c) sendmsg$key(r0, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200408bd67d5d1f11939c00800d3d9860ccb49a3884de2965f71774d46a29a5d5bc14bffb93fb06dfe978a724054a7b68f3620d202211c5ec6bd4c4aa05f4485be96bf38d8b1455941cf1a5bee17d2c87b7a94df2f6233c790e7b4dfc1147709c6681389e06bda32d3938ad8ea91da85cf495ba053dd6730d73f1438d7cf311baf4c54eb3f5814a7f2829f3df5da11c1b8c79f6591928e504a860ca8c880e"], 0xffe2}, 0x1}, 0x0) 2018/04/15 15:58:10 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001840)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001800)={0xffffffff}, 0x106}}, 0x20) write$rdma_cm(r0, &(0x7f0000001880)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x20000003, 0x0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x0, 0x7f, 0x0, 0x0, r4, 0x80000000}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0xfff) socketpair(0x4, 0x1, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080)="b02e82b8cc655398979911284b03a01b4483911b050efd8d0c3567c7ffc01b87f7598b19d6a70d55bc2541b249d4ef0aeae229574b1438", &(0x7f0000000940)="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", 0x2}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x100000000) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f00000003c0)={0x140a, {{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) perf_event_open(&(0x7f000025c000)={0x5, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7, 0xfff, 0x100000001, 0xfffffffffffffffb, 0x0, 0x8001, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x5, 0x8, 0x1, 0x8106, 0x0, 0x14000000000, 0x80000000, 0x1, 0x5, 0x0, 0x40, 0x2839, 0x1d, 0x800, 0x7, 0x8, 0x3, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x758, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x8, 0x3}, r9, 0x2, r7, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r4, &(0x7f0000000740)="03812dfba9cf29d7d97aae706c6163bcf224bd0534e64ad5626ab3c86d496778a84df50c0aecd9fffc6a1f136cc3eced08d0cc305441d1b6ee21f7be711dd16a6e88d5f6e76872eb2c4d4d93f300e8eb8f88ef35253b8f32e4ca079e5dcb7bd7b70147cbd1ec57f25a8f4533841d529f1344cc391251bf98b9b4223a2f0319b3f35ccd7dbfc161cd31cd7c30858c962380e2d8f16a", &(0x7f0000000580)="69269246c2a63a64f4d8d126d4bdfd06c98a9d0aface67282d0a", 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x8, 0x6bcb8e63, 0x1, 0x59ad, 0x12, r3, 0x8001}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r3, &(0x7f0000000840), &(0x7f00000008c0)=""/70}, 0x375) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xffffff8f, &(0x7f0000000300)}, 0x10) dup3(r2, r0, 0x0) 2018/04/15 15:58:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000100)=0x80000001, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) 2018/04/15 15:58:11 executing program 2: syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000040)="8b3d104832b6e4b44abf5dc63895c8072158ac2634189b3d186892f9ecc67cda81a738a04f0e318ab2e9bf8b64df2e87b99205d2f17c9807b60ed219d9be6905a32d17f00a331c5085cb0267614c91651a3985e74026fb65418e676968a14fca0a30d254c507fd2bddf42f52596c0524751fcb02362a5abb8e1d316e5a4d71a689639aff7580daa263a2d77593d3c7e4bd717bd45e6657b55f1e73a532aaf7a1ccc7fc826a5e34e24d60", 0xaa, 0x1}, {&(0x7f00000001c0)="200953265a673c4d687241c4d585113a38544c22de8bdb93869482c9efc4e3fd53e901570e96f519ff4b975a106dbe9361fe15d9dbfb752ed8a63cd02ecb8e6d05ee1f065cb59f8094759b5de4a6952ffc4efeea55", 0x55, 0x6}, {&(0x7f0000000240)="e8200b56bbfbb4bd854541e81c49988ccf51797d68ca24449e26c8dddcd3239dbc30e91b34f86a190c900b75bd3e6e4ab2b569b6e16f37c10d2a553f9fdac0b4bce3b861beb3ce308e", 0x49, 0x8000}, {&(0x7f00000002c0)="c0d4268725a449f8cda5105c0ec64f19fabc6c616366e1312893ba5e873245c18c81b34a044eff4cda2116ef54f747e007c35c170b289f8c328bea1ddd189236e5be171e67ee5bbe41da41f2b026f18c0e5dd3ebe22117b1857a7759b5fc11821163cf0c14ab600a7f", 0x69, 0x4}, {&(0x7f0000000340)="ec63c9597414b70c7ea1905389ac40fafb69c7d4f14179181e7233446782f42ac06e9d8ba1adf05623298312b27a1c0bbe1b3dcbd9bb5ddc61fd7abd5d6bab90a57a9b90a1af7ad420aac73f0ceddc55c8c6a6531e94ad49cef41d9674eb57", 0x5f, 0x571}, {&(0x7f0000000400)="ef3cffaea006410fce50cb30a566ddb0ae02531b282f4362952148062082f67a2afabe6723a5fd02676ef57106e585144283efe8b1c4b4fc71e22cd3ae5abce536e60da256fa8cccf47b64a402b37413bcda7c7ae9ec1274494513b81cf6ca9753902fe8092eb6b0e5aaf17308155cbbddb756ec843e64239cfff89d05a71456238368a85c19c84056198da63fa72815dd636ea6ab0e6816a687839b0f", 0x9d, 0x30}], 0x0, &(0x7f0000000000)={[{@part={'part', 0x3d, [0x35, 0x37, 0x39, 0x31, 0x37, 0x33, 0x32, 0x37, 0x30, 0x34]}, 0x2c}]}) 2018/04/15 15:58:11 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, [0xe75, 0x1, 0x5, 0x100]}) dup2(r1, r2) sendfile(r2, r2, &(0x7f0000000040), 0x1) 2018/04/15 15:58:11 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000000), 0x356) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) 2018/04/15 15:58:11 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0xffffffff, 0x7}, {0x6, 0x3}, 0xffffffffffffffff, 0x7, 0x6}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x1, 0x71, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x4, 0xf000, 0x104000, 0x100000], 0x3, 0x4, 0xcdc2}) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000500)={"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"}) 2018/04/15 15:58:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 179.731116] hfs: part requires an argument [ 179.735454] hfs: unable to parse mount options 2018/04/15 15:58:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000005a00)='/dev/autofs\x00', 0x40800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000005a40)={0x0, 0x1000, "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"}, &(0x7f0000006a80)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000006ac0)={r2, 0x6, "392b9ac9bc40"}, &(0x7f0000006b00)=0xe) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:12 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2000, 0x0) sendto$ipx(r1, &(0x7f00000000c0)="585a2331d812e07f81348dca5c97aba74a12034ce5fcca1d8f8983daca80adcd8e19d8b9ee73e1bdb2482958d51305a6492501c86885a001a27ef8c3bc07956874c5599160dfc20758c6ccd9b018a2dc1ae0f7d1179d368e3cda13bff4e123ae718277fc8b87ab2473657d0c4945bb2cde4239bd5cb2e18a5223d72bf1edcd78b88d4c4611ceef4817fb7572ff52b1fe5894be721ca72dc9f6b488b889dfc52f3d04ceb237e7550f6cde1df959e9085b0eb1a4a9c5a6f2a4ea0dd6870e5b1b77bab312f6d54d3fda", 0xc8, 0x4000000, &(0x7f00000001c0)={0x4, 0x8c38, 0xabfd, "34a3b2ea42dc"}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)=0x2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000003c0)=0xd4) rt_sigsuspend(&(0x7f0000000040)={0xffffffff80000001}, 0x8) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xd6}, 0x8) 2018/04/15 15:58:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) ioctl$int_in(r0, 0x5421, &(0x7f0000faaffc)) 2018/04/15 15:58:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) syz_emit_ethernet(0xffffff82, &(0x7f0000694ffe)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)={0x0, 0x3}) 2018/04/15 15:58:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:13 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10001, 0xa, 0x1b, 0x10, "7ddd419cef6f95635b0bb9ebda611fdcf0b7ce1106abcf6ea54c29c46800e77360a1a73e2b83ba3ac42f2f063df09674bf155bd4baba2c74db5fb3148b4ebb08", "55b8c1cbf3b8363ae6bc6aa0facfcf9321fc7c9d127403f885d9028cf61484cf", [0x8, 0x4c9]}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB="64000000c9097b84e925f41dcef3ba2c0aa583389c6394b62594fff46e4ae2de309c9130a8e68c8546e3ba4d3414fab30b28d83d2315d2706d4c275349c7fb7935c51daf1befc0389014205550f3cba831d09329d0e1431e44785b4cf50454762cf7bdc82bce0ed9"]) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xffffffffffffffff, 0x8000) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 3: r0 = getpid() capset(&(0x7f0000a31000)={0x19980330, r0}, &(0x7f00009b3000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000a00)={@broadcast=0xffffffff, @loopback=0x7f000001, @multicast2=0xe0000002}, 0xc) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) getgid() r4 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000600)={0x56, 0x9, 0x5, {0xfffffffffffffffe, 0x3}, {0xffffffffafd6d189, 0x1c6}, @rumble={0xffffffffffffff01, 0x5}}) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000a40)=0x6, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x400) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xf9) write(r4, &(0x7f0000000900)="1227f63cfa01f507a3a3da40e3e6069e34db13c5c0ef3959b6d5c02904b18cb9958d8b8a60928191f40c9206d4e5807bc3e2cea2e8c5f111bc51811721b20fdafbfa2cdfe87961a32abc5f62ba1ae2ee84684dafb8481f8a12ae156e00c419f67021087f0a938b1b598533e9ca9008e314c061f8be47659e68a9c2172f6053d559ab41691b40f8d0ca61af1a5173d2bc2a3760b24d2766ce9833359f7a6364cda75a73c446cc0a9549aa678e3a11f1c5980f75bee0551783fd7ed91ccaad9b288058df5f17f2979eac178e612cfdbcd35ad9f39bd8c76b", 0xd7) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000100)={{0x8001, 0x4, 0x4, 0x1f, "f311a364fb949d4beda1e0044664aca705159f41adbe07a01b5ad1cc401ec03b1279dd606c6c428d1d73be9a", 0x5}, 0x9, [0x9, 0x1ff, 0x0, 0x67, 0x8, 0xffffffff80000001, 0x3, 0xfffffffffffffffe, 0xffff, 0x0, 0x2, 0x4, 0x6, 0x0, 0x0, 0x100000001, 0x2000000000, 0x4, 0x80000001, 0x1, 0x6, 0x1, 0x2, 0x8, 0x5, 0x200, 0x8000, 0x6, 0x7fffffff, 0x3, 0xef, 0x3, 0x2, 0x29, 0x10001, 0x8001, 0xffffffff00000001, 0x40, 0xffffffff, 0x6dfd, 0x800, 0x100000000, 0x1, 0x1000, 0x7ff, 0x1, 0x5, 0x4000, 0xa5, 0x6, 0x6, 0x4, 0x1, 0xde, 0x3, 0x90000000000, 0x3, 0x9, 0x7, 0x380, 0x135, 0xb653, 0x1, 0x7fff, 0x0, 0x81, 0x7, 0x9, 0x8, 0x42477f97, 0x81, 0x2, 0x3, 0x7, 0x6, 0xfa5d, 0x8, 0x1c0, 0xfffffffffffff075, 0x7, 0x1, 0x3, 0x8, 0xffffffffffff8000, 0x8, 0xfff, 0xdd9, 0x8, 0x800, 0x2400000, 0xf000000000000000, 0x8001, 0x1000, 0x6, 0x3192, 0x200, 0x50, 0x1ff, 0x5e27, 0x0, 0xffff, 0x7, 0x8a78, 0x100, 0xfffffffffffffff7, 0x101, 0xd86c, 0x401, 0x5, 0x3, 0x0, 0x4, 0x2, 0x1, 0x7, 0x8, 0x8198, 0x6, 0x20, 0xfffffffffffffffd, 0xffffffff, 0x6, 0x8, 0x1, 0xfffffffffffffffc, 0x9, 0x80000000, 0x5], {r6, r7+30000000}}) setgroups(0x2, &(0x7f0000000040)=[r2, r3]) sendmsg$nl_generic(r5, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x1f4, 0x20, 0x2, 0x70bd29, 0x25dfdbfb, {0x16}, [@typed={0xc, 0x4f, @u64=0x10001}, @nested={0xb4, 0x1c, [@generic="a9aaa0c57dbb53bce6f88aac65824d5d0a863a86fb7fd227a709b312562becf0f4bb6d9275b5906dbdb38ced2153eff019d5b0ad2c096bed86f25fe890fb276860f938bc318467e21a5fff4596079ba97061f4c1d16ac3a02b376b3f45a7203016120a8f969376ab6990f2b2c768bf0ec41d9e89e49b7899a7d8c30d0834c6c13e7d12197b83106455e8d60c47e29c5d2d481e5cb6d1e71930a665a8a980271ebdcd8c839b4ddf72b85559ada2ec2b"]}, @typed={0x8, 0x6a, @fd=r5}, @generic="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", @generic="5e32efbe6159f400045d0593a3bcdc", @typed={0xc, 0x88, @u64=0x5}]}, 0x1f4}, 0x1}, 0x8004) 2018/04/15 15:58:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x21}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040), 0x4) 2018/04/15 15:58:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)="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", 0xfc64) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000353000), 0x4) sendto$inet(r0, &(0x7f0000000180)="7f36a12ec9968f87c6d8b9e3e01265e153d29ea31070ec4407c68535f980777e3ea83f82632d47b8d78bed2c15c933c6bc650e30052cda522197d022a2e2d3f6f429e4d9d8055efb793e0663e400e34174d58ac6a420eebe2ae2968a64e429e9ae62d639ce3625208767785cf26bbdcd44362b796cc593a743b89af5d1f86e7c19f46c87fa379f93613b8efbd43f3e06e865af3cde16ea8ae171ed42e74daf1441927c19441a", 0xfffffffffffffd01, 0x4008040, &(0x7f0000000100)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2774ee450a7f6f2275732413b8e75776523896104d99508546838be4b48232443689564e1c703205d0dbaaac36e422f84212cf6dcb0cbf665e3bbdc403f01784b3fe4d8ec080db1de6d69591849ed55197ab34", 0x1}], 0x0) shutdown(r0, 0x1) 2018/04/15 15:58:13 executing program 2: r0 = userfaultfd(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="ac70662a8cd6c9f5fc9db2ac865bc5a06fa5458caaa3a60895045765ea3796c083b27a8cc5eb7d4e4353f998656ad754dcd76fda5dbdd01fc56d3a664e83e791c48c28082b5145541e6d4b8b3e70e5276c8d1e0ebe2af025c46aca562b9f39803d930676ee4af7f7f3f9e3ad13c2e1c6f3b7bdb510b05c0e1bc0041e3198bae8349fc8dd002783f0de03f5ed932f0aa9bdeb99694769a44238a395ec67a2e30cb9a825f7c3871d424fa0e1fb34df766eab33c2fdc37bf10c21d951a898c1f6d9f1d0f59759d187e90f97afdddcfdaf", 0xcf) r2 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r2, &(0x7f0000037fe8)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x2}}], 0x30) sendfile(r3, r2, &(0x7f0000000000), 0x100000001) dup(r2) poll(&(0x7f0000000100)=[{r3}, {r0}], 0x2, 0x0) 2018/04/15 15:58:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x6, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x800, 0x243a, 0xfff}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x633, 0x100000001, 0x9, 0x80}, &(0x7f0000000240)=0x98) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) r3 = getuid() r4 = getegid() syz_fuseblk_mount(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0xc000, r3, r4, 0x8001, 0x7, 0x19000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x4, 0x4) r5 = syz_open_pts(r2, 0x20001) ioctl$TCSBRKP(r5, 0x5425, 0xffff) 2018/04/15 15:58:13 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0x4000000000000001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffffffffffa, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, 0x1c) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) 2018/04/15 15:58:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000300)) 2018/04/15 15:58:13 executing program 5: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f00000002c0)}) 2018/04/15 15:58:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x20020003, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000006b80)=[{{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x10, &(0x7f0000003180), 0x0, &(0x7f00000031c0)}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10, &(0x7f0000005780), 0x8d, &(0x7f0000005800)=[{0x10, 0x18d}], 0x10}}], 0x2, 0x0) 2018/04/15 15:58:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 181.177798] binder_alloc: 15399: binder_alloc_buf, no vma [ 181.183518] binder: 15399:15401 transaction failed 29189/-3, size 40-8 line 2963 2018/04/15 15:58:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000080)={@empty, @dev, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000200)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1}, &(0x7f0000000280)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2}, &(0x7f0000000480)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@remote, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) r9 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="5d7dd1912f5a9ac90788fc43baccc7aacf8bab227e0894330bcc855f1e61318b23d0ffe7204d0fff2fe91f7b9eb37748ec424dbf5be5eb9307ebc3108d973e4ca5541d0a97ac5b6fd7362572d04857348b727cc1b985a1823c9a51a69bb8822513053c0f1d0feb9cd6961b51152c40", 0x6f, 0x0) accept4(r1, &(0x7f0000000600)=@ipx, &(0x7f00000004c0)=0x80, 0x80000) keyctl$update(0x2, r9, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b5030000", @ANYRES16=r2, @ANYBLOB="08042bbd7000ffdbdf1c0000000008000000", @ANYRES32=r3, @ANYBLOB="f00002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r5, @ANYBLOB="a00202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x3b4}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2018/04/15 15:58:13 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={"62726f7574650500", 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f0000000340)=ANY=[]}, 0x78) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x822, 0x20080) [ 181.235372] binder: BINDER_SET_CONTEXT_MGR already set [ 181.250439] binder: 15399:15411 ioctl 40046207 0 returned -16 [ 181.308868] binder_alloc: 15399: binder_alloc_buf, no vma [ 181.314546] binder: 15399:15401 transaction failed 29189/-3, size 40-8 line 2963 [ 181.337575] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 181.349705] binder: 15399:15411 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 181.397473] kernel msg: ebtables bug: please report to author: Entries_size never zero 2018/04/15 15:58:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/exe\x00', 0x2) ioctl(r0, 0x1, &(0x7f0000000080)) 2018/04/15 15:58:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x4, 0x101000) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x5, &(0x7f0000000080)) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x3, 0x7000, 0x2000, 0x2000], 0x375, 0x81, 0x7}) 2018/04/15 15:58:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x8000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400, 0x3, 0xfffffffffffffffa, 0x6, 0x7, 0xfb, 0x5}, 0x1c) set_tid_address(&(0x7f0000000080)) ioctl$KDADDIO(r0, 0x4b34, 0x7fffffff) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x8, 0x4, 0x3, 0x8, 0x20, 0x7fffffff, 0x7, 0x4, 0x80, 0x2}) r1 = add_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="bc1a96b64c79ae90", 0x8, 0xfffffffffffffffa) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="fa5c324bcee3f740ee5d063552194face7d2a9d5fa90902897ee0aa4eae2507e6bf5fade102bb8b120525e231aefa6caa29481d56b03f4bda803", 0x3a, r1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)=0xffffffffffff0001, 0x4) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000300)) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0xc}, @loopback={0x0, 0x1}, 0x7, 0xff, 0x3, 0x100, 0x101, 0x2, r2}) r3 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x5, 0x2000) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000440)=""/116, &(0x7f00000004c0)=0x74) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000500)) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000600)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={0x0, 0x1}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000700)={r4, @in={{0x2, 0x4e20, @rand_addr=0x1f}}}, &(0x7f00000007c0)=0x84) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000800)) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000840)=""/83) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000008c0)={r4, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000980)=0x84) openat$cgroup_int(r3, &(0x7f00000009c0)='cpuset.mems\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a00)="aab329615bee01d5e9bfc47dd46961d1a5eb460a0b71bddac137fb4aae9384b5c5489fb32fe7c3973f44e9678403310809bdd8c3c7abf1adc2aa9d3f85bad3cbb397ba8351c1117283dead576bdf490e04ed31e64edbd53639a764e37c0a12b54f99b8abc899f31957de4e3e30c5c9b862a7e3", 0x73) accept4$bt_l2cap(r3, &(0x7f0000000a80), &(0x7f0000000ac0)=0xe, 0x0) connect(r0, &(0x7f0000000b00)=@ax25={0x3, {"502f1b37065193"}, 0x23d3}, 0x80) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000d00), &(0x7f0000000d40)=0x0, &(0x7f0000000d80)) getgroups(0x3, &(0x7f0000000dc0)=[r5, r6, r7]) 2018/04/15 15:58:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd3, 0x103042) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000001c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 2018/04/15 15:58:13 executing program 5: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000000c0)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r0, &(0x7f0000000140)="d3", 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) [ 181.440483] binder: undelivered TRANSACTION_ERROR: 29189 [ 181.446623] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/15 15:58:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x202) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00006f0000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000ec6ff8)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r1, &(0x7f00000bd000), 0x31, 0x0) dup3(r1, r0, 0x0) 2018/04/15 15:58:13 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x180000000000000}, 0x4) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:13 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x40000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x80247008) ioctl$LOOP_CLR_FD(r0, 0x4c01) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1) 2018/04/15 15:58:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:14 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x10000000800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) kexec_load(0x7, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="33e5b92f17e776450a4dafdd1ad4930b3001c4d435439957305cda98d5a7594a2e2c9e3362836cd9345282647fb3dd86d4abd3baef1453a1c89b1197adf4ef70133b74c38da38458f3eca723fc75c7a2778dbca4927e95756c659cd08fdda9d3cb59cc830cc093feb0ab6204d7d05b494ea658b50f68", 0x76, 0x800, 0x1000}, {&(0x7f0000000040)="a172f154ff1f1b4c1526", 0xa, 0x3, 0x4}, {&(0x7f00000001c0)="44d26eee5dd104ee5d2852d52510a3a8717446926cc1bf104c1cbb68272f40fcbcc99d2e81b068a1e996cb80884e76dc817d28cf4d77b772fb7b2c6cb9c4eb12ad51fa7f975165807e50074effa836a918f24dfb5667518098c4d53a2eb92bc7bd7145fd1b069d60dabfab60b78179f543c560542cdef2ba13aa9310d3f19474ec99483b91593181c52d3e6912043b70e775bc02036b5558907803829e2c9e278b970dc258e424f9d8b8ea73bb671c57eaafae097aba278446f149f4fa2ed14eef83746dfbb558a8b4dd6e10763122a6e558a9a3961413a35443d80b2b4c43f62cf7643a8fc4", 0xe6, 0x401, 0x8}, {&(0x7f00000002c0)="d549fd4498e6dbe8c09334864cc9595d1b958a1c8a2e3d2aaaf4e74590e906339099d0f45c69d287110037fc4a71de9695cefae41eb17b0aea009e52a8adc25071e0e71ca63a9a5713e474f4d6711321108a0adc728bb13a8215d26800ca2997dbdbf084934dce2e6549e17cc17bc3cbe2ded1e1fa99aca8aeaa3b5dc08cc8a9618b7079771d8ae596624996c2f28ac3f6aebe23211eceb27c89aaa5808f77d1a145c18fa0ef6e7634c896368fb31e1f503e6cf609df351733afc03bf0fd9b8a4e9bce0836de273b704fec36827479fc", 0xd0, 0xfffffffffffeffff, 0xfffffffffffffffb}, {&(0x7f00000003c0)="9b9e618e428ec189aa78b1a45310895202bff07f4aef5f42cff2763a8e98257848ae5ce3ee6c4bd11ce63b5d296ebf621c2f67823eedb4ab2250ac4e36b8de40b60080170a51be02bcface3d737dbbfc4ea203207679c727c29f0a1ec1cbfbfa1d419a6c9e552d6c58d4bffa681a449e30ebb6e5562a14bc033961b5576648d5912e6d26b15518b9f5314c3dde174f459c978538acf573f17520038a5a842532ef095d4fa090f247b66810d6d97b5a7c5665d8e33cd81a60b455651eb1bf73446fb393442575951d9afa1f354e95b82de17150389627101f4075c5", 0xdb, 0x8, 0xee}], 0x280000) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2147660f7fd466b92f0200000f32ba610066b80000008066ef3e660f3a0e663e9f0f0865660f71f1c60f01df670fae43fa65646765660f15e3", 0x3a}], 0x75, 0xfffffffffffffffe, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r0, r1) 2018/04/15 15:58:14 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) r3 = fcntl$getown(r0, 0x9) syz_open_procfs(r3, &(0x7f0000000040)='ns/net\x00') 2018/04/15 15:58:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x100000000, 0x2200) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/04/15 15:58:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x2, [0xffffffff00000001, 0x0]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x8000, 0x0, 0x2, 0x3, 0x8000, 0x6, 0xffffffff, r1}, &(0x7f00000000c0)=0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) setfsuid(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}], 0x1c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x40, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000300), 0x4) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), &(0x7f0000000180)=0x8) 2018/04/15 15:58:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000ed4000)=0x78, 0x4) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007ff, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0xbe) chmod(&(0x7f0000000000)='./file0\x00', 0x1) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)='\t', 0x1}], 0x1, &(0x7f0000001040)=ANY=[]}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno\x00', 0xffd7) sendmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002640)="5b5331d25a71c6a64f00d90720f785f88f9e63f90f76c48feee314083a181eefab2af8a65643ebc8c2b907fdebdd7b6aabd04ebe5b3133ae10d25c8992f969f3462f985649a0d1aeb7d535535fe9ce30e21dc14811cdff61456d7141cc19a8c86d8c80ccc6639cbb396c5307933f3d1c5a346d2d3a47311974a4970abaccab9b06afbdf003eb24b16c82af83155e9b5533db3eeb4e9c0722105fdc7585c77f5238ae3d12f08c8ab6dcf0edb2490a54ac46932250eb853d86d10cff49f40797062fee0affd74773c63491ff752ddb49c505c78be21ac994dd5b3582e4d3939e431c8a98fc7fd2d6a6d34548cc47307dd4a623bb69da5d377058b49af3573e3dd190c1a950f9048a577e88c9aab27e60a4711a0c158edf8a1445deac67b943482ebfbdeceb1aafff69613a7754bd783424edae3c86005e50187e61696185fe8494a923559c39cdd418f335b65c06811e12a9b25d2bc58ab2bb49cda6a8699fe4a10689a1ffc64181f907271001d2de1cb402c33865031df009582ad070595aa7144a07fb006203e4e428cc30d8fc47b30a8b1d7a2e7cdc39e3187cf5dd4db519f5e3dd35b36c84553dfa3be3c06099cb22b3806af3b7a90e4659c41aa9c2a0b3ed4f1d81f56aa40b4afe3a61762aaa89abde22c2f1e44fb55290d0f3d042e20b2b7db5ae4485c50a14490e0f4965ff595d3736bb0b16f6cfe4d7bd17763779b5471a149d29e3ec439dbff3aca8402ad2aed98e3d8c78664045e2ab8694b912df8399a53b1a38350f4db71f6ed3f5949d4b1d1279c601c758cc948bb4cedade2bbd6d3440d23f0478d683cb35885354a5abcf820b5e5b586275d6142c4b0c05377a66db84b89c8b3101bb22d4c69fef98743f6983b1768bd170dc1c304a1af1cec8defb698ea8efe6b3c36028bc4ed4c453e499c5573296b2f5b78456c3d1663af9392474c3cf4e8af1b94dd055c71be6fc12a52646816ce59aaa6c7db0d9096139ae334d3056536448b2acccade9ffbd0d21bc4abc3c9cbd80ee95451b43d645905b9c12c6dc080121d44053092edd373f07bba0fce08ce81b7326839511e452920b7549ab98a0adacd4c46f60818b25fbda3d6589ae217215a9be3ca0b0d831029ce48e15d3ec2d75d6e220b46f03d8e54b248756e3cc136b833904416793d8b9d5b60ff999d86d2b11dd57fcff57b3d1e0299d1b307675d18a1ebf8cc69026366c79d20562e5afe0fd9fbfdeca6caaa99572f0139727a076e0678a8d0ae71e58312c559d6075f433aa5470edc34e15bb761b816aedf80765142cc1aebad3696d763a35ff2506aea52a6de15d45f079e4ac964f394e8209d3be5ff53af5abbdec85b4a5ec880265edc2ba6d4f8ff6bd64fce798504e475dbd73831c2507901407141dbdadc02180e64c1f6d4263f7e0d1aed5cb8fa216ec199eca1ea0be48d21b1c3c6f0d8135c9e25657e7e42edc07051275680055a7e70670ee6e3201347975195c33d02dba6c704f0b35674a", 0x42d}], 0x1, &(0x7f0000003640)}}], 0x1, 0x0) 2018/04/15 15:58:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x10000, 0xd1, 0xdd68}) 2018/04/15 15:58:14 executing program 2: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000008000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 2018/04/15 15:58:14 executing program 7: mmap(&(0x7f0000ddd000/0x4000)=nil, 0x4000, 0x20, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000100)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x480000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2018/04/15 15:58:14 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x87, 0x414, r0, 0x10000000000000}, 0xffffffffffffff73) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000140)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$KDMKTONE(r0, 0x4b30, 0x81) 2018/04/15 15:58:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/04/15 15:58:14 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x0, 0x10}, &(0x7f0000000380)=0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000180000fa0000000000000000daf2e8731087b7e8e2c3a98f8070c7bfc2f4eaa048f0bad27514672dc0b00f5671b4c712662389065af7c446c5a911ca39e13d6572fb9d6b45a67c0807cec32a6d7ccd63f973df2b0a456f9523a054f8459a35891c1c6a9bab366a04c127f2817b29309cc63feec5", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="3f01000000000000"], 0x20) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000100)={0x5, {{0xa, 0x4e23, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}}, 0x88) write$rdma_cm(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0eb40000180400faf33951f679a559ee08ed94fb794bf5f937301beaff5130192bd66438add1d8eb7c7ae70e8b5b28900819a5cf302fb5a9d2fe7a3d485a52e7a531d6c86b1c74ae84611b235b17b6d6e2cd824ebfc392a8a3f4c3202046dae1e90ba9bea3ed62972289", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYRES32=r3, @ANYBLOB="000000000200000004000000"], 0x20) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) tkill(r5, 0x22) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000440)="4ea5bfa6b13148a373894aeb88a058234b52b68dbf2978ca57d16cf9e31989f3f53436e5be9258b78930890fcbfe8861f78087ba9ad1015c3116299b8288637efdecb078fa39429f8f18fd2eebf47f7e07ed82364f572b5b3b5ef13fbdfef18e5ff955462e47ba3fa68cc9b0ba6fbfdcfabfcc2117f0e3a26c24b9af0b8eeda3ec90cf5e56f8e826604577908a94ccec0fe0d53ace907d0ad64e6569967b6de22629231349d764b893d58973a0de9933405112044e1ae4e6a1b3c4ce49023e4050b2dd9ab23e6a4ff87c4da7cff43022e583a6e206829e134563f177ad602b", 0xdf) renameat2(r0, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00', 0xfd3e8e20603f4bf2) write$rdma_cm(r2, &(0x7f0000001e80)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, r3}}, 0x48) 2018/04/15 15:58:15 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x6, 0x8002) accept4$packet(r1, 0x0, &(0x7f0000000400), 0x800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) listen(r0, 0x35ba) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, r3}, @acquire_done={0x40106309, r4, 0x4}], 0x85, 0x0, &(0x7f0000000200)="77539f603b6a5a657333e46c609122c03cc4ce10324ede35f493a311b815d0913cc72c09521c8e2870e2e2ea89ea9d2928b82e37eebe7698668552c6c4dffae082b44219622e02cc81a9947d70166ec4c9e0c2be4c2aa644f10ebc5bc2ac0461f7cdacd67e97d79be83474b584282ccd4f683c5a42ffe887c823f93ff769fd6e780f684ba1"}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000), 0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x28, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r6, 0x4, 0x10}, 0xc) userfaultfd(0x80800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x6, 0x7ae69761, 0x5, 0x9, 0x8}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r7, 0x499}, 0x8) 2018/04/15 15:58:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:15 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) 2018/04/15 15:58:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f00000001c0)) lookup_dcookie(0x3f, &(0x7f00000000c0)=""/226, 0xe2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 2018/04/15 15:58:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101400, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1, 0x2861, 0x2, 0xfffffffffffffb08, 0x6, 0x3, 0x5, 0x6d0, 0x9, 0xffffffffffffffb3, 0x5, 0x4}) 2018/04/15 15:58:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000400)="26660f38381e3219660f759b00000f302e0f01cbf081a70c000800660ffc9608000f09ba2100ed0f352c78"}], 0x1, 0x0, &(0x7f0000000100), 0x96) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000140)=""/50, 0x32, 0x0, &(0x7f0000000000)={0x3, {"ff9b130300"}}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x1) ioctl$TCSBRKP(r3, 0x5425, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000002c0)={0x0, 0x105000}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000270263817ad779010000000100000000"], 0x14}, 0x1}, 0x0) r1 = socket(0xa, 0x80806, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'tunl0\x00', 0xfffffffffffffdcd}) 2018/04/15 15:58:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) 2018/04/15 15:58:15 executing program 6 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 182.985964] tunl0: Invalid MTU -563 requested, hw min 0 [ 183.011952] tunl0: Invalid MTU -563 requested, hw min 0 [ 183.031930] FAULT_INJECTION: forcing a failure. [ 183.031930] name failslab, interval 1, probability 0, space 0, times 0 [ 183.043354] CPU: 0 PID: 15567 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 183.050205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.059568] Call Trace: [ 183.062177] dump_stack+0x1b9/0x294 [ 183.065834] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.071052] should_fail.cold.4+0xa/0x1a [ 183.075121] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.080225] ? graph_lock+0x170/0x170 [ 183.084025] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.089560] ? find_held_lock+0x36/0x1c0 [ 183.093619] ? __lock_is_held+0xb5/0x140 [ 183.097694] ? check_same_owner+0x320/0x320 [ 183.102008] ? lock_release+0xa10/0xa10 [ 183.105985] ? rcu_note_context_switch+0x710/0x710 [ 183.110917] __should_failslab+0x124/0x180 [ 183.115145] should_failslab+0x9/0x14 [ 183.118933] kmem_cache_alloc+0x2af/0x760 [ 183.123091] mmu_topup_memory_caches+0xf7/0x3a0 [ 183.127756] ? kvm_apic_has_interrupt+0xe1/0x210 [ 183.132516] kvm_mmu_load+0x21/0x10e0 [ 183.136310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.141841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.147373] vcpu_enter_guest+0x3aa1/0x6070 [ 183.151685] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.157214] ? vmcs_load+0x139/0x180 [ 183.160923] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 183.166631] ? kvm_set_msr_common+0x2660/0x2660 [ 183.171297] ? vmx_vcpu_load+0xadd/0xfe0 [ 183.175369] ? __lock_acquire+0x7f5/0x5140 [ 183.179596] ? perf_trace_run_bpf_submit+0x246/0x370 [ 183.184696] ? vmx_vcpu_reset+0x1030/0x1030 [ 183.189015] ? graph_lock+0x170/0x170 [ 183.192810] ? __lock_acquire+0x7f5/0x5140 [ 183.197042] ? perf_trace_run_bpf_submit+0x246/0x370 [ 183.202150] ? __lock_is_held+0xb5/0x140 [ 183.206206] ? lock_acquire+0x1dc/0x520 [ 183.210170] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 183.215181] ? lock_release+0xa10/0xa10 [ 183.219154] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 183.224423] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 183.228909] ? preempt_notifier_dec+0x20/0x20 [ 183.233409] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 183.238241] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 183.243251] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 183.248356] kvm_vcpu_ioctl+0x79d/0x12e0 [ 183.252412] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 183.258114] ? graph_lock+0x170/0x170 [ 183.261906] ? find_held_lock+0x36/0x1c0 [ 183.265970] ? lock_downgrade+0x8e0/0x8e0 [ 183.270116] ? rcu_is_watching+0x85/0x140 [ 183.274255] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 183.279448] ? __fget+0x40c/0x650 [ 183.282895] ? match_held_lock+0x871/0x8b0 [ 183.287123] ? expand_files.part.8+0x9a0/0x9a0 [ 183.291696] ? kasan_check_write+0x14/0x20 [ 183.295924] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 183.300852] ? wait_for_completion+0x870/0x870 [ 183.305426] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 183.310609] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 183.316310] do_vfs_ioctl+0x1cf/0x16a0 [ 183.320195] ? ioctl_preallocate+0x2e0/0x2e0 [ 183.324593] ? fget_raw+0x20/0x20 [ 183.328044] ? __sb_end_write+0xac/0xe0 [ 183.332025] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.337557] ? fput+0x130/0x1a0 [ 183.340833] ? ksys_write+0x1a6/0x250 [ 183.344627] ? security_file_ioctl+0x94/0xc0 [ 183.349036] ksys_ioctl+0xa9/0xd0 [ 183.352491] SyS_ioctl+0x24/0x30 [ 183.355849] ? ksys_ioctl+0xd0/0xd0 [ 183.359468] do_syscall_64+0x29e/0x9d0 [ 183.363345] ? vmalloc_sync_all+0x30/0x30 [ 183.367481] ? _raw_spin_unlock_irq+0x27/0x70 [ 183.371967] ? finish_task_switch+0x1ca/0x810 [ 183.376465] ? syscall_return_slowpath+0x5c0/0x5c0 [ 183.381386] ? syscall_return_slowpath+0x30f/0x5c0 [ 183.386310] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 183.391671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.396510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.401688] RIP: 0033:0x455319 [ 183.404864] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.412564] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 183.419821] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 183.427080] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/15 15:58:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:15 executing program 3: r0 = socket(0x400000010, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xff, 0x80000) listen$netrom(r1, 0x6) recvmsg(r0, &(0x7f0000001340)={&(0x7f0000000000)=@ll, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001240)=""/220, 0xdc}, 0x0) write(r0, &(0x7f00000000c0)="260000005e0009fff185000024070000000e000000f61176d24e631378ba11c05617483fd01b", 0x26) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x1ff, 0x3, 0x3fe00000}}) 2018/04/15 15:58:15 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x68) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x200000) ioctl$LOOP_GET_STATUS(r1, 0x4c02, &(0x7f0000000800)) [ 183.434340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 183.441596] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000000 2018/04/15 15:58:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5f, 0x8000) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0xffffffff, 0x4}, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$alg(r0, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) 2018/04/15 15:58:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xce7}, 0x8, 0x0) open_by_handle_at(r0, &(0x7f0000000180)={0xb9, 0x4, "43a6bceed726bf48cb8da4b9590290acecd2a62bafc5af7945816364d58cc41486ca2677b79e6820aa34e924af993f78c3c614851be92077bdb46f91d72798ab1655c51711d5d16db40fd7d0bffc7e8cba9a274577a79dc2c0a469bb5e4f1e51a34ce9d3924b145e8f455fbe745ce882155d9f91d8561c80cee30f587f42269f0ed41554d10858d7c92c43fd63c58b5b30fde59d469f9ab7e7b41a1520c6a70f41a32a4eec47b5dce0db945b84c477ea62"}, 0x78302) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0fae81050000000f01cf0f070f063e0f09eaec05470d2c01c4c11bd08d000001009a6a170000c4000f01c965f4", 0x2d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/15 15:58:15 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x0) accept$inet(r0, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:16 executing program 7: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)={0x1}, 0x8, 0x0) set_thread_area(&(0x7f0000000000)={0x2, 0x100000, 0x2000, 0x2fffffe, 0xffffffff, 0x80000000, 0x8, 0x401, 0x0, 0x8}) msgrcv(r0, &(0x7f0000745000)={0x0, ""/4096}, 0x12b8, 0xfffffffffffffffc, 0x0) 2018/04/15 15:58:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) getgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f00000003c0)="4c4e9fc40d9d5d58c694bb66e82e064afeabb1d7b7117352877b7c58e3a86b76c7f6e634a67b0e6c1b1fecf7dcd0", &(0x7f0000000400)=""/230}, 0x18) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x7, &(0x7f0000000340)=[r1, r2, r3, r4, r5, r6, r8]) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:16 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000080), 0x8) sendto$llc(r0, &(0x7f0000000100)="32058235656ed6b83c48a9ba944785a9743f6c085525af34c49f19c40cea3872f649b46ad2528e7e5572559447444586e2743fe60e149b1c5c6ba8bdacac341904c397e1dfb805129524a30600a4a3aeab4462c64ef09458836fb0e2992a869a12903c474fb23075f7c8e2512456b0518c7442bb449492ea7cea5286c02b6e8afff13ec74e2e144e27024c7d713697efd4f66ba70e80f0f854cdcabf3a1f1fe662ae3ab94e4518fc3f04bfcea117fdd9207c92ca", 0xb4, 0x4000000, &(0x7f00000001c0)={0x1a, 0x337, 0x6, 0x80000001, 0x7fffffff, 0x400, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) socketpair(0x1f, 0x1, 0x100, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafa, 0x8040050000001) write$evdev(r1, &(0x7f00008c1fd0)=[{{0x77359400}, 0x2, 0x0, 0x400}, {}], 0x30) 2018/04/15 15:58:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) socketpair(0x1, 0x806, 0xfff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) 2018/04/15 15:58:16 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x1}, 0x8) rt_sigaction(0x1, &(0x7f00000000c0)={0x8f17, {0xffffffffffffffe0}, 0x50000001, 0xffffffff}, &(0x7f0000000100), 0x8, &(0x7f0000000140)) rt_sigaction(0x9, &(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000000080)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x703268f2548c996, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000007c0)=0xa2) r3 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="edfcdd80bab3aa86692ae3c2df73af955c39580aee0e2513fe4c83ce9d16acad42605cc70952f2cc", 0x28, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000580)=[{&(0x7f0000000380)="472613d51e14db04d2a46fcbe301a787efaf64147872194ab488fd4c4ed9a1e19a9f6e7d3d0f5fbe110cb01c39b638e87d88f865b03741d2f7449aca01417d5aac279185bb0cbb451a835c7cbec3c62cf7c482b348702f73114359f60fe6d440bee8150dc8977dfae944a6171da5e7674e3c9172e4375413f2f08d47c9409ba6357bb5b0217e7bd82cd429c53430d9293e60d84eab67643973215da54c9fd7fd544d08", 0xa3}, {&(0x7f0000000440)="40b80ffb90390542448aadd68036a24d66eafb900bf2fabf914d4515fefeb43463b8d3b9253b789362841a0d5ca3bafd7ec59b2254389668b30363f47ba097d9bc4456723bd00f71a52228dbdd9dbce07bd3399ac872fa863b7fcc57774a8177a3926b90c5055f4269750d60fc95a5ad45ac871b286986ddb8d2153bfe8735d374f0a6054eaf42c3f57764a13f092adb8c2db1", 0x93}, {&(0x7f0000000500)="f584ae84cb9678c3e8b7da0d20c4e754e42ca2585efd299036e904fd325b53ee99b04dc61c9ef524087f170efc8ba40e29f63dae818c2772022b2d8f3f8c3c8c6ff504645bc4482ad0edf6a9ae3e765c7e39a761572daf2f1565c40013", 0x5d}], 0x3, r4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x7f, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000780)={r5, 0x7852}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r6, 0x7ff, 0x1, 0xff, 0x7, 0xf490}, 0x14) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000001c0)) 2018/04/15 15:58:16 executing program 6 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 184.409552] FAULT_INJECTION: forcing a failure. [ 184.409552] name failslab, interval 1, probability 0, space 0, times 0 [ 184.420888] CPU: 0 PID: 15623 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 184.427742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.437108] Call Trace: [ 184.439719] dump_stack+0x1b9/0x294 [ 184.443378] ? dump_stack_print_info.cold.2+0x52/0x52 [ 184.448593] ? __save_stack_trace+0x7e/0xd0 [ 184.452963] should_fail.cold.4+0xa/0x1a [ 184.457051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.462176] ? kasan_kmalloc+0xc4/0xe0 [ 184.466081] ? kasan_slab_alloc+0x12/0x20 [ 184.470250] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 184.475112] ? kvm_mmu_load+0x21/0x10e0 [ 184.479107] ? vcpu_enter_guest+0x3aa1/0x6070 [ 184.483616] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 184.488650] ? graph_lock+0x170/0x170 [ 184.492482] ? do_syscall_64+0x29e/0x9d0 [ 184.496564] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.501964] ? find_held_lock+0x36/0x1c0 [ 184.506055] ? __lock_is_held+0xb5/0x140 [ 184.510166] ? check_same_owner+0x320/0x320 [ 184.514516] ? rcu_note_context_switch+0x710/0x710 [ 184.519481] __should_failslab+0x124/0x180 [ 184.523748] should_failslab+0x9/0x14 [ 184.527567] kmem_cache_alloc+0x2af/0x760 [ 184.531755] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 184.536630] mmu_topup_memory_caches+0xf7/0x3a0 [ 184.541320] ? kvm_apic_has_interrupt+0xe1/0x210 [ 184.546106] kvm_mmu_load+0x21/0x10e0 [ 184.549930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) r4 = dup3(r2, r1, 0x80000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000000c0)={r5, 0x9}) close(r2) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r6 = dup3(r3, r0, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f35260f01c80fa0b8bf008ed864643e260fc76f000f01d1f3e1490fc75f1c66b9800000c00f326635010000000f30670f2389", 0x33}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/04/15 15:58:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = semget(0x1, 0x2, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000080)=""/161) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7fff, 0x400000) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:16 executing program 2: syz_open_dev$sndpcmp(&(0x7f00000010c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x50000, 0x5) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) syz_open_dev$sndpcmc(&(0x7f0000001080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x100) 2018/04/15 15:58:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x5f, 0x23, &(0x7f0000000200)="720bfce358c397e74371dd884a523ceefa281cfb5e1c52ff7375c78cc21dbf98bbdaeadc4b8eccfb3f006986fca2fac1720d9f90aaf090ada912bf89ea08ba160846701f7c8e1423ab45960238b82f0a710531ae4d94ee829fade2a0b8ccdd", &(0x7f00000001c0)=""/35, 0x8, 0x3}, 0x2ce) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)) 2018/04/15 15:58:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x1, 0x40) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180)=0x40, 0x4) mq_timedreceive(r3, &(0x7f0000000240)=""/185, 0xb9, 0x3, &(0x7f0000000300)) fallocate(r0, 0x3, 0x1, 0x1f) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bpq0\x00', 0x4}) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r3, &(0x7f0000000480)=""/175, 0xaf, 0x10000, &(0x7f0000000540)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) setitimer(0x2, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x40) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000100)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0xfffffffffffffc01}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000400)={r5, 0x5, 0x4, 0x4}, &(0x7f0000000440)=0x10) 2018/04/15 15:58:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) connect$nfc_raw(r0, &(0x7f00000000c0)={0x27, 0x0, 0x2}, 0x10) 2018/04/15 15:58:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 184.555493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.561068] vcpu_enter_guest+0x3aa1/0x6070 [ 184.565412] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 184.570980] ? vmcs_load+0x139/0x180 [ 184.574723] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 184.580466] ? kvm_set_msr_common+0x2660/0x2660 [ 184.585158] ? vmx_vcpu_load+0xadd/0xfe0 [ 184.589743] ? __lock_acquire+0x7f5/0x5140 2018/04/15 15:58:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x3ff, 0x6}, {0x10001, 0x678000}, 0x10001, 0x6, 0x1}) [ 184.589795] ? perf_trace_run_bpf_submit+0x246/0x370 2018/04/15 15:58:16 executing program 7: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000480)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000500)=0x80, 0x80800) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x4, 0x20200) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000440), 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='Ghreaded\x00', 0x1) ioctl$int_in(r1, 0x5473, &(0x7f0000000080)=0x5) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=""/235, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=""/233, 0xafadb4cadfaad89}) [ 184.589819] ? vmx_vcpu_reset+0x1030/0x1030 [ 184.589835] ? graph_lock+0x170/0x170 [ 184.589850] ? __lock_acquire+0x7f5/0x5140 [ 184.589870] ? perf_trace_run_bpf_submit+0x246/0x370 [ 184.589905] ? __lock_is_held+0xb5/0x140 [ 184.589930] ? lock_acquire+0x1dc/0x520 [ 184.589954] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 184.589982] ? lock_release+0xa10/0xa10 [ 184.590001] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 184.590020] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 184.590036] ? preempt_notifier_dec+0x20/0x20 [ 184.590073] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 184.590089] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 184.590110] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 184.590143] kvm_vcpu_ioctl+0x79d/0x12e0 [ 184.590168] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 184.590186] ? graph_lock+0x170/0x170 [ 184.590207] ? find_held_lock+0x36/0x1c0 [ 184.590244] ? lock_downgrade+0x8e0/0x8e0 [ 184.590276] ? rcu_is_watching+0x85/0x140 [ 184.590295] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 184.590331] ? __fget+0x40c/0x650 [ 184.590352] ? match_held_lock+0x871/0x8b0 [ 184.590373] ? expand_files.part.8+0x9a0/0x9a0 [ 184.590391] ? kasan_check_write+0x14/0x20 [ 184.590411] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 184.590437] ? wait_for_completion+0x870/0x870 [ 184.590457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 184.590478] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 184.590498] do_vfs_ioctl+0x1cf/0x16a0 [ 184.590527] ? ioctl_preallocate+0x2e0/0x2e0 [ 184.590548] ? fget_raw+0x20/0x20 [ 184.590570] ? __sb_end_write+0xac/0xe0 [ 184.590597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 184.590611] ? fput+0x130/0x1a0 [ 184.590633] ? ksys_write+0x1a6/0x250 [ 184.590660] ? security_file_ioctl+0x94/0xc0 [ 184.590685] ksys_ioctl+0xa9/0xd0 [ 184.590711] SyS_ioctl+0x24/0x30 [ 184.590727] ? ksys_ioctl+0xd0/0xd0 [ 184.590747] do_syscall_64+0x29e/0x9d0 [ 184.590763] ? vmalloc_sync_all+0x30/0x30 [ 184.590780] ? _raw_spin_unlock_irq+0x27/0x70 [ 184.590798] ? finish_task_switch+0x1ca/0x810 [ 184.590819] ? syscall_return_slowpath+0x5c0/0x5c0 [ 184.590841] ? syscall_return_slowpath+0x30f/0x5c0 [ 184.590866] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 184.590891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.590919] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.590932] RIP: 0033:0x455319 [ 184.590942] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.590966] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 184.590976] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 184.590987] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.590996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 184.591007] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000001 2018/04/15 15:58:17 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x8010000080802, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="a53580a8b6480a4855c0b89693bdeb60a7ad662ac220cb5c22bd76e1de4094b254feb36c4dc44cc7f9981e9bc2461978d6a461b1e43bdd9e6ae1bb7e95f677e42ebe893d307adebcec97c7c2cda194510a062cda4688ee0c62900f886afb9da24163099d06fd66e0fd5df051e46e6ef1a4a8e1963300407eae9ad42e51dbaaaf4851bdaabf056be0e75f149016451ca38916798af03ca84610509a91fa1be12ca4", @ANYPTR64, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYPTR64, @ANYRES16=r0, @ANYBLOB="b12376cbbe03d47f4523fbe02998d0a9da5dd62a53aa56f9fc6198fb1a0b368dacc9134f55cda83a2b0abaa2cab12b92e0eb4d4981700542ccc3b32c8545ba51eb2a357720b8e5179a6a5c48c242ed1c66bb998f7e660c4d281d6475158e2b5ff598f9be5d", @ANYPTR, @ANYRES16=r0, @ANYBLOB="ecda51ab8c76cc311cd71a07c9eafcdc0efe3db9b2c05337153ba905767c8021e82b"], @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="8a779ed5801ef2460b2afa8481c6dc4f3501834ad7cc3b013034797b620fbfb40ef77324fd8b8a840b0adc0db8e41cb0bdea685ddc07b4a73a0a09e2ebeb82ce54e114a75f5ed2493e94a887ab728ef125d8ea0a0af129be9f71d24b6c443598b4e3fa305140ac7efece7e18a93f69197b118dda6ef6e6a869880fa35c2d2e8a949af2a8b5008a05b9f00fe89bfd5f32028336d1e3730ccd58707a"], @ANYRES64=r0, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR64], @ANYRES16=r0, @ANYBLOB="948c6ead32bd9d10db9560cb866f33f0da406f5ba477f842cbde02bb1ebacb411c4c5267ff4ff9dacbac26951516671c8738145d4e976c1513ada3453e53f2285317cb1de8d77b2a57b580e07bd5f169eb7ef280c02f36af9efac568d729a844270b345e45e9667e3ee3215639237073b25d562a027cc27a3fc9b974056e93b31c06cba88e0d24cb4ba66883e0965c7f38e695002753a2f2ce2af3d4338b3f0a58f1f41da0629e964e8795586fa9585fdb2af465c789720330c84b6e472899d7bbc3a13f02ccd6847f3d8cd580bc5a304e6b34da4e1cee6ec9030e7fee6ca6036d89", @ANYBLOB="dfd69347dcaeb3d3bff1a0b251f9071863ea8ff5e06950c3ba3ad96acebea2bcfe751ed2848de86b30e0398bdb9dbf47c4b7b8f1083a8dc552ddc62b6d1b926656d77d0c67052abd562330f340c21d2602247820efa806bfaee610f7e50f3eb1f8ed65", @ANYRES32=r0], 0xffffffffffffff97) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000000280)=""/147) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) 2018/04/15 15:58:17 executing program 6 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:17 executing program 4: syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x200) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @multicast2}, &(0x7f0000000340)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0x4e20, 0x1000, 0x4e20, 0x3, 0xa, 0x0, 0x80, 0xc, r1, r3}, {0x7, 0x0, 0x7, 0x4, 0x3, 0x80, 0x3, 0x80000001}, {0xffffffff, 0x8, 0x1, 0x3}, 0x2, 0x6e6bb8, 0x1, 0x1, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x4d5}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x2, 0x2, 0x3, 0x9, 0x3, 0x4}}, 0xe8) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) move_pages(r2, 0x5, &(0x7f0000000100)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x4) r5 = dup(r4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8080000000, 0x0, 0x101, 0x8, 0x2, 0x100, 0x6}, &(0x7f0000000040)=0xffffff3a) ioctl$LOOP_GET_STATUS(r4, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:17 executing program 7: syz_emit_ethernet(0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008060001080006040002aaaaaaaaaa79ffffffff0180c20000007f000001"], 0x0) 2018/04/15 15:58:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:17 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000280)={@mcast2={0xff, 0x2, [], 0x1}, 0x76, r4}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'vcan0\x00', 0x5}) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x203, 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) bind$nfc_llcp(r5, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x5, 0x5, 0x8, "6d0fef9aadce987b2319995a1142baabad109412fc3d0522714879cd95a8b7c62b264b4110c12b53113e9dcfee27ba6b4d8b21518fab2672615f167f87118e", 0x2c}, 0x60) 2018/04/15 15:58:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mq_unlink(&(0x7f0000000040)='^\x00') r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000"}], 0xaaaaaaaaaaaaac0, 0x0, &(0x7f0000000600), 0x100000000000024d) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x5}]}) [ 185.398479] FAULT_INJECTION: forcing a failure. [ 185.398479] name failslab, interval 1, probability 0, space 0, times 0 [ 185.409820] CPU: 0 PID: 15684 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 185.416677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.426047] Call Trace: [ 185.428659] dump_stack+0x1b9/0x294 [ 185.432315] ? dump_stack_print_info.cold.2+0x52/0x52 [ 185.437528] ? perf_trace_lock_acquire+0xe3/0x980 [ 185.442416] should_fail.cold.4+0xa/0x1a [ 185.446508] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 185.451633] ? kasan_kmalloc+0xc4/0xe0 [ 185.455548] ? kasan_slab_alloc+0x12/0x20 [ 185.459723] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 185.464594] ? kvm_mmu_load+0x21/0x10e0 [ 185.468588] ? vcpu_enter_guest+0x3aa1/0x6070 [ 185.473097] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 185.478115] ? graph_lock+0x170/0x170 [ 185.481913] ? do_syscall_64+0x29e/0x9d0 [ 185.485972] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.491344] ? find_held_lock+0x36/0x1c0 [ 185.495457] ? __lock_is_held+0xb5/0x140 [ 185.499535] ? check_same_owner+0x320/0x320 [ 185.503852] ? rcu_note_context_switch+0x710/0x710 [ 185.508784] __should_failslab+0x124/0x180 [ 185.513023] should_failslab+0x9/0x14 [ 185.516815] kmem_cache_alloc+0x2af/0x760 [ 185.520965] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 185.525803] mmu_topup_memory_caches+0xf7/0x3a0 [ 185.530467] ? kvm_apic_has_interrupt+0xe1/0x210 [ 185.535225] kvm_mmu_load+0x21/0x10e0 [ 185.539025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.544614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.550149] vcpu_enter_guest+0x3aa1/0x6070 [ 185.554466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.559993] ? vmcs_load+0x139/0x180 [ 185.563707] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 185.569419] ? kvm_set_msr_common+0x2660/0x2660 [ 185.574087] ? perf_trace_lock+0x900/0x900 [ 185.578312] ? __lock_acquire+0x7f5/0x5140 [ 185.582544] ? vmx_vcpu_reset+0x1030/0x1030 [ 185.586856] ? graph_lock+0x170/0x170 [ 185.590651] ? __lock_acquire+0x7f5/0x5140 [ 185.594887] ? perf_trace_run_bpf_submit+0x246/0x370 [ 185.599992] ? __lock_is_held+0xb5/0x140 [ 185.604054] ? lock_acquire+0x1dc/0x520 [ 185.608025] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 185.613043] ? lock_release+0xa10/0xa10 [ 185.617012] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 185.622285] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 185.626772] ? preempt_notifier_dec+0x20/0x20 [ 185.631273] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 185.636105] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 185.641117] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 185.646224] kvm_vcpu_ioctl+0x79d/0x12e0 [ 185.650283] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 185.655985] ? graph_lock+0x170/0x170 [ 185.659783] ? find_held_lock+0x36/0x1c0 [ 185.663851] ? lock_downgrade+0x8e0/0x8e0 [ 185.668015] ? rcu_is_watching+0x85/0x140 [ 185.672162] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 185.677357] ? __fget+0x40c/0x650 [ 185.680808] ? match_held_lock+0x871/0x8b0 [ 185.685040] ? expand_files.part.8+0x9a0/0x9a0 [ 185.689613] ? kasan_check_write+0x14/0x20 [ 185.693840] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 185.698769] ? wait_for_completion+0x870/0x870 [ 185.703343] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 185.708528] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 185.714229] do_vfs_ioctl+0x1cf/0x16a0 [ 185.718116] ? ioctl_preallocate+0x2e0/0x2e0 [ 185.722517] ? fget_raw+0x20/0x20 [ 185.725965] ? __sb_end_write+0xac/0xe0 [ 185.729939] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.735464] ? fput+0x130/0x1a0 [ 185.738736] ? ksys_write+0x1a6/0x250 [ 185.742533] ? security_file_ioctl+0x94/0xc0 [ 185.746942] ksys_ioctl+0xa9/0xd0 [ 185.750392] SyS_ioctl+0x24/0x30 [ 185.753748] ? ksys_ioctl+0xd0/0xd0 [ 185.757368] do_syscall_64+0x29e/0x9d0 [ 185.761249] ? vmalloc_sync_all+0x30/0x30 [ 185.765388] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 185.770233] ? syscall_return_slowpath+0x5c0/0x5c0 [ 185.775157] ? syscall_return_slowpath+0x30f/0x5c0 [ 185.780086] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 185.785447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.790291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.795477] RIP: 0033:0x455319 2018/04/15 15:58:17 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x80802) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) io_setup(0x469, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='E', 0x1}]) ftruncate(r0, 0x8) 2018/04/15 15:58:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x80) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x88, 0x718, "5192c79aaacc2ac6569c6ffdf946e1ba77b304dc8f3ddf1c2dfdab47b7475913aa16615e3b3188a514177410709c5cf53306e165df109f9280e78f3b20e48b600db64ade5903dd0473399a9ad29cc567a673474dd59e3f9115327ce34dbacfc04f868f45f8558efce40a977d82c7b74369ed885f7e167d9f80c4c4954716cece"}, &(0x7f0000000140), 0x1400) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 185.798655] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.806361] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 185.813618] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 185.820876] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 185.828136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 185.835396] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000002 2018/04/15 15:58:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x80000000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x14, "e087db6fe9e182cfa868cc5a549f6b84fb5e010e"}, &(0x7f0000000080)=0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x80000001, 0x200, 0x8, 0x1ff, 0x0, 0x10000}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x0, 0x5, [0x35, 0x80000001, 0x0, 0x948, 0x6]}, 0x12) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600000, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000040)={"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"}) 2018/04/15 15:58:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000002f00000027000000000022009500000000000000"], &(0x7f0000000000)="f4206cd55d3174fccd51d063ca3dda5cbf5a01cc7ea92c43b604ffc53727d2d60f55ddeb757cf36a8457125ab48bcbcce4011a423df186cc8d8e6e9a66b1a0a6035a2fc0578cf5aad8b3a24a9c646a37eb26c6212ffc9658f152194b880765d169d550beb059984a10c2", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r1, 0x5}, 0x10) close(r0) ioctl$int_out(r1, 0x2, &(0x7f00000000c0)) 2018/04/15 15:58:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2026, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 2018/04/15 15:58:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:18 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff55, 0x3e5, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bcsh0\x00', 0x2001}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2b, 0x12001) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x4d6a9fed, @empty, 0x7ff}], 0x2c) socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5, 0x3, 0x2d, 0x746d3c0d, 0x5, 0x9, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x400}}, 0x28b, 0x6, 0x0, 0x4, 0x6}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r2, 0xde, "9ec973434083b01ca7e98cd635ceca830dd0471acbd14379b3f599cefe609265ff3fc184ddf21c7abbd12e0c2436973c6d96a02da5f879ce6354b72f7e7e9569f04754b0785266d69ba491c4b36177afc528f8db5fb564c50160dc854da35414ab3c6a7d0eb29aac9232afedae8ee520da615338729bfcbd4d0f90326eabe5993ec4375df42e06835e3a8a6048430f8236484909b759cb502e61cdc609426d919fd2313f936a87cf58f329d22b04cec3021306c420fb0d653d5c9c3b2defc532db3db686fe7f927f75c1524aab22ce474c10b1ad966969e7eea27732ae25"}, &(0x7f0000000340)=0xe6) 2018/04/15 15:58:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x48, 0x0, 0x10003}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x2, r2, 0x10000, 0x2}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0xfffffffffffffff9, 0xe3a3, 0x4, 0x80000001, 0x9, 0x5, 0x10001, 0x7, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r3, 0x4623}, 0x8) 2018/04/15 15:58:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000280)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000140)={@ethernet={0x306, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}}, {&(0x7f0000000000)=""/234, 0xea}, &(0x7f0000000100)}, 0xa0) 2018/04/15 15:58:18 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x240) sendto$llc(r0, &(0x7f0000000080)="9a19d00f2c1c4555b7f86fe029e5a3911ca69e0056660d9f832d713477d1fef20b4ae5b314e553fbeaa626f7bc7d2a365c03e4251cceaca69e54b92197418d1209c8ab9fea61a1a1d86efd12903f0bd4193144baf118850dec092dcb59864ed7e0a9838b2fc28716592ee85dc7f57b6085f7b5da4d55991ff6b78192add4e73a8d7e9d8aaece69e466eb8e5d2d1f0b44c95cd810c55b4cb52df693de1ddbc3ba3270b3f9", 0xa4, 0x20000000, &(0x7f0000000140)={0x1a, 0x33a, 0xff, 0x7, 0x400, 0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000001c0)) 2018/04/15 15:58:18 executing program 6 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 186.365919] FAULT_INJECTION: forcing a failure. [ 186.365919] name failslab, interval 1, probability 0, space 0, times 0 [ 186.377255] CPU: 0 PID: 15730 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 186.384110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.393475] Call Trace: [ 186.396090] dump_stack+0x1b9/0x294 [ 186.399744] ? dump_stack_print_info.cold.2+0x52/0x52 [ 186.404958] ? __save_stack_trace+0x7e/0xd0 [ 186.409316] should_fail.cold.4+0xa/0x1a [ 186.413407] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 186.418532] ? kasan_kmalloc+0xc4/0xe0 [ 186.422438] ? kasan_slab_alloc+0x12/0x20 [ 186.426606] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 186.431465] ? kvm_mmu_load+0x21/0x10e0 [ 186.435461] ? vcpu_enter_guest+0x3aa1/0x6070 [ 186.439975] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 186.445007] ? graph_lock+0x170/0x170 [ 186.448829] ? do_syscall_64+0x29e/0x9d0 [ 186.452909] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.458302] ? find_held_lock+0x36/0x1c0 [ 186.462396] ? __lock_is_held+0xb5/0x140 [ 186.466486] ? check_same_owner+0x320/0x320 [ 186.470820] ? rcu_note_context_switch+0x710/0x710 [ 186.475754] __should_failslab+0x124/0x180 [ 186.479985] should_failslab+0x9/0x14 [ 186.483775] kmem_cache_alloc+0x2af/0x760 [ 186.487926] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 186.492762] mmu_topup_memory_caches+0xf7/0x3a0 [ 186.497424] ? kvm_apic_has_interrupt+0xe1/0x210 [ 186.502179] kvm_mmu_load+0x21/0x10e0 [ 186.505971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.511503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.517040] vcpu_enter_guest+0x3aa1/0x6070 [ 186.521358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 186.526890] ? vmcs_load+0x139/0x180 [ 186.530597] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 186.536309] ? kvm_set_msr_common+0x2660/0x2660 [ 186.540976] ? vmx_vcpu_load+0xadd/0xfe0 [ 186.545033] ? __lock_acquire+0x7f5/0x5140 [ 186.549260] ? perf_trace_run_bpf_submit+0x246/0x370 [ 186.554358] ? vmx_vcpu_reset+0x1030/0x1030 [ 186.558669] ? graph_lock+0x170/0x170 [ 186.562458] ? __lock_acquire+0x7f5/0x5140 [ 186.566687] ? perf_trace_run_bpf_submit+0x246/0x370 [ 186.571795] ? __lock_is_held+0xb5/0x140 [ 186.575853] ? lock_acquire+0x1dc/0x520 [ 186.579818] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 186.584832] ? lock_release+0xa10/0xa10 [ 186.588801] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 186.594070] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 186.598554] ? preempt_notifier_dec+0x20/0x20 [ 186.603055] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 186.607887] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 186.612898] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 186.618000] kvm_vcpu_ioctl+0x79d/0x12e0 [ 186.622063] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 186.627765] ? graph_lock+0x170/0x170 [ 186.631561] ? find_held_lock+0x36/0x1c0 [ 186.635627] ? lock_downgrade+0x8e0/0x8e0 [ 186.639773] ? rcu_is_watching+0x85/0x140 [ 186.643914] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 186.649107] ? __fget+0x40c/0x650 [ 186.652552] ? match_held_lock+0x871/0x8b0 [ 186.656782] ? expand_files.part.8+0x9a0/0x9a0 [ 186.661363] ? kasan_check_write+0x14/0x20 [ 186.665591] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 186.670518] ? wait_for_completion+0x870/0x870 [ 186.675093] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 186.680278] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 186.685997] do_vfs_ioctl+0x1cf/0x16a0 [ 186.689892] ? ioctl_preallocate+0x2e0/0x2e0 [ 186.694297] ? fget_raw+0x20/0x20 [ 186.697744] ? __sb_end_write+0xac/0xe0 [ 186.701716] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 186.707242] ? fput+0x130/0x1a0 [ 186.710514] ? ksys_write+0x1a6/0x250 [ 186.714313] ? security_file_ioctl+0x94/0xc0 [ 186.718719] ksys_ioctl+0xa9/0xd0 [ 186.722176] SyS_ioctl+0x24/0x30 [ 186.725530] ? ksys_ioctl+0xd0/0xd0 [ 186.729151] do_syscall_64+0x29e/0x9d0 [ 186.733033] ? vmalloc_sync_all+0x30/0x30 [ 186.737173] ? _raw_spin_unlock_irq+0x27/0x70 [ 186.741659] ? finish_task_switch+0x1ca/0x810 [ 186.746149] ? syscall_return_slowpath+0x5c0/0x5c0 [ 186.751070] ? syscall_return_slowpath+0x30f/0x5c0 [ 186.755995] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 186.761369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.766209] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.771390] RIP: 0033:0x455319 [ 186.774574] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.782277] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 186.789534] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 186.796805] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 186.804064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80080, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 186.811328] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000003 2018/04/15 15:58:19 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x8f4d}}, 0x4, 0x401, 0x1cd2, 0xfff, 0x7ff}, &(0x7f00000003c0)=0x98) unshare(0x10000000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xa08, 0x1, 0x24a4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e23, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, [0x6, 0x4, 0x0, 0x4, 0x6, 0x5dbbca2d, 0x10001, 0x3, 0x7f, 0x3, 0x844c, 0x3, 0x101, 0x100000001, 0x87e]}, &(0x7f0000000240)=0x100) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000900)) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 2018/04/15 15:58:19 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) 2018/04/15 15:58:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:19 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x400000000000020}) r1 = memfd_create(&(0x7f000003affa)="706f73fb00000000000000566f6573737b0000", 0x0) pwrite64(r1, &(0x7f0000000200)="ab", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000000ff5)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/15 15:58:19 executing program 7: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x84132, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x18) accept4$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/04/15 15:58:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) write$binfmt_aout(r4, &(0x7f00000005c0), 0x20) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x4001, r1, r2, 0xffff, 0x2, 0x48) 2018/04/15 15:58:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4400, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x922c0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x9, 0x80000000, 0x81, 0xfff, 0x0, 0xffff}, 0x100, 0x8, 0x9}) 2018/04/15 15:58:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x11e}]}) 2018/04/15 15:58:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4000000004d032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x4, 0x0, 0xfff]}) 2018/04/15 15:58:19 executing program 6 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:19 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r2, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000000)=@setlink={0x2c, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, [@nested={0x8, 0x1, [@generic='K']}]}]}, 0x2c}, 0x1}, 0x0) 2018/04/15 15:58:19 executing program 5: prctl$getreaper(0x9, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000140)={@rand_addr=0x1, @broadcast=0xffffffff, @multicast1=0xe0000001}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000200)}, 0x10) [ 187.308652] FAULT_INJECTION: forcing a failure. [ 187.308652] name failslab, interval 1, probability 0, space 0, times 0 [ 187.320070] CPU: 0 PID: 15807 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 187.326927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.336297] Call Trace: [ 187.338909] dump_stack+0x1b9/0x294 [ 187.342565] ? dump_stack_print_info.cold.2+0x52/0x52 [ 187.347784] ? __save_stack_trace+0x7e/0xd0 [ 187.352145] should_fail.cold.4+0xa/0x1a [ 187.356237] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 187.361362] ? kasan_kmalloc+0xc4/0xe0 [ 187.365271] ? kasan_slab_alloc+0x12/0x20 [ 187.369445] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 187.374314] ? kvm_mmu_load+0x21/0x10e0 [ 187.378310] ? vcpu_enter_guest+0x3aa1/0x6070 [ 187.382824] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 187.387860] ? graph_lock+0x170/0x170 [ 187.391685] ? do_syscall_64+0x29e/0x9d0 [ 187.395772] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.401159] ? find_held_lock+0x36/0x1c0 [ 187.405254] ? __lock_is_held+0xb5/0x140 [ 187.409336] ? ip_vs_sync_conn+0x1940/0x33a0 [ 187.413800] ? check_same_owner+0x320/0x320 [ 187.418153] ? rcu_note_context_switch+0x710/0x710 [ 187.423122] __should_failslab+0x124/0x180 [ 187.427386] should_failslab+0x9/0x14 [ 187.431208] kmem_cache_alloc+0x2af/0x760 [ 187.435388] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 187.440259] mmu_topup_memory_caches+0xf7/0x3a0 [ 187.444952] ? kvm_apic_has_interrupt+0xe1/0x210 [ 187.449749] kvm_mmu_load+0x21/0x10e0 [ 187.452638] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 187.453563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.453596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.472453] vcpu_enter_guest+0x3aa1/0x6070 [ 187.476796] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.482353] ? vmcs_load+0x139/0x180 [ 187.486091] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 187.491825] ? kvm_set_msr_common+0x2660/0x2660 [ 187.496494] ? vmx_vcpu_load+0xadd/0xfe0 [ 187.500549] ? __lock_acquire+0x7f5/0x5140 [ 187.504775] ? perf_trace_run_bpf_submit+0x246/0x370 [ 187.509875] ? vmx_vcpu_reset+0x1030/0x1030 [ 187.514185] ? graph_lock+0x170/0x170 [ 187.517974] ? __lock_acquire+0x7f5/0x5140 [ 187.522202] ? perf_trace_run_bpf_submit+0x246/0x370 [ 187.527306] ? __lock_is_held+0xb5/0x140 [ 187.531359] ? ip_vs_sync_conn+0x1110/0x33a0 [ 187.535765] ? lock_acquire+0x1dc/0x520 [ 187.539737] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 187.544750] ? lock_release+0xa10/0xa10 [ 187.548720] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 187.553989] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 187.558479] ? preempt_notifier_dec+0x20/0x20 [ 187.562981] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 187.567817] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 187.572824] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 187.577942] kvm_vcpu_ioctl+0x79d/0x12e0 [ 187.581998] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 187.587704] ? graph_lock+0x170/0x170 [ 187.591500] ? find_held_lock+0x36/0x1c0 [ 187.595825] ? lock_downgrade+0x8e0/0x8e0 [ 187.599971] ? rcu_is_watching+0x85/0x140 [ 187.604109] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 187.609300] ? __fget+0x40c/0x650 [ 187.612747] ? match_held_lock+0x871/0x8b0 [ 187.616977] ? expand_files.part.8+0x9a0/0x9a0 [ 187.621551] ? kasan_check_write+0x14/0x20 [ 187.625779] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 187.630704] ? wait_for_completion+0x870/0x870 [ 187.635282] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 187.640462] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 187.646166] do_vfs_ioctl+0x1cf/0x16a0 [ 187.650053] ? ioctl_preallocate+0x2e0/0x2e0 [ 187.654452] ? fget_raw+0x20/0x20 [ 187.657901] ? __sb_end_write+0xac/0xe0 [ 187.661869] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.667404] ? fput+0x130/0x1a0 [ 187.670687] ? ksys_write+0x1a6/0x250 [ 187.674487] ? security_file_ioctl+0x94/0xc0 [ 187.678891] ksys_ioctl+0xa9/0xd0 [ 187.682340] SyS_ioctl+0x24/0x30 [ 187.685694] ? ksys_ioctl+0xd0/0xd0 [ 187.689315] do_syscall_64+0x29e/0x9d0 [ 187.693191] ? vmalloc_sync_all+0x30/0x30 [ 187.697326] ? _raw_spin_unlock_irq+0x27/0x70 [ 187.701814] ? finish_task_switch+0x1ca/0x810 [ 187.706300] ? syscall_return_slowpath+0x5c0/0x5c0 [ 187.711220] ? syscall_return_slowpath+0x30f/0x5c0 [ 187.716147] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 187.721507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.726347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.731527] RIP: 0033:0x455319 [ 187.734709] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.742409] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 187.749665] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 2018/04/15 15:58:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x10007, 0x0, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x6d5128a4, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e20, @loopback=0x7f000001}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x240, 0xff, 0x8000, 0x101, 0x9, &(0x7f0000000040)='tunl0\x00', 0x9, 0xffffffff, 0x101}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000c40)=0xe8) r2 = getpid() r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={r2, r1, r3}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000007b40)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000007c40)=0xe8) sendmmsg(r0, &(0x7f0000009100)=[{{&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="6e3f9ded48d9", 0x6}], 0x1, &(0x7f0000000a80)}, 0x7}, {{&(0x7f0000003340)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x3, 0x3, "4715b25e1e9d8faaabd632c9938521f0c3a9bd1e6474240a4981fd2fe6d92138b1ca7d089685df487f524f8334f453c5d415591ba122399c0b253f3ad14310", 0x2f}, 0x80, &(0x7f0000003640), 0x0, &(0x7f0000003680)=[{0x40, 0x105, 0x5, "dd6a16cb206fb2e6e5a6b27a2b12adda71fe7ee8a72b475e5540a74dfec5f3bb5234876da1acfd7a3c"}], 0x40, 0x4000}, 0x9}, {{&(0x7f0000003900)=@l2={0x1f, 0xfffffffffffffff7, {0xffffffff, 0xa3, 0x4, 0x5, 0x0, 0x5}, 0x8, 0x8}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003980)="6bfb7b8022918449675ea71065c291", 0xf}, {&(0x7f0000003a80)="77e60bcc6b5555c3ac418be8c89fd3781e4d9cea09c6e35fcc90f3877d7bae507e7ae705c91fd90fe589f8a916ba000b2fc803ac9aba9dd19930df4522b0aae1402449a54dfb103d9b22de07865ec8688c7392ea5a4dbacea76f49e14a15f51253d40b498d6e2a3e04636b002ac78e0c91f01634b1d1cfde06ce6f9f043228dbd07412ff3a24cfffb00f27ecb6631d71223d8041f0ba6fc3169911aa337f2e5c114a946995645cd137c667393ef92ac9c95b2708e460b9fbcbe10a057fb8df42e63d43c32ca833586a864d575b691714fa8705c93046e04cdc3f9a315541a6572f57db226f9daf8537adf41267a2505e", 0xf0}, {&(0x7f0000003c00)="ad0256aeec17956ecbb16a6ece5dd0b16d73fb7b99e883dea2ef5c665bea0d7ad8b0d377fe7357aa7db4d41f88961905b993819045977cba6c9404bf9da707e53d408c6640b7d4649da194c17ec0e0f535de6aac8ba70e47e767d881e491a6b34bd5779bfa114a3e034d87289db8bf3fd4a257496b742b514751bb3d109a3bbc7bbbf730a435d81ee98b515e6ece37ff7ec10f17349d36f243a6d1420429631384e2af28a8f1525eb72d4e60fb3ea5eaa09ee579bb10e37eda5dfde4e44559eadf48139e99ed48ebc3debc32a497181a2b5ad49c614a583b1148f383771bc318", 0xe0}], 0x3, &(0x7f0000003d80)=[{0xf8, 0x1, 0x8e, "5d447d024bbad157cb97c2bccef48a2445c19c5127bfb143f5f05d0d5e4398753b39b2257519b4876361885756c03cf85064b0f0daa540c7ff7cee05fafb2ebc2551b5f3159f1d793a5b517dc69c5c076b3861a5b7d6716cab63677e46ddc6dd66cbbcf132d00049b31106d7af73da6a6b3fde6181f344c17c45274050572192712a27ea7dd906c249953bba5dd841d272c16c0b9b818a67cfa86700f9b900635da9f306ff2fd13604ea00536366e35284f5e4d3d79a7cc1d2dc7080bbc978e2ca91a202bcd7654cb3f90a0d47a3b924ecc9a612e6ab291da318a5282eaa1bfff5d0404c7396e021"}, {0xb8, 0x103, 0x81, "123409d58e1c7892d86fbcaaf740af796c7b05c1295f83fd507a05dee4139d45184ecac79c0f1d5180a121de55507d45e63147da6863267a29327e80186d71b8d755f2f842648481afa2c1452da424f55f17b3553a0a931f0381f78cb8847d63a947c23ede2f3e243469d4e461419162b897c93738d5ecc69b8497403b031adc793e71ecec825e24f478df01d527a913cc2c229a261781c64bd41ea08f6ddcf5aa47f1"}, {0x30, 0x114, 0xff, "814e87c2a32107efa3a264b8b119bc407f1f66e8119b3ebfd165c8b287a39e"}], 0x1e0, 0x800}, 0x8}, {{&(0x7f00000067c0)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000007ac0)=[{&(0x7f0000006840)="19908ae8325788860aaea3f251b79c5984d59e43316525d1d8146e8f94fe168a138525cea75209a5bc19110c8096", 0x2e}, {&(0x7f0000006900)="3d6c7b5f2a8a12c1f80badfb54a1c687452c724a6ca7e22a1061cdca8bafd2fe88705f9964b8298871d4a41ae09fb95f8d85d75c568e2b543ec7cb0bcaf3494ddc46", 0x42}, {&(0x7f0000007980)="87379f8be15a093c79fd1ead86aa493f362b6b33a670ac679d4a94dafc0af84d6de55cc88b41f6d98449782ec9f81e8207abc8ce6991fa486bfe03dd7ca265c9eb", 0x41}, {&(0x7f0000007a40)="146944b05be04cb3fb8983b099559f83710c8791d77c2fe8cb8ea595638f03cdf8787ba40a1d347b6242cffb5726e82b4720d29a210e73199360a65892573efc1e0317ece000dace099db3ae4c6d652c2cd076c07ff3dde769922daca63e9e48f8995e508c5a65eefc09f69eaf8b84821e28", 0x72}], 0x4, &(0x7f00000080c0), 0x0, 0x8010}, 0xff}, {{&(0x7f0000007c80)=@ll={0x11, 0x11, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000007e00)="3736de398d7bb518c4e9802b53edc7e62d981d76fc9ba803606173d435b08d46ebbc6a9bce1c3b99603d4a761e5f2716ae5158ccf1399d4ca8a720a14bd5af91c31944033b4165e7fc9bafa2ba00ce037ecf54cfe0db8c92e1a08e1b7ba8f6c5a6c70029a87a236f3a828abaceb5eca4873bcc72ecc974cb6c4940ced4f2ec692416ae0fce40116eca892ece2fe6ebca84d5bfff0e0930621ccc3c213cdc5b2eb6c30aacaf4006cf0674a8da917e68ffd7681de2af086f3e695996f6316a", 0xbe}], 0x1, 0x0, 0x0, 0x1}, 0x1}], 0x5, 0x44000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r5 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r6, 0x7f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x5, 0x914, 0x4000000005}, 0x2c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r7}, 0x2c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x5, 0x1000, 0x5}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, &(0x7f00000001c0), &(0x7f0000000440)=""/78}, 0xfffffffffffffe89) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000eb000000000000000000ba00000025a8a594775583f575085e3b2c45f04f5bc43d468d7af6dc0f3fd48cfbad0bb793d59e3f781ad8841384afd8741db475e8d48b98421b699dbaa7908fc1c48d99a8bc61f9ae0e49865d6406f824bb2edd0965dba283f775080b8d28d718dec85f05d23aa1957d7e0b0203e1ba2caa4a67853437fffb5cbd0a61fd8c190ea989b5a45a97ebbf96c5b5236a2705a7b09005ff81c734a87c035cc5fd1ffa761250c710c0fe483863b3508e14"], &(0x7f0000000180)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f00000038c0)="65260f0012ba2100b00aee100db821018ee0ba4000b8ce36efbaf80c66b82ab93f8f66efbafc0ced36d9f0ad3666360f320f01d1", 0x34}], 0x1, 0x4, &(0x7f00000005c0)=[@efer={0x2, 0x4001}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) setsockopt$inet6_mreq(r8, 0x29, 0x1000001f, &(0x7f0000000340)={@mcast1={0xff, 0x1, [], 0x1}, r10}, 0xfffffffffffffe17) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000380)="064cbe5a93f5132f2dfd335c8320c1f53bb2e8d0cb4b615e957407cae0ede3d2faaead137738f645b26f733c9d166e5cbf642c668a", 0x35) r11 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x4}, 0x20) socket$inet6(0xa, 0x7, 0x81) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="7573652576626f000e5a389334cabe65743028665b6465762a656d315e7b6d696d655f74797065706f7369785f61636c060063636534fef26bec7df94c39ced47cdbba3867ae747b8b1b996fc05277cbb488c32d030aa3bcd060ccfbfcc8c69c3becaf99a7"]) 2018/04/15 15:58:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000200)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1004, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000002c0)=""/189) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x4, 0x4) 2018/04/15 15:58:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r2, 0x4c02, &(0x7f0000000800)) [ 187.756924] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.764192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 187.771462] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000004 [ 187.824393] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 2018/04/15 15:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x80000000000008, &(0x7f00008c3000)=0xfffffffffffffffe, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000001, &(0x7f000007f000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000164000)={0x3ff, 0x3}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) close(r0) 2018/04/15 15:58:20 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x2, 0x8800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x40}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000500)={0x0, 0xff, 0x0, 0x0, 0x0, [], [], [], 0x2}) fremovexattr(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="b30c5bff7db985a02fd0aecf1b5d670008c4fccb3a7451ddc19cad0677369b22ed35aa3bc3fbb8fa45cd41f57074c450ae3a7b9fadb5500c07c74c1fa5be30be6f4c2e4dc471"]) r1 = socket$inet6(0xa, 0x80003, 0x8) sendto$inet6(r1, &(0x7f00009a9000), 0x0, 0x0, &(0x7f000011b000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) r2 = syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='reiserfs\x00', 0x0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000440)=0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0xcf) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0xfffffffffffffffc, 0x0) fcntl$lock(r2, 0x5, &(0x7f00000004c0)={0x0, 0x3, 0x825, 0x10000, r3}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001680)=0x4, 0x4) accept$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r5, 0x1, 0x6}, 0x100000173) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000080)=0x81, 0x8) gettid() r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)="9c12702d21c6d4d413b9b930120acaf45a82175cbf065238d02253b2cd99b6f76f385a1b71780efa0587b4ae6fb219737c066b736fb949a76ebfde76b4bd66e1f9145132c9a58c94271e620763c8c73c848be9be96a0176e1eaa51f864076d51a38b330fd6cfd19d3cd5631ecb1006eed07a3d75bf07d86ba7977fbcd7480a7e9027a9d19f1eba1d799292cfa9a4cb7145b1555c9c8bc264f0fa15938e20eab31b29d8287ea72d8907c386a5ad6db2140b054b868fa94779785726e39b30e12eb80f8ff302cd0e2292bada62e24f55bb783ff6847a4a628482bbf52ead449ec9f506f045aa4a0c63fa5e3eecf157eba9ee41d1e18b17ac4d98241923ee269e1beccb495460581a5f803dfdd0dceb57aa84475cf1d3f7f6a42a4737bb6c4707be216e148fe690923bd0b01ded64b5dfe31c3f8d2feb3c7b17a5c7b4fa9f6b2808c3831b64f65e5f792c1dd47ad2c5990905299841798506a138d42c6a8ffabf1bcafbfaa4c09f5502bc7ee43b7893faba4c1ba705612341bf6d8d7c72520e35dd32218798afe59e6199448c1993309c8e2622a5c9ba0275a0cc6ce6de29817f3a85838544cabf534b9f990f34f4800e65b71f76a2bb1982f27937dfbb1e532feed1ee23509906cfae5d39a4f60e2cef30378122ec08ecd4c939a463b9196d2ec08ec3e527755a3430530da4c7c95a87be7e6363e852fc0d0503c6689a5e438bc786560286a5767abd869b318c304b39c6ed2ff0b4fe6f8e147e05f52b3bd2824313bc8fe6f832a1f2291836390f6a8f75352d2ffe7250ab2d2856c2fdd6f1725b4ae873c681c51a3271ea418c072959b94ef2d86e8e4017be0c58b01993d5be351b7556b9084d5a1a5bf1043e755aee1a9de157b9ab13d825250f30b1d42f8a6af2a736197d6f1d4647223bec246c82b1e39e94f652f88c0d2077bb41d6f91195a377546f6e47969dbe2e7449a6f0bd04c56e411be4e22e71f6f192743b62d1b2f1eb2f4c728db7bfc7dd56aacc244200690e64e25872717746ddf67c3f19aa8057e053c10ac30a4e5ccb730d5ee5df7371e32082b238bf252b69a133e7b40ea3e8568be28f808614c8896b1608115897ccd1dc922fedeff215ac7eccbc1279f1d57c23f2820c9220ce5968d87b908efb82094109315bb623ad1e46e37dad34847c2673da497eb3a68b6642b455c19b609d1ccaffdd2e13b2578a0e2fb3a6454684984739c6a89f97fb0a298c04eb7f437c786729b0fff2846293ad71867c181089b1703e4a3d4ea8d542fd9567b313a6a980d62255f887c30efb1cda574d744634ff028a55b272b92bf5f28d076f0216bf3bb9cdf575e9cf72eb990444660c88ffc01302bb3ae5eaf0da2c0a07361c1ecd98f0906fb34d254c444fa9b901027421f1a714c8f7d30abcd3f68aacdca8d0a3fdaa0ec48063d6ba42aa9d8fdd1f64f6f727eb4105835ebe3a9d96b3f61ac6c25ef947fc1172004ba8458a6a38002986f0227598ff9b4c2bb9a38df8ac42b173f8692bdf56d6cbc532128146a9511cbe6830b763668b0a3151e5103e056cb2e7e00ec6d65684b76cf401a1f7e18921b7a0a26f7557eb994e88163e7bec6c3276744c45a954bd1e9df135645f872e93ff0b5f605c52f11b9c98ccbcdc15f24d3eb9afe38ef56a77ff9740d487d90f5e8f1c4658e7702bf8ae4f882404b106c3390d6d91cb6c707f12db0e8663c5a51e8c15f5c11b4f8f44c177290e5e3281a9695679be16945f0bfa208c003992a00fc604b26d008dfa9447883074153bb3e612b5e7f90d5505f4827714cd83be724c48f76c19555b1e22052e8c508e4de1e5d337130ccd7077795050aed9f885a80bb1f2ab6bd5b3d13adda25212aeac386938ead37ae70976e1292236e2a6a22d9a91c7ba73eee9a4329738407166251cc3ffdfeae3ef228bb773d384cdc54ca8540973c39d465c6a4d40d80b09b34f7856f29332d25c654a0045cd54d350f4de42af9967cf523c758c7705c9b1f5ed82b19c411590bb12769e39e37c496a10996f73b193f862429cf6dd424b9696223aad7a591b2486fb228283bc7f3bca49f88b5b804733396b046c893b681371e3082196f43fa5c10dd3f1d86ee8af8b76430a5bda95c4fc653d344df8b6f3b44c39498f9d26086687500890636388c28982e8e515403dac7f0e30e974051b3d86d4318801c5618e3f2a900e9e33d0b79ad5e0a5e63ace46b25a67547c5ab60f15a476a4a1821a1f22d81d7e2c4b0b13b0215a5adffe9b72bb1433b420ace2bf4f73d0973bd57ef452c05f7441d6cf4e868913ba27ca2ce8728149f1116a38c4df126bb302bbbfafb85db6f586627541b379fe461509cad2f8b276bae85a4d8093a5523a18c5462628083abe8a870f5a47094119cdf879f6471da8f01ff3bb4ed6c3815081776a4fe6f909ebdfe343771f43f14d1dc8917c7294710b99fafa27367b6f00a8c5f088f78aa15ebfa0c79b9f76082df5559bf8b228708aa42bc5c57dc381c30bbd24ba67dc3ccc8ecd3dcdc4aac866d6f50d789280fe5718886739c94cbbf652a60ca91cff210bf8fa69e1e2a561477dc3e0b01d84ec0737ad910338443f371fa55062a6bd5588e07d9448af246a7a560f82a719b720a5afa16047c797341042d90cf177af97abc9ed30a0319bbcc704552bda1275c58e0192641c306b5d4bcd33989d60ecd19aa0eb62bd6debc45d5e6e907380f33a58489811227a1db1e9198ff0d449dadb98f1cb01f0ad2d3719f58cb430ca5a9f73fefbee35770a082004b0e79b82fe917b75edb908f72bccf5131ebec7b9343ae1f6e89693f07536857ff025f6c673da3e606d4bef06792a086777172cfd8301a7277096b41e511349438611ae6e51625406ee96d55fed373357041f66565eba7e1825635f0771252182fb7b089a1503bad75452b03254a83c3d86e077ae89885c730c6c4de9043b56862384ed840e5c5bf0e7380746439f19cde3a2b59fdb0b4d3ed432e181f9b407a05e750af8224784093763eac9b07c495180858cffa7980bb1e42ab6756323bd8d65e36a05a38363c1d14afff2101043859c7a4bf7c7414ef456fa7761e38f65df798eb34c9d7267a353acc243d57891e7b501abe97c8ffc44d38b50647dc573ef748006f02acfe049ce4a74be8bc42fea31995a1dcbf0a3e5adb1981b62dfcfb0d3cd76246f2ac0446c2a4a0ceebc4c8e4ac21ea83c2ec399adeddf9458b443ceae9d403438418c2f37cbddbd5f6ae042bc7d58cc17428147c23d6c98e13db8abc15306605f4999615c9d83a3f9be42ea1477ed9d0c209db5d17b892ba15450022d0ed70150e747fd3aa70cc3f23231ab221b3716f5980087b5acb6cbc806aad6f19d0992dca79a1b7ba1f68c4a608bfcaed6078af679600c70712c3785a6cff05d2aa28b21b391061ac60c5bd7aaa0816d1600eef1abbb1052d48243314830e9d6fe20094d4f21cb899eaa9ccb5de6746221a86a6c432108049b735978e5bb6af4a6795b802758e97574bdec2045c9c81a4e937cb6b9d073aeeb7ae01bd6926383cef946ef66908e486a1e83dfbf3d3e40464d6a5ec77258558ea567bed8d6dc7f1f0cf884d41f8e9b9e9a0ccc71a9cf82df689ad4ab40881d6c43e7c67f6f90295800575d93b76e01ca349865d651d769880c3b9b413f82f8ef8df9da7e3e33100a3e61774a800a00c0820256a9bcc71a5a0c5b03f70fb793efc55dd73c75b8bdd08a8978499fee1d8b0ca302fb5daef657f4684c5ac0bf7fdba967b16ce28678b7711d8db051b45f20a381dfc1e455d0d5d82c137d269d7267b011972e31c3065b9b0f4a4c9ca3495a1bc6e34a15138b8c9efb149b8ef6fe6a20a450d2fd45ea6c19cab2f04c596cef6524d6c1363bef80a620f48cd93d132cea200fddd32fab85533700197aa2bdaedd8bf05f5c2edecec6c1873d5ae688c0cb0213449fb7ccf493ebdcc56bc60418d27adf4fbf8bde2b0889878019f31aeb0218d23f611d5089d09269b5f50fd2922bceacf56aa02a8375cb470079642099e59677348624a4e0ac7b655b85abac42fc7cb5260c89f52eb37a8f3ae42ef7df55dab799786b645a8f449d9026478270ac25c8b77e3136159da1cbf991612b8924ede1bba61e01fdb854b1e5bc1c5d037fa226f456f6fe66547e3d2a662230e84c44d62fc41264a8d628135a7b61447e2ba243c9d953df3d7290a84bd3514f0026e3cc8e2106b1951e7aa3afb60998f4f76a04dccfac1bf2f6104413fdbcca9826eacba5b29365920bc7d38592f3032087c1cab05f4146ab7444e2bb2acd7740f20ed32149322dfed71311a909e485335d975ff9b901d8745eff2ffdce706178714a5f9ab9b432578689b1e06a8e67d7d8225e9c077b6be305864c3a28a3fa4d7247a53e59ee6e23ca6432d88ec1cf3f1dc556b572c76bf24a0a43d8b4db3a52aabb548b028ca80226374faec97fcc92ec214c6068fa4accf463f0dd1844b3c65872a53748a889366dfa348268922c5f2289c332920fa60e385395f067b40beafc5921652767013cc7cbc8be3566e3b2eba3ee92f7de6c7103da2023120e500adb02dfb981972469c7ead94839f0dd5ba429de2a3c175ea6fd6ad5636f35e5415ca9d6e76247638d0f84c195c85cdd6e1906acaffb82693dbe1e45fa23055bb3321ff0fc74659ce1bbbe917e5e74289206d558e934d4beccfaecaf9fa0074fa5d8ae6a5d3ea36ef23e11f07b563a5fc69c480c96d5a934d9777a158a1d7eba52f7e80031ccb301bf1a05a0c6dce552d7d863a7016d37bc35e552a28dbe17829b41310af56c3ebbfede26d0af9eb8f40ccc890a1417e1b7b18baeb869a1e36bceabbf61ad7eb8831a5f5e18e5edebd6df9405680fd7722cff02b5fbade7892b12f699bd4a5737ef53899eae1b9c14f70866b2802eef1d95b4b75606adec2c46398da23d66fe5b38fbb6a16a476a957ffd2fa3ba5deab7adc10a92e46aaa657a014885e485493e1516faae509180cc3964e4839d2dde60adb70b4caf27b7f8442ab2f03670c1602b4066d279c05c6783865675e8ca4f53a30e72630965d0ae744f75d3637aefe66add479e9b65a938fc4610dd8a39095a9565028225ee3821d386b168edbe2a3b3b3fa04b00a87d219f4214c2985f73125f7503fdc1ca94532644e6ac84f0349a369348f6fcab71434bdf32a12ac3f745b31afe0d239f1fff3166572c24c4c849383d3b3c8e23f709ba43f0095b6929ea9c89a1ab984089e73948263944c1fe4696f763348d896fb6c849d74c4e2f11c22a395dcd7663f7d667a1c3bb3e83ba9820bcec0605cf2cb9bf335bd903a56148282d5ea67f838b1e5bd870d4db020674ed1abc3f154cfdd6c59c8a0cb87795f04c4d6a8f9fb8458cb735be06e9c594e09c7483d40be48e9bab30cea1822d4f2ed22f1a86f58ccfad725f89352f6a6174bd6af94bab4356ad0a187854fda0924e8d67481c020b9b8e7959efe6c4ec816de8a4e9c317ed4a168fed8d5e18e9419378fa5ee64523aed9d4d16204be0dc510f41a33957c203fbde52c193f95b9c5f366307ff7959cb3c0e8238d9dff69676537f12cef897ad97fc6ceae64c3fa6efc22afb851c7aca1b25cb22bf13b281c2aa9b78e41727426dbbf11acce3ab1f8ba7b7b4a06c14ba1f1510a7ae141bb6ecdc108602e7c141bebe3332bcecf55647149ab6aa56fa7b297876af2bc86815ee463888b768c6c6f62feefddd8e4b3743373efcfb7ecfcd529e8bb3647560fae8543d6eb19ab3ccd3d941ee83e34d8", 0x1000, 0xfffffffffffffffd) keyctl$revoke(0x3, r6) epoll_wait(r4, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x5, 0x4) set_tid_address(&(0x7f0000000000)) 2018/04/15 15:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffffc0, 0x80000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r2, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x5) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0x333}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/15 15:58:20 executing program 6 (fault-call:6 fault-nth:5): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 188.047615] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 188.087680] FAULT_INJECTION: forcing a failure. [ 188.087680] name failslab, interval 1, probability 0, space 0, times 0 [ 188.089415] REISERFS warning (device loop199): super-6502 reiserfs_getopt: unknown mount option "ª" [ 188.098998] CPU: 0 PID: 15869 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 188.115011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.124379] Call Trace: [ 188.126993] dump_stack+0x1b9/0x294 [ 188.130655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 188.135879] ? __save_stack_trace+0x7e/0xd0 [ 188.140240] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8000, 0x80000) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400400, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'rose0\x00', {0x2, 0x4e23, @rand_addr=0x6}}) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x4, 0x884001) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x400, 0xe4, 0xfffffffffffff001, 0x3, 0x4, 0x6, 0x5}, 0x1c) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x88000) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000040)="88cc10d23892acf7ea76c072593036bf666aff859e3d2f960bcdd6990f8cfee25c5a85763d3445dc5432631b38ec687a7d68") 2018/04/15 15:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 188.144330] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 188.149451] ? kasan_kmalloc+0xc4/0xe0 [ 188.153361] ? kasan_slab_alloc+0x12/0x20 [ 188.157538] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 188.162404] ? kvm_mmu_load+0x21/0x10e0 [ 188.166408] ? vcpu_enter_guest+0x3aa1/0x6070 [ 188.170929] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 188.175992] ? graph_lock+0x170/0x170 [ 188.179836] ? do_syscall_64+0x29e/0x9d0 [ 188.183916] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.189299] ? find_held_lock+0x36/0x1c0 [ 188.193379] ? __lock_is_held+0xb5/0x140 [ 188.197479] ? check_same_owner+0x320/0x320 [ 188.201822] ? rcu_note_context_switch+0x710/0x710 [ 188.206785] __should_failslab+0x124/0x180 [ 188.211038] should_failslab+0x9/0x14 [ 188.214850] kmem_cache_alloc+0x2af/0x760 [ 188.219023] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 188.223911] mmu_topup_memory_caches+0xf7/0x3a0 [ 188.228593] ? kvm_apic_has_interrupt+0xe1/0x210 [ 188.233377] kvm_mmu_load+0x21/0x10e0 [ 188.237196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.243015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x151200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x9, 0x978d, 0x2, 0x7fff, 0x3, 0x3}) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x1ff) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000180)={0x200000000000000, 0x5001, 0x200000000000, 0x8, 0xa}) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) uname(&(0x7f00000000c0)=""/161) 2018/04/15 15:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 188.248576] vcpu_enter_guest+0x3aa1/0x6070 [ 188.252913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.258466] ? vmcs_load+0x139/0x180 [ 188.262199] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 188.267934] ? kvm_set_msr_common+0x2660/0x2660 [ 188.272626] ? vmx_vcpu_load+0xadd/0xfe0 [ 188.276704] ? __lock_acquire+0x7f5/0x5140 [ 188.280950] ? perf_trace_run_bpf_submit+0x246/0x370 [ 188.282261] REISERFS warning (device loop199): reiserfs_fill_super: Cannot allocate commit workqueue [ 188.286066] ? vmx_vcpu_reset+0x1030/0x1030 [ 188.286083] ? graph_lock+0x170/0x170 [ 188.286101] ? __lock_acquire+0x7f5/0x5140 [ 188.307782] ? perf_trace_run_bpf_submit+0x246/0x370 [ 188.312919] ? __lock_is_held+0xb5/0x140 [ 188.317001] ? lock_acquire+0x1dc/0x520 [ 188.320989] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 188.326028] ? lock_release+0xa10/0xa10 [ 188.330017] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 188.335314] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 188.339820] ? preempt_notifier_dec+0x20/0x20 [ 188.344348] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 2018/04/15 15:58:20 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5336, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x6, 0x0, 0x791, "245d405cb39e72c007857767d2d8bea1a3627ca21334de57d926c2ee7002e6825ad059aeb0d0072f12d6b169c9b2b4892f4f09597f7d271b77de46998e1028", 0x1c}, 0x60) 2018/04/15 15:58:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x7, 0x0) alarm(0xffffffffd264b22b) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 188.349204] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 188.354232] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 188.359365] kvm_vcpu_ioctl+0x79d/0x12e0 [ 188.363447] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 188.369172] ? graph_lock+0x170/0x170 [ 188.372990] ? find_held_lock+0x36/0x1c0 [ 188.377082] ? lock_downgrade+0x8e0/0x8e0 [ 188.381261] ? rcu_is_watching+0x85/0x140 [ 188.385426] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 188.390658] ? __fget+0x40c/0x650 [ 188.394134] ? match_held_lock+0x871/0x8b0 [ 188.398391] ? expand_files.part.8+0x9a0/0x9a0 [ 188.402989] ? kasan_check_write+0x14/0x20 [ 188.407241] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 188.412212] ? wait_for_completion+0x870/0x870 [ 188.416814] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 188.422022] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 188.427749] do_vfs_ioctl+0x1cf/0x16a0 [ 188.431666] ? ioctl_preallocate+0x2e0/0x2e0 [ 188.436092] ? fget_raw+0x20/0x20 [ 188.439564] ? __sb_end_write+0xac/0xe0 [ 188.443559] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.449123] ? fput+0x130/0x1a0 [ 188.449148] ? ksys_write+0x1a6/0x250 [ 188.449176] ? security_file_ioctl+0x94/0xc0 [ 188.449203] ksys_ioctl+0xa9/0xd0 [ 188.449228] SyS_ioctl+0x24/0x30 [ 188.449244] ? ksys_ioctl+0xd0/0xd0 [ 188.449262] do_syscall_64+0x29e/0x9d0 [ 188.449280] ? vmalloc_sync_all+0x30/0x30 [ 188.479162] ? _raw_spin_unlock_irq+0x27/0x70 [ 188.483682] ? finish_task_switch+0x1ca/0x810 [ 188.488198] ? syscall_return_slowpath+0x5c0/0x5c0 [ 188.493149] ? syscall_return_slowpath+0x30f/0x5c0 2018/04/15 15:58:20 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x402043, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0xb4, 0x3, 0x2000}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) getpeername$packet(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000003c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000580)={@dev, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast2, @broadcast}, &(0x7f0000000640)=0xc) getpeername$packet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000780)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000045c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000046c0)=0xe8) getsockname(r1, &(0x7f0000004700)=@can={0x0, 0x0}, &(0x7f0000004780)=0x80) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000047c0)={@remote, 0x0}, &(0x7f0000004800)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004840)={0x0, @dev, @rand_addr}, &(0x7f0000004880)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000048c0)={'vcan0\x00', 0x0}) accept$packet(r1, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004940)=0x14) accept$packet(r1, &(0x7f0000007400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000007440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000007500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000007540)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000007640)=0xe8) accept4$packet(r1, &(0x7f0000007780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000077c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000008480)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000084c0)={@local, @loopback, 0x0}, &(0x7f0000008500)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008540)={'bond0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000008640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000008680)=0x14) clock_gettime(0x0, &(0x7f000000b7c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000b6c0)=[{{&(0x7f0000008740)=@ethernet={0x0, @random}, 0x80, &(0x7f0000008980)=[{&(0x7f00000087c0)=""/56, 0x38}, {&(0x7f0000008800)=""/238, 0xee}, {&(0x7f0000008900)=""/110, 0x6e}], 0x3, &(0x7f00000089c0)=""/6, 0x6, 0x2}, 0x800}, {{&(0x7f0000008a00)=@can={0x0, 0x0}, 0x80, &(0x7f0000008b80)=[{&(0x7f0000008a80)=""/247, 0xf7}], 0x1, &(0x7f0000008bc0)=""/192, 0xc0, 0x77}, 0x9}, {{0x0, 0x0, &(0x7f000000a240)=[{&(0x7f0000008c80)=""/145, 0x91}, {&(0x7f0000008d40)=""/184, 0xb8}, {&(0x7f0000008e00)=""/4096, 0x1000}, {&(0x7f0000009e00)=""/140, 0x8c}, {&(0x7f0000009ec0)=""/52, 0x34}, {&(0x7f0000009f00)=""/219, 0xdb}, {&(0x7f000000a000)=""/187, 0xbb}, {&(0x7f000000a0c0)=""/89, 0x59}, {&(0x7f000000a140)=""/183, 0xb7}, {&(0x7f000000a200)=""/17, 0x11}], 0xa, &(0x7f000000a300)=""/4096, 0x1000, 0x9}, 0x3}, {{&(0x7f000000b300)=@ethernet={0x0, @random}, 0x80, &(0x7f000000b580)=[{&(0x7f000000b380)=""/215, 0xd7}, {&(0x7f000000b480)=""/71, 0x47}, {&(0x7f000000b500)=""/121, 0x79}], 0x3, &(0x7f000000b5c0)=""/207, 0xcf, 0x2000000000}, 0x40}], 0x4, 0x40010020, &(0x7f000000b800)={r21, r22+30000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000b900)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f000000ba00)=0xe8) accept4$packet(r1, &(0x7f000000ba40)={0x0, 0x0, 0x0}, &(0x7f000000ba80)=0x14, 0x80800) accept4$packet(r1, &(0x7f000000bac0)={0x0, 0x0, 0x0}, &(0x7f000000bb00)=0x14, 0x80000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000bb40)={0x0, @broadcast, @broadcast}, &(0x7f000000bb80)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f000000bd40)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f000000bd80)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f000000bdc0)={@dev, @loopback, 0x0}, &(0x7f000000be00)=0xc) getsockname(r1, &(0x7f000000be40)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000000bec0)=0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000bfc0)={0x0, @local, @rand_addr}, &(0x7f000000c000)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000c040)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000c080)={'nr0\x00', 0x0}) accept$packet(r1, &(0x7f000000c180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000000c1c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000c300)={0x0, @remote, @rand_addr}, &(0x7f000000c340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000c440)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f000000c540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000c580)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f000000c680)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f000000ddc0)={@multicast1, @broadcast, 0x0}, &(0x7f000000de00)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000ea40)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f000000ea00)={&(0x7f000000de40)={0xbc0, r0, 0x700, 0x70bd29, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r2}, {0x170, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x72d1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x190, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0xc63200000000000, 0x633, 0x5, 0x800}, {0x8000, 0x800, 0x10000, 0xffffffffffffff01}, {0x702750a5, 0x9, 0xe938, 0x5fc7}, {0x7fffffff, 0x1000, 0x1000000000, 0x5}, {0x4f4, 0x5, 0x6, 0x1f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1b8, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0xffffffff, 0x3, 0x2, 0xfffffffeffffffff}, {0xe8, 0x5, 0x13}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x100, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x101, 0x7, 0x8000, 0x2}, {0x2, 0x3, 0x4c9e, 0x1000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x200}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r18}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffffffff87a3}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r26}, {0x4, 0x2}}, {{0x8, 0x1, r27}, {0x27c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r30}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r31}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r33}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r35}, {0x1a0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r36}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r37}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffff}}}]}}]}, 0xbc0}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) r39 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x6}, 0x48, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 'syz_tun\x00'}) keyctl$setperm(0x5, r39, 0x4002000) r40 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_GET_STATUS(r40, 0x125f, &(0x7f0000000800)) [ 188.498107] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 188.503491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 188.508359] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.513562] RIP: 0033:0x455319 [ 188.516757] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.524480] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 188.531761] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 188.539041] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/15 15:58:20 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r2, 0x4c02, &(0x7f0000000800)) [ 188.546329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 188.553610] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000005 2018/04/15 15:58:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000f39fff)='2', 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000fdfffc)=0x18, 0x4) write(r1, &(0x7f0000019f97)='c', 0x1) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001e000), 0x0, &(0x7f0000019000)}, 0x1ffe) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x2002}) 2018/04/15 15:58:20 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:20 executing program 6 (fault-call:6 fault-nth:6): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffd, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 188.785093] FAULT_INJECTION: forcing a failure. [ 188.785093] name failslab, interval 1, probability 0, space 0, times 0 [ 188.796425] CPU: 0 PID: 15940 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 188.803280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.812649] Call Trace: [ 188.815264] dump_stack+0x1b9/0x294 [ 188.818925] ? dump_stack_print_info.cold.2+0x52/0x52 [ 188.824141] ? __save_stack_trace+0x7e/0xd0 [ 188.828507] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000400)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80dc5521, &(0x7f0000000040)=""/218) 2018/04/15 15:58:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x3f, 0x8) 2018/04/15 15:58:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000000c0)={0x6, 0x1, 0x80000001, 0x100000000, &(0x7f0000000080)=[{}]}) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r2 = fcntl$dupfd(r0, 0x0, r0) connect$ipx(r2, &(0x7f0000000000)={0x4, 0x0, 0x0, "1dae14880a05", 0x6}, 0x10) 2018/04/15 15:58:21 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) umount2(&(0x7f0000001180)='./file0\x00', 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x8800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in=@rand_addr}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000840)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr}, @in6={0xa, 0x4e22, 0x7ff, @local={0xfe, 0x80, [], 0xaa}, 0x5}, @in6={0xa, 0x4e23, 0x7fff, @loopback={0x0, 0x1}, 0x50ae}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21, @broadcast=0xffffffff}], 0x78) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0xfffffffffffffff7, 0x2}, 0x10) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) [ 188.832598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 188.838251] ? kasan_kmalloc+0xc4/0xe0 [ 188.842157] ? kasan_slab_alloc+0x12/0x20 [ 188.846326] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 188.851186] ? kvm_mmu_load+0x21/0x10e0 [ 188.855181] ? vcpu_enter_guest+0x3aa1/0x6070 [ 188.859701] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 188.864743] ? graph_lock+0x170/0x170 [ 188.868562] ? do_syscall_64+0x29e/0x9d0 [ 188.872641] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.878032] ? find_held_lock+0x36/0x1c0 [ 188.882123] ? __lock_is_held+0xb5/0x140 [ 188.886227] ? check_same_owner+0x320/0x320 [ 188.890578] ? rcu_note_context_switch+0x710/0x710 [ 188.895551] __should_failslab+0x124/0x180 [ 188.899817] should_failslab+0x9/0x14 [ 188.903647] kmem_cache_alloc+0x2af/0x760 [ 188.907830] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 188.912704] mmu_topup_memory_caches+0xf7/0x3a0 [ 188.917399] ? kvm_apic_has_interrupt+0xe1/0x210 [ 188.922189] kvm_mmu_load+0x21/0x10e0 [ 188.926017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:21 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x60, &(0x7f0000000280)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x1}, 0x8) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x400000000000002, 0xfffffffffffffffd) ioctl$LOOP_GET_STATUS(r2, 0x125f, &(0x7f0000000800)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000200)={0x5, 0x6, 0x6, 0x47, &(0x7f0000000040)=""/71, 0xa6, &(0x7f00000000c0)=""/166, 0x6d, &(0x7f0000000180)=""/109}) 2018/04/15 15:58:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="3f727289dcf123aa5827b0a3784cc3776d17e9d45829db08fdf92bab6e89e866734a232b65cae5acafa38d13da47cc11a94fc54f9070bea2f7f3202a89d024f74dfe96c18c9038eac565b2c60054ba90758917808ac690b03b78c90c53ca07ec3ae37676ee7460e42c07d6d4906757633c83eed72c2005c3136b7278f2b25fd871d6018eef71e748ecba07cdc92466c10880ad9e524a444ae19ccd7f1a23", 0x9e}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x198, 0x4000000}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="38f510d6f0e128ea53976939d132a228c12a3e3ab5af473818b32554794bcedaba239d9a02725e66e60f0c22a7120a1c6a0295aa881cba4d2325a489c8b3ccfd486562a74c4b5bc4ae15141ecb9ed39dcf684c49eea8cab91856f2ce0f733a3380dcff75e8952c7fea1a5e518d281b52a172a0d3c5aa7590689f80bee6600ffc21cb8be4cb132a2765a45239f4e95a2521e3c766b16ab7e07510521125c35d14af526627d3613cbd80e6b116047ff6f58a8e303e3750fb91b73f0e2db7939b2a3a8a22b2c3a170", 0xc7}, {&(0x7f0000000400)="9ba18818889e2c86d48f35b08ad4ef9ac13ba3fc06364df3c4fb679dbbdfd214ddb92d06ed4ea36cc5c30444ca9ec99d9649f599baec0fe8a17a7e4a228eefe12bdbbda48d43323f2aa86faf61b72a7943085081bdeda9f68b4fa4fbbd30f5d76bfe699e5ae79b59d547de5c19174ef9e491f5c9b0ee8dfcb3076871e7e6e8dd5d68d592496bc2a7bae6c54cc57b2e00fffbd33be0d6d6ed21afa522c8c4b41bba8868be3656b8a5d864892b5eea3d1e24a69f4e9d337b966ae2b9c9fe0d8c29565532599e692fff2dac1b40943d61f6bc1d0386b0511befe8ad11a8b31712a6593dc28c68c4a46176590a1497664b", 0xef}], 0x2, &(0x7f0000000540)=[@iv={0x100, 0x117, 0x2, 0xeb, "60821f7341923c4b0762732c3cd0315642ed7f67b6b29ca6906653331aa2e615838f652ef5e7ba7a1e760950883ba6d9601210675820ef8c72676d594fd93b29cfcc6d4ac295a0b4b256780de6a12dec36e19ceace52729e65c29920aba16c68b0ea8ef050e4e646073aecd5e45549221cebb050a39894fab65084e873c0b13e78bb5995562dd798af3fbf238d9920da02c4ff9f239aed7372f1e5a3953ee3ad5210a3b8b791d6a675b0cfc56939cd05dd0997012c5b64556a01dc68400f01b38c1010dc437367fc89c5d14d2a474db158b99d7d2b156ad5844c30b1cde01ee6259cb29461d5f9669c59ec"}, @iv={0xf0, 0x117, 0x2, 0xda, "e9a25a4e21833c319cba726c2f6998284d35c79b448160ec419f411651661a8c495606b32492131457e7c097cb13adfbb791653f0f4af29b7eb0d1b7cbf7865396cf70a8b148f55b982531feec19a299616a3774c263ce7ff351c82fe8530a65debb1fc556fb7a01ccf1af440eb71c1458c188611b270c8015130f46b234c233b9f507dd7163808695711bf6d5ad1087514f5969df744b0b364fda886462a1a0c69e8d1b281e595a71a13778dd566d8233dac712ada119a1e40f0161d2117e53e371f0844fce612740385ea02913cebabb8bf287ff2250d15722"}], 0x1f0, 0x20000000}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="ad5c9b286ae52321cf8013d7beb5de2010fea0e5b65184948652bb6c2a8e1aa3736751e8436d7a2721bfe2cb59ec72de15c978313c4233e254647e2787eaf201e6838c80411de5e917a0897e34750cb9dae68981498e75cdde56f44cc02269e05455fb943e3cf70ddc13ee32ae871589d947218b9899f607044b3d44a545576526c92edbd538bcd8948ab814eb230f38513f3d3f38988db64cd45423704a884d6a9baf07c8d1daa827a6", 0xaa}, {&(0x7f0000000800)="79ccd6a8493c846c0b664a3b00b4e724465de8b760b2626ad137953b97a8b648e2b33cddca966bfa65ebb3f90e23f7b086c3f79b6f69bc63fc7bf38b404ad29b827eb2ebbc935b7f74a0b3476e48734a750d6817dcd776a3d7a3bae4cb0d730a484b", 0x62}, {&(0x7f0000000880)="e82618f4bdc013faba7ec0d3fb4c4ffefb13c3a084daeb71", 0x18}, {&(0x7f00000008c0)="44a110c0cdfd50c577f5a0fbff51cd976fb291c3253fe4f3d30f32689e9837be665b8fc7f9f4b573939d5d85904de5a0665acb5fbd596b33a027ff74a3e0a262a325fd8e0387c67af1ad299f12f074786cdaa9b962fe2b3495430fd4cb93c276b86dae3d6da49bee65735c3524fe77d6a1097b06af598f57f262d24cade49d0c6c1f371e463fdfcfdabe52bb6d5859f85e455aff1f6d78b9e436b501c2e36032b3d33ee9f74a21972624cd9fb7888d60d89e9bed191a99e95bc2f5dfec80ebbe670668a2d7505cf8cbd78b08fb099f4f9085d045b26ce1c370cde2f52648b8893e48f78695ba673541561823aef034a696d86ceaeccfb67541", 0xf9}, {&(0x7f00000009c0)="161a849bf2f69d2968cf82d9c22570419e7bd0", 0x13}, {&(0x7f0000000a00)="5a17b28f13b06f4149", 0x9}], 0x6, &(0x7f0000000ac0)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3}], 0x30, 0x10}, {0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000b00)="39f6bbbd1e3fa3f671a750509bfe8380a75fcdf9782510aa7fcd580b18577884082a325ecfcdb4183276ef1862351ba4c633b05744c6c61b9878c8a365d18543b61ff8409d3f57a03e5428276ea690421f3b9f0154d57f87bf8a3f18d93cf047198b3b92592d41a1fe9b95da6319fb49c9496c472b0ccd6f89f9b49a457ccfac09c7", 0x82}, {&(0x7f0000000bc0)="765819964e1e135073fb5c8a784b134575c3c1ab256a5ad729945a839639543fe2d850f0ef41eb0bff94a866b122af19b10a52a6edfba866307c342d3027fca0ae85a6e03df66dc99f138dad5e4699eaee788ca8c8b6662270a62bc71029a893a27c6021043fec952621eb3529bb1a54a4dd95657acf44cac0be6777499088fd76ada72e7659b8417a5176ec6705032ec8668aac0e5acd684558be967b", 0x9d}, {&(0x7f0000000c80)="8ecc74715fa87ae11bac9d3164f6102377ffe08d8115823b660e03301af594cb1f09d589ec5b7c6b9bb2973a24dbeede5e9c2d075094f3c7bbc4cb2c218f05dc055c20353ce12abde03fd8b19427bbeedeb756bc4429c51687888cb80d3a3ec2d822d4c62f6db42e49dd54519b3fcb3de70a2495873ae90c79c4d0318189f022b44ff0c97104b4c24d39fbe007683446c05e1af69730cf10c6ca515016bf0a1b0d5f0c0a721366b48d9ce67ef6109159af74ec6e9e2a5f8d93ee6db24435eca771898a65a5c361a0c2e466861847fbe810990a1e38716037b76cb12ae7", 0xdd}, {&(0x7f0000000d80)="0babda742247d15c93b597a2b38ebf021ac6466e343ce9de8ff997937525dd9bab99063451777bc5d00ea8586fd91b1754d42bf6dd41e1823c068bed3bac3478197e8eb26fa13284c3842dd205535a7fc103b9ce3407cc2553e66ee41a731a96acfc9d3f2379f7e54462ba474cd3805dfe552a6ccbb40a3936d637b85dbabe5a19beab6b6feeba18dd79bca3307f41ea95069fe8f05ea83557941a629707ba370cdb2762c5d4db62117b20551250bc28f17789ce7789fc44cd9c892943f993a3c69fed9fbbf532c5a974dfc59b195f2b52471a2c7b936bc800fa0a6c9288be402ed0088e82bdbc3eaf018f4bf82b9048311c354b358b101e38ca563ee91d519c3acbe9eafb0e795c6b364b1517db0aeee2bdb62c1b0f437ac2c331cbcfe4b5bca3c84bec4e723256a72f0c2540d46b76869a1192dd192de2e741b5d41f7f02c3aaf7518c17e180cd186227762265684fcdbe5b2417ea70764f844295494fe3e27c37b160fdaa608467ce38e4d181791ec5746328eb31d4c54d89bb78ddc8355eebcbc99ccc742eeb54e273681c53cae2d2199e39ed8570f57eeb7cedbd26140c0a9edb29d44bdb13d10a2c558673f59996a8082eb259c8a21ed6474c76a155992d4d97bf0b59b4b9240c743abe6bb481827df6a9e3e4ba484d320197d3d5572104741be15ce9479a11dd4e5b07d254fb2739f49e15bda7c9b773d1c1cc811bb2fd810cffbd3940d36b71c636465251985d98e5e0822bdd8a2235889c2cd6e625fc41c9c09e2f75f8075fa9b0c2e0750f6c17b5ba8b79d1c0e9969dbf6976c013e80f247738a17acea4cba73cec677bebd4440170c48842b7858514525d612e73faa7327d6ce846032be726f6230952fea8c3a6e59de689f07eff61ad09ae1d24b7cba9b5a067f6a4d3f6e22b51f9df8a3317c1a7ddadf66bf2e0d0af1550cbe36060cb0dda1f0a3479acbd824017a5d510c36d0f30a1712ef93fef46c8a00aa19633e82ca7aa3e0d05d81d931ff7ff54ee58ba62731692eb8f5cc5d2f47cc5ce402ee965989efc97c109d6321715c0ec27a35c0c40041e9f2f2c3fe663c20960d74e9bba72f120b844d7c8e31189aa0d29874f8488b97d0d6ff49b0930d9f617374b38a1d5b4f187ff01fb23b58b02386c176d44530af775f212cb3c398020a4df74a5387748b781c279e195eafabff22f1d5a590248bfb298fb0a91593e04b5b6bd2ffd7e3ee5adeed19b2c2e68501031b0d34e8daf6209c75db3f6dad8c6f5c6f4b0f457cf3c301f8a24a2817525a3bec95e87cecd49dee689cb02aa54bc8a8184a3d8895d7b0fce1a57f2157e9f98a1bb85e2f74b9559b9bc4107d224fa220dc1236aba9126d9fd3123c0c841becf16fa5cd45e7b6f8c97c151fb5b5555ea1fb8f486d6a202e7cd03c4e125be5e98e8de67d6ea09937b833ef794582c22ca8b02cc31571b18f0aa5b81c659595c9f09e07d4e133b933f8e8b233f856722d75ac1465bde3c73a21ae42f5974e55b78952df51c858ffd3eba0099cff90dac06ac88f8ca2d9ba50852406ed30e8d7c48ddd412bbf51e116ef5933aad1706adbc733c1c1893421c2b245e3251e3aad6614e9b9eb1285cc908e3776dc703148d4c52fa71727d02a86a68710e76d64fe7330d7bae3b6e289026c7bd4a8e1842880db2e3409628489ceeaa8dc5b76a263f91ce83f56861cb150094e26cb55444f19a40d438f1cb3e4fc141dfb264112422a3e5b4a6c0504381a4d85edf2d6fe566769bbfaffc3b5420438379eca3f43bdf8901e060d134cd0ef4c89eb3da32f1a2bff8b3ec42f5f43e0d2841c138acfe02328df812fdd3c94a122f99a24a6764fbf2d3f10c25f852489918ac1f433684bb112f1524b971702803fedfb623d63ab39ba67e938dba8227bf489032b1e5b9fad4a9099438cf4c3bd4359227d19618ee5496798e85ac16d75546bd774c37c113d743c3c1a5d1114f8b20c067622adac20eac873c736619e4c809df9b2252054dfa63bf3ec57d75789a7d34ad47f7f7f3c6a8b3b4268325aa52a0a8523589d834b82a0d3d43dfe8fb34e9b51f1ff66edcf54ffe8073a7467804d12f0f9a1da455224b1422c5a12d47161ef4d68d3dd71ae99795a8fe908d74a12ffc0060a394892540f9467dca853307cd4e7c97f7b1c5600da5b9e92fafdcdc0e1f90c858d18a447a7e95e38e8b4ef7ca6948935ca62110f4b162cc8ef9a24743535a6b8b263411ec30c56aa168dfdf5a69a87b988c6fdbc9249bfb5c7458f506c3c1dce235d29b7a0e547d964efeaafe3f248bde078485d7763bec54e73ce62fb659812bf2b7f73514c7a2c1405566e16afdfcb459996e99891e9fe244b3696f4f19dc478652573ca1a3c20363579ec9a3af9430ff0bfa825c8a6c61227ecbdbeb07bcd4733fd19aba6ea94494949fe6da56693c3694a7f54725d085fb1320921c0603cacdcf2a91edafa8d0704e5c7b3ef712afaaf0a71dbc86a0c84998af872c6baddc240b286546d1162720b33b5e7a8b19a32ba13b0881906fc66674dd959206e7bd364394e3020e1bb444b071bf7bd4e40c4a6cca18b36f6022dd4c8fd77dce5ab87f4907c49a71b30f109d7aa62280c951f29dcfd19c2c01bfc1ac6359470c9db6771571bc29f5cfc96a682093ba9df3cd85f4cb4f66514a72d45c26ebbf77d189e03a117ee9730fb59ef96c7fd201c1e526e48be94139c0f50ada6e1300ad33816f6ac983bd4390100a47b2492573f017fb22f9d5cf2e5e452a23a02efc55944e2ad3b504179559b99cf6b35e02bd9dd4c3c8d64a29401bbf1beada5d5d278d2b4f0ed86ab7ecf7e1d48633e0fa7e30dd8cdb7cb2ce6115c2b439583c16614a18fca454675c81041541e415e4357462a4d0ebb3db196c543cd17353e4b1af14f1d7e4cc4945c46f57c19b5e92b4b2fd55992b92926376b5622d4881a1ce15f188616db7df3b79118e69f36b84ad0a0b32d369e19d6d99024084b1cd77a783235dda18dec91719f787f3c879b1d6de044f7bd723177613247fa54677402482f5c558c96e49e54adfd5c0cb27903453d477aaf02ec2e0b5020857e63dbfd93d8de71937d1bbafacda29d4ea34d7bb7b46c0f04b34ed1fb99f0469004e750a015625ea979c082a4dc4ad43d521df5387339cd2b0aa2b4003e940f582266ab784e8908cbafdea11cb015b1582cb455a5adbe7c4bea7618956ce3b953ef583fad7c5b730e3171d559064791a5203fcebab924923f727b1f1c8e226930cc001ebf248d6e3a1866e4ac3b1e9d070592e3a1beb4b857ed9136e164a6b6be12e7a99b87cca25c4bd80420c4726b189c4c098e1c49b79098a7365db415b27197b97ef5ae7303dfbce286e84c023f4bf104702c0264fff15205f5a87df5dfbd15e0cb8bd9b3a9210bb262591c7692f1705f214098f3f3122e221b9466cbd2150a2a45e8f0c54c1b2b4c93494c512a6d28d5f40a38e7f84e9086de8b06c9cd537437ce45931bdd562075ee2ee82096c8a940812fdcfdb19b5e6035975bf990a6ac1e157251114d7e42e949f4fb9883a6202f86b78690e7417a43f23d2c00b358395cbf28edb4b528d4165a41967d88347881bf6eaeec0d92ab9e74cb4d58f9cba81ff5280f9bd1dd8fb3f464a817f1d476bc3be89c60b9eb9ecafaf6583cdd3abcdb655c8463b595de9900066f81ef19fc229f8c99608a6a1768be157cefb5f0ac6da22e2f9c140ce70e6f469f1823f3dfdb10c51feb71bf0d6e795c3c0919648a3c1f717b2fe34cb5e6624c9dfa1f8596412beb513346625a31e9cdaf3f4b2b0b8d4070592f1ace8011e9acbd4d6b18cd54fae6ac1dfbda34f216237d449c4744934e36400689762b32087df3760654ee91a5ae9a9ad95f9797d71076d2850e4cab88b08c227a587ffcb4e394a806431faf6352c9cbc0405a70f49a158106f7722dc36f860834646d353ecfefb95f56a5b5047394ecc96867a601e441ed0d9d2bc921d4c0fd9587632e43411621964be99d587851dcc6ec8043c43308b770143b12247a61952c69ba4fe7ab0c0984f9ff0281130af0bf900bf72e7cea28d5de723bc00be81c6ecbebfcc1b45d0e84e6306b186b42c1db8687f61aed790858fff3ee9a35427e259a25f21ab46ad9102f077dedde262387d0edfcd7d6e344a8226d3fdcb3b8038f823a5e52be401a57d777150b5cca10bfa375b67fadc26fcef2c24c4aa959affdb8bccbda5225ac909d4bb4cf50ab4ff7eb8c20da8663d3231c35aa2d8f5233bbe501f9e0f39719c3f55d6dec21b48f34a87a9b911baf66cd107d6598541805e6eb9cfdca30fb3fee3fcd7627fc478e56c4fb4bb04599ad0cd39e640aa78f6232e9de55d4fa14d8a5a6ddacf90ed28298f3e7a8c59f4aa6c84259ff1fa999af4b09c5ca38bfcb9c5d9043c1d9bb0b58e6a6bdbc7d03abcf61ce46be3b6ed7c01983b65648c4ea725d5e6031aa7ef7f5af0a5a50b80f1d46da3d06359327f7249f6b4a7c6ac3056adccfac2fc726a60c69b45510e862e14813cd0a7cca6231ebb95669fdf33758d26ea454fccc7614327da6fae873df9e061af43529333af8de2da6a1d50d1eb5f6639ecde3016a94db5efb273618166b4f112ad96b263a708e8cbdd1fe6d68708368c95d61958eb2a8961616fbc79032d244df72adde4540df5dc4ca54484e691a7f9a65785c346213e02bddb3113785877732c30bbc7802d0f481f703b9b3bb9001fb654402953268c1ca81b5765bcc99d6e252566d75314cdb08e0ac8c5a4750f9e7f1bd41e97569efa58aca644e40d293dfbe07215fc33fbd43ebec7c6ccd0b2607835b21c04b91288139b83a8aa1f80f792782166b7c8d7d1238ada1de30b392b3da6ebdf4f4ce012faf0eaf737a758f17e1d09a38bbd27623f43ccbf47c663202df8b8fd562e17bb55d986aed603eb0e0d02508b48282fe59a3bcacc0de22fc4b6f5d8485fcc464b5acccc286270ee6678d682853e8ba6574fd31ea82ef7b6e1898b7395c5df85f6aaab9c550bd28a5c6093a154d82423ac07469ba07aa8ab9bbe48dfaa8560072c38b3a021abe380d41e6b011a5d46fccace7b81546d42614c2e7825c57b7fabc80b2d18a2d86eeac379592c364d8fe4dd3c462a90d75908f34503e7811f475e555a481b83bc10461674d8a1169ff6c458c93450b5f7e2f025145e60368ee1a04b89fac220619c9dec47b8df2a1328e8b06e71ea25f63579edd261090e8fe057164bafe3cec8508f5ecb2ea1847943fd7c6e9e7ce7b1fd815d2d9bb9ba581a28923d0714067c3de3478b10aea57958c75320b965d556fbd8d11127a9400aa318d58ba5bcbba17b8500270f2857baa9c3fbf22078fd7f0f3de9287548ece60426eba95d594dbcaf338788563297b48075ec9589df11e232bcd0ac2d5a029800fe925b8e849480db57efed527b8f38683a724a88858b80111d6db34f82aa681335af3e2ffce7085f540ee3e1dccdcd634b89e7f1049faa0efb809993b11761d6f0464df8c02dbdfba7001d22e83b8e1423aafb9fcd0214640aed6df99ce837ddf88233fa48c90d6f561c56cf25e0649e2ac0bbc495fed961bc534188e232519f4591cbc6d6a7ee93a49e1339395d225c91e62014758844d7ee0e7a9f4c39da173d552914e260f4da3a7d3d9fb1b5ee54ef665104cde0d72e9e5b7c3d2db35f8ce1dbeea4620ff4d7f36a4a328e6008e1743c6066c39fc7daa6c2a612ee77a49abbbeebdd18afa5d700bb063218d4aa0e67662f751ca01420cf607f415389c6cb3ccac51b", 0x1000}, {&(0x7f0000001d80)="14ce40cad2fdb8a22ac7e698ce255b9177afa00ee5c59adb5c7eb3943e16b1e7fc6f77954335d5c1350e6b84825cd82adebf40dd9a5777a1ac535af53483470f71356b5b143be7893b8583f88de8983bd569966649fdcd6e9c96415b5e9bc078e5953828596f14fa2e34a7c6feb44fb50b6fbb84957c94a060106635edd3666e6dc42435ad6dbf2fc2367d81d8f656ad01f787e9a2fbba59a481b1ec2f3c9831988aee63e71bb6eb2f9f70068a79c9da43e4ff4fdb", 0xb5}, {&(0x7f0000001e40)="3f978f9f786014252e7c741be5145c6840db483c504cd9c958446ec4c6cc53401e4060f7c0eb44358bef573972f1489667bba1172a5c68c4c9ad26342e56c0ed71eed2a1a46d437c98def7675a712ee6cde18e1e5d842af18eb0ed9f52f27b3dc246439d713e8ae1fd0dfdafc71d0d1d55841f79a6b5b61430f63958a00a8c22bcc65cfa15e2dcaa95da1147c933cdee2b22213fef7f13952a422e0518886e3d7f8a3a18de86117d18172d5883b8c48d05d6d6098be4e32641890202ec78dc197c0e63e3e5f6fb9b58145f7e9f6671496204ab994d27", 0xd6}, {&(0x7f0000001f40)="117d6845bec95e852006b37cca79982414a9a8f8a50c8a37496ec82bad8bfc3eac96a3785c5d8303edc92722a401d242d74a9901551f017e3addc14f5b3cf613ff8f38c85c6ef68fb9e020d908162381b8ece80cd8ff05b1637ad24718d560cc7963de65b3113e81717ff8f6403f3fc8b9a3e7", 0x73}], 0x7, 0x0, 0x0, 0x200000c4}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002040)="53c77c53e4989ee24559c3690d02e63ae565a457e98481dc46a4bb7ffed8012aa8d8b3", 0x23}, {&(0x7f0000002080)="d90c84c1ef3fdd6583ce66b908f7f45fd32360ccca2dc2298afe7dbeb5a972c60a8756b5f75fec040bb7c9a9f882f8d8154111684770d3e604e2a3f5c8b73b3d49539fe984896b48a295cb23b1019846214d9d4f8b7a", 0x56}, {&(0x7f0000002100)="42ce267a17553d19f6dd13f5b55ea0ced16e01e546e8c45af9b0e8c1a689ab09b211d4f97d3f0e41a3d9f9d3e0af248a484c742441cfccd2cb727e312170ee205851884e47061e97d1b4a1de4a43f73d2fa36480c4b46e75ca2d2551f05da2b1fe6dd182af73", 0x66}, {&(0x7f0000002180)="d4ba5e56e42cbe76546d92640451414dcfc82ab010efff81ba081a0b9ea3377f10a4470d6a65559907ce6aa0c7e262674001dfbe8d9613b6e7cc3e7f532a6a233dc59f1da79c7c6b420d8d19ff1125b19e70743f6307693acd489713df3d254b1fc0944f9f6cd1306d07965bb51d04e4f5f054384415bc702ffc457a9798d5eb53530358ace5e11171e5dfb0f2787e594a66a92308fd3021feb6c6c15c09a1a3d2440a63ab868fcb42ec63008c5e1e", 0xaf}, {&(0x7f0000002240)="e5083616f54e1fe1669944134c014dc8373072fbbe68311a302aeb27d6c3c70530decfaae93a096d6f8dfe2644bb44aee5ef8c950556e41cf4a99daec5a584091a16a689e4911e2fa2b4e1e90a7238d34f4e2b046c271b4922827a2ba719de3a0b03cc1e10d94972921a29087cad9fd0d2b5f3d833930153fde064a5a0f956808ede24cfbac092901acdfad98f3fd05dd0bbc0de679e2ad968842b6860026a29ef281aefeeb451cb0e87f0f865c537f020e2f3385a48a87996023bfb83aff352959c592dd85f7a6c915a5ed808019d83d836aefcad23be5769e2aa1eee815a6c309aa8132be3", 0xe6}, {&(0x7f0000002340)="9c8eb764b2ce5865cf289863e663b3ef656fce", 0x13}, {&(0x7f0000002380)="6974c63311d5916db01ac9bfab18a9fe2528f83c9aff9502f959d7ab1091c70c24178eda9f78e2cea56c14bd25f3a263130c1aa51962591631dd9f39923effbf8add924c347a067e6b99b3426ec1f2ebde", 0x51}], 0x7, &(0x7f0000002480)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffffb}, @iv={0x80, 0x117, 0x2, 0x6b, "e8bb10f4b5af76da2d1e1c00ba3ae9bcb733dee37b439a2296e7b75bf8d44e78114e03d764c654ec52db4c276ac337ca0a226c2968c6f8ef36f49a91af480509fe8321ab1d80189c97abeb349e3a10d62487450d47ae6508be5e738b4139b294ff1ad0f3e337db02b194a1"}, @iv={0x48, 0x117, 0x2, 0x32, "02c0979aa307bf83726649d73122403a6f429e6296c4440f640a8a96e935d48912bf1f0c4e41448f9625c8a0b58ec989646d"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x170}], 0x5, 0x1) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dff02000000000000000a0009000300001d85685e0000000400ff7e28000000140a43ba16a0aa1c810bb356da5d8060000000060000000029ec2400020cd37ed81cc073", 0x4c}], 0x1, 0x0, 0x4d}, 0x0) [ 188.931586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 188.937160] vcpu_enter_guest+0x3aa1/0x6070 [ 188.941501] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 188.947057] ? vmcs_load+0x139/0x180 [ 188.950801] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 188.956541] ? kvm_set_msr_common+0x2660/0x2660 [ 188.961229] ? vmx_vcpu_load+0xadd/0xfe0 [ 188.965302] ? __lock_acquire+0x7f5/0x5140 [ 188.969553] ? perf_trace_run_bpf_submit+0x246/0x370 [ 188.974675] ? vmx_vcpu_reset+0x1030/0x1030 [ 188.979010] ? graph_lock+0x170/0x170 [ 188.982834] ? __lock_acquire+0x7f5/0x5140 [ 188.987096] ? perf_trace_run_bpf_submit+0x246/0x370 [ 188.992235] ? __lock_is_held+0xb5/0x140 [ 188.996322] ? lock_acquire+0x1dc/0x520 [ 189.000306] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 189.005345] ? lock_release+0xa10/0xa10 [ 189.009337] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 189.014643] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 189.019147] ? preempt_notifier_dec+0x20/0x20 [ 189.023679] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 189.028534] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 189.033570] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 189.038717] kvm_vcpu_ioctl+0x79d/0x12e0 [ 189.042803] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 189.048530] ? graph_lock+0x170/0x170 [ 189.052351] ? find_held_lock+0x36/0x1c0 [ 189.056446] ? lock_downgrade+0x8e0/0x8e0 [ 189.060634] ? rcu_is_watching+0x85/0x140 [ 189.064803] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 189.070032] ? __fget+0x40c/0x650 [ 189.073515] ? match_held_lock+0x871/0x8b0 [ 189.077769] ? expand_files.part.8+0x9a0/0x9a0 [ 189.082360] ? kasan_check_write+0x14/0x20 [ 189.086610] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 189.091580] ? wait_for_completion+0x870/0x870 [ 189.096207] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 189.101421] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 189.107153] do_vfs_ioctl+0x1cf/0x16a0 [ 189.111069] ? ioctl_preallocate+0x2e0/0x2e0 [ 189.115497] ? fget_raw+0x20/0x20 [ 189.118971] ? __sb_end_write+0xac/0xe0 [ 189.122972] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 189.128522] ? fput+0x130/0x1a0 [ 189.131815] ? ksys_write+0x1a6/0x250 [ 189.135640] ? security_file_ioctl+0x94/0xc0 [ 189.140072] ksys_ioctl+0xa9/0xd0 [ 189.143531] SyS_ioctl+0x24/0x30 [ 189.146884] ? ksys_ioctl+0xd0/0xd0 [ 189.150501] do_syscall_64+0x29e/0x9d0 [ 189.154389] ? vmalloc_sync_all+0x30/0x30 [ 189.158533] ? _raw_spin_unlock_irq+0x27/0x70 [ 189.163023] ? finish_task_switch+0x1ca/0x810 [ 189.167529] ? syscall_return_slowpath+0x5c0/0x5c0 [ 189.172459] ? syscall_return_slowpath+0x30f/0x5c0 [ 189.177382] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 189.182747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.187591] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.192767] RIP: 0033:0x455319 [ 189.195966] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.203740] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 189.211035] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 189.218294] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 189.225549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 189.232812] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000006 2018/04/15 15:58:21 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0xb624, 0x62}, 0x2c) r0 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="a396278d3e8bc5f7d92356ea4fc19e4fd53129f91d385bb31ca543656406520ffa8618b2870f38b99b983f8cf8a45e556fdd69cb55aa2d5abcd4bc7d8da303ed141773738d1ee866abece21f1dac9990e48cc0b5f97d29e807cb65016a628dd97110add79ced3c", 0x67, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000480)="49c231eb6d42f333d5c831656c682dd15873c54f52f6493e938e7a19cb55b976d5e9acb74b4b2b001013140520f250d67c502981aa1e7114a4b539c8eeb528a02026912d506a3088fc781314be67f3c79bd11ee0534c0499be9d710da34a9ccc713536d320b8f6fe9ef50bb0df7eabfea15321791b300397a243d66601dfd2eba3b9d6dd10771547ef5b4c3599271a5fbd5322d7bdb87714fd95c222dcbe96fbfc20dc004b6cb609ffcc9dc7473c777b6adf52cb3dd2ecc4bafdf2feba18202f94d8e8cae609c363b7983edd994e5b76c1dba3d6679bbc", 0xd7, 0x0) r2 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001600)={r0, r1, r2}, &(0x7f0000001640)=""/4, 0x4, &(0x7f0000001780)={&(0x7f0000001680)={'sha1-generic\x00'}, &(0x7f00000016c0)="2a3683adadfac43e28efcb3a9e6cbb7c9e324ca8ef44c93e6f82a41d78e05d1926fe7fa09b9a42c38c7d7915c7785184bc5483a4a41cc892788a932bf688c11e5af1f6258c79ccc1d12e1e80bcb95177bd3c9606befb73c4389cbb575b15f0e61387a470c251d726764bebc0e9973b78a44e428998f98a5d8a6712420c3db0ba256cca1f783bdfb06c7d018be8e62cedf6d5ba6e", 0x94}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x3f, 0x7, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x80000000, 0x5, 0x2, 0xa, 0x0, 0x1}, @alu={0x7, 0x401, 0xf, 0x7, 0x7, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x10000, 0x8, 0x6, 0xe, 0xfffffff8, 0x11}, @ldst={0x2, 0x3, 0x6, 0x0, 0xa, 0xfffffffc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x3, 0xb, 0x0, 0x3, 0x9e, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48457b05}, @ldst={0x3, 0x1, 0x2, 0xa, 0x2, 0x47, 0xffffffffffffffff}], {0x95}}, &(0x7f0000000040)='GPm\x00', 0xfffffffffffffffc, 0xad, &(0x7f0000000100)=""/251, 0x10000000000, 0x1}, 0xfffffffffffffedf) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffff93e, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0x2, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x29) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000080)={0xf02, 0x6, 0x0, 0x10001}) 2018/04/15 15:58:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = socket$inet(0x2, 0x6, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r3, 0x4, 0x70bd28, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffe0}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'dummy0\x00', 0x600}) 2018/04/15 15:58:21 executing program 2: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x200}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x1}, &(0x7f0000000180)=0xc) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl(r2, 0x400000040081271, &(0x7f0000000100)) 2018/04/15 15:58:21 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x6, 0x4, 0x7, 0x81]}, &(0x7f00000000c0)=0xc) inotify_init1(0x0) unshare(0x404) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000100)='limits\x00') 2018/04/15 15:58:21 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:21 executing program 6 (fault-call:6 fault-nth:7): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x4001) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1e) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000005, 0x1, 0x8, 0x2, 0x10}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000300), &(0x7f00000004c0)=""/161}, 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x4000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ptrace(0x11, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 2018/04/15 15:58:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 189.564514] FAULT_INJECTION: forcing a failure. [ 189.564514] name failslab, interval 1, probability 0, space 0, times 0 [ 189.575897] CPU: 0 PID: 15986 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 189.582753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.592120] Call Trace: [ 189.594735] dump_stack+0x1b9/0x294 [ 189.598389] ? dump_stack_print_info.cold.2+0x52/0x52 [ 189.603611] ? __save_stack_trace+0x7e/0xd0 [ 189.608414] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x10000, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000280)) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$ipx(r2, &(0x7f0000000240)={0x4, 0x8bd, 0x7f, "41702a118cb0", 0x1c7f}, 0x10) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x0, &(0x7f0000b1c000/0x2000)=nil, 0x1}) munlock(&(0x7f0000b1e000/0x1000)=nil, 0x1000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x80000000, 0x7}, &(0x7f0000000200)=0x8) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) [ 189.612507] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 189.617631] ? kasan_kmalloc+0xc4/0xe0 [ 189.621599] ? kasan_slab_alloc+0x12/0x20 [ 189.625771] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 189.630647] ? kvm_mmu_load+0x21/0x10e0 [ 189.634660] ? vcpu_enter_guest+0x3aa1/0x6070 [ 189.634678] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 189.634698] ? graph_lock+0x170/0x170 [ 189.634716] ? do_syscall_64+0x29e/0x9d0 [ 189.634737] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.634766] ? find_held_lock+0x36/0x1c0 [ 189.634799] ? __lock_is_held+0xb5/0x140 [ 189.634848] ? check_same_owner+0x320/0x320 [ 189.634871] ? rcu_note_context_switch+0x710/0x710 [ 189.634902] __should_failslab+0x124/0x180 [ 189.634923] should_failslab+0x9/0x14 [ 189.634939] kmem_cache_alloc+0x2af/0x760 [ 189.634966] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 189.634994] mmu_topup_memory_caches+0xf7/0x3a0 [ 189.635013] ? kvm_apic_has_interrupt+0xe1/0x210 [ 189.635041] kvm_mmu_load+0x21/0x10e0 [ 189.635060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.635083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 189.635107] vcpu_enter_guest+0x3aa1/0x6070 [ 189.635125] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 189.635142] ? vmcs_load+0x139/0x180 [ 189.635164] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 189.635191] ? kvm_set_msr_common+0x2660/0x2660 [ 189.635214] ? vmx_vcpu_load+0xadd/0xfe0 [ 189.635230] ? __lock_acquire+0x7f5/0x5140 [ 189.635246] ? perf_trace_run_bpf_submit+0x246/0x370 [ 189.635273] ? vmx_vcpu_reset+0x1030/0x1030 [ 189.635290] ? graph_lock+0x170/0x170 [ 189.635307] ? __lock_acquire+0x7f5/0x5140 [ 189.635332] ? perf_trace_run_bpf_submit+0x246/0x370 [ 189.635368] ? __lock_is_held+0xb5/0x140 [ 189.635396] ? lock_acquire+0x1dc/0x520 [ 189.635412] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 189.635438] ? lock_release+0xa10/0xa10 [ 189.635457] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 189.635476] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 189.635494] ? preempt_notifier_dec+0x20/0x20 [ 189.635533] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 189.635555] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 189.635578] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 189.635617] kvm_vcpu_ioctl+0x79d/0x12e0 [ 189.635647] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 189.635667] ? graph_lock+0x170/0x170 [ 189.635689] ? find_held_lock+0x36/0x1c0 [ 189.635726] ? lock_downgrade+0x8e0/0x8e0 [ 189.635757] ? rcu_is_watching+0x85/0x140 [ 189.635777] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 189.635813] ? __fget+0x40c/0x650 [ 189.635836] ? match_held_lock+0x871/0x8b0 [ 189.635857] ? expand_files.part.8+0x9a0/0x9a0 [ 189.635875] ? kasan_check_write+0x14/0x20 [ 189.635894] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 189.635921] ? wait_for_completion+0x870/0x870 [ 189.635940] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 189.635961] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 189.635981] do_vfs_ioctl+0x1cf/0x16a0 [ 189.636010] ? ioctl_preallocate+0x2e0/0x2e0 [ 189.636031] ? fget_raw+0x20/0x20 [ 189.636052] ? __sb_end_write+0xac/0xe0 [ 189.636074] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 189.906732] ? fput+0x130/0x1a0 2018/04/15 15:58:22 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 189.906750] ? ksys_write+0x1a6/0x250 [ 189.906769] ? security_file_ioctl+0x94/0xc0 [ 189.906788] ksys_ioctl+0xa9/0xd0 [ 189.906807] SyS_ioctl+0x24/0x30 2018/04/15 15:58:22 executing program 5: dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x200}) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 189.906819] ? ksys_ioctl+0xd0/0xd0 [ 189.906834] do_syscall_64+0x29e/0x9d0 [ 189.906850] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 189.906864] ? syscall_return_slowpath+0x5c0/0x5c0 [ 189.906879] ? syscall_return_slowpath+0x30f/0x5c0 [ 189.906900] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 189.906919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.906940] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.906951] RIP: 0033:0x455319 [ 189.906958] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.906973] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 189.906981] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 189.906988] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/15 15:58:22 executing program 7: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000080)=@ioapic={0x0, 0x0, 0x0, 0x800, 0x0, [{0x1}, {}, {}, {0x101}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x8, 0x81}, {0x0, 0x0, 0x0, [], 0x7f}, {0x0, 0x0, 0x0, [], 0x4}, {0x1, 0x4}, {}, {0x0, 0x0, 0x80000}, {0x2}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffffffff800, [], 0x7}, {0x0, 0x0, 0x1991}, {0xfff, 0x2}]}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 2018/04/15 15:58:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100, 0x200000) sendmmsg(r1, &(0x7f0000000040), 0x0, 0x80) 2018/04/15 15:58:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:22 executing program 5: dup(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:22 executing program 6 (fault-call:6 fault-nth:8): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:22 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x40011, r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)=[@register_looper={0x630b}, @dead_binder_done={0x40086310, 0x4}, @release={0x40046306}, @decrefs={0x40046307}], 0x4, 0x0, &(0x7f00000000c0)="9679338f"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair(0x1d, 0x80003, 0x8001, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write(r0, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB="0200f700"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000100)}) [ 189.906996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 189.907005] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000007 2018/04/15 15:58:22 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x1f8, 0x108, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0xfffffffffffffffe, 0x200, 0x100000000, 0x20400, 0x4, 0x81, 0x1]}}}, {{@ipv6={@empty, @remote={0xfe, 0x80, [], 0xbb}, [0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'ip6gre0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x1d, 0xff, 0x6, 0x14}, 0x0, 0xc8, 0xf0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@ipv4={[], [0xff, 0xff]}, @local={0xfe, 0x80, [], 0xaa}, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffffff], 'bridge_slave_1\x00', 'ipddp0\x00', {0xff}, {}, 0x89, 0x6, 0x4, 0x5}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x1f, 0x3, 0x1, [0x64ce, 0xfffffffffffffffc, 0x80000000, 0x6, 0x8, 0x81, 0xffffffff7fffffff, 0x1000, 0x400, 0x3, 0x1, 0x7, 0x0, 0x10001, 0x7, 0x4], 0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x460) r1 = socket$inet6(0xa, 0x800000000000003, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) [ 190.273874] FAULT_INJECTION: forcing a failure. [ 190.273874] name failslab, interval 1, probability 0, space 0, times 0 [ 190.285232] CPU: 0 PID: 16047 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 190.292088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.301457] Call Trace: [ 190.304066] dump_stack+0x1b9/0x294 [ 190.306202] binder: 16059:16060 ERROR: BC_REGISTER_LOOPER called without request [ 190.307713] ? dump_stack_print_info.cold.2+0x52/0x52 [ 190.307735] ? __save_stack_trace+0x7e/0xd0 [ 190.307767] should_fail.cold.4+0xa/0x1a [ 190.315331] binder: 16059:16060 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 190.320486] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 190.320517] ? kasan_kmalloc+0xc4/0xe0 [ 190.320537] ? kasan_slab_alloc+0x12/0x20 [ 190.324879] binder: 16059:16060 Release 1 refcount change on invalid ref 0 ret -22 [ 190.328897] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 190.328916] ? kvm_mmu_load+0x21/0x10e0 [ 190.328941] ? vcpu_enter_guest+0x3aa1/0x6070 [ 190.336335] binder: 16059:16060 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.341369] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 190.341388] ? graph_lock+0x170/0x170 [ 190.341409] ? do_syscall_64+0x29e/0x9d0 [ 190.390965] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.396358] ? find_held_lock+0x36/0x1c0 [ 190.400442] ? __lock_is_held+0xb5/0x140 [ 190.404548] ? check_same_owner+0x320/0x320 [ 190.408889] ? rcu_note_context_switch+0x710/0x710 [ 190.413826] __should_failslab+0x124/0x180 [ 190.418063] should_failslab+0x9/0x14 [ 190.421856] kmem_cache_alloc+0x2af/0x760 [ 190.426009] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 190.430855] mmu_topup_memory_caches+0xf7/0x3a0 [ 190.435518] ? kvm_apic_has_interrupt+0xe1/0x210 [ 190.440272] kvm_mmu_load+0x21/0x10e0 [ 190.444068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 190.449603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 190.455139] vcpu_enter_guest+0x3aa1/0x6070 [ 190.459453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 190.464987] ? vmcs_load+0x139/0x180 [ 190.468699] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 190.474408] ? kvm_set_msr_common+0x2660/0x2660 [ 190.479076] ? vmx_vcpu_load+0xadd/0xfe0 [ 190.483128] ? __lock_acquire+0x7f5/0x5140 [ 190.487356] ? perf_trace_run_bpf_submit+0x246/0x370 [ 190.492454] ? vmx_vcpu_reset+0x1030/0x1030 [ 190.496770] ? graph_lock+0x170/0x170 [ 190.500567] ? __lock_acquire+0x7f5/0x5140 [ 190.504796] ? perf_trace_run_bpf_submit+0x246/0x370 [ 190.509906] ? __lock_is_held+0xb5/0x140 [ 190.513965] ? lock_acquire+0x1dc/0x520 [ 190.517929] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 190.522942] ? lock_release+0xa10/0xa10 [ 190.526908] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 190.532177] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 190.536665] ? preempt_notifier_dec+0x20/0x20 [ 190.541166] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 190.546000] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 190.551035] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 190.556143] kvm_vcpu_ioctl+0x79d/0x12e0 [ 190.560200] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 190.565903] ? graph_lock+0x170/0x170 [ 190.569698] ? find_held_lock+0x36/0x1c0 [ 190.573763] ? lock_downgrade+0x8e0/0x8e0 [ 190.577911] ? rcu_is_watching+0x85/0x140 [ 190.582056] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 190.587250] ? __fget+0x40c/0x650 [ 190.590698] ? match_held_lock+0x871/0x8b0 [ 190.594928] ? expand_files.part.8+0x9a0/0x9a0 [ 190.599511] ? kasan_check_write+0x14/0x20 [ 190.603741] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 190.608669] ? wait_for_completion+0x870/0x870 [ 190.613244] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 190.618426] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 190.624128] do_vfs_ioctl+0x1cf/0x16a0 [ 190.628019] ? ioctl_preallocate+0x2e0/0x2e0 [ 190.632424] ? fget_raw+0x20/0x20 [ 190.635872] ? __sb_end_write+0xac/0xe0 [ 190.639846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 190.645371] ? fput+0x130/0x1a0 [ 190.648647] ? ksys_write+0x1a6/0x250 [ 190.652445] ? security_file_ioctl+0x94/0xc0 [ 190.656857] ksys_ioctl+0xa9/0xd0 [ 190.660310] SyS_ioctl+0x24/0x30 [ 190.663669] ? ksys_ioctl+0xd0/0xd0 [ 190.667288] do_syscall_64+0x29e/0x9d0 [ 190.671170] ? vmalloc_sync_all+0x30/0x30 [ 190.675308] ? _raw_spin_unlock_irq+0x27/0x70 [ 190.679796] ? finish_task_switch+0x1ca/0x810 [ 190.684284] ? syscall_return_slowpath+0x5c0/0x5c0 [ 190.689206] ? syscall_return_slowpath+0x30f/0x5c0 [ 190.694134] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 190.699507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.704349] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.709530] RIP: 0033:0x455319 [ 190.712720] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.720433] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 190.727692] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 190.734951] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.742210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 190.749478] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000008 [ 190.776950] binder: 16059:16060 unknown command 16187394 [ 190.815859] binder: 16059:16060 ioctl c0306201 20008000 returned -22 [ 190.824433] binder: 16059:16060 got reply transaction with no transaction stack [ 190.831975] binder: 16059:16060 transaction failed 29201/-71, size 0-0 line 2763 [ 190.843170] binder: 16059:16060 ERROR: BC_REGISTER_LOOPER called without request [ 190.850828] binder: 16059:16060 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 190.858274] binder: 16059:16060 Release 1 refcount change on invalid ref 0 ret -22 [ 190.862128] binder: BINDER_SET_CONTEXT_MGR already set [ 190.866090] binder: 16059:16060 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 190.879137] binder: 16059:16069 unknown command 16187394 [ 190.879156] binder: 16059:16069 ioctl c0306201 20008000 returned -22 [ 190.886544] binder: 16059:16067 ioctl 40046207 0 returned -16 2018/04/15 15:58:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'veth0_to_bond\x00', 0x1ec}) 2018/04/15 15:58:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5335, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x0, r0, 0x1}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x6, 0x4) 2018/04/15 15:58:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000000)) 2018/04/15 15:58:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 6 (fault-call:6 fault-nth:9): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000000)={0x6}) r5 = dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000000000000000003000000000000"]) 2018/04/15 15:58:23 executing program 7: creat(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x0, 0x0, 'client1\x00', 0x5, "74e03ab596c1b563", "abb6f98f3a4f1df017513b72d31dcb0adb1420fce422f9079e735f1c59673563"}) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 190.920135] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.007343] FAULT_INJECTION: forcing a failure. [ 191.007343] name failslab, interval 1, probability 0, space 0, times 0 [ 191.018677] CPU: 0 PID: 16075 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 191.025533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.034917] Call Trace: [ 191.037536] dump_stack+0x1b9/0x294 [ 191.041200] ? dump_stack_print_info.cold.2+0x52/0x52 [ 191.046417] ? perf_trace_lock_acquire+0xe3/0x980 [ 191.051308] should_fail.cold.4+0xa/0x1a [ 191.055401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.060539] ? kasan_kmalloc+0xc4/0xe0 [ 191.064462] ? kasan_slab_alloc+0x12/0x20 [ 191.068633] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 191.073488] ? kvm_mmu_load+0x21/0x10e0 [ 191.077472] ? vcpu_enter_guest+0x3aa1/0x6070 [ 191.081974] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 191.086996] ? graph_lock+0x170/0x170 [ 191.090804] ? do_syscall_64+0x29e/0x9d0 [ 191.094863] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.100230] ? find_held_lock+0x36/0x1c0 [ 191.104292] ? __lock_is_held+0xb5/0x140 [ 191.108365] ? check_same_owner+0x320/0x320 [ 191.112689] ? rcu_note_context_switch+0x710/0x710 [ 191.117621] __should_failslab+0x124/0x180 [ 191.121877] should_failslab+0x9/0x14 [ 191.125679] kmem_cache_alloc+0x2af/0x760 [ 191.129833] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 191.134697] mmu_topup_memory_caches+0xf7/0x3a0 [ 191.139360] ? kvm_apic_has_interrupt+0xe1/0x210 [ 191.144118] kvm_mmu_load+0x21/0x10e0 [ 191.147913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.153463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.159002] vcpu_enter_guest+0x3aa1/0x6070 [ 191.163325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 191.168856] ? vmcs_load+0x139/0x180 [ 191.172582] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 191.178295] ? kvm_set_msr_common+0x2660/0x2660 [ 191.182963] ? perf_trace_lock+0x900/0x900 [ 191.187187] ? __lock_acquire+0x7f5/0x5140 [ 191.191420] ? vmx_vcpu_reset+0x1030/0x1030 [ 191.195738] ? graph_lock+0x170/0x170 [ 191.199529] ? __lock_acquire+0x7f5/0x5140 [ 191.203764] ? perf_trace_run_bpf_submit+0x246/0x370 [ 191.208872] ? __lock_is_held+0xb5/0x140 [ 191.212931] ? lock_acquire+0x1dc/0x520 [ 191.216900] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 191.221917] ? lock_release+0xa10/0xa10 [ 191.225899] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 191.231171] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 191.235670] ? preempt_notifier_dec+0x20/0x20 [ 191.240175] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 191.245013] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 191.250041] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 191.255151] kvm_vcpu_ioctl+0x79d/0x12e0 [ 191.259210] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 191.264915] ? graph_lock+0x170/0x170 [ 191.268716] ? find_held_lock+0x36/0x1c0 [ 191.272784] ? lock_downgrade+0x8e0/0x8e0 [ 191.276938] ? rcu_is_watching+0x85/0x140 [ 191.281082] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 191.286280] ? __fget+0x40c/0x650 [ 191.289732] ? match_held_lock+0x871/0x8b0 [ 191.293966] ? expand_files.part.8+0x9a0/0x9a0 [ 191.298541] ? kasan_check_write+0x14/0x20 [ 191.302772] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 191.307701] ? wait_for_completion+0x870/0x870 [ 191.312281] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 191.317479] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 191.323186] do_vfs_ioctl+0x1cf/0x16a0 [ 191.327076] ? ioctl_preallocate+0x2e0/0x2e0 [ 191.331482] ? fget_raw+0x20/0x20 [ 191.334932] ? __sb_end_write+0xac/0xe0 [ 191.338905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 191.344435] ? fput+0x130/0x1a0 [ 191.347724] ? ksys_write+0x1a6/0x250 [ 191.351526] ? security_file_ioctl+0x94/0xc0 [ 191.355933] ksys_ioctl+0xa9/0xd0 [ 191.359388] SyS_ioctl+0x24/0x30 [ 191.362752] ? ksys_ioctl+0xd0/0xd0 [ 191.366375] do_syscall_64+0x29e/0x9d0 [ 191.370269] ? vmalloc_sync_all+0x30/0x30 [ 191.374415] ? _raw_spin_unlock_irq+0x27/0x70 [ 191.378905] ? finish_task_switch+0x1ca/0x810 [ 191.383402] ? syscall_return_slowpath+0x5c0/0x5c0 [ 191.388333] ? syscall_return_slowpath+0x30f/0x5c0 [ 191.393261] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 191.398624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.403470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/15 15:58:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r1, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom(r1, &(0x7f00001b4f1e)=""/226, 0xff5b, 0x22, 0x0, 0xff) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 191.408651] RIP: 0033:0x455319 [ 191.411833] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.419539] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 191.426800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 191.434060] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.441319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 191.448579] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000009 2018/04/15 15:58:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23}, {0x1}, 0x24, {0x2, 0x4e23, @broadcast=0xffffffff}, 'yam0\x00'}) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0xc6c0, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000300)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/15 15:58:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x7f, 0x200000) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="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", 0xfe, 0xfffffffffffffffb) r2 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='eth1vboxnet1\\{posix_acl_accessGPL#\x00', 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="c5ca524c", 0x4, 0xfffffffffffffffa) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x80100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={0x0, r4, 0x5, 0x1}, 0x14) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/133, 0x85, &(0x7f0000000580)={&(0x7f0000000440)={'rmd320\x00'}, &(0x7f0000000480)="4b075ceb3d22d8326e0c9459515607de856f0442880b42e2bda856e1dc8f4be9b2cdcdb4e81df2c24de4006d708280e6e995d04902a7925f1e53f63fa844fd36267393c76bc4ab16de6a0e13751c1a817c4546ce6d8a8f0253206dbc6a2a10407a1597207a69c07e5cd6c9e309fac2a71c553576ab56010d4f8729ee5ec5ccedb7ca523751ae14b0913a8fabad1811928e52a9ab12cc6b0c422aad14597f51a805d2a39ca0426e59a5c6b4d26f99182dbd2702356b9ce8f67f9550758d166bee9f527559179c", 0xc6}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r4, 0x28, &(0x7f0000000640)}, 0x10) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x164000000, 0x7, 0x40, 0x1000, "7c42912c12b11caf216a542799cfb52d6c2f2c3083c277f581b61e2b20891ff05d52b46165824ad986f4c0d4", 0x6b9}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x8000) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4}, &(0x7f0000000140)=0x14) clock_gettime(0x2, &(0x7f00000000c0)) 2018/04/15 15:58:23 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000001500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0xc0045878, 0x0) 2018/04/15 15:58:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x5, 0x914, 0x4000000005}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fffffff, 0x44100) getsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/78}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040), &(0x7f00000000c0), 0xffffffffffffffff}, 0x20) 2018/04/15 15:58:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = dup(r0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x5, 0x7, 0x1, 0x0, 0x3b9c, 0x5f42a37a, 0x7fff, 0x7, 0x0, 0x0, 0x8, 0xff, 0x0, 0x7, 0x2, 0x2, 0x1ff, 0x1, 0x400}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x2000, 0x2, 0x1, 0x1], 0x8, 0x4d, 0x10000}) 2018/04/15 15:58:23 executing program 6 (fault-call:6 fault-nth:10): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 191.763770] sched: DL replenish lagged too much [ 191.797701] FAULT_INJECTION: forcing a failure. [ 191.797701] name failslab, interval 1, probability 0, space 0, times 0 [ 191.809089] CPU: 0 PID: 16124 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 191.815946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.825324] Call Trace: [ 191.827937] dump_stack+0x1b9/0x294 [ 191.831591] ? dump_stack_print_info.cold.2+0x52/0x52 [ 191.836816] ? __save_stack_trace+0x7e/0xd0 [ 191.841182] should_fail.cold.4+0xa/0x1a [ 191.845270] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.850398] ? kasan_kmalloc+0xc4/0xe0 [ 191.854306] ? kasan_slab_alloc+0x12/0x20 [ 191.858479] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 191.863341] ? kvm_mmu_load+0x21/0x10e0 [ 191.867341] ? vcpu_enter_guest+0x3aa1/0x6070 [ 191.871865] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 191.876898] ? graph_lock+0x170/0x170 [ 191.880701] ? do_syscall_64+0x29e/0x9d0 [ 191.884763] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.890154] ? find_held_lock+0x36/0x1c0 [ 191.894220] ? __lock_is_held+0xb5/0x140 [ 191.898305] ? check_same_owner+0x320/0x320 [ 191.902624] ? rcu_note_context_switch+0x710/0x710 [ 191.907563] __should_failslab+0x124/0x180 [ 191.911795] should_failslab+0x9/0x14 [ 191.915604] kmem_cache_alloc+0x2af/0x760 [ 191.919755] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 191.924595] mmu_topup_memory_caches+0xf7/0x3a0 [ 191.929255] ? kvm_apic_has_interrupt+0xe1/0x210 [ 191.934010] kvm_mmu_load+0x21/0x10e0 [ 191.937812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.943346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 191.948891] vcpu_enter_guest+0x3aa1/0x6070 [ 191.953209] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 191.958741] ? vmcs_load+0x139/0x180 [ 191.962450] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 191.968162] ? kvm_set_msr_common+0x2660/0x2660 [ 191.972826] ? vmx_vcpu_load+0xadd/0xfe0 [ 191.976879] ? __lock_acquire+0x7f5/0x5140 [ 191.981107] ? perf_trace_run_bpf_submit+0x246/0x370 [ 191.986206] ? vmx_vcpu_reset+0x1030/0x1030 [ 191.990517] ? graph_lock+0x170/0x170 [ 191.994307] ? __lock_acquire+0x7f5/0x5140 [ 191.998541] ? perf_trace_run_bpf_submit+0x246/0x370 [ 192.003820] ? __lock_is_held+0xb5/0x140 [ 192.007878] ? lock_acquire+0x1dc/0x520 [ 192.011843] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 192.016856] ? lock_release+0xa10/0xa10 [ 192.020825] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 192.026096] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 192.030585] ? preempt_notifier_dec+0x20/0x20 [ 192.035087] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 192.039920] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 192.044930] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 192.050043] kvm_vcpu_ioctl+0x79d/0x12e0 [ 192.054107] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 192.059811] ? graph_lock+0x170/0x170 [ 192.063610] ? find_held_lock+0x36/0x1c0 [ 192.067676] ? lock_downgrade+0x8e0/0x8e0 [ 192.071824] ? rcu_is_watching+0x85/0x140 [ 192.075964] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 192.081161] ? __fget+0x40c/0x650 [ 192.084608] ? match_held_lock+0x871/0x8b0 [ 192.088839] ? expand_files.part.8+0x9a0/0x9a0 [ 192.093416] ? kasan_check_write+0x14/0x20 [ 192.097651] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 192.102577] ? wait_for_completion+0x870/0x870 [ 192.107164] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 192.112347] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 192.118055] do_vfs_ioctl+0x1cf/0x16a0 [ 192.121943] ? ioctl_preallocate+0x2e0/0x2e0 [ 192.126345] ? fget_raw+0x20/0x20 [ 192.129800] ? __sb_end_write+0xac/0xe0 [ 192.133772] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 192.139298] ? fput+0x130/0x1a0 [ 192.142573] ? ksys_write+0x1a6/0x250 [ 192.146375] ? security_file_ioctl+0x94/0xc0 [ 192.150780] ksys_ioctl+0xa9/0xd0 [ 192.154231] SyS_ioctl+0x24/0x30 [ 192.157589] ? ksys_ioctl+0xd0/0xd0 [ 192.161211] do_syscall_64+0x29e/0x9d0 [ 192.165090] ? vmalloc_sync_all+0x30/0x30 [ 192.169229] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.173716] ? finish_task_switch+0x1ca/0x810 [ 192.178205] ? syscall_return_slowpath+0x5c0/0x5c0 [ 192.183130] ? syscall_return_slowpath+0x30f/0x5c0 [ 192.188062] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.193426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.198270] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.203451] RIP: 0033:0x455319 [ 192.206630] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.214332] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 192.221596] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 192.228856] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.236115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x800) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x2, 0x1}, {0x6, 0x6}, 0x101, 0x3, 0x3}) 2018/04/15 15:58:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0xc01, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x7, &(0x7f0000000180)={0x10001}, 0x8) timerfd_create(0x4, 0x80000) r2 = geteuid() quotactl(0xffff, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)="c375187754bbd99002eb303bc9149ccc158e0f6abd5addbfd0aee8d2a324bacacf8139cd7dbb2bdf9573322e445ddd9c6fd73cd34e4bde2b8ba182ed6f9a67b5bbcdc117012ed62f0384ed478dcb437a78b8468c6f59982ab190386409f8d06b471e3a9729bb7642a76f32532bdf40c06cf4949c93e113fdda4a7508eaa5bdcf0213402aee2a083cdd") 2018/04/15 15:58:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 2018/04/15 15:58:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = dup(r0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x5, 0x7, 0x1, 0x0, 0x3b9c, 0x5f42a37a, 0x7fff, 0x7, 0x0, 0x0, 0x8, 0xff, 0x0, 0x7, 0x2, 0x2, 0x1ff, 0x1, 0x400}) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x2000, 0x2, 0x1, 0x1], 0x8, 0x4d, 0x10000}) [ 192.243376] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000a 2018/04/15 15:58:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 2018/04/15 15:58:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$evdev(r0, &(0x7f0000000100), 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000100)={0x800000, 0x2000}) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f000080e000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x1e) 2018/04/15 15:58:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x400440, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x301b, 0x80, 0x1, 0x9, 0x8}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x9}, 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x100, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x10, "a1c7afd67c6051b9844d766d2b3c38a7"}, &(0x7f0000000080)=0x34) 2018/04/15 15:58:24 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x14, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x2, 0x8, 0x80, 0xfffffffffffffff9, 0x3, 0x100000000, 0x6, r2}, &(0x7f0000000180)=0x20) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000380)={@void, @hdr={0x0, 0x0, 0x6488, 0x0, 0x6}, @mpls={[], @generic="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"}}, 0xfce) 2018/04/15 15:58:24 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:24 executing program 6 (fault-call:6 fault-nth:11): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x5, 0x2000) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x4000) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 192.722219] FAULT_INJECTION: forcing a failure. [ 192.722219] name failslab, interval 1, probability 0, space 0, times 0 [ 192.733559] CPU: 0 PID: 16186 Comm: syz-executor5 Not tainted 4.16.0+ #3 [ 192.740408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.749766] Call Trace: [ 192.752369] dump_stack+0x1b9/0x294 [ 192.756007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 192.761203] ? percpu_ref_put_many+0x132/0x230 [ 192.765786] ? memcg_kmem_charge_memcg+0x74/0x110 [ 192.770636] should_fail.cold.4+0xa/0x1a [ 192.774705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.779816] ? graph_lock+0x170/0x170 [ 192.783624] ? find_held_lock+0x36/0x1c0 [ 192.787695] ? __lock_is_held+0xb5/0x140 [ 192.791782] ? check_same_owner+0x320/0x320 [ 192.796102] ? __lock_is_held+0xb5/0x140 [ 192.800163] ? cgroup_cpu_stat_updated+0xa5/0x410 [ 192.805006] ? rcu_note_context_switch+0x710/0x710 [ 192.809945] __should_failslab+0x124/0x180 [ 192.814187] should_failslab+0x9/0x14 [ 192.817990] kmem_cache_alloc+0x2af/0x760 [ 192.822143] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 192.827689] ptlock_alloc+0x20/0x80 [ 192.831325] pte_alloc_one+0x6b/0x120 [ 192.835758] do_huge_pmd_anonymous_page+0xe7a/0x1e30 [ 192.840870] ? __thp_get_unmapped_area+0x180/0x180 [ 192.845806] ? __lock_acquire+0x7f5/0x5140 [ 192.850046] ? zap_class+0x720/0x720 [ 192.853774] ? debug_check_no_locks_freed+0x310/0x310 [ 192.858966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.864509] ? __perf_event_task_sched_in+0x247/0xb80 [ 192.869699] ? perf_trace_lock+0xd6/0x900 [ 192.873848] ? perf_event_sync_stat+0x5f0/0x5f0 [ 192.878514] ? graph_lock+0x170/0x170 [ 192.882328] ? print_usage_bug+0xc0/0xc0 [ 192.886387] ? print_usage_bug+0xc0/0xc0 [ 192.890453] ? perf_trace_lock+0xd6/0x900 [ 192.894607] ? pud_val+0x80/0xf0 [ 192.897971] ? pmd_val+0xf0/0xf0 [ 192.901341] ? __lock_acquire+0x7f5/0x5140 [ 192.905580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 192.911124] __handle_mm_fault+0x290b/0x4150 [ 192.915628] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 192.920384] ? graph_lock+0x170/0x170 [ 192.924184] ? debug_check_no_locks_freed+0x310/0x310 [ 192.929376] ? finish_task_switch+0x1ca/0x810 [ 192.933874] ? find_held_lock+0x36/0x1c0 [ 192.937949] ? lock_downgrade+0x8e0/0x8e0 [ 192.942114] ? handle_mm_fault+0x8c0/0xc70 [ 192.946355] handle_mm_fault+0x53a/0xc70 [ 192.950420] ? __handle_mm_fault+0x4150/0x4150 [ 192.955010] ? find_vma+0x34/0x190 [ 192.958555] __do_page_fault+0x60b/0xe40 [ 192.962633] ? mm_fault_error+0x380/0x380 [ 192.966780] ? graph_lock+0x170/0x170 [ 192.970580] ? debug_mutex_add_waiter+0x220/0x220 [ 192.975425] do_page_fault+0xee/0x8a7 [ 192.979224] ? do_raw_spin_unlock+0x9e/0x2e0 [ 192.983636] ? vmalloc_sync_all+0x30/0x30 [ 192.987788] ? find_held_lock+0x36/0x1c0 [ 192.991873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.996732] page_fault+0x25/0x50 [ 193.000195] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 193.006079] RSP: 0018:ffff88018365f678 EFLAGS: 00010202 [ 193.011445] RAX: 0000000000000000 RBX: 00000000000000a8 RCX: 00000000000000a8 [ 193.018718] RDX: 00000000000000a8 RSI: 0000000020000800 RDI: ffff88018365f6f0 [ 193.025992] RBP: ffff88018365f6b0 R08: ffffed00306cbef3 R09: ffffed00306cbef3 [ 193.033268] R10: ffffed00306cbef2 R11: ffff88018365f797 R12: 00000000200008a8 [ 193.040547] R13: 0000000020000800 R14: ffff88018365f6f0 R15: 00007ffffffff000 [ 193.047856] ? _copy_from_user+0x10d/0x150 [ 193.052102] loop_set_status_old+0x9f/0x920 [ 193.056431] ? loop_set_status_compat+0xf0/0xf0 [ 193.061103] ? debug_check_no_locks_freed+0x310/0x310 [ 193.066302] ? graph_lock+0x170/0x170 [ 193.070117] ? lock_acquire+0x1dc/0x520 [ 193.074093] ? perf_trace_lock+0xd6/0x900 [ 193.078245] ? perf_trace_lock+0xd6/0x900 [ 193.082395] ? find_held_lock+0x36/0x1c0 [ 193.086558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.092099] ? zap_class+0x720/0x720 [ 193.095814] ? perf_trace_lock+0xd6/0x900 [ 193.099967] ? graph_lock+0x170/0x170 [ 193.103763] ? zap_class+0x720/0x720 [ 193.107488] lo_ioctl+0x5e8/0x1ec0 [ 193.111027] ? graph_lock+0x170/0x170 [ 193.114834] ? loop_clr_fd+0xb80/0xb80 [ 193.118725] blkdev_ioctl+0x9b6/0x2020 [ 193.122618] ? blkpg_ioctl+0xc40/0xc40 [ 193.126506] ? lock_downgrade+0x8e0/0x8e0 [ 193.130661] ? rcu_is_watching+0x85/0x140 [ 193.134814] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 193.140013] ? __fget+0x40c/0x650 [ 193.143471] ? match_held_lock+0x871/0x8b0 [ 193.147706] ? expand_files.part.8+0x9a0/0x9a0 [ 193.152297] ? kasan_check_write+0x14/0x20 [ 193.156537] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 193.161477] block_ioctl+0xee/0x130 [ 193.165107] ? blkdev_fallocate+0x400/0x400 [ 193.169431] do_vfs_ioctl+0x1cf/0x16a0 [ 193.173324] ? ioctl_preallocate+0x2e0/0x2e0 [ 193.177735] ? fget_raw+0x20/0x20 [ 193.181188] ? __sb_end_write+0xac/0xe0 [ 193.185169] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 193.190700] ? fput+0x130/0x1a0 [ 193.193983] ? ksys_write+0x1a6/0x250 [ 193.197786] ? security_file_ioctl+0x94/0xc0 [ 193.202201] ksys_ioctl+0xa9/0xd0 [ 193.205659] SyS_ioctl+0x24/0x30 [ 193.209023] ? ksys_ioctl+0xd0/0xd0 [ 193.212651] do_syscall_64+0x29e/0x9d0 [ 193.216541] ? vmalloc_sync_all+0x30/0x30 [ 193.220693] ? _raw_spin_unlock_irq+0x27/0x70 [ 193.225190] ? finish_task_switch+0x1ca/0x810 [ 193.229685] ? syscall_return_slowpath+0x5c0/0x5c0 [ 193.234617] ? syscall_return_slowpath+0x30f/0x5c0 [ 193.239557] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 193.245102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.249954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.255140] RIP: 0033:0x455319 [ 193.258327] RSP: 002b:00007ff49b56dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.266040] RAX: ffffffffffffffda RBX: 00007ff49b56e6d4 RCX: 0000000000455319 [ 193.273307] RDX: 0000000020000800 RSI: 0000000000004c02 RDI: 0000000000000013 [ 193.280575] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.287850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 193.295129] R13: 0000000000000280 R14: 00000000006f6ca0 R15: 0000000000000000 [ 193.375979] FAULT_INJECTION: forcing a failure. [ 193.375979] name failslab, interval 1, probability 0, space 0, times 0 [ 193.387297] CPU: 0 PID: 16190 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 193.394315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.403661] Call Trace: [ 193.406244] dump_stack+0x1b9/0x294 [ 193.409866] ? dump_stack_print_info.cold.2+0x52/0x52 [ 193.415057] ? __save_stack_trace+0x7e/0xd0 [ 193.419395] should_fail.cold.4+0xa/0x1a [ 193.423455] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.428562] ? kasan_kmalloc+0xc4/0xe0 [ 193.432451] ? kasan_slab_alloc+0x12/0x20 [ 193.436615] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 193.441464] ? kvm_mmu_load+0x21/0x10e0 [ 193.445429] ? vcpu_enter_guest+0x3aa1/0x6070 [ 193.449922] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 193.454932] ? graph_lock+0x170/0x170 [ 193.458728] ? do_syscall_64+0x29e/0x9d0 [ 193.462805] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.468171] ? find_held_lock+0x36/0x1c0 [ 193.472227] ? __lock_is_held+0xb5/0x140 [ 193.476308] ? check_same_owner+0x320/0x320 [ 193.480640] ? rcu_note_context_switch+0x710/0x710 [ 193.485603] __should_failslab+0x124/0x180 [ 193.489845] should_failslab+0x9/0x14 [ 193.493637] kmem_cache_alloc+0x2af/0x760 [ 193.497808] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 193.502652] mmu_topup_memory_caches+0xf7/0x3a0 [ 193.507328] ? kvm_apic_has_interrupt+0xe1/0x210 [ 193.512088] kvm_mmu_load+0x21/0x10e0 [ 193.515887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.521435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.526981] vcpu_enter_guest+0x3aa1/0x6070 [ 193.531308] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 193.536854] ? vmcs_load+0x139/0x180 [ 193.540559] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 193.546269] ? kvm_set_msr_common+0x2660/0x2660 [ 193.550931] ? vmx_vcpu_load+0xadd/0xfe0 [ 193.554987] ? __lock_acquire+0x7f5/0x5140 [ 193.559213] ? perf_trace_run_bpf_submit+0x246/0x370 [ 193.564313] ? vmx_vcpu_reset+0x1030/0x1030 [ 193.568623] ? graph_lock+0x170/0x170 [ 193.572420] ? __lock_acquire+0x7f5/0x5140 [ 193.576647] ? perf_trace_run_bpf_submit+0x246/0x370 [ 193.581747] ? __lock_is_held+0xb5/0x140 [ 193.585811] ? lock_acquire+0x1dc/0x520 [ 193.589785] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 193.594794] ? lock_release+0xa10/0xa10 [ 193.598758] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 193.604036] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 193.608528] ? preempt_notifier_dec+0x20/0x20 [ 193.613056] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 193.617889] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 193.622899] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 193.628003] kvm_vcpu_ioctl+0x79d/0x12e0 [ 193.632073] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 193.637781] ? graph_lock+0x170/0x170 [ 193.641583] ? find_held_lock+0x36/0x1c0 [ 193.645646] ? lock_downgrade+0x8e0/0x8e0 [ 193.649791] ? rcu_is_watching+0x85/0x140 [ 193.653933] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 193.659126] ? __fget+0x40c/0x650 [ 193.662573] ? match_held_lock+0x871/0x8b0 [ 193.666811] ? expand_files.part.8+0x9a0/0x9a0 [ 193.671401] ? kasan_check_write+0x14/0x20 [ 193.675632] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 193.680560] ? wait_for_completion+0x870/0x870 [ 193.685140] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 193.690326] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 193.696044] do_vfs_ioctl+0x1cf/0x16a0 [ 193.699944] ? ioctl_preallocate+0x2e0/0x2e0 [ 193.704347] ? fget_raw+0x20/0x20 [ 193.707792] ? __sb_end_write+0xac/0xe0 [ 193.711765] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 193.717292] ? fput+0x130/0x1a0 [ 193.720567] ? ksys_write+0x1a6/0x250 [ 193.724362] ? security_file_ioctl+0x94/0xc0 [ 193.728764] ksys_ioctl+0xa9/0xd0 [ 193.732213] SyS_ioctl+0x24/0x30 [ 193.735577] ? ksys_ioctl+0xd0/0xd0 [ 193.739209] do_syscall_64+0x29e/0x9d0 [ 193.743100] ? vmalloc_sync_all+0x30/0x30 [ 193.747245] ? _raw_spin_unlock_irq+0x27/0x70 [ 193.751743] ? finish_task_switch+0x1ca/0x810 [ 193.756247] ? syscall_return_slowpath+0x5c0/0x5c0 [ 193.761183] ? syscall_return_slowpath+0x30f/0x5c0 [ 193.766121] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 193.771482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.776335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.781517] RIP: 0033:0x455319 [ 193.784696] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.792396] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 193.799653] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 193.806914] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.814529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 193.821788] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000b 2018/04/15 15:58:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x5, 0x80000) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000040)=""/27, &(0x7f0000000080)=0x1b) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3d96}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r1, 0xef}, 0x8) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000140)) 2018/04/15 15:58:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) syz_open_dev$random(&(0x7f0000000300)='/dev/random\x00', 0x0, 0xc1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000500)=""/123) sendto$inet(r0, &(0x7f0000000240)="c3401c34468c8e399aa4eedc3d6bd8f1d65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e6d114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c400000002b7bcdec844f667da0867d08d4154004997e31649b2b5eb2790c39f4", 0x82, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="6e65742f74637000a174d36bf3413f13f1fa62812d72e39ce1aae3ed848159f6fca7fd7b8f7fe18e3e379ccc3ef0c77fa300abcfd426f814dbeb7441f939caa39f3baab9b8d1aab4c9457f2aa3fd3698012b2f03804c09779e60594fb91e4a024dce766d7113a327b2627bb1c0284ddbcd3b8ab0220b7ad1d65db5dd5454160aa336818b68048ebceaf32d233597387d2725a33484faa6dacaea4a80f94e1c3511ab7062721b157a17399f4961be9ed018c493c9d0d59c43473484b8") fstatfs(r1, &(0x7f0000000380)=""/224) preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x6c}], 0x1, 0xff) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) accept4(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000040)=0x80, 0x80800) 2018/04/15 15:58:26 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000769ff7)='/dev/sg#\x00', 0x0, 0x28001) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000be000)=[{&(0x7f00003eeff6)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000603000)=[{&(0x7f0000007000)="c2f1a8c8a02a5932fd69adc52c8e0345c26db185e9ed5355ea1469f94049d3f3fd34cbd156009cd21e847417b4", 0x2d}], 0x1, &(0x7f0000b88000)}], 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x9cff}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x688800) write$evdev(r0, &(0x7f0000255fd0)=[{{0x77359400}}, {}], 0x30) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)) ioctl(r0, 0x2285, &(0x7f0000007000)='S') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2044, 0x0) 2018/04/15 15:58:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 6 (fault-call:6 fault-nth:12): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:26 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000080)=""/4096, 0x1000) listen(r2, 0x1) syncfs(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {}, 0x3, 0x70d32669}, 0xe) 2018/04/15 15:58:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 194.019188] FAULT_INJECTION: forcing a failure. [ 194.019188] name failslab, interval 1, probability 0, space 0, times 0 [ 194.030640] CPU: 0 PID: 16216 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 194.037506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.046869] Call Trace: [ 194.049461] dump_stack+0x1b9/0x294 [ 194.053090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.058334] ? __save_stack_trace+0x7e/0xd0 [ 194.062663] should_fail.cold.4+0xa/0x1a [ 194.066723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.071817] ? kasan_kmalloc+0xc4/0xe0 [ 194.075695] ? kasan_slab_alloc+0x12/0x20 [ 194.079840] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 194.084677] ? kvm_mmu_load+0x21/0x10e0 [ 194.088647] ? vcpu_enter_guest+0x3aa1/0x6070 [ 194.093132] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 194.098140] ? graph_lock+0x170/0x170 [ 194.101932] ? do_syscall_64+0x29e/0x9d0 [ 194.105984] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.111353] ? find_held_lock+0x36/0x1c0 [ 194.115414] ? __lock_is_held+0xb5/0x140 [ 194.119491] ? check_same_owner+0x320/0x320 [ 194.123814] ? rcu_note_context_switch+0x710/0x710 [ 194.128746] __should_failslab+0x124/0x180 [ 194.132980] should_failslab+0x9/0x14 [ 194.137041] kmem_cache_alloc+0x2af/0x760 [ 194.141196] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 194.146568] mmu_topup_memory_caches+0xf7/0x3a0 [ 194.151239] ? kvm_apic_has_interrupt+0xe1/0x210 [ 194.155998] kvm_mmu_load+0x21/0x10e0 [ 194.159808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.165340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.170875] vcpu_enter_guest+0x3aa1/0x6070 [ 194.175194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 194.180724] ? vmcs_load+0x139/0x180 [ 194.184431] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 194.190139] ? kvm_set_msr_common+0x2660/0x2660 [ 194.194803] ? vmx_vcpu_load+0xadd/0xfe0 [ 194.198858] ? __lock_acquire+0x7f5/0x5140 [ 194.203087] ? perf_trace_run_bpf_submit+0x246/0x370 [ 194.208210] ? vmx_vcpu_reset+0x1030/0x1030 [ 194.212523] ? graph_lock+0x170/0x170 [ 194.216315] ? __lock_acquire+0x7f5/0x5140 [ 194.220548] ? perf_trace_run_bpf_submit+0x246/0x370 [ 194.225654] ? __lock_is_held+0xb5/0x140 [ 194.229712] ? lock_acquire+0x1dc/0x520 [ 194.233677] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 194.239734] ? lock_release+0xa10/0xa10 [ 194.243719] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 194.248990] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 194.253481] ? preempt_notifier_dec+0x20/0x20 [ 194.257987] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 194.262826] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 194.267835] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 194.272939] kvm_vcpu_ioctl+0x79d/0x12e0 [ 194.276997] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 194.282706] ? graph_lock+0x170/0x170 [ 194.286501] ? find_held_lock+0x36/0x1c0 [ 194.290568] ? lock_downgrade+0x8e0/0x8e0 [ 194.294717] ? rcu_is_watching+0x85/0x140 [ 194.298858] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 194.304054] ? __fget+0x40c/0x650 [ 194.307502] ? match_held_lock+0x871/0x8b0 [ 194.311730] ? expand_files.part.8+0x9a0/0x9a0 [ 194.316307] ? kasan_check_write+0x14/0x20 [ 194.320535] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 194.325461] ? wait_for_completion+0x870/0x870 [ 194.330039] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 194.335224] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 194.340928] do_vfs_ioctl+0x1cf/0x16a0 [ 194.344822] ? ioctl_preallocate+0x2e0/0x2e0 [ 194.349224] ? fget_raw+0x20/0x20 [ 194.352670] ? __sb_end_write+0xac/0xe0 [ 194.356641] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 194.362170] ? fput+0x130/0x1a0 [ 194.365452] ? ksys_write+0x1a6/0x250 [ 194.369250] ? security_file_ioctl+0x94/0xc0 [ 194.373654] ksys_ioctl+0xa9/0xd0 [ 194.377103] SyS_ioctl+0x24/0x30 [ 194.380461] ? ksys_ioctl+0xd0/0xd0 [ 194.384083] do_syscall_64+0x29e/0x9d0 [ 194.387961] ? vmalloc_sync_all+0x30/0x30 [ 194.392099] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.396588] ? finish_task_switch+0x1ca/0x810 [ 194.401076] ? syscall_return_slowpath+0x5c0/0x5c0 [ 194.405999] ? syscall_return_slowpath+0x30f/0x5c0 [ 194.410935] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.416296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.421142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.426326] RIP: 0033:0x455319 [ 194.429507] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.437211] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 194.444470] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 194.451726] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.458985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x20000) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x5, 0xff, 0x800}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2018/04/15 15:58:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x1bf2, 0x480000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xb) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80800) r3 = dup3(r2, r0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000000)=""/249) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) sendmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x39}], 0x10}}], 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000002c0)) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x125f, &(0x7f0000000800)) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000001c0)=""/207) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 2018/04/15 15:58:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x401870cc, &(0x7f0000000800)) [ 194.466246] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000c 2018/04/15 15:58:26 executing program 2: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) close(0xffffffffffffffff) close(r0) 2018/04/15 15:58:26 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x12b) recvfrom$unix(r0, &(0x7f0000000040)=""/21, 0x15, 0x10000, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$key(0xf, 0x3, 0x2) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x42000) dup2(r1, r2) 2018/04/15 15:58:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0xc0481273, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0xfe) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c01, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x93, 0x0}, &(0x7f0000000080)=0x10) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00\x00\x00\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x54, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x100000000, 0x6}, &(0x7f0000000180)=0x8) 2018/04/15 15:58:27 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x7, 0x7}, 0x8) listen(r0, 0xc) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe0064e200000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 2018/04/15 15:58:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 6 (fault-call:6 fault-nth:13): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000", 0x6b}], 0x0, &(0x7f0000018900)={'nouuid,'}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000500)=""/26) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) 2018/04/15 15:58:27 executing program 2: mkdir(&(0x7f000043eff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) pwrite64(0xffffffffffffffff, &(0x7f0000000040), 0x20000040, 0x17) 2018/04/15 15:58:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x6) socket$inet(0x2, 0x806, 0xffffffffffffc252) fcntl$setpipe(r0, 0x407, 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) connect$ax25(r2, &(0x7f0000000080)={0x3, {"d9bdcf2bd80286"}, 0x7}, 0x83) recvfrom$ax25(r2, &(0x7f00000008c0)=""/4096, 0x1000, 0x10000, &(0x7f0000000040)={0x3, {"239f3fd0984a8a"}, 0x7}, 0x10) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) r2 = socket(0x11, 0x100000802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 2018/04/15 15:58:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x125e, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) getrandom(&(0x7f00000008c0)=""/4096, 0x1000, 0x1) [ 195.019332] FAULT_INJECTION: forcing a failure. [ 195.019332] name failslab, interval 1, probability 0, space 0, times 0 [ 195.030676] CPU: 0 PID: 16293 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 195.037533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.046905] Call Trace: [ 195.049518] dump_stack+0x1b9/0x294 [ 195.053609] ? dump_stack_print_info.cold.2+0x52/0x52 [ 195.058825] ? __save_stack_trace+0x7e/0xd0 [ 195.063189] should_fail.cold.4+0xa/0x1a [ 195.067287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.072420] ? kasan_kmalloc+0xc4/0xe0 [ 195.076336] ? kasan_slab_alloc+0x12/0x20 [ 195.080514] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 195.085379] ? kvm_mmu_load+0x21/0x10e0 [ 195.089372] ? vcpu_enter_guest+0x3aa1/0x6070 [ 195.093888] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 195.098934] ? graph_lock+0x170/0x170 [ 195.102758] ? do_syscall_64+0x29e/0x9d0 [ 195.106841] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.112236] ? find_held_lock+0x36/0x1c0 2018/04/15 15:58:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x408000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x3, &(0x7f0000000140)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000180)='syzkaller\x00', 0x8d4, 0x67, &(0x7f00000000c0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x7}], {0x95}}, &(0x7f000000a000)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195}, 0xf1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x8, 0x0, 0x10001, 0x59, "e8dc09d2d179ae84f5de19f525edbc2379bf23669244c84fa58e3a4292d5d823f38aa0fa404db95212900406", 0x3}, 0x0, 0x0, 0x6, r2, 0x0, 0x10000, "2d45f5b9e3073cd34d90fc1959f06b7e01322f365b1d16a4a664d69b34224f0f6f41af92145cf60ad88dbbe911ccaeac1316098514669339f6b5dd3d01bc4d7f", &(0x7f0000000080)='/dev/loop#\x00', 0xb, [], [0xf49d, 0x8, 0x9, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 2018/04/15 15:58:27 executing program 0: mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/189) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) [ 195.116337] ? __lock_is_held+0xb5/0x140 [ 195.120446] ? check_same_owner+0x320/0x320 [ 195.124799] ? rcu_note_context_switch+0x710/0x710 [ 195.129766] __should_failslab+0x124/0x180 [ 195.134031] should_failslab+0x9/0x14 [ 195.137856] kmem_cache_alloc+0x2af/0x760 [ 195.142049] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 195.146922] mmu_topup_memory_caches+0xf7/0x3a0 [ 195.151613] ? kvm_apic_has_interrupt+0xe1/0x210 [ 195.156403] kvm_mmu_load+0x21/0x10e0 [ 195.160227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.165790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.171357] vcpu_enter_guest+0x3aa1/0x6070 [ 195.175702] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 195.181266] ? vmcs_load+0x139/0x180 [ 195.185005] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 195.190742] ? kvm_set_msr_common+0x2660/0x2660 [ 195.195429] ? vmx_vcpu_load+0xadd/0xfe0 [ 195.199507] ? __lock_acquire+0x7f5/0x5140 [ 195.203755] ? perf_trace_run_bpf_submit+0x246/0x370 [ 195.208878] ? vmx_vcpu_reset+0x1030/0x1030 [ 195.213210] ? graph_lock+0x170/0x170 [ 195.217028] ? __lock_acquire+0x7f5/0x5140 [ 195.221285] ? perf_trace_run_bpf_submit+0x246/0x370 [ 195.226420] ? __lock_is_held+0xb5/0x140 [ 195.230510] ? lock_acquire+0x1dc/0x520 [ 195.234499] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 195.239539] ? lock_release+0xa10/0xa10 [ 195.243534] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 195.248837] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 195.253348] ? preempt_notifier_dec+0x20/0x20 [ 195.257881] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 195.262735] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 195.267769] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 195.272902] kvm_vcpu_ioctl+0x79d/0x12e0 [ 195.276983] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 195.282798] ? graph_lock+0x170/0x170 [ 195.286623] ? find_held_lock+0x36/0x1c0 [ 195.290724] ? lock_downgrade+0x8e0/0x8e0 [ 195.294908] ? rcu_is_watching+0x85/0x140 [ 195.299072] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 195.304290] ? __fget+0x40c/0x650 [ 195.304405] XFS (loop3): SB sanity check failed [ 195.307755] ? match_held_lock+0x871/0x8b0 [ 195.307779] ? expand_files.part.8+0x9a0/0x9a0 [ 195.307799] ? kasan_check_write+0x14/0x20 [ 195.307821] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 195.307844] ? wait_for_completion+0x870/0x870 [ 195.307862] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 195.307884] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 195.312744] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3d9/0x4d0, xfs_sb block 0xffffffffffffffff [ 195.316908] do_vfs_ioctl+0x1cf/0x16a0 [ 195.316936] ? ioctl_preallocate+0x2e0/0x2e0 [ 195.316956] ? fget_raw+0x20/0x20 2018/04/15 15:58:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(cast6-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@canfd={{0x2}, 0x0, 0x0, 0x0, 0x0, "a86bd3be67f6f187163916e75b68fabc7fb1f1960e3fffbe3ead1e635259b537173ef807eebb520a71c70dca7a369c7b1a0342387359a2d1c7ae7a2b3493a7d7"}, 0x48}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/226, 0xe2}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x10000) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001540)={r0, r1, 0xa861032, 0xf37, &(0x7f0000000540)="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", 0x5, 0x5, 0x7f, 0x8000, 0x7fffffff, 0xffffffffffffff66, 0x0, "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"}) 2018/04/15 15:58:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101, 0x0) r2 = msgget$private(0x0, 0x118) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) r6 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000500)={{0x80000001, r3, r4, r5, r6, 0x120, 0x5}, 0x6, 0x7, 0x7, 0x9, 0x2dc, 0x47, r7, r8}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x8000, 0x0) bind$ipx(r9, &(0x7f00000004c0)={0x4, 0x7, 0x2, "0d88011f15d4", 0x55}, 0x10) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) [ 195.316973] ? __sb_end_write+0xac/0xe0 [ 195.316998] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 195.321572] XFS (loop3): Unmount and run xfs_repair [ 195.325767] ? fput+0x130/0x1a0 [ 195.325788] ? ksys_write+0x1a6/0x250 [ 195.325813] ? security_file_ioctl+0x94/0xc0 [ 195.330734] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 195.335285] ksys_ioctl+0xa9/0xd0 [ 195.335310] SyS_ioctl+0x24/0x30 [ 195.340499] 00000000e9b3e401: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 195.346169] ? ksys_ioctl+0xd0/0xd0 2018/04/15 15:58:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x80081270, &(0x7f0000000800)) 2018/04/15 15:58:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c07, &(0x7f0000000800)) [ 195.346188] do_syscall_64+0x29e/0x9d0 [ 195.346205] ? vmalloc_sync_all+0x30/0x30 [ 195.357381] 0000000002901bcc: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 195.361229] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.361248] ? finish_task_switch+0x1ca/0x810 [ 195.361269] ? syscall_return_slowpath+0x5c0/0x5c0 [ 195.365678] 00000000763272c5: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 195.369108] ? syscall_return_slowpath+0x30f/0x5c0 [ 195.369137] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.373106] 00000000c03f666c: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 195.378640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.378670] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.383676] 0000000004c31330: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a ................ [ 195.386912] RIP: 0033:0x455319 [ 195.386923] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.390737] 00000000aa7e023f: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 195.395110] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 195.395120] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 195.395129] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.395138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 195.395147] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000d [ 195.555396] 0000000027b233cc: 00 00 03 5a b4 24 02 00 04 00 00 00 00 00 00 00 ...Z.$.......... [ 195.564295] 0000000037eeaece: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 195.576469] XFS (loop3): SB validate failed with error -117. 2018/04/15 15:58:28 executing program 6 (fault-call:6 fault-nth:14): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20040, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000380)=""/199) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000001b38)={{0xb, 0x0, 0x0, 0x0, "de1bcc85933042d216de4411eb607baf97a9d31b6bd93f6d4290b2682afb50aee380b16435085ccbb13abd24"}, 0x0, [], {0x77359400}}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x33) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000340)={0x0, r1}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)) mkdir(&(0x7f00002b2000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) r2 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x3) io_setup(0x100000, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_getevents(r3, 0x7, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000200)={r4, r5+30000000}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000480)=0x78) ioctl$TIOCSTI(r1, 0x5412, 0x100000001) 2018/04/15 15:58:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x40081271, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="b7000000000000ffe7000000000000000000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 2018/04/15 15:58:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getflags(r0, 0x40b) connect(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x2, {0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x80) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x80081272, &(0x7f00000000c0)) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x80480) 2018/04/15 15:58:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x3e, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0x6, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x1, 0xffffffffffffff80, 0x1, 0x0, 0x5}) [ 195.881399] FAULT_INJECTION: forcing a failure. [ 195.881399] name failslab, interval 1, probability 0, space 0, times 0 [ 195.892872] CPU: 0 PID: 16379 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 195.899728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.909095] Call Trace: [ 195.911705] dump_stack+0x1b9/0x294 [ 195.915360] ? dump_stack_print_info.cold.2+0x52/0x52 [ 195.920574] ? __save_stack_trace+0x7e/0xd0 [ 195.924935] should_fail.cold.4+0xa/0x1a [ 195.929024] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.934159] ? kasan_kmalloc+0xc4/0xe0 [ 195.938071] ? kasan_slab_alloc+0x12/0x20 [ 195.942240] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 195.947117] ? kvm_mmu_load+0x21/0x10e0 [ 195.951111] ? vcpu_enter_guest+0x3aa1/0x6070 [ 195.955629] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 195.960667] ? graph_lock+0x170/0x170 [ 195.964487] ? do_syscall_64+0x29e/0x9d0 [ 195.968562] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.973955] ? find_held_lock+0x36/0x1c0 [ 195.978067] ? __lock_is_held+0xb5/0x140 [ 195.982176] ? check_same_owner+0x320/0x320 [ 195.986536] ? rcu_note_context_switch+0x710/0x710 [ 195.991509] __should_failslab+0x124/0x180 [ 195.995795] should_failslab+0x9/0x14 [ 195.999618] kmem_cache_alloc+0x2af/0x760 [ 196.003801] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 196.008671] mmu_topup_memory_caches+0xf7/0x3a0 [ 196.013363] ? kvm_apic_has_interrupt+0xe1/0x210 [ 196.018163] kvm_mmu_load+0x21/0x10e0 [ 196.021993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 196.027563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 196.033126] vcpu_enter_guest+0x3aa1/0x6070 [ 196.037454] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 196.042999] ? vmcs_load+0x139/0x180 [ 196.046727] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 196.052447] ? kvm_set_msr_common+0x2660/0x2660 [ 196.057120] ? vmx_vcpu_load+0xadd/0xfe0 [ 196.061175] ? __lock_acquire+0x7f5/0x5140 [ 196.065403] ? perf_trace_run_bpf_submit+0x246/0x370 [ 196.070507] ? vmx_vcpu_reset+0x1030/0x1030 [ 196.074821] ? graph_lock+0x170/0x170 [ 196.078613] ? __lock_acquire+0x7f5/0x5140 [ 196.082844] ? perf_trace_run_bpf_submit+0x246/0x370 [ 196.087956] ? __lock_is_held+0xb5/0x140 [ 196.092028] ? lock_acquire+0x1dc/0x520 [ 196.096005] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 196.101049] ? lock_release+0xa10/0xa10 [ 196.105022] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 196.110308] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 196.114799] ? preempt_notifier_dec+0x20/0x20 [ 196.119311] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 196.124148] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 196.129162] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 196.134277] kvm_vcpu_ioctl+0x79d/0x12e0 [ 196.138338] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 196.144057] ? graph_lock+0x170/0x170 [ 196.147860] ? find_held_lock+0x36/0x1c0 [ 196.151935] ? lock_downgrade+0x8e0/0x8e0 [ 196.156088] ? rcu_is_watching+0x85/0x140 [ 196.160234] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 196.165433] ? __fget+0x40c/0x650 [ 196.168883] ? match_held_lock+0x871/0x8b0 [ 196.173117] ? expand_files.part.8+0x9a0/0x9a0 [ 196.177693] ? kasan_check_write+0x14/0x20 [ 196.181926] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 196.186856] ? wait_for_completion+0x870/0x870 [ 196.191434] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 196.196620] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 196.202327] do_vfs_ioctl+0x1cf/0x16a0 [ 196.206221] ? ioctl_preallocate+0x2e0/0x2e0 [ 196.210625] ? fget_raw+0x20/0x20 [ 196.214076] ? __sb_end_write+0xac/0xe0 [ 196.218059] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 196.223585] ? fput+0x130/0x1a0 [ 196.226862] ? ksys_write+0x1a6/0x250 [ 196.230664] ? security_file_ioctl+0x94/0xc0 [ 196.235073] ksys_ioctl+0xa9/0xd0 [ 196.238526] SyS_ioctl+0x24/0x30 [ 196.241885] ? ksys_ioctl+0xd0/0xd0 [ 196.245508] do_syscall_64+0x29e/0x9d0 [ 196.249387] ? vmalloc_sync_all+0x30/0x30 [ 196.253526] ? _raw_spin_unlock_irq+0x27/0x70 [ 196.258021] ? finish_task_switch+0x1ca/0x810 [ 196.262526] ? syscall_return_slowpath+0x5c0/0x5c0 [ 196.267463] ? syscall_return_slowpath+0x30f/0x5c0 [ 196.272394] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 196.277763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.282608] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.287803] RIP: 0033:0x455319 [ 196.290985] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.298700] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 196.305964] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 196.313224] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.320488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:28 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000939f01)='net/anycast6\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$ipx(r0, &(0x7f00000000c0)={0x4, 0x2b64, 0x7f8, "3d8be947e14e", 0x2}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000019c0)={@dev={0xfe, 0x80}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) preadv(r0, &(0x7f00006c6000)=[{&(0x7f0000ed9000)=""/202, 0xca}], 0x1, 0x62) 2018/04/15 15:58:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x3, 0x4) 2018/04/15 15:58:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 3: syz_emit_ethernet(0x0, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)={0x0, 0x2}) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000000000, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r2, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) write(r2, &(0x7f0000000200), 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8c0, 0x0, 0x7fff, 0x7fff, 0x0, 0x200000000000000, 0x10, 0xd, 0x10001, 0x6, 0x200, 0x9, 0x3, 0x7, 0x0, 0x5, 0x0, 0x401, 0x80000000, 0xfffffffffffffffb, 0x81, 0x320, 0x7, 0x400000000000, 0x4, 0x4c, 0x80000000, 0x0, 0x8c, 0x5, 0x6e57, 0x10001, 0xffffffff, 0x81, 0x1, 0x1f, 0x0, 0x6, 0x1, @perf_config_ext={0xca, 0x9}, 0x10000, 0x200, 0x80000000, 0x7, 0x3, 0x2, 0xd9d0}, r3, 0xc, r0, 0xa) recvmsg(r1, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001e000), 0x0, &(0x7f0000019000)}, 0x1ffe) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x8001, 0x7a, 0x0, 0xfffffffffffffff9, 0x0, 0x3, 0x800, 0x2, 0xba, 0x13af, 0x2, 0x7, 0x8, 0x7f, 0x88, 0x3ff, 0x8, 0x6, 0x80000001, 0x8, 0x0, 0x40, 0x5de0, 0x7fffffff, 0xc3, 0x13fee077, 0x80000000, 0x5, 0x7, 0x3, 0xffff, 0xfffffffffffffffa, 0xfffffffffffffc01, 0x10000, 0x4, 0x5, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x2}, 0x804, 0x8, 0xfd1, 0x5, 0x3, 0x1ff, 0x3f}, r3, 0xc, r0, 0x3) 2018/04/15 15:58:28 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x8002) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x80000000000000, 0x10f000, 0x3ff, 0x8, 0x10}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x125f, &(0x7f0000000800)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x9, 0x3}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @random="a20e4e80c5f8", 'bridge0\x00'}}) 2018/04/15 15:58:28 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f000000a580)='/dev/dmmidi#\x00', 0xd6, 0x0) listen$netrom(r0, 0x7f) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair(0x10, 0x1, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r1, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) clock_gettime(0x7, &(0x7f0000009f80)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000a680)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/45, 0x2d}], 0x9, &(0x7f0000000800)=""/219, 0xdb}, 0xfff}, {{&(0x7f0000000900)=@nfc_llcp, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/56, 0x38}, {&(0x7f0000000a80)=""/53, 0x35}, {&(0x7f0000000ac0)=""/197, 0xc5}, {&(0x7f0000000bc0)=""/43, 0x2b}, {&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000000d00)=""/137, 0x89}], 0x7, &(0x7f0000000e40)=""/6, 0x6, 0x1}}, {{&(0x7f0000000e80)=@rc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/121, 0x79}, {&(0x7f0000001f80)=""/218, 0xda}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4, &(0x7f00000030c0)=""/210, 0xd2, 0x3}, 0x5b93}, {{&(0x7f00000031c0)=@hci, 0x80, &(0x7f0000004380)=[{&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/68, 0x44}, {&(0x7f00000042c0)=""/182, 0xb6}], 0x3, &(0x7f00000043c0)=""/4096, 0x1000, 0x3}, 0x2}, {{&(0x7f00000053c0)=@hci, 0x80, &(0x7f0000008800)=[{&(0x7f0000005440)=""/175, 0xaf}, {&(0x7f0000005500)=""/23, 0x17}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/213, 0xd5}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/127, 0x7f}, {&(0x7f00000076c0)=""/154, 0x9a}, {&(0x7f0000007780)=""/103, 0x67}, {&(0x7f0000007800)=""/4096, 0x1000}], 0x9, &(0x7f00000088c0)=""/67, 0x43, 0x5}, 0xf80}, {{&(0x7f0000008940)=@alg, 0x80, &(0x7f0000009e00)=[{&(0x7f00000089c0)=""/99, 0x63}, {&(0x7f0000008a40)=""/219, 0xdb}, {&(0x7f0000008b40)=""/4096, 0x1000}, {&(0x7f0000009b40)=""/52, 0x34}, {&(0x7f0000009b80)=""/105, 0x69}, {&(0x7f0000009c00)=""/202, 0xca}, {&(0x7f0000009d00)=""/13, 0xd}, {&(0x7f0000009d40)=""/162, 0xa2}], 0x8, &(0x7f0000009e80)=""/110, 0x6e, 0x3}, 0x80000000}, {{&(0x7f0000009f00)=@generic, 0x80, &(0x7f0000009f80), 0x0, &(0x7f0000009fc0)=""/73, 0x49, 0x100000001}, 0x8001}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f000000a040)=""/186, 0xba}, {&(0x7f000000a100)=""/197, 0xc5}, {&(0x7f000000a200)=""/227, 0xe3}, {&(0x7f000000a300)=""/154, 0x9a}, {&(0x7f000000a3c0)=""/188, 0xbc}, {&(0x7f000000a480)=""/39, 0x27}, {&(0x7f000000a4c0)=""/132, 0x84}, {&(0x7f000000a580)}], 0x8, &(0x7f000000a640)=""/44, 0x2c, 0x100000001}, 0x4}], 0x8, 0x40000000, &(0x7f000000a8c0)={r3, r4+30000000}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) connect$bt_sco(r5, &(0x7f0000000100)={0x1f, {0xfffffffffffffff9, 0x5, 0x101, 0xaa, 0x3, 0x7ff}}, 0x8) [ 196.327750] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000e 2018/04/15 15:58:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1264, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 6 (fault-call:6 fault-nth:15): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[]}, 0x1}, 0x0) 2018/04/15 15:58:28 executing program 7: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0xe8, "15834298164df24fcf39ec80f690fd1aaf86a7f1f8d0abe6dfca0b332a8146512a22b1bb9de3f6f79f64b5d969772e8765fe30cac8278fd8b9fd3a24eae3dd73c0577871072b2053410a5580f52bb8740000a818d8833679df8b1c3accc81b477563e6aaf9717654a8af756cf082ab1d3baa818041244973067fb4a84673981abb02b4b6799f854a8d2da7030b443ba8f3f68290dbc23a9031ef276aa7f7b98336b3412740b986bdf3e082acd443cc98f98093bc04c9aa806a5cb3fd5252634269aefb886047b27f6223913a0ea6309be8024b85ea5d932eedc8e13574dc92cbd4fb0a8000c7304d"}, &(0x7f00000001c0)=0xf0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0xffffffffffffff81}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x65f0, 0x1) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x8, 0x55, 0x0, 0x6, 0x8, 0x79c681cb, 0x10001, 0x80000000, 0x1, 0x10001, 0x6, 0x7, 0x6}, {0x2, 0x6, 0xe6, 0x1f, 0x5, 0x100000000, 0x0, 0x5, 0x0, 0x101, 0x0, 0x10000, 0x1000}, {0xffff, 0xe5, 0x8, 0x8, 0xfffffffffffffffb, 0x3, 0x74b, 0xffffffffffffffff, 0x20, 0x1, 0x1, 0x5, 0x401}], 0x401}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) 2018/04/15 15:58:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x3b53d9161a51397a) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = socket(0x3, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22}}, 0xd91, 0x9}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x1}, &(0x7f0000000180)=0x8) r3 = socket$inet_icmp(0x2, 0x2, 0x1) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) setregid(r4, r5) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={"012c744866cbeb4daa95800000420300", {0x2, 0x4e27, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/15 15:58:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1274, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x802, 0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000140)={r3, &(0x7f0000000100)=""/38}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x20041, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8d058befdb49e2c5891ae9ae0f630caad5709ab4e7daf04000000000000000f5ff0000002aadc44c33e9d10000000000000000"], 0x0, 0x0, &(0x7f0000008f37)}) r4 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x1}) 2018/04/15 15:58:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x40000) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000000)) [ 196.695140] FAULT_INJECTION: forcing a failure. [ 196.695140] name failslab, interval 1, probability 0, space 0, times 0 [ 196.706491] CPU: 0 PID: 16437 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 196.713343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.722708] Call Trace: [ 196.725318] dump_stack+0x1b9/0x294 [ 196.728971] ? dump_stack_print_info.cold.2+0x52/0x52 [ 196.734188] ? __save_stack_trace+0x7e/0xd0 [ 196.738542] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 196.742649] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 196.747777] ? kasan_kmalloc+0xc4/0xe0 [ 196.751688] ? kasan_slab_alloc+0x12/0x20 [ 196.755860] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 196.760727] ? kvm_mmu_load+0x21/0x10e0 [ 196.764721] ? vcpu_enter_guest+0x3aa1/0x6070 [ 196.769237] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 196.774281] ? graph_lock+0x170/0x170 [ 196.778100] ? do_syscall_64+0x29e/0x9d0 [ 196.782176] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.787569] ? find_held_lock+0x36/0x1c0 [ 196.791665] ? __lock_is_held+0xb5/0x140 2018/04/15 15:58:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) pipe2(&(0x7f0000000000), 0x80000) [ 196.795782] ? check_same_owner+0x320/0x320 [ 196.800134] ? rcu_note_context_switch+0x710/0x710 [ 196.805105] __should_failslab+0x124/0x180 [ 196.809368] should_failslab+0x9/0x14 [ 196.813189] kmem_cache_alloc+0x2af/0x760 [ 196.817367] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 196.822236] mmu_topup_memory_caches+0xf7/0x3a0 [ 196.826926] ? kvm_apic_has_interrupt+0xe1/0x210 [ 196.831720] kvm_mmu_load+0x21/0x10e0 [ 196.836000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:29 executing program 4: socketpair(0x5, 0x0, 0x8001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r2, 0x0) [ 196.841566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 196.847134] vcpu_enter_guest+0x3aa1/0x6070 [ 196.851483] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 196.857044] ? vmcs_load+0x139/0x180 [ 196.860782] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 196.866515] ? kvm_set_msr_common+0x2660/0x2660 [ 196.871204] ? vmx_vcpu_load+0xadd/0xfe0 [ 196.875276] ? __lock_acquire+0x7f5/0x5140 [ 196.879524] ? perf_trace_run_bpf_submit+0x246/0x370 [ 196.884644] ? vmx_vcpu_reset+0x1030/0x1030 [ 196.888989] ? graph_lock+0x170/0x170 [ 196.892807] ? __lock_acquire+0x7f5/0x5140 [ 196.897066] ? perf_trace_run_bpf_submit+0x246/0x370 [ 196.902207] ? __lock_is_held+0xb5/0x140 [ 196.906293] ? lock_acquire+0x1dc/0x520 [ 196.910281] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 196.915321] ? lock_release+0xa10/0xa10 [ 196.919315] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 196.924612] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 196.929125] ? preempt_notifier_dec+0x20/0x20 [ 196.933658] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 196.938512] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 196.943544] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 196.948679] kvm_vcpu_ioctl+0x79d/0x12e0 [ 196.952768] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 196.958495] ? graph_lock+0x170/0x170 [ 196.962315] ? find_held_lock+0x36/0x1c0 [ 196.966412] ? lock_downgrade+0x8e0/0x8e0 [ 196.970586] ? rcu_is_watching+0x85/0x140 [ 196.974750] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 196.979979] ? __fget+0x40c/0x650 [ 196.983453] ? match_held_lock+0x871/0x8b0 [ 196.987709] ? expand_files.part.8+0x9a0/0x9a0 [ 196.992313] ? kasan_check_write+0x14/0x20 [ 196.996571] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 197.001519] ? wait_for_completion+0x870/0x870 [ 197.006117] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 197.011323] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 197.017052] do_vfs_ioctl+0x1cf/0x16a0 [ 197.020973] ? ioctl_preallocate+0x2e0/0x2e0 [ 197.025396] ? fget_raw+0x20/0x20 [ 197.028872] ? __sb_end_write+0xac/0xe0 [ 197.032870] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 197.038423] ? fput+0x130/0x1a0 [ 197.041721] ? ksys_write+0x1a6/0x250 [ 197.045546] ? security_file_ioctl+0x94/0xc0 [ 197.049982] ksys_ioctl+0xa9/0xd0 [ 197.053455] SyS_ioctl+0x24/0x30 [ 197.056836] ? ksys_ioctl+0xd0/0xd0 [ 197.060469] do_syscall_64+0x29e/0x9d0 [ 197.064366] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 197.069230] ? syscall_return_slowpath+0x5c0/0x5c0 [ 197.074176] ? syscall_return_slowpath+0x30f/0x5c0 [ 197.079134] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 197.084525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 197.089397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/15 15:58:29 executing program 4: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x100}) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x2) fcntl$addseals(r0, 0x409, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f00000002c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x406001, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+30000000}, {r4, r5+30000000}}, &(0x7f0000000180)) 2018/04/15 15:58:29 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0xfff, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x4e21, 0x1f, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffff7f}, 0xfffffffffffffffa, [0xf5ab, 0x3, 0x2, 0x8, 0x3, 0x8, 0x3, 0x1]}, 0x5c) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x125f, &(0x7f0000000180)) fdatasync(r0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x3) 2018/04/15 15:58:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xbd, 0x4000) recvmsg$netrom(r1, &(0x7f0000000380)={&(0x7f0000000100)=@full={{0x3, {"5575c3a0a689e1"}, 0x5}, [{"a8861829464014"}, {"a2f9494192a1f3"}, {"00b93909f1b615"}, {"11d674fc46e3ec"}, {"c46f6c1f94f3f9"}, {"8a445a484a33d5"}, {"ce429c1f3103b3"}, {"23a81d4b923662"}]}, 0x48, &(0x7f0000000280)=[{&(0x7f0000000180)="4093cdb35baa7a1668b65947f5b55b07ed52d82acb50dd7050913cb98169cea201502dc0794c51cea246d18c3c1b97f43e0254637a7ccbbbad3f260762d0ba8e828d62bfa2ebef937780abb9610eaac441d598a36336cba0a072f767174a357f3792891b8b2ec2381f677c12e6aabc60b97c06cf176d49a11c351b99d7f8a32ec6f3f44a0c54c995dee071580f524496e74ca7eba3a297acff28b4a1be0360e7728ce5a51ce20ce951a586f8f2631efc4ef44c3e58f6cd4899358c7a8e0a8dce4b3460829bc663db62f17df48b2e5b593ec18b463f62a887b0be952c83d71e88b0c93b", 0xe3}], 0x1, &(0x7f00000002c0)=[{0x78, 0x11, 0x0, "250ea9e44aa21e70f3008d875c0223e5e7ef3d4ef1e6ca0050c753fab11fd8c6939310f7cf36caf300987b40b7e69727b7db469b158d690c15ddb871446dfde102b5499ab197ff83fd5a37142c1c825378943d2e60f67734209f1ce7af3ffdc6c3"}, {0x40, 0x88, 0xff, "1be9630710d3c8626f6c8ae25cde0d449ac7d67a7043f8b33d42e7d759cb327e3b88090b3ee2a4230e5ecb12"}], 0xb8, 0x40}, 0x40) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x10000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 197.094601] RIP: 0033:0x455319 [ 197.097799] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.105522] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 197.112801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 197.120078] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.127361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 197.134638] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000000f [ 197.161163] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.255551] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 197.457528] binder: 16430:16488 unknown command -276101747 [ 197.463216] binder: 16430:16488 ioctl c0306201 2000dfd0 returned -22 2018/04/15 15:58:29 executing program 6 (fault-call:6 fault-nth:16): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4000000000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x8000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0xe373, 0x0, 0x4, 0x2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x6, 0x808000000}, 0x8) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20002, 0x0) getpeername$llc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) socketpair(0x10, 0x3, 0x350e6472, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) write$evdev(r0, &(0x7f0000f15fd0)=[{{0x77359400}, 0x1, 0x64, 0x4}, {}], 0x30) 2018/04/15 15:58:29 executing program 7: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x7) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x200000, &(0x7f0000000000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmod(r1, 0x0) prctl$setname(0xf, &(0x7f0000000000)='configfs\x00') 2018/04/15 15:58:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x127a, &(0x7f0000000800)) 2018/04/15 15:58:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10}, 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 2018/04/15 15:58:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000000)) 2018/04/15 15:58:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 197.579567] binder: BINDER_SET_CONTEXT_MGR already set [ 197.584931] binder: 16430:16488 ioctl 40046207 0 returned -16 [ 197.594995] binder: 16430:16489 unknown command -276101747 [ 197.601716] binder: 16430:16489 ioctl c0306201 2000dfd0 returned -22 2018/04/15 15:58:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:29 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x68, 0x400) openat(r0, &(0x7f0000000080)='./file0\x00', 0x101042, 0x80) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c02, &(0x7f0000000800)) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40200) accept$alg(r2, 0x0, 0x0) [ 197.700417] FAULT_INJECTION: forcing a failure. [ 197.700417] name failslab, interval 1, probability 0, space 0, times 0 [ 197.711752] CPU: 0 PID: 16503 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 197.718607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.727973] Call Trace: [ 197.730584] dump_stack+0x1b9/0x294 [ 197.734236] ? dump_stack_print_info.cold.2+0x52/0x52 [ 197.739453] ? __save_stack_trace+0x7e/0xd0 [ 197.743814] should_fail.cold.4+0xa/0x1a [ 197.747904] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 197.753037] ? kasan_kmalloc+0xc4/0xe0 [ 197.756966] ? kasan_slab_alloc+0x12/0x20 [ 197.761136] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 197.765992] ? kvm_mmu_load+0x21/0x10e0 [ 197.769983] ? vcpu_enter_guest+0x3aa1/0x6070 [ 197.774493] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 197.779530] ? graph_lock+0x170/0x170 [ 197.783356] ? do_syscall_64+0x29e/0x9d0 [ 197.787435] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.792831] ? find_held_lock+0x36/0x1c0 2018/04/15 15:58:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:30 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x203, 0x2001) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:30 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x626, 0x1b0, &(0x7f0000000100)="c4baa7866991e4effb3b4af6edddc692e85e82df405cf8e4683f48a693bf7423b14c9d490db44519155b3616121ccbc499eb766d5e3781f173ed435057ab3045d2521e162b2162595700c6bd90e2060aa3264ba573ad8ed2addba3e21ed6509df673afdc983b12d6cafd20e3c12a12b86d8742df28a789b6a3060170e2e784941a4338bcb9d28386609efc90fac9db1954329d3e19fd542b1d1b694e0d0f55f5854c8c48369456721bc37daeea4d0d8723da14f02452d5c6d29ff6b17df98839436d10da7f85", &(0x7f0000000200)="85c96a17d2b58c4c65ca77f319ae58abafee", 0xc6, 0x12}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)=0xfff, 0x4) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x7fc, 0x0, 0xff}, 0x20) [ 197.796941] ? __lock_is_held+0xb5/0x140 [ 197.796990] ? check_same_owner+0x320/0x320 [ 197.797017] ? rcu_note_context_switch+0x710/0x710 [ 197.797049] __should_failslab+0x124/0x180 [ 197.797071] should_failslab+0x9/0x14 [ 197.797088] kmem_cache_alloc+0x2af/0x760 [ 197.797114] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 197.827609] mmu_topup_memory_caches+0xf7/0x3a0 [ 197.832296] ? kvm_apic_has_interrupt+0xe1/0x210 [ 197.837075] kvm_mmu_load+0x21/0x10e0 [ 197.840885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:30 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffff8, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xf93, 0x2be7273ac005b504) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x5, 0xffffffff935bd56d, 0x4, 0x6, 0x7fff, 0x3ff, 0x5, 0x7, r1}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x7, 0x1, 0x5, 0x3, 0x98}, 0x14) [ 197.846444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 197.852014] vcpu_enter_guest+0x3aa1/0x6070 [ 197.856355] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 197.861925] ? vmcs_load+0x139/0x180 [ 197.865660] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 197.871396] ? kvm_set_msr_common+0x2660/0x2660 [ 197.876085] ? vmx_vcpu_load+0xadd/0xfe0 [ 197.880153] ? __lock_acquire+0x7f5/0x5140 [ 197.884419] ? perf_trace_run_bpf_submit+0x246/0x370 [ 197.889546] ? vmx_vcpu_reset+0x1030/0x1030 [ 197.893880] ? graph_lock+0x170/0x170 2018/04/15 15:58:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socketpair(0x1, 0x6, 0x5d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x2, 0x1, 0x1f, 0x7, 0xc864, 0xe4b2, 0x80000000, 0x8000, 0x2, 0xffffffff, 0x3f, 0x9}) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 197.897700] ? __lock_acquire+0x7f5/0x5140 [ 197.901959] ? perf_trace_run_bpf_submit+0x246/0x370 [ 197.907093] ? __lock_is_held+0xb5/0x140 [ 197.911176] ? lock_acquire+0x1dc/0x520 [ 197.915163] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 197.920202] ? lock_release+0xa10/0xa10 [ 197.924195] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 197.929490] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 197.933998] ? preempt_notifier_dec+0x20/0x20 [ 197.938532] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 197.943386] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 2018/04/15 15:58:30 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x2000000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) getsockopt(r1, 0x100000001, 0x8, &(0x7f0000000000)=""/187, &(0x7f00000000c0)=0xbb) r3 = accept4(r1, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80, 0x800) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000380)=0x6) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x200800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1c}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r5, 0x10001}, &(0x7f0000000280)=0x8) [ 197.948418] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 197.953549] kvm_vcpu_ioctl+0x79d/0x12e0 [ 197.957636] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 197.963361] ? graph_lock+0x170/0x170 [ 197.967181] ? find_held_lock+0x36/0x1c0 [ 197.971275] ? lock_downgrade+0x8e0/0x8e0 [ 197.975450] ? rcu_is_watching+0x85/0x140 [ 197.979617] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 197.984844] ? __fget+0x40c/0x650 [ 197.988315] ? match_held_lock+0x871/0x8b0 [ 197.992571] ? expand_files.part.8+0x9a0/0x9a0 [ 197.997166] ? kasan_check_write+0x14/0x20 [ 198.001419] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 198.006369] ? wait_for_completion+0x870/0x870 [ 198.010968] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 198.016179] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 198.021924] do_vfs_ioctl+0x1cf/0x16a0 [ 198.025831] ? ioctl_preallocate+0x2e0/0x2e0 [ 198.030243] ? fget_raw+0x20/0x20 [ 198.033706] ? __sb_end_write+0xac/0xe0 [ 198.037707] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 198.043255] ? fput+0x130/0x1a0 [ 198.046553] ? ksys_write+0x1a6/0x250 [ 198.050373] ? security_file_ioctl+0x94/0xc0 [ 198.054806] ksys_ioctl+0xa9/0xd0 [ 198.058281] SyS_ioctl+0x24/0x30 [ 198.061658] ? ksys_ioctl+0xd0/0xd0 [ 198.065304] do_syscall_64+0x29e/0x9d0 [ 198.069203] ? vmalloc_sync_all+0x30/0x30 [ 198.073365] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.077866] ? finish_task_switch+0x1ca/0x810 [ 198.082357] ? syscall_return_slowpath+0x5c0/0x5c0 [ 198.087278] ? syscall_return_slowpath+0x30f/0x5c0 [ 198.092205] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.097563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.102404] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.107579] RIP: 0033:0x455319 [ 198.110755] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.118464] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 198.125718] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 198.132971] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.140239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 198.147504] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000010 2018/04/15 15:58:30 executing program 6 (fault-call:6 fault-nth:17): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) setresuid(r1, r2, r3) 2018/04/15 15:58:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000100)="0f20c035040000000f22c0640fc7a8000000000f20e035010000000f22e0b9510b0000b80d000000ba000000000f30c46239f7b4a6008000000f01c866b8e5008ed00f07c46179d7e3410f2083", 0x4d}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"3c76ec53299f8519973f9086bb292c9be39126025dca1eaf80247173e08854b7b83404fab20a3f49dc0348115c5f40dfdd6ac90bce31664a2fff0d9646170dedb16daa9d40f0646739072b022407000000000000ef3907060000000000000028db052584309d89c878a13615d2f8d26ec640bff1d3552c3da6d47b258e9c6efea0e44a9abf8b1df2df4a633ea7efb1167fea42a1a64b874c3f3b4d7008b7d1b429fc2b829b2955a041d790e89853809196a25005cdc6e8c2080090e71e2fee914bee0c4d3e6d16da68cb75e19727254d0c43bba4d0f27f649f852258b80c42095dda143db25a5e0ae1f83c3df37fd8482577869c26f5d12767569ba2fe1f79dc51f0436a00db4385a119e1542527e66419d6c28dc5e2417232b6c2b03c750c2cec9ff6864dd476a6e22f2bff71417f6a3e9028e2ae0778432e797a1464d70839ef2f4b334c11285c7a675e043fd39517198c767112896ea084a467a86af24e812cf10c191cedcb8d913c4689db720800000000000000477d5d9f8e58f9a015633c75c63ea5d6f8e3719781609bb0fe5b14bb7e4ccb83a60bbdb52c6c406fd2dbd08352ce510cacf886a6153026b8dba95d38fc4b6b3b4bcf1536a7dec889836b8ced33a8154c6e41bf0b528b95de216d3b8664e4bc44358fb20ba57aad1098fd73818ec9bb610c9b14fc2695e0fb00d28cc1612ab8982583dba6afe7c980d96b6faee937bb9b361ebc882d93f06e1adc6331f96023d53b8096ffe069b2fe93713b95b89fa622879e97e040d7696ebe24bd5f1742dc29bddf95c513f2881ac7e7a426175c71afea64ab78014e58ea9e2e34d0155ab8acc11e29a1da2a0d6e47d18e05df9f1097a205df152a22d2978d311253f46ae43a9c4cb203af26112f2a731e00800000f4ae2381a5b1eab83a7ff3cd328095700c2128e27e2ec878a99dafc9bf59be3c30ebdf13e8b708cae6b18f9745c842f45839bc7f27abb5b3cbe0b7af83bc2ce9f503c4714b4c79d79bf749ac4cde07fe428a14874c7722785632475186d763ff004239ab3622a76ab22617e7b622351442ad4cd6626c2e4db2af2acfb744fc530e38675b6b8f473a49126f0dc0b4b6fea45d25ab4d704bc3de0064ca707e37cd3aafa34b0be17890dfb4df2d4a50899125872624b939f9e3ac781cfed29cca9d3b349fd7d20307716163ed5f2bc33e5242d752bb471b006dd1c6f01e783a1636fb3162370bf60052f4d260a85093a582520ad5aca1c56797dec37ad109d9413f5be17e7bdd022112909a6804465ddf7a0a38dd9dfcb915c2c0746e22196ecda798689b8f40836e9b0dc0b63b3f306b48aad06f847a9122fa1867dd80a45fe42fd3e6cbe8c5b186286db557ed740a719130736164ffa3461aecfe60bf558a83ddf725fbac979bcc90265ff07dcfd3a3e7a50b00eed8a263163c3af7"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0xc0045878, &(0x7f0000000800)) 2018/04/15 15:58:30 executing program 7: syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r0, &(0x7f0000000200)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedc9a86e30a86bc0d37a6438b99a45ea22b1f4fb") unshare(0x8000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f0000553ff8), 0x8}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x105000) syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x8a200) 2018/04/15 15:58:30 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/113) r0 = shmget(0x2, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 198.369395] FAULT_INJECTION: forcing a failure. [ 198.369395] name failslab, interval 1, probability 0, space 0, times 0 [ 198.380726] CPU: 0 PID: 16559 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 198.387583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.396951] Call Trace: [ 198.399562] dump_stack+0x1b9/0x294 [ 198.403217] ? dump_stack_print_info.cold.2+0x52/0x52 [ 198.408433] ? perf_trace_lock_acquire+0xe3/0x980 [ 198.413318] should_fail.cold.4+0xa/0x1a [ 198.417409] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.422538] ? kasan_kmalloc+0xc4/0xe0 [ 198.426441] ? kasan_slab_alloc+0x12/0x20 [ 198.430588] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 198.435422] ? kvm_mmu_load+0x21/0x10e0 [ 198.439390] ? vcpu_enter_guest+0x3aa1/0x6070 [ 198.443880] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 198.448891] ? graph_lock+0x170/0x170 [ 198.452687] ? do_syscall_64+0x29e/0x9d0 [ 198.456761] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.462131] ? find_held_lock+0x36/0x1c0 [ 198.466198] ? __lock_is_held+0xb5/0x140 [ 198.470280] ? check_same_owner+0x320/0x320 [ 198.474623] ? rcu_note_context_switch+0x710/0x710 [ 198.479566] __should_failslab+0x124/0x180 [ 198.483804] should_failslab+0x9/0x14 [ 198.487600] kmem_cache_alloc+0x2af/0x760 [ 198.491756] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 198.496606] mmu_topup_memory_caches+0xf7/0x3a0 [ 198.501276] ? kvm_apic_has_interrupt+0xe1/0x210 [ 198.506044] kvm_mmu_load+0x21/0x10e0 [ 198.509840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.515380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 198.520930] vcpu_enter_guest+0x3aa1/0x6070 [ 198.525250] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 198.530782] ? vmcs_load+0x139/0x180 [ 198.534495] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 198.540210] ? kvm_set_msr_common+0x2660/0x2660 [ 198.544881] ? perf_trace_lock+0x900/0x900 [ 198.549106] ? __lock_acquire+0x7f5/0x5140 [ 198.553341] ? vmx_vcpu_reset+0x1030/0x1030 [ 198.557661] ? graph_lock+0x170/0x170 [ 198.561456] ? __lock_acquire+0x7f5/0x5140 [ 198.565692] ? perf_trace_run_bpf_submit+0x246/0x370 [ 198.570803] ? __lock_is_held+0xb5/0x140 [ 198.574874] ? lock_acquire+0x1dc/0x520 [ 198.578846] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 198.583870] ? lock_release+0xa10/0xa10 [ 198.587836] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 198.593121] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 198.597608] ? preempt_notifier_dec+0x20/0x20 [ 198.602115] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 198.606949] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 198.611960] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 198.617159] kvm_vcpu_ioctl+0x79d/0x12e0 [ 198.621219] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 198.626924] ? graph_lock+0x170/0x170 [ 198.630722] ? find_held_lock+0x36/0x1c0 [ 198.634792] ? lock_downgrade+0x8e0/0x8e0 [ 198.638949] ? rcu_is_watching+0x85/0x140 [ 198.643093] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 198.648294] ? __fget+0x40c/0x650 [ 198.651746] ? match_held_lock+0x871/0x8b0 [ 198.655980] ? expand_files.part.8+0x9a0/0x9a0 [ 198.660559] ? kasan_check_write+0x14/0x20 [ 198.664790] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 198.669722] ? wait_for_completion+0x870/0x870 [ 198.674299] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 198.679490] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 198.685199] do_vfs_ioctl+0x1cf/0x16a0 [ 198.689093] ? ioctl_preallocate+0x2e0/0x2e0 [ 198.693496] ? fget_raw+0x20/0x20 [ 198.696949] ? __sb_end_write+0xac/0xe0 [ 198.700927] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 198.706457] ? fput+0x130/0x1a0 [ 198.709735] ? ksys_write+0x1a6/0x250 [ 198.713540] ? security_file_ioctl+0x94/0xc0 [ 198.717948] ksys_ioctl+0xa9/0xd0 [ 198.721402] SyS_ioctl+0x24/0x30 [ 198.724759] ? ksys_ioctl+0xd0/0xd0 [ 198.728381] do_syscall_64+0x29e/0x9d0 [ 198.732259] ? vmalloc_sync_all+0x30/0x30 [ 198.736399] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.740896] ? finish_task_switch+0x1ca/0x810 [ 198.745388] ? syscall_return_slowpath+0x5c0/0x5c0 [ 198.750315] ? syscall_return_slowpath+0x30f/0x5c0 [ 198.755245] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.760610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.765455] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/15 15:58:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x81, "e1b5368173e0193c6e45fdad932fae8d19f1c96e1539eb519ebdf05f8d748e397eac3dc7cd2e5a748e989a38219821f53243d771a07e56ee4a522cfd53bdc0649424f06f8129be1033d32ca42ed38f03222c42e1fa058baa4cb8fb85b735a5b060a70c0d44ff9bfcb72a63e6972f26e89f03d645a83aa6225d0d998e506b4dad01"}, &(0x7f0000000100)=0x89) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x1c, "5d26f4afdc7b1e8d5acf825051c1aa78d21e11ca081083fb2b0f0176"}, &(0x7f0000000180)=0x24) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x80081272, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x6c, @dev={0xfe, 0x80, [], 0x17}, 0x8001}, @in6={0xa, 0x4e20, 0x8, @empty, 0x6d8}, @in6={0xa, 0x4e20, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x61}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x8, @loopback={0x0, 0x1}, 0x2}], 0xbc) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 198.770635] RIP: 0033:0x455319 [ 198.773816] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.781526] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 198.788788] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 198.796051] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.803313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 198.810578] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000011 2018/04/15 15:58:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x268) 2018/04/15 15:58:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x401070ca, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x400, 0x200003) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) socketpair$inet6(0xa, 0x1, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5ac, 0x7000000000000, 0x6, 0x8001, 0x3, 0x8, 0x9, 0x0, 0x6, 0x7ff, 0x800}, 0xb) ioctl$int_out(r2, 0x5460, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 2018/04/15 15:58:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000280)}) [ 199.043203] binder: 16598:16602 got transaction with unaligned buffers size, 4095 [ 199.081179] binder: 16598:16602 transaction failed 29201/-22, size 0-0 line 3008 [ 199.106140] binder: BINDER_SET_CONTEXT_MGR already set [ 199.121091] binder: 16598:16602 ioctl 40046207 0 returned -16 2018/04/15 15:58:31 executing program 6 (fault-call:6 fault-nth:18): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x80, 0x0, 0xffffffffffffffff, 0x7, 0xb7, 0x100}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) accept$inet6(r2, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) readahead(r1, 0x9, 0x9) recvfrom(r1, &(0x7f000069cfc1)=""/63, 0x1a, 0x0, &(0x7f0000098000)=@ipx={0x4, 0x0, 0x0, "e262589dfba5"}, 0x20000000) 2018/04/15 15:58:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) socketpair(0x8, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9, 0x200, 0x8, 0x1ff, 0x4, 0x8000, 0x6, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x8, 0x5, [0xfff, 0x5, 0x5, 0x6, 0x1]}, 0x12) 2018/04/15 15:58:31 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000440)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="eb52904e54465320202020000208000000000071", 0x14}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="53a636ee2bf4f6deb42155b1e828084a749d"]) 2018/04/15 15:58:31 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)=ANY=[@ANYBLOB="01000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00ff7400010b0001abab"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000012fc8)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000007000)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "e1a77d430f3e98a4"}}, 0x48}, 0x1}, 0x0) [ 199.161523] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.212517] ntfs: (device loop3): parse_options(): Unrecognized mount option S¦6î+ôöÞ´!U±è(Jt. [ 199.274835] FAULT_INJECTION: forcing a failure. [ 199.274835] name failslab, interval 1, probability 0, space 0, times 0 [ 199.286170] CPU: 0 PID: 16613 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 199.293031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.302400] Call Trace: [ 199.305014] dump_stack+0x1b9/0x294 [ 199.308670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 199.313885] ? __save_stack_trace+0x7e/0xd0 [ 199.318246] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x4003}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000300)={@pi={0x0, 0xc}, @hdr, @mpls={[], @ipv6={0x0, 0x6, 'qh[', 0x14, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x4a) r2 = fcntl$getown(r0, 0x9) r3 = gettid() setpgid(r2, r3) syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x900) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) [ 199.322328] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.327457] ? kasan_kmalloc+0xc4/0xe0 [ 199.328606] PF_CAN: dropped non conform CAN skbuf: dev type 65534, len 60, datalen 0 [ 199.331357] ? kasan_slab_alloc+0x12/0x20 [ 199.331381] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 199.331400] ? kvm_mmu_load+0x21/0x10e0 [ 199.331417] ? vcpu_enter_guest+0x3aa1/0x6070 [ 199.331431] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 199.331449] ? graph_lock+0x170/0x170 [ 199.365557] ? do_syscall_64+0x29e/0x9d0 [ 199.369641] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/15 15:58:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x2) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x4, 0x1, 0x1ff, 0x3ff, "32c3c701cce6e47787cf163ee5f002968a0d73c8a1f63f8d1aaee8ce720734ba"}) 2018/04/15 15:58:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101080) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff]}, @mac, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x7fffffff, 0x0, 0x1, 0x0, 0x5, 0x10001, 'veth0_to_bond\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x114}, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x3, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x6, 0x1}}}, {{@arp={@local={0xac, 0x14, 0x14, 0xaa}, @empty, 0xff0000ff, 0xffffff00, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x8196, 0x412, 0x4, 0x27, 0x8, 0x0, 'vcan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=0xffffffff, @multicast2=0xe0000002, 0x1, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 199.375040] ? find_held_lock+0x36/0x1c0 [ 199.379117] ? __lock_is_held+0xb5/0x140 [ 199.383205] ? check_same_owner+0x320/0x320 [ 199.387548] ? rcu_note_context_switch+0x710/0x710 [ 199.392502] __should_failslab+0x124/0x180 [ 199.396758] should_failslab+0x9/0x14 [ 199.400576] kmem_cache_alloc+0x2af/0x760 [ 199.404750] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 199.409710] mmu_topup_memory_caches+0xf7/0x3a0 [ 199.414392] ? kvm_apic_has_interrupt+0xe1/0x210 [ 199.419180] kvm_mmu_load+0x21/0x10e0 2018/04/15 15:58:31 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000002901)='dev ', 0x0) setsockopt(r1, 0x2, 0x7, &(0x7f0000000000)="3687a1ffe85823b2914c0fa9f09ec5f4b59ebe2b0a6dfc3f3b3dbf5cf56e1d1a158ffea55a1455a0c057a8f71f08a845435c448a1703b2dfb38642aea60e6f4c394fb96f3faa0e3cee03a992c05f97af006f871e704c4ff750593ad99fd0d4dba3d670bf4e2e05bb1af856a1255fb65a2e7840", 0x73) write(r0, &(0x7f0000000100)="00d5022c8fcdc0eb4c877a01000100d5faefa3e9d22e0e048166f9f242bd5931509801af4b8ca126705bab1a645383917d28b917f8ff675811296390d562dfd2fb5a25a57686bf76d1ce8b3af54ec09043508c098395fa4de9aea5cbae068362e5b4e00a404d646fc77cb5e507c7c5eb285ad921c394b795ae1e45a9e3ac3eab5d9943817b9ee72d3833dc76f4ef57f2c87b570712a20d299f89ba62f67a4b4b4fc9c899a1a6d845e2ebaa093279cec811b969285bfc94baa8df4655c21ce3f5a4ea20", 0xc3) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4200, r2, 0x0, 0x0) ptrace(0x19, r2) ptrace$getregset(0x4204, r2, 0x1, &(0x7f00000000c0)={&(0x7f00000013c0)=""/4096, 0x1000}) 2018/04/15 15:58:31 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x6c072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ftruncate(r1, 0x6) [ 199.422998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.428552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.434116] vcpu_enter_guest+0x3aa1/0x6070 [ 199.438448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.444002] ? vmcs_load+0x139/0x180 [ 199.447723] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 199.453457] ? kvm_set_msr_common+0x2660/0x2660 [ 199.458147] ? vmx_vcpu_load+0xadd/0xfe0 [ 199.462223] ? __lock_acquire+0x7f5/0x5140 [ 199.466472] ? perf_trace_run_bpf_submit+0x246/0x370 [ 199.471596] ? vmx_vcpu_reset+0x1030/0x1030 [ 199.475934] ? graph_lock+0x170/0x170 [ 199.479750] ? __lock_acquire+0x7f5/0x5140 [ 199.484012] ? perf_trace_run_bpf_submit+0x246/0x370 [ 199.489145] ? __lock_is_held+0xb5/0x140 [ 199.493226] ? lock_acquire+0x1dc/0x520 [ 199.497212] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 199.502253] ? lock_release+0xa10/0xa10 [ 199.506243] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 199.511540] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 199.516049] ? preempt_notifier_dec+0x20/0x20 [ 199.520580] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 2018/04/15 15:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x2000, &(0x7f0000000000)="6442356b5f2f1c5d1a34aed7d02d6b4ab72289f3a1e46e8ff921857a6ff919e202402311672bcb70b8fc8db9660aa919ccf69351e9e4c1cf33ebfe04243717c5b115274c9e5d8c3dd06ae17397fbbdb27e368e4297dd3f7ad89bd8c5e45c92364ba9966475580c4e8b0ebd54", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="4a595fc271a9b63ca2f4ef2a098c1dfa77e000e6446e4d0235dff1337c9762ad538d3b4d647a5342012642c0cfab01c56e2726942fee1a13f998ea3b7755bc1220344b0a40562615f5c08fefabba13106ed5e1666291e26627b4f5961cfb5d57480e019d2c3ab83a8e7f32363a39f3c658275365fc5d20b0a28adb67077012296e599eb31580") ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x8b}]}) [ 199.525437] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 199.530472] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 199.535609] kvm_vcpu_ioctl+0x79d/0x12e0 [ 199.539692] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 199.545422] ? graph_lock+0x170/0x170 [ 199.549241] ? find_held_lock+0x36/0x1c0 [ 199.553331] ? lock_downgrade+0x8e0/0x8e0 [ 199.557504] ? rcu_is_watching+0x85/0x140 [ 199.561669] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 199.566891] ? __fget+0x40c/0x650 [ 199.570360] ? match_held_lock+0x871/0x8b0 2018/04/15 15:58:31 executing program 7: sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)="c4", 0x1}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000622000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x85200) [ 199.574610] ? expand_files.part.8+0x9a0/0x9a0 [ 199.579205] ? kasan_check_write+0x14/0x20 [ 199.583460] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 199.588414] ? wait_for_completion+0x870/0x870 [ 199.593014] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 199.598212] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 199.603919] do_vfs_ioctl+0x1cf/0x16a0 [ 199.607894] ? ioctl_preallocate+0x2e0/0x2e0 [ 199.612300] ? fget_raw+0x20/0x20 [ 199.615747] ? __sb_end_write+0xac/0xe0 [ 199.619719] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.625246] ? fput+0x130/0x1a0 [ 199.628520] ? ksys_write+0x1a6/0x250 [ 199.632317] ? security_file_ioctl+0x94/0xc0 [ 199.636731] ksys_ioctl+0xa9/0xd0 [ 199.640187] SyS_ioctl+0x24/0x30 [ 199.643542] ? ksys_ioctl+0xd0/0xd0 [ 199.647165] do_syscall_64+0x29e/0x9d0 [ 199.651041] ? vmalloc_sync_all+0x30/0x30 [ 199.655190] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.659676] ? finish_task_switch+0x1ca/0x810 [ 199.664163] ? syscall_return_slowpath+0x5c0/0x5c0 [ 199.669092] ? syscall_return_slowpath+0x30f/0x5c0 [ 199.674036] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.679396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.684237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.689414] RIP: 0033:0x455319 [ 199.692593] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.700299] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 199.707561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 199.714824] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.722083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 199.729342] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000012 2018/04/15 15:58:32 executing program 6 (fault-call:6 fault-nth:19): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x401070cd, &(0x7f0000000800)) 2018/04/15 15:58:32 executing program 2: r0 = socket(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x46, @empty, 0x100000000}}, 0x7, 0x0, 0x6, "1db6ecc141b381fb586d13cdec690c481f162919ce65821a6121c95e80ce7a9e3c37709254a82651bc35713b08ab2f7a1a1c87b6c1be4d50a324dad53991c4977761a3d07177f0b5f0ca6da9014fd1c9"}, 0xd8) connect$inet(r0, &(0x7f0000390000)={0x2, 0xfffffffffffffffc, @multicast2=0xe0000002}, 0x10) r1 = open(&(0x7f0000000a00)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x4, 0x7, 0x1, "717565756531000000000000000000000000000000000000000000000000f7ff00", 0x80000000}) sendfile(r0, r1, 0x0, 0x72439a6b) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) acct(0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080), &(0x7f00000008c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x3, 0xaffe}, 0x4) dup3(r2, r3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000000d000)) r4 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000600)) removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) recvfrom$unix(0xffffffffffffffff, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r5) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r6 = semget(0x2, 0x2, 0x603) semctl$SEM_STAT(r6, 0x3, 0x12, &(0x7f0000000940)=""/186) getsockname$inet(r4, &(0x7f00000000c0)={0x0, 0x0, @loopback}, &(0x7f0000000100)=0x10) munlockall() setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000280)={0x7e, @rand_addr=0x16, 0x4e20, 0x4, 'none\x00', 0x20, 0x9, 0x6e}, 0x2c) 2018/04/15 15:58:32 executing program 0: socketpair$inet(0x2, 0x3, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x3, [0x2bff, 0xffffffff, 0x2]}, &(0x7f0000000100)=0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xca, 0x1, 0x2, 0x7f, 0x463}, &(0x7f0000000200)=0x98) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3b, 0x101000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x4d, 0x7}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10010, r0, 0x0) r2 = dup2(r0, r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000180)) 2018/04/15 15:58:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_pts(0xffffffffffffffff, 0x81) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2400, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x4, 0x400, 0x7, r3}, &(0x7f0000000180)=0x10) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) process_vm_readv(r0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/61, 0x3d}], 0x1, &(0x7f0000003740)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/139, 0x8b}, {&(0x7f00000024c0)=""/7, 0x7}, {&(0x7f0000002500)=""/140, 0x8c}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/10, 0xa}, {&(0x7f0000003600)=""/84, 0x54}, {&(0x7f0000003680)=""/80, 0x50}, {&(0x7f0000003700)=""/59, 0x3b}], 0x9, 0x0) 2018/04/15 15:58:32 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x67}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffff11, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x7fff00000002, 0x7fffffffefff, 0x63, &(0x7f00000001c0)) 2018/04/15 15:58:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 200.040859] FAULT_INJECTION: forcing a failure. [ 200.040859] name failslab, interval 1, probability 0, space 0, times 0 [ 200.052304] CPU: 0 PID: 16687 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 200.059159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.068524] Call Trace: [ 200.071133] dump_stack+0x1b9/0x294 [ 200.074789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 200.080007] ? __save_stack_trace+0x7e/0xd0 [ 200.084368] should_fail.cold.4+0xa/0x1a [ 200.088457] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.093585] ? kasan_kmalloc+0xc4/0xe0 [ 200.097498] ? kasan_slab_alloc+0x12/0x20 [ 200.101666] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 200.106525] ? kvm_mmu_load+0x21/0x10e0 [ 200.110515] ? vcpu_enter_guest+0x3aa1/0x6070 [ 200.115028] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 200.120053] ? graph_lock+0x170/0x170 [ 200.123850] ? do_syscall_64+0x29e/0x9d0 [ 200.127909] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.133274] ? find_held_lock+0x36/0x1c0 [ 200.137337] ? __lock_is_held+0xb5/0x140 [ 200.141408] ? check_same_owner+0x320/0x320 [ 200.145729] ? rcu_note_context_switch+0x710/0x710 [ 200.150657] __should_failslab+0x124/0x180 [ 200.154889] should_failslab+0x9/0x14 [ 200.158683] kmem_cache_alloc+0x2af/0x760 [ 200.162842] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 200.167686] mmu_topup_memory_caches+0xf7/0x3a0 [ 200.172347] ? kvm_apic_has_interrupt+0xe1/0x210 [ 200.177103] kvm_mmu_load+0x21/0x10e0 [ 200.180901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.186614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.192151] vcpu_enter_guest+0x3aa1/0x6070 [ 200.196507] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 200.202066] ? vmcs_load+0x139/0x180 [ 200.205780] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 200.211488] ? kvm_set_msr_common+0x2660/0x2660 [ 200.216154] ? vmx_vcpu_load+0xadd/0xfe0 [ 200.220213] ? __lock_acquire+0x7f5/0x5140 [ 200.224876] ? perf_trace_run_bpf_submit+0x246/0x370 [ 200.229973] ? vmx_vcpu_reset+0x1030/0x1030 [ 200.234283] ? graph_lock+0x170/0x170 [ 200.238073] ? __lock_acquire+0x7f5/0x5140 [ 200.242302] ? perf_trace_run_bpf_submit+0x246/0x370 [ 200.247405] ? __lock_is_held+0xb5/0x140 [ 200.251461] ? lock_acquire+0x1dc/0x520 [ 200.255429] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 200.260439] ? lock_release+0xa10/0xa10 [ 200.264404] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 200.269672] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 200.274157] ? preempt_notifier_dec+0x20/0x20 [ 200.278656] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 200.283487] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 200.288504] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 200.293609] kvm_vcpu_ioctl+0x79d/0x12e0 [ 200.297666] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 200.303369] ? graph_lock+0x170/0x170 [ 200.307165] ? find_held_lock+0x36/0x1c0 [ 200.311234] ? lock_downgrade+0x8e0/0x8e0 [ 200.315381] ? rcu_is_watching+0x85/0x140 [ 200.319528] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 200.324732] ? __fget+0x40c/0x650 [ 200.328179] ? match_held_lock+0x871/0x8b0 [ 200.332493] ? expand_files.part.8+0x9a0/0x9a0 [ 200.337064] ? kasan_check_write+0x14/0x20 [ 200.341292] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 200.346220] ? wait_for_completion+0x870/0x870 [ 200.350797] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 200.355981] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 200.361691] do_vfs_ioctl+0x1cf/0x16a0 [ 200.365583] ? ioctl_preallocate+0x2e0/0x2e0 [ 200.369983] ? fget_raw+0x20/0x20 [ 200.373430] ? __sb_end_write+0xac/0xe0 [ 200.377397] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 200.382923] ? fput+0x130/0x1a0 [ 200.386199] ? ksys_write+0x1a6/0x250 [ 200.390002] ? security_file_ioctl+0x94/0xc0 [ 200.394410] ksys_ioctl+0xa9/0xd0 [ 200.397859] SyS_ioctl+0x24/0x30 [ 200.401217] ? ksys_ioctl+0xd0/0xd0 [ 200.404846] do_syscall_64+0x29e/0x9d0 [ 200.408724] ? vmalloc_sync_all+0x30/0x30 [ 200.412859] ? _raw_spin_unlock_irq+0x27/0x70 [ 200.417343] ? finish_task_switch+0x1ca/0x810 [ 200.421831] ? syscall_return_slowpath+0x5c0/0x5c0 [ 200.426753] ? syscall_return_slowpath+0x30f/0x5c0 [ 200.431679] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 200.437045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.441888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.447065] RIP: 0033:0x455319 [ 200.450241] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.457943] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 200.465205] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 200.472465] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.479723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c00, &(0x7f0000000800)) 2018/04/15 15:58:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) socketpair(0x11, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000680)='./file0\x00', 0xffffffffffffff81, 0x1, &(0x7f0000000300)=[{&(0x7f00000008c0)="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", 0x1000, 0x1000}, {&(0x7f00000001c0)="5362715325574532c7736faeb7c332db7338e38248e39c401868150c02e2458755ec68832004cfaea98b8ee443d0ab15b02dd1c4ac424321e5956ed1ad576b6a8220b36d5bc2383247b1d6fb2f1910752a97164a90109d3ca71208edaec46e77834115cc772a3c25d4975abac803d8618846e72c2b7f2ccf9980403a790bf86a9b80f158e5656be9d9033eb7f27ab9", 0x8f, 0xffffffff}, {&(0x7f0000000600)="1a82399af3af8d6e9e5c507f77840350fbf26cf0bd58f40fad89fbab2e56b35b1d5c70d355f4448296b1a2dbc5e3fbcfbd9309768ac2bab66e1aef99a37d0732152af9fde4891ecda6714a422a41283e2e9cfab2b347a954683aa3b297ccd67b85d1000000000000000000000000000000", 0x71, 0x5}], 0x2010010, &(0x7f0000000440)=ANY=[@ANYBLOB="636f6d0400f4b800000000373132002c00b8f68c2c23b91537a313f50b8aa0a2aabd3d05e18e80864afd587a7e767bb8f7d73d37d07ea9bfc7057eeea1e86169c2853891eccc3e5bdc17ca164580ad0376efc2acb5ba0f433cf94d6422aebc42ab8724685cf1c1c577e036e2ff70d38b46309940a2b3903079d9c4bce18810022ff083c177ea60096073eaf2a45de17dcfe5d6c3"]) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000380)={[{0xe8a, 0x78, 0xae, 0x8eb, 0x2, 0x7, 0x1, 0x8, 0x7f, 0x5, 0xeed, 0x4}, {0x0, 0x2, 0x1, 0xffffffffffffff7f, 0x723f, 0x4, 0x3, 0x7, 0x4, 0xfff, 0x401, 0x8, 0x10001}, {0x9, 0x6, 0x7ff, 0x401, 0x1, 0xaf16, 0x8, 0x0, 0x91, 0x2, 0x10b, 0x3ff, 0x6}], 0x5}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x4116, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) sendto$ipx(r2, &(0x7f0000000500)="cb1d84813898e2904dfb99f69c62b2c8fa987b8bbb9a0bb0eb8c18283da921154e260328e405338ba8cca267e1323d9912ebcc1c9b7cf0c5a1d075a9e424ff76", 0x40, 0xc4, &(0x7f0000000540)={0x4, 0x6, 0x2d4, "b807d883beb8", 0x8}, 0x10) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000000000037313e090800000089e7fffff4cc000009000000000000000000000005000000ee0000000000000400000000000000000f0000008000000004000000000900000600000000000000000000400101000005000000ffff000008000000000000000d07000009000000080000000000000058a55d4f1e01d87c7d5f839121cb189910356745e7677b13450f94ff93be47c5c2af0c7ee9aec9"]) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x9, 0xaee, 0x2, 0x0, 0x6, 0x380000000, 0x2, 0x6, 0x1, 0x66, 0x3f, 0x1, 0x7}, {0x0, 0x4, 0x5, 0x6de290cc, 0x1, 0x3, 0xfc5, 0xabde, 0x459, 0x5, 0xffffffffffffffff, 0x977b, 0x1}, {0x8001, 0x5, 0x1, 0x1ff, 0x401, 0xe75, 0x800, 0x400, 0x5, 0x81, 0x10000, 0xcb, 0x1000}], 0x1f}) syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x1, 0x400000) [ 200.486979] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000013 2018/04/15 15:58:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000090}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x224, 0x8, 0x9, 0x403, 0x70bd27, 0x25dfdbfd, {0xf, 0x0, 0x4}, [@nested={0x1a0, 0x80, [@generic="ed8813fc19030d830a0c0f9c4c4f0811df4a69a2ca23aba360d4550a6c8d9dabee9b14600ad62c993ff22f18022b842e76ef9e56967a0d53738af2d7c22c2e7e9fa7b2adb480d26b332521f8c6f956b3ad677170a57ccbc49de1d89261bcd539d94e2430d3dfb845aa7814fe7c3255eb81e60a715a84ed7d605fd356aee4803793e49a07f5d780e2eb630b43d033b5786779af44e237b8a2228e1b6f29491b166ce93a132baf8f6321475cbb737654afe5ced9479e", @generic="14937d427a64aa113a41bbdc86953334c283f81ff6e7f598bf7b948bb4cd1c3d40ac9527dd8c5fd27348e772eefccf05ebd780a7b65e3434128d102dfb094ea96038443eba1f7504", @typed={0x8, 0x30, @uid=r2}, @generic="64aceb9897cd183f84bb841579c61ddb4122577efe9ffb0af84cbd339bd0b3d88b3e769089fe4a1883a1f5ef2b04438df5a5fa41d26a7aaf8167b6e3baf53837acea584a3775e53846730a52b78fc160d4c30af3be5c5549969aa505017de7a3fa2c1f5c3f4d223e5a8480e9b489126619352197bfb766a4df97c5eba8bbc09cd74ded3b4a053a4638bf608f62511a530295f4ac"]}, @generic="8fa98bd91dab35f57626d7a19860f71a5caa7824c57df70f97b4a4d1ebdda26e6cf9ff6d82f62058a9ca209cb7003c9e0175f5a5cd048826466f421468d713eff544d917c6aa93cc987facd3e7718cc69afe75a78180549b4f3d084b721511dd0cfbecdfcfa8166615c15295c3"]}, 0x224}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2018/04/15 15:58:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 200.564319] IPVS: set_ctl: invalid protocol: 126 0.0.0.22:20000 none 2018/04/15 15:58:32 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00009f1000)='G', 0xfffffee2, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x6}, 0x1c) r1 = semget(0x0, 0x0, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2}, 0x8) semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f0000000000)=""/113) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) 2018/04/15 15:58:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1263, &(0x7f0000000800)) [ 200.787372] IPVS: set_ctl: invalid protocol: 126 0.0.0.22:20000 none 2018/04/15 15:58:33 executing program 6 (fault-call:6 fault-nth:20): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x3, 0x87) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000180)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x40000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x8, 0x2800000000000}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3f, 0x18000) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x9, 0x6d67}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) 2018/04/15 15:58:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='/dev/loop#\x00', 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="54ce847dbd0572c3f256418740bec9a3b3da3f08e4e9d3dfa7c1fc4efd7fb1a5081e672b762fda98351a80132729a30ffb96e49d4caef70bdc8c4b3f9497d4c9496d6ce7764bcaeb0da082baf28bfa54adbaaab711fc5c4268f4b3d6293b6f43d093124d47ef355231aab228cb115988a3d1519f4928d88499d4a5f317eb38b685e5", 0x82, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r1, r2, r3}, &(0x7f0000000300)=""/208, 0xd0, &(0x7f00000004c0)={&(0x7f0000000400)={'sha256\x00'}, &(0x7f0000000440)="42881667451fd5b9171834e874b1706185affda3eb3f9f85a7fa5f22660743ed2f92a2c1b92a7edd468a3affc3cffff94e428c2df29773402faf62c7c80d4e0a591111581116cf4fb1182a2f18bb5ca03e202fba08b04a769d108acd09ea98", 0x5f}) 2018/04/15 15:58:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x127b, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 7: capset(&(0x7f00002d0ff8)={0x20071026}, &(0x7f0000cc0000)) r0 = syz_open_dev$sndseq(&(0x7f0000783000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) sched_yield() ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x20000010800a}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000300), &(0x7f0000000400)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000440)=0x100000001, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc4, @time={r1, r2+30000000}, 0x400, {}, 0x0, 0x0, 0x1000000000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "bc1c66dfcfd4386c", "b249dd20d8805d97c884a43de77c8d19a590e1d0a93e60edf7297aacdf8655a5"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x40000) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl(r4, 0x40000000401870cc, &(0x7f0000006100)) 2018/04/15 15:58:33 executing program 2: recvmsg(0xffffffffffffff9c, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x4, &(0x7f00000001c0), 0x0, 0x0, 0x2cb}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/139, 0x8b) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4)={0x10}, 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11}]}, 0x15c}, 0x1}, 0x0) 2018/04/15 15:58:33 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x40) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000300)=0x6, &(0x7f0000000380)=0x2) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x17, 0xb5, &(0x7f0000000180)="8bd7d6a51464438208de7734a9adb3e1c4ea3ac913d0b2", &(0x7f00000001c0)=""/181, 0x1, 0xfff}, 0x28) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r2}) 2018/04/15 15:58:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) fcntl$setpipe(r1, 0x407, 0xae9e) socket$l2tp(0x18, 0x1, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x80000, 0x0) socketpair(0x13, 0x1, 0x101, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x1, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r2, 0x7, 0x100000001, "9ac6bd04065c7baa98d63b440267a854b2"}) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x488181) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/15) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1268, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xffffff24, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) recvmmsg(r1, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/163, 0xa3}}, {{&(0x7f0000006a80)=@rc, 0x80, &(0x7f0000006b40), 0x0, &(0x7f0000006b80)=""/194, 0xc2}}], 0x2, 0x0, &(0x7f0000006dc0)={0x77359400}) 2018/04/15 15:58:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 201.027022] FAULT_INJECTION: forcing a failure. [ 201.027022] name failslab, interval 1, probability 0, space 0, times 0 [ 201.038470] CPU: 0 PID: 16760 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 201.045336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.054710] Call Trace: [ 201.057322] dump_stack+0x1b9/0x294 [ 201.060979] ? dump_stack_print_info.cold.2+0x52/0x52 [ 201.066195] ? perf_trace_lock_acquire+0xe3/0x980 [ 201.071086] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)=',%\x00', 0x2) ioctl$KDMKTONE(r1, 0x4b30, 0xd2) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0100aaaaaa3e"]) [ 201.075178] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.080311] ? kasan_kmalloc+0xc4/0xe0 [ 201.084222] ? kasan_slab_alloc+0x12/0x20 [ 201.088393] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 201.093255] ? kvm_mmu_load+0x21/0x10e0 [ 201.097254] ? vcpu_enter_guest+0x3aa1/0x6070 [ 201.101773] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 201.106818] ? graph_lock+0x170/0x170 [ 201.110651] ? do_syscall_64+0x29e/0x9d0 [ 201.114746] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.120140] ? find_held_lock+0x36/0x1c0 [ 201.124240] ? __lock_is_held+0xb5/0x140 [ 201.128328] ? cache_register_net+0x170/0x6b0 [ 201.132966] ? check_same_owner+0x320/0x320 [ 201.137320] ? rcu_note_context_switch+0x710/0x710 [ 201.142293] __should_failslab+0x124/0x180 [ 201.146559] should_failslab+0x9/0x14 [ 201.150382] kmem_cache_alloc+0x2af/0x760 [ 201.154571] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 201.159445] mmu_topup_memory_caches+0xf7/0x3a0 [ 201.164136] ? kvm_apic_has_interrupt+0xe1/0x210 [ 201.168931] kvm_mmu_load+0x21/0x10e0 2018/04/15 15:58:33 executing program 2: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x8000}, &(0x7f0000000200)=0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10000, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f0000d75000), 0x1002b) socket$nl_route(0x10, 0x3, 0x0) [ 201.172760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.178323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.183896] vcpu_enter_guest+0x3aa1/0x6070 [ 201.188245] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 201.193802] ? vmcs_load+0x139/0x180 [ 201.197538] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 201.203280] ? kvm_set_msr_common+0x2660/0x2660 [ 201.207974] ? perf_trace_lock+0x900/0x900 [ 201.212222] ? __lock_acquire+0x7f5/0x5140 [ 201.216485] ? vmx_vcpu_reset+0x1030/0x1030 [ 201.220824] ? graph_lock+0x170/0x170 2018/04/15 15:58:33 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r1 = socket$inet(0x2, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x78000402, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000240)=""/4096) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @empty=0x4000000}, {0x2, 0x0, @multicast1=0xe0000001}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='gre0\x00'}) [ 201.224654] ? __lock_acquire+0x7f5/0x5140 [ 201.228898] ? perf_trace_run_bpf_submit+0x246/0x370 [ 201.234028] ? __lock_is_held+0xb5/0x140 [ 201.238104] ? cache_purge+0x330/0x5e0 [ 201.242013] ? lock_acquire+0x1dc/0x520 [ 201.246004] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 201.251048] ? lock_release+0xa10/0xa10 [ 201.255038] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 201.260339] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 201.264849] ? preempt_notifier_dec+0x20/0x20 [ 201.269383] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 201.274241] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 201.279274] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 201.284406] kvm_vcpu_ioctl+0x79d/0x12e0 [ 201.288499] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 201.294229] ? graph_lock+0x170/0x170 [ 201.298051] ? find_held_lock+0x36/0x1c0 [ 201.302147] ? lock_downgrade+0x8e0/0x8e0 [ 201.306326] ? rcu_is_watching+0x85/0x140 [ 201.310497] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 201.315725] ? __fget+0x40c/0x650 [ 201.319202] ? match_held_lock+0x871/0x8b0 [ 201.323458] ? expand_files.part.8+0x9a0/0x9a0 [ 201.328060] ? kasan_check_write+0x14/0x20 [ 201.332301] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 201.337251] ? wait_for_completion+0x870/0x870 [ 201.341851] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 201.347058] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 201.352789] do_vfs_ioctl+0x1cf/0x16a0 [ 201.356709] ? ioctl_preallocate+0x2e0/0x2e0 [ 201.361135] ? fget_raw+0x20/0x20 [ 201.364608] ? __sb_end_write+0xac/0xe0 [ 201.368616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 201.374174] ? fput+0x130/0x1a0 [ 201.377474] ? ksys_write+0x1a6/0x250 [ 201.381298] ? security_file_ioctl+0x94/0xc0 [ 201.385715] ksys_ioctl+0xa9/0xd0 [ 201.389162] SyS_ioctl+0x24/0x30 [ 201.392517] ? ksys_ioctl+0xd0/0xd0 [ 201.396136] do_syscall_64+0x29e/0x9d0 [ 201.400031] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 201.404879] ? syscall_return_slowpath+0x5c0/0x5c0 [ 201.409801] ? syscall_return_slowpath+0x30f/0x5c0 [ 201.414744] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.420134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.425009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.430196] RIP: 0033:0x455319 [ 201.433383] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.441112] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 201.448384] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 201.455650] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 201.462908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 201.470164] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000014 2018/04/15 15:58:33 executing program 6 (fault-call:6 fault-nth:21): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1265, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000012000), 0x0) 2018/04/15 15:58:33 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000640)=0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x1b5440, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000004c0)={0x3, 0x1, &(0x7f00000003c0)=""/94, &(0x7f0000000440)=""/56, &(0x7f0000000480)=""/56, 0xf000}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9cdac2fd46e2f03ee9936fd537b68557f8a3d8ed5ff7e30cace0e99e0db49427742ab5c163293462e2e4ce25f59fda35e728e342245bc77944ec6c8a42997afec854684a948c1ef6b688b6fa0b97052378579886ff01c95d8acc9c7f01146ef8de39aef27176fa7e571a797636db768d97ef2fb5fe6b0d240bb5812a552cf0ff0cb667ae4991b264e13b66bc931b93dd92c542618f7cd24e64bedad6bbec9282fabb8c8aa03d6568892cfce65e55619fceb695602e62d014970ab09e9ecc6c57174d5d7e272895df404c17492ca32fa709aadca04e6c47d125785029f452d109aad76257c906f22b2f588b22b72b73eb", @ANYRES16=r2, @ANYBLOB="000025bd7000fcdbdf250300000008000400020000000400050004000500"], 0x24}, 0x1}, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, &(0x7f0000c97ff8)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r4) syz_open_dev$tun(&(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000f1dff8)={0x1, r4}) 2018/04/15 15:58:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}], 0x2c) 2018/04/15 15:58:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0xfffffffffffffffe) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x3, {0x2, 0x4e21}, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x0, 0x5, 0x5, 0x0, 0x9, &(0x7f0000000040)='bond0\x00', 0xde6, 0x8f, 0x80}) mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2018/04/15 15:58:34 executing program 2: r0 = getpgid(0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) fcntl$setflags(r1, 0x2, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000004c0)=0x5) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mq_notify(r2, &(0x7f0000000480)={0x0, 0x8, 0x4, @thr={&(0x7f0000000280)="8242a0a3e77e154016d696a9624d82f5c68695e3807560e7e9e4de540beaa6362641f00ec831def55e5a2d764dd632acd76250faebe71606dbab3828eb1e060e32b424600644f94da164031c2fcc84300aae514d259ac6ab57b438b3d72b82a106e4ee6f8feebb7c40f349beb346bb412af66bef86ce68557761156364e81cc731d60c987f1d529176e168bb1ba1c0dcb3c57c708c66c6e61d7983d47ce32253ed5dcf1ea90a7928215e3ecd91e0e348fd8825ceb8906897e6ec21b0c78bd04363db44", &(0x7f0000000380)="443363da1b350e66cea63ce9aa630bad354586daf497432f9d4cc047ed5b275fa9dfef3b22359d8a66616f8d2a2949537a0c7e8683e175aff2d4a9852791282efbb68b99ea973a4b65edcb8ed7dd1ae9140471e10ef829aaac8baa03bee05460a46982f891b3208440140f4d8527da2acbfc521b94575a5b584ba1155ccdd9ecb9d2ceecfb4d6143db1b057c0b8bb6f4359f379202698f56d15ad2ea78c9c2a67f8a1f9602f0ea1041942233ddc162788be674bd5eedbadf5c7c5471c407e665e2aacd"}}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) read(r2, &(0x7f0000000000)=""/126, 0x7e) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000604ffc)) dup2(r2, r4) [ 201.847150] FAULT_INJECTION: forcing a failure. [ 201.847150] name failslab, interval 1, probability 0, space 0, times 0 [ 201.858492] CPU: 0 PID: 16824 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 201.865346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.874712] Call Trace: [ 201.877321] dump_stack+0x1b9/0x294 [ 201.880971] ? dump_stack_print_info.cold.2+0x52/0x52 [ 201.886182] ? __save_stack_trace+0x7e/0xd0 [ 201.890548] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xb93, 0xfffffffffffffffe, r1}) [ 201.894655] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.899788] ? kasan_kmalloc+0xc4/0xe0 [ 201.903700] ? kasan_slab_alloc+0x12/0x20 [ 201.907869] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 201.912730] ? kvm_mmu_load+0x21/0x10e0 [ 201.916725] ? vcpu_enter_guest+0x3aa1/0x6070 [ 201.921241] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 201.926288] ? graph_lock+0x170/0x170 [ 201.930109] ? do_syscall_64+0x29e/0x9d0 [ 201.934192] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.939590] ? find_held_lock+0x36/0x1c0 [ 201.943691] ? __lock_is_held+0xb5/0x140 2018/04/15 15:58:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x20200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)=""/218) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:34 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x800}) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) [ 201.947813] ? check_same_owner+0x320/0x320 [ 201.952165] ? rcu_note_context_switch+0x710/0x710 [ 201.957133] __should_failslab+0x124/0x180 [ 201.961395] should_failslab+0x9/0x14 [ 201.965215] kmem_cache_alloc+0x2af/0x760 [ 201.969401] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 201.974282] mmu_topup_memory_caches+0xf7/0x3a0 [ 201.978987] ? kvm_apic_has_interrupt+0xe1/0x210 [ 201.983777] kvm_mmu_load+0x21/0x10e0 [ 201.987629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/04/15 15:58:34 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setgroups(0x1, &(0x7f0000000080)=[r0]) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) [ 201.993198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.998773] vcpu_enter_guest+0x3aa1/0x6070 [ 202.003132] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 202.008695] ? vmcs_load+0x139/0x180 [ 202.012432] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 202.018166] ? kvm_set_msr_common+0x2660/0x2660 [ 202.022858] ? vmx_vcpu_load+0xadd/0xfe0 [ 202.026933] ? __lock_acquire+0x7f5/0x5140 [ 202.031183] ? perf_trace_run_bpf_submit+0x246/0x370 [ 202.036304] ? vmx_vcpu_reset+0x1030/0x1030 [ 202.040643] ? graph_lock+0x170/0x170 2018/04/15 15:58:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 202.044460] ? __lock_acquire+0x7f5/0x5140 [ 202.048715] ? perf_trace_run_bpf_submit+0x246/0x370 [ 202.053852] ? __lock_is_held+0xb5/0x140 [ 202.057938] ? lock_acquire+0x1dc/0x520 [ 202.061928] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 202.066975] ? lock_release+0xa10/0xa10 [ 202.070969] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 202.076266] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 202.080777] ? preempt_notifier_dec+0x20/0x20 [ 202.085317] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 202.090174] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 2018/04/15 15:58:34 executing program 4: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/142, 0x8e) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x10001, 0xc0000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x1, 0x4) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) chroot(&(0x7f0000000100)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000280)=""/181) [ 202.095211] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 202.100348] kvm_vcpu_ioctl+0x79d/0x12e0 [ 202.104431] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 202.110162] ? graph_lock+0x170/0x170 [ 202.113986] ? find_held_lock+0x36/0x1c0 [ 202.118087] ? lock_downgrade+0x8e0/0x8e0 [ 202.122263] ? rcu_is_watching+0x85/0x140 [ 202.126427] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 202.131652] ? __fget+0x40c/0x650 [ 202.135124] ? match_held_lock+0x871/0x8b0 [ 202.139376] ? expand_files.part.8+0x9a0/0x9a0 [ 202.143969] ? kasan_check_write+0x14/0x20 [ 202.148223] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 202.153183] ? wait_for_completion+0x870/0x870 [ 202.157785] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 202.162996] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 202.168735] do_vfs_ioctl+0x1cf/0x16a0 [ 202.172655] ? ioctl_preallocate+0x2e0/0x2e0 [ 202.177085] ? fget_raw+0x20/0x20 [ 202.180572] ? __sb_end_write+0xac/0xe0 [ 202.184585] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 202.190135] ? fput+0x130/0x1a0 [ 202.193441] ? ksys_write+0x1a6/0x250 [ 202.197270] ? security_file_ioctl+0x94/0xc0 [ 202.201704] ksys_ioctl+0xa9/0xd0 [ 202.205178] SyS_ioctl+0x24/0x30 [ 202.208553] ? ksys_ioctl+0xd0/0xd0 [ 202.212203] do_syscall_64+0x29e/0x9d0 [ 202.216104] ? vmalloc_sync_all+0x30/0x30 [ 202.220264] ? _raw_spin_unlock_irq+0x27/0x70 [ 202.224777] ? finish_task_switch+0x1ca/0x810 [ 202.229293] ? syscall_return_slowpath+0x5c0/0x5c0 [ 202.234239] ? syscall_return_slowpath+0x30f/0x5c0 [ 202.239194] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 202.244602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.249479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.254682] RIP: 0033:0x455319 [ 202.257868] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.265581] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 202.272845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 202.280121] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 202.287399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 202.294666] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000015 2018/04/15 15:58:35 executing program 6 (fault-call:6 fault-nth:22): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x4080) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x141000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 2018/04/15 15:58:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x2, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000006, 0x0, 0x0, 0xeb9}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010140}]}) 2018/04/15 15:58:35 executing program 3: r0 = memfd_create(&(0x7f0000000180)="171ea3be32afd6214509f770293dcc47993f51cf92947035e690d118b4fe148b877e313d4afd0fd562198d88cd7c332641e790305f0f656169ea88b03d058063b92fb643", 0x0) sendto(r0, &(0x7f0000001240)="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", 0xfffffd73, 0x4800, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="168a587e1a7bbbd9d573553a8e3e2b312513641460fb71cb1a4c4b08419e62499a2583fa", 0x24, 0x80}], 0x800082, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b3d3336303036363234322c706172743d3933383e3d78323d2c00d47678e68e93d5d2"]) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="cc0000000000000000000000fcffffff0000000000000200000000009c"], 0x1d) connect$can_bcm(r0, &(0x7f0000000140)={0x1d}, 0x10) 2018/04/15 15:58:35 executing program 2: r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x401, 0x4001) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r3, 0x210, 0x70bd28, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff00000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x72}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xbf}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe068}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004000}, 0x48001) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x1b}) kcmp(r0, r0, 0x4858f6e18c461d56, 0xffffffffffffffff, 0xffffffffffffffff) 2018/04/15 15:58:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 202.876497] hfs: unable to parse mount options 2018/04/15 15:58:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x0, 0x4}) 2018/04/15 15:58:35 executing program 2: r0 = request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='eth0[\x00', 0xfffffffffffffffc) keyctl$update(0x2, r0, &(0x7f00000001c0)="70448b71cfe672cbf968d244ff5803388dda13252a850129abe8d57b31241e2de368923ba201618e2a5c0fd62672b16e6bced125f913255e2832a2be1f24b8294de5c5871a5096712c1b8b0f976b3b78f1b3851f8a89b6876eaeeeb0486ab53e3ad233953d90131e762e9ca90d11da456e00bbaa18d5a52a82b1568fa34a08567e26ec4138a09ac715a501c17eb0ba49464796751af2fb0621013a3c288c335ea0c3e643216bb2d6ad474674f9b1cfd442", 0xb1) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) [ 202.929142] FAULT_INJECTION: forcing a failure. [ 202.929142] name failslab, interval 1, probability 0, space 0, times 0 [ 202.940481] CPU: 0 PID: 16885 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 202.947341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.956709] Call Trace: [ 202.959317] dump_stack+0x1b9/0x294 [ 202.962973] ? dump_stack_print_info.cold.2+0x52/0x52 [ 202.968193] ? __save_stack_trace+0x7e/0xd0 [ 202.972557] should_fail.cold.4+0xa/0x1a [ 202.976651] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 202.981776] ? kasan_kmalloc+0xc4/0xe0 [ 202.985693] ? kasan_slab_alloc+0x12/0x20 [ 202.989863] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 202.994720] ? kvm_mmu_load+0x21/0x10e0 [ 202.998720] ? vcpu_enter_guest+0x3aa1/0x6070 [ 203.003235] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 203.008262] ? graph_lock+0x170/0x170 [ 203.012061] ? do_syscall_64+0x29e/0x9d0 [ 203.016113] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.021484] ? find_held_lock+0x36/0x1c0 [ 203.025550] ? __lock_is_held+0xb5/0x140 [ 203.029617] ? check_same_owner+0x320/0x320 [ 203.033942] ? rcu_note_context_switch+0x710/0x710 [ 203.038881] __should_failslab+0x124/0x180 [ 203.043112] should_failslab+0x9/0x14 [ 203.046905] kmem_cache_alloc+0x2af/0x760 [ 203.051226] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 203.056067] mmu_topup_memory_caches+0xf7/0x3a0 [ 203.060735] ? kvm_apic_has_interrupt+0xe1/0x210 [ 203.065502] kvm_mmu_load+0x21/0x10e0 [ 203.069297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.074828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.080363] vcpu_enter_guest+0x3aa1/0x6070 [ 203.084676] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 203.090203] ? vmcs_load+0x139/0x180 [ 203.093907] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 203.099616] ? kvm_set_msr_common+0x2660/0x2660 [ 203.104279] ? vmx_vcpu_load+0xadd/0xfe0 [ 203.108329] ? memset+0x31/0x40 [ 203.111605] ? vmx_vcpu_reset+0x1030/0x1030 [ 203.115917] ? graph_lock+0x170/0x170 [ 203.119705] ? __lock_acquire+0x7f5/0x5140 [ 203.123953] ? zap_class+0x720/0x720 [ 203.127666] ? __lock_is_held+0xb5/0x140 [ 203.132329] ? lock_acquire+0x1dc/0x520 [ 203.136297] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 203.141309] ? lock_release+0xa10/0xa10 [ 203.145282] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 203.150549] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 203.155038] ? preempt_notifier_dec+0x20/0x20 [ 203.159537] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 203.164371] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 203.169393] kvm_vcpu_ioctl+0x79d/0x12e0 [ 203.173448] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 203.179149] ? trace_hardirqs_on+0xd/0x10 [ 203.183286] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.187772] ? find_held_lock+0x36/0x1c0 [ 203.191845] ? lock_downgrade+0x8e0/0x8e0 [ 203.195993] ? rcu_is_watching+0x85/0x140 [ 203.200136] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 203.205331] ? __fget+0x40c/0x650 [ 203.208779] ? match_held_lock+0x871/0x8b0 [ 203.213007] ? expand_files.part.8+0x9a0/0x9a0 [ 203.217587] ? kasan_check_write+0x14/0x20 [ 203.221821] ? wait_for_completion+0x870/0x870 [ 203.226395] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 203.231579] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 203.237281] do_vfs_ioctl+0x1cf/0x16a0 [ 203.241169] ? ioctl_preallocate+0x2e0/0x2e0 [ 203.245572] ? fget_raw+0x20/0x20 [ 203.249028] ? __sb_end_write+0xac/0xe0 [ 203.252997] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 203.258532] ? exit_to_usermode_loop+0x87/0x310 [ 203.263199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.268728] ? security_file_ioctl+0x94/0xc0 [ 203.273132] ksys_ioctl+0xa9/0xd0 [ 203.276584] SyS_ioctl+0x24/0x30 [ 203.279943] ? ksys_ioctl+0xd0/0xd0 [ 203.283560] do_syscall_64+0x29e/0x9d0 [ 203.287438] ? vmalloc_sync_all+0x30/0x30 [ 203.291578] ? _raw_spin_unlock_irq+0x27/0x70 [ 203.296063] ? finish_task_switch+0x1ca/0x810 [ 203.300552] ? syscall_return_slowpath+0x5c0/0x5c0 [ 203.305478] ? syscall_return_slowpath+0x30f/0x5c0 [ 203.310406] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 203.315769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.320612] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.325790] RIP: 0033:0x455319 [ 203.328966] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.337824] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 203.345095] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 203.352441] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.359708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 203.366970] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000016 2018/04/15 15:58:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200080, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 203.399097] hfs: unable to parse mount options 2018/04/15 15:58:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) getsockopt$inet_mreqn(r1, 0x114, 0x2718, &(0x7f00000000c0)={@remote, @remote}, &(0x7f0000000000)=0xc) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000ffc), 0x1c4) 2018/04/15 15:58:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) fchdir(r1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x5}, 0xc) r4 = memfd_create(&(0x7f0000001800)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x1023c) readv(0xffffffffffffffff, &(0x7f00009a5f80)=[{&(0x7f0000214000)=""/4096, 0x1000}], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000759000)='clear_refs\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001380), &(0x7f0000001400)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001780)) fcntl$getown(r4, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000001340)='oom_score\x00') mmap(&(0x7f0000000000/0xd35000)=nil, 0xd35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r5, r6, &(0x7f0000929000), 0xff) readv(0xffffffffffffffff, &(0x7f0000dc8ff8)=[{&(0x7f0000208000)=""/4096, 0x1000}], 0x1d3) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000001240)=ANY=[@ANYBLOB="004a420001364400"]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001680)) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r2, 0x8, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000200)) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000080)={r0, 0x100}) r7 = gettid() syz_open_dev$binder(&(0x7f00000016c0)='/dev/binder#\x00', 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=[{&(0x7f0000001280)=""/164, 0xa4}, {&(0x7f0000001480)=""/8, 0x8}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/3, 0x3}], 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001880)=ANY=[@ANYBLOB="00000000000000000a000000ffff0000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000004000000fe800000000000000000000000c9915e14ce6161b20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000009c050000fe8000000000000000000000000000aa050000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) 2018/04/15 15:58:35 executing program 6 (fault-call:6 fault-nth:23): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x127d, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = gettid() ptrace$setsig(0x4203, r1, 0xd, &(0x7f0000000040)={0x3d, 0x1, 0x6, 0xffff}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x4000) 2018/04/15 15:58:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 7: r0 = socket(0x1, 0x2, 0x0) getsockopt(r0, 0x800000010f, 0x8000000000000081, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffe78) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0xffffffffeffffffd, 0x40000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/15 15:58:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:35 executing program 2: mkdir(&(0x7f00009cc000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000030000)=[{&(0x7f0000aa6ff7)='t', 0x1}], 0x1) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14, 0x80000) connect$packet(r2, &(0x7f0000000100)={0x11, 0xfe, r4, 0x1, 0xffffffffffffa431, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) getsockopt$inet_buf(r3, 0x0, 0x480, &(0x7f0000bbd000), &(0x7f0000000000)) 2018/04/15 15:58:35 executing program 3: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1}, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00090000007fffe5ff8001"], 0x2}, 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, &(0x7f0000000100)={'tunl0\x00'}) 2018/04/15 15:58:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:36 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xe4e, 0x204000) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000180)) 2018/04/15 15:58:36 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x80000000, 0xffffffff, 0x9144, 0x4, 0x80000000, 0x3f, 0x5, 0x1000, 0x100000001}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x400000000e) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xfff, 0x7fff, 0x4, 0xced8, 0x200, 0x6, 0x3ff, 0x9, 0x8, 0x80000000}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000240)=0x7ff) [ 203.795242] FAULT_INJECTION: forcing a failure. [ 203.795242] name failslab, interval 1, probability 0, space 0, times 0 [ 203.807213] CPU: 0 PID: 16956 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 203.814067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.823448] Call Trace: [ 203.826062] dump_stack+0x1b9/0x294 [ 203.829718] ? dump_stack_print_info.cold.2+0x52/0x52 [ 203.834935] ? __save_stack_trace+0x7e/0xd0 [ 203.839294] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x410041, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x400000b0, 0x0, 0x81}, {0x400000b0}]}) [ 203.843385] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.848531] ? kasan_kmalloc+0xc4/0xe0 [ 203.852448] ? kasan_slab_alloc+0x12/0x20 [ 203.856621] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 203.861485] ? kvm_mmu_load+0x21/0x10e0 [ 203.865489] ? vcpu_enter_guest+0x3aa1/0x6070 [ 203.870002] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 203.875043] ? graph_lock+0x170/0x170 [ 203.878865] ? do_syscall_64+0x29e/0x9d0 [ 203.882966] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.888367] ? find_held_lock+0x36/0x1c0 [ 203.892478] ? __lock_is_held+0xb5/0x140 [ 203.896562] ? trace_event_raw_event_btrfs_qgroup_account_extent+0x1b0/0x3c0 [ 203.903820] ? check_same_owner+0x320/0x320 [ 203.908166] ? rcu_note_context_switch+0x710/0x710 [ 203.913195] __should_failslab+0x124/0x180 [ 203.917475] should_failslab+0x9/0x14 [ 203.921294] kmem_cache_alloc+0x2af/0x760 [ 203.925463] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 203.930313] mmu_topup_memory_caches+0xf7/0x3a0 [ 203.934990] ? kvm_apic_has_interrupt+0xe1/0x210 [ 203.939751] kvm_mmu_load+0x21/0x10e0 [ 203.943552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.949093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.954630] vcpu_enter_guest+0x3aa1/0x6070 [ 203.958946] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 203.964476] ? vmcs_load+0x139/0x180 [ 203.968193] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 203.973904] ? kvm_set_msr_common+0x2660/0x2660 [ 203.978571] ? vmx_vcpu_load+0xadd/0xfe0 [ 203.982627] ? __lock_acquire+0x7f5/0x5140 [ 203.986852] ? perf_trace_run_bpf_submit+0x246/0x370 [ 203.991953] ? vmx_vcpu_reset+0x1030/0x1030 [ 203.996265] ? graph_lock+0x170/0x170 [ 204.000058] ? __lock_acquire+0x7f5/0x5140 [ 204.004290] ? perf_trace_run_bpf_submit+0x246/0x370 [ 204.009396] ? __lock_is_held+0xb5/0x140 [ 204.013463] ? trace_event_raw_event_btrfs__workqueue_done+0xe0/0x310 [ 204.020042] ? lock_acquire+0x1dc/0x520 [ 204.024026] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 204.029046] ? lock_release+0xa10/0xa10 [ 204.033017] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 204.038298] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 204.042784] ? preempt_notifier_dec+0x20/0x20 [ 204.047288] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 204.052134] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 204.057146] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 204.062264] kvm_vcpu_ioctl+0x79d/0x12e0 [ 204.066323] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 204.072032] ? graph_lock+0x170/0x170 [ 204.075827] ? find_held_lock+0x36/0x1c0 [ 204.079994] ? lock_downgrade+0x8e0/0x8e0 [ 204.084149] ? rcu_is_watching+0x85/0x140 [ 204.088292] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 204.093487] ? __fget+0x40c/0x650 [ 204.096935] ? match_held_lock+0x871/0x8b0 [ 204.101165] ? expand_files.part.8+0x9a0/0x9a0 [ 204.105739] ? kasan_check_write+0x14/0x20 [ 204.110144] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 204.115073] ? wait_for_completion+0x870/0x870 [ 204.119653] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 204.124843] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 204.130563] do_vfs_ioctl+0x1cf/0x16a0 [ 204.134454] ? ioctl_preallocate+0x2e0/0x2e0 [ 204.138857] ? fget_raw+0x20/0x20 [ 204.142315] ? __sb_end_write+0xac/0xe0 [ 204.146286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 204.151816] ? fput+0x130/0x1a0 [ 204.155091] ? ksys_write+0x1a6/0x250 [ 204.158890] ? security_file_ioctl+0x94/0xc0 [ 204.163296] ksys_ioctl+0xa9/0xd0 [ 204.166755] SyS_ioctl+0x24/0x30 [ 204.170114] ? ksys_ioctl+0xd0/0xd0 [ 204.173736] do_syscall_64+0x29e/0x9d0 [ 204.177618] ? vmalloc_sync_all+0x30/0x30 [ 204.181758] ? _raw_spin_unlock_irq+0x27/0x70 [ 204.186246] ? finish_task_switch+0x1ca/0x810 [ 204.190736] ? syscall_return_slowpath+0x5c0/0x5c0 [ 204.195658] ? syscall_return_slowpath+0x30f/0x5c0 [ 204.200588] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 204.205953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 204.210798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 204.215979] RIP: 0033:0x455319 [ 204.219167] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.226886] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 204.234147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 2018/04/15 15:58:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = shmget(0x3, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/10) 2018/04/15 15:58:36 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000003000)={&(0x7f0000000140)=@in={0x2, 0x0, @remote={0xa, 0x14, 0xffffffffffffffff, 0xbb}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000003fb9)=';', 0x2bf}], 0x1000000000000331, &(0x7f0000003e08)}, 0x0) listen(r0, 0x200000000000082d) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) accept4$inet(r0, 0x0, &(0x7f00000005c0)=0x471, 0x800) creat(&(0x7f0000000040)='./file0\x00', 0x8000000008) 2018/04/15 15:58:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000000)) 2018/04/15 15:58:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0xc0189436, &(0x7f0000000800)) [ 204.241411] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 204.248671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 204.255932] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000017 2018/04/15 15:58:37 executing program 6 (fault-call:6 fault-nth:24): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:37 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r1, 0x605, 0x70bd29, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xe590}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x801) 2018/04/15 15:58:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1276, &(0x7f0000000800)) 2018/04/15 15:58:37 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x400, 0x10000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) r1 = socket(0x2, 0x2000080003, 0x2) r2 = gettid() rt_sigqueueinfo(r2, 0x38, &(0x7f0000000080)={0x4, 0x8677, 0x0, 0x101}) getsockopt(r1, 0x0, 0xd0, &(0x7f0000001ff8)=""/8, &(0x7f0000000100)=0x8) 2018/04/15 15:58:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) rt_sigreturn() ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f00000000c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3ff, 0x20000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 2018/04/15 15:58:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x5) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) clone(0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000000c0)) close(r0) socket$kcm(0xa, 0x3, 0x11) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x21d}, 0xffffffffffffffeb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x16, 0x29, 0x6, &(0x7f0000000400)) 2018/04/15 15:58:37 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 2018/04/15 15:58:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0xfffffffffffffffd) syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101141) open(&(0x7f0000000600)='./file0\x00', 0x40000, 0x40) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair(0x5, 0x6, 0x9, &(0x7f0000000700)={0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000680)="636075616363742e75736167655f7573657200e4fb87829cd063fc0082cc7cdb0273d2a87ecf5a76d9cb616613a4ffa24ad759500429eb5adf8c38440c5908ada6ede1b366421cfd21e3d3773a2a866acbacb308ca77a09c4e6e999ad32dde972dc9dba71889c09613b88e141bcfb7eeb00535962f", 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x2, 0x0, [{0xfffffffffffffffd, 0x0, 0xcb81}, {0x4, 0x0, 0x4}]}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xe5, 0x7fff, 0x378a, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000002c0)=0x1007fff, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) accept$netrom(r2, &(0x7f0000000300)=@full, &(0x7f0000000040)=0x48) clock_getres(0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x2040, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000400)={r4}, &(0x7f0000000440)=0x8) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf251000000008000400ff7f00000c00020008008800040000000800050004000000080005000100000008000600e5800000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) [ 205.363864] FAULT_INJECTION: forcing a failure. [ 205.363864] name failslab, interval 1, probability 0, space 0, times 0 [ 205.375203] CPU: 0 PID: 17001 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 205.382064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.391439] Call Trace: [ 205.394059] dump_stack+0x1b9/0x294 [ 205.397708] ? dump_stack_print_info.cold.2+0x52/0x52 [ 205.402918] ? perf_trace_lock_acquire+0xe3/0x980 [ 205.407804] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:37 executing program 7: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x81, &(0x7f0000000040), &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x3, [0x10000, 0x2, 0xfd]}, &(0x7f0000000080)=0xe) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, [0x1f, 0x1, 0x73, 0x6, 0x3, 0x3, 0x43, 0x5, 0x0, 0xca, 0xfffffffffffffffe, 0xff, 0x20, 0xcb, 0x83899e6]}, &(0x7f00000001c0)=0x100) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req={0x1, 0xa9c, 0xac}, 0x10) [ 205.411898] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.417032] ? kasan_kmalloc+0xc4/0xe0 [ 205.420941] ? kasan_slab_alloc+0x12/0x20 [ 205.425114] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 205.429978] ? kvm_mmu_load+0x21/0x10e0 [ 205.433985] ? vcpu_enter_guest+0x3aa1/0x6070 [ 205.438506] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 205.443564] ? graph_lock+0x170/0x170 [ 205.447382] ? do_syscall_64+0x29e/0x9d0 [ 205.451446] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.456825] ? find_held_lock+0x36/0x1c0 [ 205.460900] ? __lock_is_held+0xb5/0x140 [ 205.464981] ? check_same_owner+0x320/0x320 [ 205.469310] ? rcu_note_context_switch+0x710/0x710 [ 205.474250] __should_failslab+0x124/0x180 [ 205.478494] should_failslab+0x9/0x14 [ 205.482290] kmem_cache_alloc+0x2af/0x760 [ 205.486450] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 205.491304] mmu_topup_memory_caches+0xf7/0x3a0 [ 205.495970] ? kvm_apic_has_interrupt+0xe1/0x210 [ 205.500729] kvm_mmu_load+0x21/0x10e0 [ 205.504533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.510071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 205.515613] vcpu_enter_guest+0x3aa1/0x6070 [ 205.519936] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.525480] ? vmcs_load+0x139/0x180 [ 205.529191] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 205.534905] ? kvm_set_msr_common+0x2660/0x2660 [ 205.539572] ? perf_trace_lock+0x900/0x900 [ 205.543799] ? __lock_acquire+0x7f5/0x5140 [ 205.548046] ? vmx_vcpu_reset+0x1030/0x1030 [ 205.552378] ? graph_lock+0x170/0x170 [ 205.556173] ? __lock_acquire+0x7f5/0x5140 [ 205.560410] ? perf_trace_run_bpf_submit+0x246/0x370 [ 205.565520] ? __lock_is_held+0xb5/0x140 [ 205.569581] ? lock_acquire+0x1dc/0x520 [ 205.573549] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 205.578574] ? lock_release+0xa10/0xa10 [ 205.582549] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 205.587823] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 205.592323] ? preempt_notifier_dec+0x20/0x20 [ 205.596830] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 205.601669] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 205.606699] kvm_vcpu_ioctl+0x79d/0x12e0 [ 205.610761] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 205.616494] ? lock_release+0x4d4/0xa10 [ 205.620486] ? lock_downgrade+0x8e0/0x8e0 [ 205.624640] ? rcu_is_watching+0x85/0x140 [ 205.628785] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 205.633996] ? __fget+0x40c/0x650 [ 205.637455] ? match_held_lock+0x871/0x8b0 [ 205.641686] ? expand_files.part.8+0x9a0/0x9a0 [ 205.646264] ? kasan_check_write+0x14/0x20 [ 205.650504] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 205.655434] ? wait_for_completion+0x870/0x870 [ 205.660014] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 205.665204] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 205.670923] do_vfs_ioctl+0x1cf/0x16a0 [ 205.674818] ? ioctl_preallocate+0x2e0/0x2e0 [ 205.679222] ? fget_raw+0x20/0x20 [ 205.682671] ? __sb_end_write+0xac/0xe0 [ 205.686648] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 205.692176] ? fput+0x130/0x1a0 [ 205.695466] ? ksys_write+0x1a6/0x250 [ 205.699269] ? security_file_ioctl+0x94/0xc0 [ 205.703680] ksys_ioctl+0xa9/0xd0 [ 205.707132] SyS_ioctl+0x24/0x30 [ 205.710500] ? ksys_ioctl+0xd0/0xd0 [ 205.714125] do_syscall_64+0x29e/0x9d0 [ 205.718005] ? vmalloc_sync_all+0x30/0x30 [ 205.722153] ? _raw_spin_unlock_irq+0x27/0x70 [ 205.726642] ? finish_task_switch+0x1ca/0x810 [ 205.731146] ? syscall_return_slowpath+0x5c0/0x5c0 [ 205.736074] ? syscall_return_slowpath+0x30f/0x5c0 [ 205.741007] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 205.746378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.751229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.756429] RIP: 0033:0x455319 2018/04/15 15:58:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000008c0)={0x12c0, 0xf, 0x6, 0xb20, 0x70bd2b, 0x25dfdbfe, {0x5, 0x0, 0x1}, [@nested={0x12ac, 0x41, [@generic="78952cf43856eddf8a841c46377bd7698f05b206e7084e237f50b1bebaa22d4cb18f65fa24c729b327b1d677a436f8f610ff4a4243a19f00f8abdc0907a83d6a579f68fe2f4beb63e3346683578cc9ae116753f8a10996820b451c248cce6be7696ded61073a43b7976bcd57554e0a9bc1cbbc1b9368a9445e0f4325092b32b9275bb496c71aca38d0eafbe410a98610421ccde54dbb919ebcf4971f2331544791b6602b82d757f83cbc5973938da7b96e28e6ec0c893900d0116a1865b2c0", @generic="7923ff64f03953d0c471b4fc4be929e126072c40309cb0533197337480a70d6d0194923d35f352834366f1ea4989dbce9092e2ad7b1e59c510e8dbd797f2", @generic="bf7bb4b752b857c93dea80a871543a4058ed9d07cfefee63eebc553618658e07b6ca869e5cb09f4e7bb4bddf0e3ceefbf35d178f572bdb66f594b10bb5742d36555e4c905ab77c6f0335fd99499aefd29f7eac233630d4c0fe886b2fdfab", @generic="fd2ce9061d2a5dad109eea8703ab9de080d112fa8c8ca699d8ffc3cc9b0980d7784d8a7c2a0df1359db41ab272a230a9c14b9c57dcd377797667f40c59b17ae6d41f174b80da089fc209567d65946874a0", @generic="7af256357145a66e796b7fd82d865f0b0a060851eda0c68c07cb55b5cb9596e2f553d03b5df3e23812d79f60d1a9d032054f5d57afccf30f00cd31583406bf4d4797de0b4d353452cb8db297d29ccdc0f2ef1b25b3bc80295ff09bed1815dd76ba96b8aff2a8fe99c36bbcf04ac94d250f7d922233df450b50200561275bf1d7486725deaa7081cb3ede764a02088df4a391163e3a8e4d7949c68b214b19ab2d1818ace42931bc11dfc6e30bf56b8baeba4c1bf77a5fd4bee45d52aa5a4b506956cee817503eeb9c1669a6c1a7a98439ab62044ad0d0f5d4cbe54cc379184e83270616f9deda1f71", @typed={0x14, 0x2c, @ipv6=@loopback={0x0, 0x1}}, @generic="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"]}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1000, 0x8000) 2018/04/15 15:58:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c08, &(0x7f0000000800)) [ 205.759610] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.767328] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 205.774589] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 205.781869] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.789133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 205.796394] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000018 2018/04/15 15:58:38 executing program 3: clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xae92, 0x1b7dd6f69c20cae6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) socketpair(0x0, 0x80002, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x4000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000180)=""/175) 2018/04/15 15:58:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0xc0101282, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 206.042758] binder_alloc: binder_alloc_mmap_handler: 16997 20000000-20002000 already mapped failed -16 2018/04/15 15:58:38 executing program 6 (fault-call:6 fault-nth:25): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1279, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4b, 0x40000) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000d35ff9)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic="da"]}]}, 0x1c}, 0x1}, 0x0) r1 = memfd_create(&(0x7f0000000040)='(#}\x00', 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 2018/04/15 15:58:38 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x40001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) socket$inet(0x2, 0x0, 0x1) 2018/04/15 15:58:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = socket$inet(0x2, 0x800, 0x100000001) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x7fffffff, 0xb9a}, &(0x7f0000000140)=0x8) 2018/04/15 15:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000001}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x7}, 0x8) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='adfs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="e241e3cc070000000000fdc27d00000000000000000000"], &(0x7f0000000440)=0x1) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x12, 0x1000, &(0x7f0000000580)="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"}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000280), 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000340)=""/214) 2018/04/15 15:58:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x10800) r1 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x80000000, 0x440) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400a00, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="73e98ecc2d01aa122811", &(0x7f00000001c0)=""/5}, 0x18) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0xfffffffffffffffc) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000002c0)='/dev/loop#\x00', &(0x7f0000000300)='/dev/admmidi#\x00', &(0x7f0000000340)='/dev/loop#\x00', &(0x7f00000004c0)='/dev/mixer\x00', &(0x7f00000003c0)='/dev/admmidi#\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='wlan0vmnet1\x00']) ioctl$LOOP_GET_STATUS(r3, 0x4c02, &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000500)={0x3, 0x800, 0x7, {0x0, 0x1c9c380}, 0x2e8b, 0xfffffffffffffff8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0x100) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 2018/04/15 15:58:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 206.318981] FAULT_INJECTION: forcing a failure. [ 206.318981] name failslab, interval 1, probability 0, space 0, times 0 [ 206.330361] CPU: 0 PID: 17080 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 206.337223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.346603] Call Trace: [ 206.349216] dump_stack+0x1b9/0x294 [ 206.352883] ? dump_stack_print_info.cold.2+0x52/0x52 [ 206.358095] ? perf_trace_lock_acquire+0xe3/0x980 [ 206.362977] should_fail.cold.4+0xa/0x1a [ 206.367069] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 206.372204] ? kasan_kmalloc+0xc4/0xe0 [ 206.376122] ? kasan_slab_alloc+0x12/0x20 [ 206.380292] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 206.385168] ? kvm_mmu_load+0x21/0x10e0 [ 206.389169] ? vcpu_enter_guest+0x3aa1/0x6070 [ 206.393686] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 206.398726] ? graph_lock+0x170/0x170 [ 206.402547] ? do_syscall_64+0x29e/0x9d0 [ 206.406629] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.412031] ? find_held_lock+0x36/0x1c0 2018/04/15 15:58:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) [ 206.416132] ? __lock_is_held+0xb5/0x140 [ 206.420217] ? ip_vs_sync_conn+0x1940/0x33a0 [ 206.424686] ? check_same_owner+0x320/0x320 [ 206.429045] ? rcu_note_context_switch+0x710/0x710 [ 206.434103] __should_failslab+0x124/0x180 [ 206.438369] should_failslab+0x9/0x14 [ 206.442189] kmem_cache_alloc+0x2af/0x760 [ 206.446379] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 206.451263] mmu_topup_memory_caches+0xf7/0x3a0 [ 206.455956] ? kvm_apic_has_interrupt+0xe1/0x210 [ 206.460753] kvm_mmu_load+0x21/0x10e0 2018/04/15 15:58:38 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x75) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) [ 206.464577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.470146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 206.475723] vcpu_enter_guest+0x3aa1/0x6070 [ 206.480076] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 206.485634] ? vmcs_load+0x139/0x180 [ 206.489373] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 206.495103] ? kvm_set_msr_common+0x2660/0x2660 [ 206.499771] ? perf_trace_lock+0x900/0x900 [ 206.503995] ? __lock_acquire+0x7f5/0x5140 [ 206.508238] ? vmx_vcpu_reset+0x1030/0x1030 [ 206.512552] ? graph_lock+0x170/0x170 [ 206.516347] ? __lock_acquire+0x7f5/0x5140 [ 206.520579] ? perf_trace_run_bpf_submit+0x246/0x370 [ 206.527339] ? __lock_is_held+0xb5/0x140 [ 206.531394] ? ip_vs_sync_conn+0x1110/0x33a0 [ 206.535810] ? lock_acquire+0x1dc/0x520 [ 206.539777] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 206.544792] ? lock_release+0xa10/0xa10 [ 206.548759] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 206.554046] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 206.558532] ? preempt_notifier_dec+0x20/0x20 [ 206.563046] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 206.567881] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 206.572893] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 206.578000] kvm_vcpu_ioctl+0x79d/0x12e0 [ 206.582077] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 206.587788] ? graph_lock+0x170/0x170 [ 206.591593] ? find_held_lock+0x36/0x1c0 [ 206.595666] ? lock_downgrade+0x8e0/0x8e0 [ 206.599817] ? rcu_is_watching+0x85/0x140 [ 206.603973] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 206.609185] ? __fget+0x40c/0x650 [ 206.612647] ? match_held_lock+0x871/0x8b0 [ 206.616888] ? expand_files.part.8+0x9a0/0x9a0 [ 206.621464] ? kasan_check_write+0x14/0x20 [ 206.625693] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 206.630624] ? wait_for_completion+0x870/0x870 [ 206.635202] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 206.640394] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 206.646113] do_vfs_ioctl+0x1cf/0x16a0 [ 206.650008] ? ioctl_preallocate+0x2e0/0x2e0 [ 206.654420] ? fget_raw+0x20/0x20 [ 206.657869] ? __sb_end_write+0xac/0xe0 [ 206.661842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 206.667370] ? fput+0x130/0x1a0 [ 206.670646] ? ksys_write+0x1a6/0x250 [ 206.674447] ? security_file_ioctl+0x94/0xc0 [ 206.678856] ksys_ioctl+0xa9/0xd0 [ 206.682310] SyS_ioctl+0x24/0x30 [ 206.685844] ? ksys_ioctl+0xd0/0xd0 [ 206.689466] do_syscall_64+0x29e/0x9d0 [ 206.693346] ? vmalloc_sync_all+0x30/0x30 [ 206.697486] ? _raw_spin_unlock_irq+0x27/0x70 [ 206.701977] ? finish_task_switch+0x1ca/0x810 [ 206.706469] ? syscall_return_slowpath+0x5c0/0x5c0 [ 206.711402] ? syscall_return_slowpath+0x30f/0x5c0 [ 206.716330] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 206.721693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.726538] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.731718] RIP: 0033:0x455319 [ 206.734897] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.742601] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 206.749950] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 206.757214] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 206.764475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 206.771734] R13: 0000000000000251 R14: 00000000006f6838 R15: 0000000000000019 2018/04/15 15:58:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x40101283, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 6 (fault-call:6 fault-nth:26): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:39 executing program 2: r0 = socket$inet(0x2, 0x803, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x11, 0x0, 0x485) 2018/04/15 15:58:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x84000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x3ff, 0x40, 0x6, 0x10000, 0x1ff, 0x100000000, 0x7}, 0xc) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) io_setup(0x1, &(0x7f0000000080)=0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xf, 0x9, r0, &(0x7f00000000c0)="d69bbf4c5055486f63600477dbd89f1c5b7ad4f327cf14fe5e0a037cc76c5e573ccb7e174b99c2d46b584b9027196ef75b62d7b3bfd5f62a7f4f996b31", 0x3d, 0x6, 0x0, 0x1, r1}, &(0x7f0000000140)) 2018/04/15 15:58:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x401870c8, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x6, 0x0, 0x1089, 0xfffffffffffffffc}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x1f3) [ 207.160648] FAULT_INJECTION: forcing a failure. [ 207.160648] name failslab, interval 1, probability 0, space 0, times 0 [ 207.172061] CPU: 0 PID: 17140 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 207.178919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.188286] Call Trace: [ 207.190896] dump_stack+0x1b9/0x294 [ 207.194539] ? dump_stack_print_info.cold.2+0x52/0x52 [ 207.199725] ? __save_stack_trace+0x7e/0xd0 [ 207.204071] should_fail.cold.4+0xa/0x1a [ 207.208135] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.213240] ? kasan_kmalloc+0xc4/0xe0 [ 207.217119] ? kasan_slab_alloc+0x12/0x20 [ 207.221265] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 207.226122] ? kvm_mmu_load+0x21/0x10e0 [ 207.230101] ? vcpu_enter_guest+0x3aa1/0x6070 [ 207.234588] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 207.239610] ? graph_lock+0x170/0x170 [ 207.243417] ? do_syscall_64+0x29e/0x9d0 [ 207.247482] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.252853] ? find_held_lock+0x36/0x1c0 [ 207.256913] ? __lock_is_held+0xb5/0x140 [ 207.261009] ? check_same_owner+0x320/0x320 [ 207.265338] ? rcu_note_context_switch+0x710/0x710 [ 207.270291] __should_failslab+0x124/0x180 [ 207.274524] should_failslab+0x9/0x14 [ 207.278318] kmem_cache_alloc+0x2af/0x760 [ 207.282483] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 207.287323] mmu_topup_memory_caches+0xf7/0x3a0 [ 207.291992] ? kvm_apic_has_interrupt+0xe1/0x210 [ 207.296750] kvm_mmu_load+0x21/0x10e0 [ 207.300543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.306074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.311607] vcpu_enter_guest+0x3aa1/0x6070 [ 207.315919] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 207.321445] ? vmcs_load+0x139/0x180 [ 207.325166] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 207.330876] ? kvm_set_msr_common+0x2660/0x2660 [ 207.335540] ? vmx_vcpu_load+0xadd/0xfe0 [ 207.339593] ? __lock_acquire+0x7f5/0x5140 [ 207.343817] ? perf_trace_run_bpf_submit+0x246/0x370 [ 207.348915] ? vmx_vcpu_reset+0x1030/0x1030 [ 207.353228] ? graph_lock+0x170/0x170 [ 207.357023] ? __lock_acquire+0x7f5/0x5140 [ 207.361257] ? perf_trace_run_bpf_submit+0x246/0x370 [ 207.366362] ? __lock_is_held+0xb5/0x140 [ 207.370417] ? lock_acquire+0x1dc/0x520 [ 207.374379] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 207.379393] ? lock_release+0xa10/0xa10 [ 207.383359] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 207.388627] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 207.393114] ? preempt_notifier_dec+0x20/0x20 [ 207.397615] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 207.402447] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 207.407457] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 207.412562] kvm_vcpu_ioctl+0x79d/0x12e0 [ 207.416618] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 207.422319] ? graph_lock+0x170/0x170 [ 207.426115] ? find_held_lock+0x36/0x1c0 [ 207.430184] ? lock_downgrade+0x8e0/0x8e0 [ 207.434333] ? rcu_is_watching+0x85/0x140 [ 207.438474] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 207.443667] ? __fget+0x40c/0x650 [ 207.447118] ? match_held_lock+0x871/0x8b0 [ 207.451350] ? expand_files.part.8+0x9a0/0x9a0 [ 207.455923] ? kasan_check_write+0x14/0x20 [ 207.460154] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 207.465082] ? wait_for_completion+0x870/0x870 [ 207.469657] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 207.474842] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 207.480547] do_vfs_ioctl+0x1cf/0x16a0 [ 207.484431] ? ioctl_preallocate+0x2e0/0x2e0 [ 207.488835] ? fget_raw+0x20/0x20 [ 207.492281] ? __sb_end_write+0xac/0xe0 [ 207.496252] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 207.501777] ? fput+0x130/0x1a0 [ 207.505053] ? ksys_write+0x1a6/0x250 [ 207.508850] ? security_file_ioctl+0x94/0xc0 [ 207.513253] ksys_ioctl+0xa9/0xd0 [ 207.516705] SyS_ioctl+0x24/0x30 [ 207.520061] ? ksys_ioctl+0xd0/0xd0 [ 207.523680] do_syscall_64+0x29e/0x9d0 [ 207.527559] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 207.532394] ? syscall_return_slowpath+0x5c0/0x5c0 [ 207.537319] ? syscall_return_slowpath+0x30f/0x5c0 [ 207.542246] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 207.547607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.552451] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.557629] RIP: 0033:0x455319 2018/04/15 15:58:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) listen(r1, 0xf3a) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) 2018/04/15 15:58:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1260, &(0x7f0000000800)) [ 207.560806] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.568506] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 207.575764] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 207.583030] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 207.590293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 207.597550] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000001a 2018/04/15 15:58:39 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000300)) 2018/04/15 15:58:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x5, r0, 0x1}) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="2e7f3296bfccedf685e09d4df297347795107477edf060b0d5d808de948350a49d8d1879110a7f42d324a7d991002d698471f0fc00bcc2d6ae50484db14c0ee09f3077f720459bd67bc076843e6c3ec025e7434caf34a4830f282a59cd0d59a83f1ea5a6460d819a7c1d77313da8b64d137433ce4d6968adffb814892653e5987c9d57de879e9bbb1df02045091cc6eff8ecacdc5c9ca79caf6af576bc18833f1dfdae2503b87095bfb9a6122a6213386d661cb34f65be158699a935656307680a4c04ba98c67c43fd236c5bb881dbc6b63ae877df497e1dbb43dd74c4dae469537064c3cb958c4a3daba85f8e5bc74b691da73f51", 0xf5, 0x0) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000480)={0x2, 0x13, 0x7, 0x2, "99ab550a00cee3df966d229d99e46b6694a27029a6dc7c687511ed1862b2fa55"}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r3, r3}, &(0x7f00000002c0)=""/218, 0xda, &(0x7f0000000440)={&(0x7f00000003c0)={'crc32-generic\x00'}, &(0x7f0000000400)="8a9c47eab816e9df0cf6581fbe12bb4c583c0d64bd7de7d212e809fc211523ab113d14b93b6f0ba760349ec27a096fb2f2b3339f56", 0x35}) keyctl$negate(0xd, r2, 0x20, r3) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2018/04/15 15:58:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c09, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="230000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd77ca4d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x60000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 2018/04/15 15:58:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000000c0), 0x0, 0x4800) 2018/04/15 15:58:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1269, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 7: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x20000000f, &(0x7f0000ae5000)="02", 0x1) listen(r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 2018/04/15 15:58:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c02, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 6 (fault-call:6 fault-nth:27): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, {0xa, 0x4e24, 0x5274, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x20}, 0x0, [0x0, 0x8, 0x628, 0x9, 0x6, 0x4, 0x7, 0x7fffffff]}, 0x5c) 2018/04/15 15:58:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x5460, &(0x7f0000000800)) [ 208.026393] FAULT_INJECTION: forcing a failure. [ 208.026393] name failslab, interval 1, probability 0, space 0, times 0 [ 208.037763] CPU: 0 PID: 17201 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 208.044620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.053992] Call Trace: [ 208.056603] dump_stack+0x1b9/0x294 [ 208.060256] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.065463] ? __save_stack_trace+0x7e/0xd0 [ 208.069821] should_fail.cold.4+0xa/0x1a [ 208.073913] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.079043] ? kasan_kmalloc+0xc4/0xe0 [ 208.082951] ? kasan_slab_alloc+0x12/0x20 [ 208.087129] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 208.091991] ? kvm_mmu_load+0x21/0x10e0 [ 208.095987] ? vcpu_enter_guest+0x3aa1/0x6070 [ 208.100511] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.105551] ? graph_lock+0x170/0x170 [ 208.109366] ? do_syscall_64+0x29e/0x9d0 [ 208.113448] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.118845] ? find_held_lock+0x36/0x1c0 [ 208.122946] ? __lock_is_held+0xb5/0x140 [ 208.127057] ? check_same_owner+0x320/0x320 [ 208.131421] ? rcu_note_context_switch+0x710/0x710 [ 208.136386] __should_failslab+0x124/0x180 [ 208.140655] should_failslab+0x9/0x14 [ 208.144477] kmem_cache_alloc+0x2af/0x760 [ 208.148669] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 208.153541] mmu_topup_memory_caches+0xf7/0x3a0 [ 208.158233] ? kvm_apic_has_interrupt+0xe1/0x210 [ 208.163029] kvm_mmu_load+0x21/0x10e0 [ 208.166853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.172420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.177999] vcpu_enter_guest+0x3aa1/0x6070 [ 208.182348] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.187905] ? vmcs_load+0x139/0x180 [ 208.191638] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 208.197378] ? kvm_set_msr_common+0x2660/0x2660 [ 208.202069] ? vmx_vcpu_load+0xadd/0xfe0 [ 208.206156] ? __lock_acquire+0x7f5/0x5140 [ 208.210406] ? perf_trace_run_bpf_submit+0x246/0x370 [ 208.215527] ? vmx_vcpu_reset+0x1030/0x1030 [ 208.219866] ? graph_lock+0x170/0x170 2018/04/15 15:58:40 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x80800) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x4, 0x8, 0xfffffffffffffb21, 0x8}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) getsockopt$sock_int(r1, 0x1, 0x24, &(0x7f00002fb000), &(0x7f0000d1bffc)=0x4) 2018/04/15 15:58:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x121800) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000c02fca)="6e732f6d6e7400c552c5ba9e2c33e308163dd83bbbef1a23efb866ab2c1b66c09db90000000000000006f4d0e9ae0e19c79a35b158ae") setns(r0, 0x8000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d802000058010000ffffffffffffffff58010000ffffffff40020000ffffffffffffffff40020000ffffffff03000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x338) connect$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, {0x7ff, 0x326, 0x1, 0x9, 0x14, 0x8}, 0x40}, 0xa) ioctl$VT_RELDISP(r0, 0x5605) [ 208.223681] ? __lock_acquire+0x7f5/0x5140 [ 208.227939] ? perf_trace_run_bpf_submit+0x246/0x370 [ 208.233076] ? __lock_is_held+0xb5/0x140 [ 208.237163] ? lock_acquire+0x1dc/0x520 [ 208.241152] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 208.246196] ? lock_release+0xa10/0xa10 [ 208.250188] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 208.255480] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 208.259986] ? preempt_notifier_dec+0x20/0x20 [ 208.264513] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.269370] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.274404] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 208.279547] kvm_vcpu_ioctl+0x79d/0x12e0 [ 208.283636] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 208.289368] ? graph_lock+0x170/0x170 [ 208.293193] ? find_held_lock+0x36/0x1c0 [ 208.297294] ? lock_downgrade+0x8e0/0x8e0 [ 208.301470] ? rcu_is_watching+0x85/0x140 [ 208.305635] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 208.310855] ? __fget+0x40c/0x650 [ 208.314330] ? match_held_lock+0x871/0x8b0 [ 208.318586] ? expand_files.part.8+0x9a0/0x9a0 [ 208.323194] ? kasan_check_write+0x14/0x20 [ 208.327452] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 208.332408] ? wait_for_completion+0x870/0x870 [ 208.337008] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 208.342219] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 208.347956] do_vfs_ioctl+0x1cf/0x16a0 [ 208.351876] ? ioctl_preallocate+0x2e0/0x2e0 [ 208.356303] ? fget_raw+0x20/0x20 [ 208.359776] ? __sb_end_write+0xac/0xe0 [ 208.363776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.369325] ? fput+0x130/0x1a0 [ 208.372625] ? ksys_write+0x1a6/0x250 [ 208.376452] ? security_file_ioctl+0x94/0xc0 [ 208.380884] ksys_ioctl+0xa9/0xd0 [ 208.384362] SyS_ioctl+0x24/0x30 [ 208.387745] ? ksys_ioctl+0xd0/0xd0 [ 208.391392] do_syscall_64+0x29e/0x9d0 [ 208.395294] ? vmalloc_sync_all+0x30/0x30 [ 208.399462] ? _raw_spin_unlock_irq+0x27/0x70 [ 208.403978] ? finish_task_switch+0x1ca/0x810 [ 208.408493] ? syscall_return_slowpath+0x5c0/0x5c0 [ 208.413447] ? syscall_return_slowpath+0x30f/0x5c0 [ 208.418410] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 208.423783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.428625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.433808] RIP: 0033:0x455319 [ 208.436987] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.444703] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 208.451969] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 208.459228] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.466496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 208.473760] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000001b 2018/04/15 15:58:40 executing program 6 (fault-call:6 fault-nth:28): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) fdatasync(r0) 2018/04/15 15:58:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000c46000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000a5e000/0x2000)=nil) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) mmap(&(0x7f0000000000/0xef5000)=nil, 0xef5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x5) ioctl$TCSBRK(r1, 0x5409, 0x6) 2018/04/15 15:58:40 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x1277, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000f68000006a0a00fffffff600611890"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) socketpair(0xa, 0x1, 0xe8e, &(0x7f0000000080)={0xffffffffffffffff}) accept(0xffffffffffffff9c, &(0x7f00000003c0)=@hci={0x0, 0x0}, &(0x7f0000000140)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x1b}, 0xc, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 2018/04/15 15:58:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x125f, &(0x7f0000000000)) 2018/04/15 15:58:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x5450, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1267, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 208.655543] FAULT_INJECTION: forcing a failure. [ 208.655543] name failslab, interval 1, probability 0, space 0, times 0 [ 208.666888] CPU: 0 PID: 17252 Comm: syz-executor6 Not tainted 4.16.0+ #3 [ 208.673748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.683118] Call Trace: [ 208.685729] dump_stack+0x1b9/0x294 [ 208.689383] ? dump_stack_print_info.cold.2+0x52/0x52 [ 208.694596] ? __save_stack_trace+0x7e/0xd0 [ 208.698952] should_fail.cold.4+0xa/0x1a 2018/04/15 15:58:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ce"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/15 15:58:40 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getpeername$llc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x125f, &(0x7f0000000800)) 2018/04/15 15:58:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') getdents64(r0, &(0x7f0000000000), 0x33e) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000000)=""/40, 0x28) [ 208.703051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.708441] ? kasan_kmalloc+0xc4/0xe0 [ 208.712349] ? kasan_slab_alloc+0x12/0x20 [ 208.716520] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 208.721392] ? kvm_mmu_load+0x21/0x10e0 [ 208.725390] ? vcpu_enter_guest+0x3aa1/0x6070 [ 208.729906] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.734944] ? graph_lock+0x170/0x170 [ 208.738769] ? do_syscall_64+0x29e/0x9d0 [ 208.742845] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.748235] ? find_held_lock+0x36/0x1c0 [ 208.752327] ? __lock_is_held+0xb5/0x140 [ 208.756434] ? check_same_owner+0x320/0x320 [ 208.760783] ? rcu_note_context_switch+0x710/0x710 [ 208.765748] __should_failslab+0x124/0x180 [ 208.770012] should_failslab+0x9/0x14 [ 208.773844] kmem_cache_alloc+0x2af/0x760 [ 208.778035] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 208.782915] mmu_topup_memory_caches+0xf7/0x3a0 [ 208.787605] ? kvm_apic_has_interrupt+0xe1/0x210 [ 208.792393] kvm_mmu_load+0x21/0x10e0 [ 208.796228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.801796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 208.807357] vcpu_enter_guest+0x3aa1/0x6070 [ 208.811679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.817216] ? vmcs_load+0x139/0x180 [ 208.820930] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 208.826644] ? kvm_set_msr_common+0x2660/0x2660 [ 208.831310] ? vmx_vcpu_load+0xadd/0xfe0 [ 208.835838] ? __lock_acquire+0x7f5/0x5140 [ 208.840064] ? perf_trace_run_bpf_submit+0x246/0x370 [ 208.845165] ? vmx_vcpu_reset+0x1030/0x1030 [ 208.849489] ? graph_lock+0x170/0x170 [ 208.853281] ? __lock_acquire+0x7f5/0x5140 [ 208.857510] ? perf_trace_run_bpf_submit+0x246/0x370 [ 208.862614] ? __lock_is_held+0xb5/0x140 [ 208.866670] ? lock_acquire+0x1dc/0x520 [ 208.870634] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 208.875650] ? lock_release+0xa10/0xa10 [ 208.879616] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 208.884884] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 208.889367] ? preempt_notifier_dec+0x20/0x20 [ 208.893866] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.898696] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 208.903705] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 208.908810] kvm_vcpu_ioctl+0x79d/0x12e0 [ 208.912869] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 208.918571] ? graph_lock+0x170/0x170 [ 208.922366] ? find_held_lock+0x36/0x1c0 [ 208.926432] ? lock_downgrade+0x8e0/0x8e0 [ 208.930581] ? rcu_is_watching+0x85/0x140 [ 208.934721] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 208.939914] ? __fget+0x40c/0x650 [ 208.943360] ? match_held_lock+0x871/0x8b0 [ 208.947587] ? expand_files.part.8+0x9a0/0x9a0 [ 208.952163] ? kasan_check_write+0x14/0x20 [ 208.956389] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 208.961313] ? wait_for_completion+0x870/0x870 [ 208.965889] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 208.971081] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 208.976785] do_vfs_ioctl+0x1cf/0x16a0 [ 208.980672] ? ioctl_preallocate+0x2e0/0x2e0 [ 208.985078] ? fget_raw+0x20/0x20 [ 208.988525] ? __sb_end_write+0xac/0xe0 [ 208.992495] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 208.998032] ? fput+0x130/0x1a0 [ 209.001306] ? ksys_write+0x1a6/0x250 [ 209.005102] ? security_file_ioctl+0x94/0xc0 [ 209.009505] ksys_ioctl+0xa9/0xd0 [ 209.012953] SyS_ioctl+0x24/0x30 [ 209.016309] ? ksys_ioctl+0xd0/0xd0 [ 209.019926] do_syscall_64+0x29e/0x9d0 [ 209.023803] ? vmalloc_sync_all+0x30/0x30 [ 209.027939] ? _raw_spin_unlock_irq+0x27/0x70 [ 209.032426] ? finish_task_switch+0x1ca/0x810 [ 209.036912] ? syscall_return_slowpath+0x5c0/0x5c0 [ 209.041832] ? syscall_return_slowpath+0x30f/0x5c0 [ 209.046758] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 209.052118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.056960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.062141] RIP: 0033:0x455319 [ 209.065317] RSP: 002b:00007f95389d1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.073030] RAX: ffffffffffffffda RBX: 00007f95389d26d4 RCX: 0000000000455319 [ 209.080291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 209.087547] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.094805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 2018/04/15 15:58:41 executing program 7 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1277, &(0x7f0000000800)) [ 209.102062] R13: 0000000000000251 R14: 00000000006f6838 R15: 000000000000001c [ 209.157165] FAULT_INJECTION: forcing a failure. [ 209.157165] name failslab, interval 1, probability 0, space 0, times 0 [ 209.168624] CPU: 1 PID: 17274 Comm: syz-executor7 Not tainted 4.16.0+ #3 [ 209.175465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.184804] Call Trace: [ 209.187379] dump_stack+0x1b9/0x294 [ 209.191017] ? dump_stack_print_info.cold.2+0x52/0x52 [ 209.196211] ? percpu_ref_put_many+0x132/0x230 [ 209.200782] ? memcg_kmem_charge_memcg+0x74/0x110 [ 209.205615] should_fail.cold.4+0xa/0x1a [ 209.209663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.214756] ? graph_lock+0x170/0x170 [ 209.218543] ? find_held_lock+0x36/0x1c0 [ 209.222593] ? __lock_is_held+0xb5/0x140 [ 209.226649] ? check_same_owner+0x320/0x320 [ 209.230963] ? rcu_note_context_switch+0x710/0x710 [ 209.235885] __should_failslab+0x124/0x180 [ 209.240109] should_failslab+0x9/0x14 [ 209.243892] kmem_cache_alloc+0x2af/0x760 [ 209.248034] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 209.253562] ptlock_alloc+0x20/0x80 [ 209.257177] pte_alloc_one+0x6b/0x120 [ 209.260963] do_huge_pmd_anonymous_page+0xe7a/0x1e30 [ 209.266055] ? __lock_acquire+0x7f5/0x5140 [ 209.270278] ? __thp_get_unmapped_area+0x180/0x180 [ 209.275195] ? __lock_acquire+0x7f5/0x5140 [ 209.279418] ? debug_check_no_locks_freed+0x310/0x310 [ 209.284600] ? debug_check_no_locks_freed+0x310/0x310 [ 209.289776] ? __unlock_page_memcg+0x72/0x100 [ 209.294263] ? unlock_page_memcg+0x2c/0x40 [ 209.298481] ? page_add_file_rmap+0x779/0xe20 [ 209.302962] ? print_usage_bug+0xc0/0xc0 [ 209.307014] ? page_add_new_anon_rmap+0x850/0x850 [ 209.311847] ? print_usage_bug+0xc0/0xc0 [ 209.315892] ? print_usage_bug+0xc0/0xc0 [ 209.319936] ? zap_class+0x720/0x720 [ 209.323639] ? perf_trace_lock+0xd6/0x900 [ 209.327769] ? perf_trace_lock+0xd6/0x900 [ 209.331906] ? pud_val+0x80/0xf0 [ 209.335253] ? pmd_val+0xf0/0xf0 [ 209.338606] ? lock_acquire+0x1dc/0x520 [ 209.342566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 209.348090] __handle_mm_fault+0x290b/0x4150 [ 209.352492] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 209.357229] ? graph_lock+0x170/0x170 [ 209.361021] ? find_held_lock+0x36/0x1c0 [ 209.365076] ? lock_downgrade+0x8e0/0x8e0 [ 209.369217] ? handle_mm_fault+0x8c0/0xc70 [ 209.373442] handle_mm_fault+0x53a/0xc70 [ 209.377508] ? __handle_mm_fault+0x4150/0x4150 [ 209.382100] ? find_vma+0x34/0x190 [ 209.385628] __do_page_fault+0x60b/0xe40 [ 209.389681] ? mm_fault_error+0x380/0x380 [ 209.393813] ? graph_lock+0x170/0x170 [ 209.397601] do_page_fault+0xee/0x8a7 [ 209.401473] ? vmalloc_sync_all+0x30/0x30 [ 209.405607] ? find_held_lock+0x36/0x1c0 [ 209.409669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.414507] page_fault+0x25/0x50 [ 209.417948] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 209.423550] RSP: 0018:ffff8801907d78b0 EFLAGS: 00010202 [ 209.428895] RAX: ffffed00320faf29 RBX: 0000000000000010 RCX: 0000000000000002 [ 209.436147] RDX: 0000000000000000 RSI: 0000000020000800 RDI: ffff8801907d7938 [ 209.443402] RBP: ffff8801907d78e8 R08: ffffed00320faf29 R09: ffffed00320faf27 [ 209.450653] R10: ffffed00320faf28 R11: ffff8801907d7947 R12: 0000000020000810 [ 209.457905] R13: 0000000020000800 R14: ffff8801907d7938 R15: 00007ffffffff000 [ 209.465175] ? _copy_from_user+0x10d/0x150 [ 209.469400] blk_ioctl_discard+0x194/0x3a0 [ 209.473620] ? blkdev_pr_preempt+0x380/0x380 [ 209.478023] ? graph_lock+0x170/0x170 [ 209.481813] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 209.486992] blkdev_ioctl+0xb9d/0x2020 [ 209.490868] ? blkpg_ioctl+0xc40/0xc40 [ 209.494738] ? lock_downgrade+0x8e0/0x8e0 [ 209.498874] ? rcu_is_watching+0x85/0x140 [ 209.503010] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 209.508198] ? __fget+0x40c/0x650 [ 209.511636] ? match_held_lock+0x871/0x8b0 [ 209.515856] ? expand_files.part.8+0x9a0/0x9a0 [ 209.520424] ? kasan_check_write+0x14/0x20 [ 209.524647] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 209.529568] block_ioctl+0xee/0x130 [ 209.533177] ? blkdev_fallocate+0x400/0x400 [ 209.537489] do_vfs_ioctl+0x1cf/0x16a0 [ 209.541364] ? ioctl_preallocate+0x2e0/0x2e0 [ 209.545756] ? fget_raw+0x20/0x20 [ 209.549194] ? __sb_end_write+0xac/0xe0 [ 209.553157] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 209.558675] ? fput+0x130/0x1a0 [ 209.561943] ? ksys_write+0x1a6/0x250 [ 209.565732] ? security_file_ioctl+0x94/0xc0 [ 209.570126] ksys_ioctl+0xa9/0xd0 [ 209.573578] SyS_ioctl+0x24/0x30 [ 209.576927] ? ksys_ioctl+0xd0/0xd0 [ 209.580542] do_syscall_64+0x29e/0x9d0 [ 209.584413] ? vmalloc_sync_all+0x30/0x30 [ 209.588545] ? _raw_spin_unlock_irq+0x27/0x70 [ 209.593033] ? finish_task_switch+0x1ca/0x810 [ 209.597515] ? syscall_return_slowpath+0x5c0/0x5c0 [ 209.602428] ? syscall_return_slowpath+0x30f/0x5c0 [ 209.607345] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 209.612697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.617529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.622701] RIP: 0033:0x455319 [ 209.625872] RSP: 002b:00007f5212cfdc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.633564] RAX: ffffffffffffffda RBX: 00007f5212cfe6d4 RCX: 0000000000455319 [ 209.640824] RDX: 0000000020000800 RSI: 0000000000001277 RDI: 0000000000000013 [ 209.648077] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/15 15:58:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x1262, &(0x7f0000000800)) 2018/04/15 15:58:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c05, &(0x7f0000000800)) [ 209.655332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 209.662586] R13: 0000000000000280 R14: 00000000006f6ca0 R15: 0000000000000000 [ 369.632183] INFO: task loop0:7043 blocked for more than 120 seconds. [ 369.638750] Not tainted 4.16.0+ #3 [ 369.642834] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.650804] loop0 D25224 7043 2 0x80000000 [ 369.656469] Call Trace: [ 369.659071] __schedule+0x801/0x1e30 [ 369.662798] ? blk_init_queue+0x30/0x30 [ 369.666782] ? __sched_text_start+0x8/0x8 [ 369.670939] ? graph_lock+0x170/0x170 [ 369.674764] ? blk_exit_rl+0x80/0x80 [ 369.678489] ? depot_save_stack+0x26b/0x450 [ 369.682862] ? find_held_lock+0x36/0x1c0 [ 369.686987] schedule+0xef/0x430 [ 369.690363] ? __schedule+0x1e30/0x1e30 [ 369.694352] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 369.699565] ? find_held_lock+0x36/0x1c0 [ 369.703643] schedule_timeout+0x1b5/0x240 [ 369.707800] ? usleep_range+0x180/0x180 [ 369.711784] ? kasan_check_read+0x11/0x20 [ 369.715950] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.720368] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.724970] ? _raw_spin_unlock_irq+0x27/0x70 [ 369.729496] io_schedule_timeout+0x26/0x80 [ 369.733743] wait_for_completion_io+0x3e7/0x870 [ 369.738427] ? bit_wait_io_timeout+0x200/0x200 [ 369.743029] ? submit_bio+0xba/0x460 [ 369.746749] ? submit_bio+0xba/0x460 [ 369.750474] ? generic_make_request+0x1510/0x1510 [ 369.755337] ? wake_up_q+0x100/0x100 [ 369.759060] ? file_check_and_advance_wb_err+0x152/0x5d0 [ 369.764558] submit_bio_wait+0x13c/0x1e0 [ 369.768627] ? submit_bio_wait_endio+0x40/0x40 [ 369.773233] blkdev_issue_flush+0x226/0x320 [ 369.777573] blkdev_fsync+0x93/0xd0 [ 369.781204] ? thaw_bdev+0x1a0/0x1a0 [ 369.785030] vfs_fsync_range+0x140/0x220 [ 369.789098] vfs_fsync+0x29/0x30 [ 369.792468] loop_queue_work+0x14fe/0x3c6d [ 369.796708] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.801118] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.805710] ? _raw_spin_unlock_irq+0x27/0x70 [ 369.810211] ? lo_rw_aio+0x2080/0x2080 [ 369.814107] ? copy_overflow+0x20/0x20 [ 369.818009] ? __schedule+0x809/0x1e30 [ 369.821920] ? __sched_text_start+0x8/0x8 [ 369.826081] ? kasan_check_read+0x11/0x20 [ 369.830243] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.834669] ? graph_lock+0x170/0x170 [ 369.838473] ? compat_start_thread+0x80/0x80 [ 369.842887] ? _raw_spin_unlock_irq+0x27/0x70 [ 369.847375] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.852394] ? trace_hardirqs_on+0xd/0x10 [ 369.856537] ? _raw_spin_unlock_irq+0x27/0x70 [ 369.861040] ? finish_task_switch+0x1ca/0x810 [ 369.865540] ? find_held_lock+0x36/0x1c0 [ 369.869609] ? lock_downgrade+0x8e0/0x8e0 [ 369.873757] ? kasan_check_read+0x11/0x20 [ 369.877918] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.882337] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.886926] ? _raw_spin_unlock_irq+0x27/0x70 [ 369.891443] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.896473] kthread_worker_fn+0x357/0xa30 [ 369.900719] ? find_held_lock+0x36/0x1c0 [ 369.904790] ? kthread_associate_blkcg+0x870/0x870 [ 369.909741] ? schedule+0xef/0x430 [ 369.913292] ? __schedule+0x1e30/0x1e30 [ 369.917278] ? kasan_check_read+0x11/0x20 [ 369.921440] ? do_raw_spin_unlock+0x9e/0x2e0 [ 369.925860] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 369.930475] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 369.935599] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.940639] loop_kthread_worker_fn+0x51/0x60 [ 369.945141] kthread+0x345/0x410 [ 369.948510] ? loop_get_status64+0x140/0x140 [ 369.952914] ? kthread_bind+0x40/0x40 [ 369.956719] ret_from_fork+0x3a/0x50 [ 369.960444] [ 369.960444] Showing all locks held in the system: [ 369.966782] 2 locks held by khungtaskd/890: [ 369.971228] #0: 000000002599374e (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 [ 369.978879] #1: 000000003fb6ce90 (tasklist_lock){.+.+}, at: debug_show_all_locks+0xde/0x34a [ 369.987525] 1 lock held by rsyslogd/4349: [ 369.991673] #0: 00000000f84c3033 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1a9/0x1e0 [ 369.999668] 2 locks held by getty/4440: [ 370.003643] #0: 000000008e360c27 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.011903] #1: 00000000c0193b78 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.020773] 2 locks held by getty/4441: [ 370.024761] #0: 00000000cec16b98 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.033023] #1: 0000000070384c74 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.041895] 2 locks held by getty/4442: [ 370.045872] #0: 00000000f71980c8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.054124] #1: 000000000d1d8a50 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.062986] 2 locks held by getty/4443: [ 370.067050] #0: 000000008a8bfdfb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.075305] #1: 000000001d59f19e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.084175] 2 locks held by getty/4444: [ 370.088166] #0: 00000000b66f2749 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.096412] #1: 00000000ff483da9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.105285] 2 locks held by getty/4445: [ 370.109258] #0: 000000003f352a77 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.117513] #1: 00000000b214f03f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.126374] 2 locks held by getty/4446: [ 370.130349] #0: 00000000e75a15cd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 370.138602] #1: 0000000084c9fd1f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 370.147514] [ 370.149140] ============================================= [ 370.149140] [ 370.156251] NMI backtrace for cpu 1 [ 370.159893] CPU: 1 PID: 890 Comm: khungtaskd Not tainted 4.16.0+ #3 [ 370.166278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.175609] Call Trace: [ 370.178178] dump_stack+0x1b9/0x294 [ 370.181785] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.186959] nmi_cpu_backtrace.cold.4+0x19/0xce [ 370.191618] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 370.196786] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 370.202041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 370.207209] watchdog+0xc10/0xf60 [ 370.210647] ? reset_hung_task_detector+0xb0/0xb0 [ 370.215479] ? __schedule+0x1e30/0x1e30 [ 370.219432] ? retint_kernel+0x10/0x10 [ 370.223310] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.228827] ? __kthread_parkme+0x1b7/0x280 [ 370.233125] kthread+0x345/0x410 [ 370.236469] ? reset_hung_task_detector+0xb0/0xb0 [ 370.241287] ? kthread_bind+0x40/0x40 [ 370.245066] ret_from_fork+0x3a/0x50 [ 370.248820] Sending NMI from CPU 1 to CPUs 0: [ 370.253336] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 370.254324] Kernel panic - not syncing: hung_task: blocked tasks [ 370.267693] CPU: 1 PID: 890 Comm: khungtaskd Not tainted 4.16.0+ #3 [ 370.274083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.283426] Call Trace: [ 370.285995] dump_stack+0x1b9/0x294 [ 370.289603] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.294776] ? printk_safe_log_store+0x260/0x260 [ 370.299511] panic+0x22f/0x4de [ 370.302682] ? add_taint.cold.5+0x16/0x16 [ 370.306812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.312327] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 370.317753] ? printk_safe_flush+0xd7/0x130 [ 370.322055] watchdog+0xc21/0xf60 [ 370.325489] ? reset_hung_task_detector+0xb0/0xb0 [ 370.330322] ? __schedule+0x1e30/0x1e30 [ 370.334273] ? retint_kernel+0x10/0x10 [ 370.338144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.343659] ? __kthread_parkme+0x1b7/0x280 [ 370.347961] kthread+0x345/0x410 [ 370.351313] ? reset_hung_task_detector+0xb0/0xb0 [ 370.356131] ? kthread_bind+0x40/0x40 [ 370.359909] ret_from_fork+0x3a/0x50 [ 370.364006] Dumping ftrace buffer: [ 370.367704] (ftrace buffer empty) [ 370.371399] Kernel Offset: disabled [ 370.375007] Rebooting in 86400 seconds..