inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x5}}}, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) flock(r0, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x33, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r3) close(r1) 2018/05/22 07:22:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000380)=0x8) 2018/05/22 07:22:32 executing program 1: r0 = socket$inet(0x2, 0x4000004000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000010c0)='S', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/22 07:22:32 executing program 3: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x3, 0xb5}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x13, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000040)=0x100) 2018/05/22 07:22:32 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x2, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xcd68, 0x4, [{0x8, 0x7, 0xfffffffffffff971, 0x0, 0x0, 0x2000}, {0x80000001, 0x80000001, 0x5bc3, 0x0, 0x0, 0x2000}, {0xffff, 0x9e, 0x7, 0x0, 0x0, 0x2}, {0x2, 0x1ff, 0x7, 0x0, 0x0, 0xb80}]}) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e20, 0xfff}}, 0x1, 0x1, 0x6, "6ef9c77b7cad39c3f4ce5a11501a54c1829787096f014e305b9f0b991eeaa4347c297d5b69ffbd8814ff828a68c2dacfd0569354d7e8f7959fe84c98624a1e8513b3dec86552a752638de0d583818ba0"}, 0xd8) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x1800000000000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000002c0)=0x7) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x2}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in={{0x2, 0x4e24, @rand_addr=0x8}}, 0x8, 0xc59}, &(0x7f0000000440)=0x90) read(r2, &(0x7f0000000480)=""/188, 0xbc) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000540)=0x5) r4 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r4, 0x7) r5 = accept$packet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @dev={0xfe, 0x80, [], 0xc}, 0x81, 0x1, 0x315, 0x100, 0x3, 0x100002, r6}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000700)={0x20, 0x7}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000740)=0x800, 0x4) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000780)={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @dev={0xfe, 0x80, [], 0xa}, 0x9ecd000000000, 0x800, 0x7, 0x100, 0x6f, 0x4000000, r6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000800)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000008c0)={0x7f, {{0xa, 0x4e24, 0x81, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x3}}}, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000980)={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0xd}, @local={0xfe, 0x80, [], 0xaa}, 0x80000001, 0x6, 0x8, 0x400, 0x7, 0x0, r6}) fcntl$setflags(r1, 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000a00)={{0x1, 0x3, 0x4, 0x2, 0x96bd7ab}}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000b40)={{&(0x7f0000000a40)=""/181, 0xb5}, &(0x7f0000000b00), 0x2}, 0x20) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000b80)={0x303, 0x33}, 0x4) mq_timedreceive(r2, &(0x7f0000000bc0)=""/213, 0xd5, 0x1000, &(0x7f0000000cc0)) ioctl$KDDISABIO(r2, 0x4b37) writev(r5, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="3130fd2ddaa024ab", 0x8}, {&(0x7f0000000d40)="9eb0955bf089b57043c3e9f14cee99f557d2c1961f327f546a594bf48a2ce640e27c7380a3dda16fd26a980472c92009f2154ff15df91468db2be1714c89f5302539c6b8d58b446b3167cbd6e00528c80d11b64554f2c11aa941fcfeec09184c716b9af84a3cf2", 0x67}], 0x2) 2018/05/22 07:22:32 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = openat(r0, &(0x7f0000000240)='./control\x00', 0x20040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1) 2018/05/22 07:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x3, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000680)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="11000000000000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='Q\x00\x00\x00'], 0x3fd) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000700)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0xa, 0x1, 0x100) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r6 = socket$inet(0x15, 0x5, 0x0) recvmsg(r6, &(0x7f0000000580)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/193, 0xc1}, 0x0) bind$inet(r6, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r6, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000000440)}, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x0, &(0x7f00000002c0)="49c95cfbd3f6683aa7671feebe56a5e9056e3de18782ff6bd5c3c2f6596473fa3af2858a689b03f3", 0x28) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="66b9d004000066b80900000066ba000000000f3066b85e2100000f23d00f21f86635300000000f23f80f0fd58ef0319408800f01d1660f6c5600b80c008ec80f01cb0f2329bad004b0afee", 0x4b}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x39, "68d92abefafb4ef14ca7fafeada2de554abc1406f279d7eae0e556fa8c791390cd924bae872779bd16368caee6b1a6c4325011a9fcf2b29182"}, &(0x7f00000003c0)=0x41) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000005c0)={r8, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0xfffffffffffffff9, 0x4, 0x7f}, &(0x7f0000000400)=0x98) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8800, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r9, 0x40106410, &(0x7f00000001c0)={0x8d, &(0x7f0000000080)="537b51d346d22b7d399af5cdab8c89a5ebd38cb385816f81633e92bc113d22d32782cc6c7cf5bc8e1bc42215ac149cdb53d4cfd242f2716194ca366d650d38f53fd13fb9af53a7885531c6db2fc5896f6aab8f1d0aa37208c1f44c937b53f8c93e3120ba15232616c3cf801a86d20d6e88c2003a82c56833f78482b98e49c9cecb3b4a70827d151a4ca30def8b"}) ioctl$KVM_NMI(r9, 0xae9a) 2018/05/22 07:22:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x180, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/36) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) r2 = semget$private(0x0, 0x3, 0x0) semtimedop(r2, &(0x7f0000000100)=[{0x0, 0x7, 0x1800}, {0x0, 0x6, 0x1000}, {0x0, 0x3, 0x1000}, {0x1, 0x5, 0x1000}, {0x2, 0x923, 0x1800}], 0x5, &(0x7f0000000140)={0x77359400}) setsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f0000000080), 0x393) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) 2018/05/22 07:22:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000140)=0x1, 0x8) socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x10001, 0xd0, &(0x7f0000000180)=""/203, &(0x7f00000003c0)=0xffffffffffffff4b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x481, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/78) 2018/05/22 07:22:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast=0xffffffff}}, 0x1e) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x7ffff000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) close(r1) 2018/05/22 07:22:33 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) read(r0, &(0x7f0000000140)=""/129, 0x472) r1 = socket(0xa, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x1f}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x40000) 2018/05/22 07:22:33 executing program 7: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f00000007c0)='./file0/file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000880)='./file0/file1\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000780)='./file0/file0\x00', &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f0000753000)='ext4\x00', 0x3002480, &(0x7f0000000700)) 2018/05/22 07:22:33 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="e626262c8509000100f66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x9000, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x9000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121800, 0x8) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000740)=""/192, 0xc0) mount(&(0x7f0000000140)='.', &(0x7f0000000380)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000180)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) 2018/05/22 07:22:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)={0xe1a, 0x3f, 0x0, 0x2, 0x2, [{0x7, 0x4, 0x9, 0x0, 0x0, 0x1800}, {0x7, 0x200, 0x4, 0x0, 0x0, 0x1800}]}) getsockopt(r0, 0x1, 0x2c, &(0x7f0000000400)=""/55, &(0x7f00000004c0)=0x37) 2018/05/22 07:22:33 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2403, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) 2018/05/22 07:22:33 executing program 7: r0 = socket(0x5, 0x400001, 0x3af1bf24) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x101100, 0x0) ioctl(r0, 0x100000000, &(0x7f0000000180)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x100000001}, &(0x7f00000000c0)=0x8) ustat(0x6, &(0x7f0000000100)) 2018/05/22 07:22:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0884123, &(0x7f0000008000)="645b72184a17aa9b63a3dd061605000000000000003de0aa1b0b858f483fe2a2a57abd9cae7c176a8608cc4b639077d9004492007dd6494c02a07a60696e25ad9c7a6094e125f34f53") sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14006c97f8ffffff2dbd7000fddbf5aa67403eb11b7c8a1d26630447e59a79eef7df0500a6693c8a816039c58bd3133328d62d86117eb6e0c87a443d1f3706f05efe"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) poll(&(0x7f0000005000)=[{r0}], 0x1, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x3, 0x7ff}) 2018/05/22 07:22:33 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040)={0x1d}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000540)={0x1d, r2}, 0x10) 2018/05/22 07:22:33 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) 2018/05/22 07:22:33 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0xffaf}], 0x1, &(0x7f00000002c0)=""/77, 0x4d, 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000003c0)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x0) close(r0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 2018/05/22 07:22:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) sendmsg$rds(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x3}, 0x0) 2018/05/22 07:22:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x281371}) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000d50000000000000000000000000000009500000000000000798e126701150e8a05dd1d8b3c86af195935d0e599e1811537dee2ddeb1fb202678cace3bb9d6b5a0f94d01da4c309a6e68de248f3a8ff3a447abeef3906a3c9bf4d1462349b96daf06fd9310dbfc8a468b26f50f80077ad278caf856743e7424dc2e488408e16c720ee9f20a19d0407c4a8595b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000a000)=""/195}, 0x18) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x200400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7fff, 0x20, 0x9], 0x3, 0x100000000, 0x71, 0x10001, 0xffffffff, 0x6, {0x5, 0x2, 0xeb45, 0x7f, 0x9, 0x0, 0x4, 0x800, 0x7, 0x5, 0x0, 0x0, 0x100000001, 0x3ff, "b6bcb46fc0bcde0d9f6e3784de2ef219157b430af115ac04ce30e1ec7d4dec86"}}) 2018/05/22 07:22:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x3ffffffffffffffe, 0xfffffffffffffffe) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="539944d454887bd6e789c16a688355cd71a7eae76c5f04e6cac8b002e128ab17bc82a5127f9c9a23919b193d97554dae3713cd2aa12b4452a42ee0c4febac52ae79ee859abe24f54da2230104345f3b7a035ead5376e266d9aeb7f94a1ef87c8232a850f9c4b7f59b5d7b527cdaed07b20b461e0ef412dd8839c2ac1fa5e82d062979a3585538205b0c515c4509b23bed42862c399a1f17df64a8282b26eb703ab6368170d89444eb8773f3ecbe41d579a435769f425af44fca8877f1249c2a8ff00f3e9b5e35b5e15fc", 0xca}], 0x1}, 0x20004001) recvmmsg(r1, &(0x7f0000004040)=[{{&(0x7f0000003cc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e40)=""/185, 0xb9}, {&(0x7f0000003f00)=""/19, 0x13}], 0x2, &(0x7f0000003f80)=""/134, 0x86}}], 0x1, 0x100, &(0x7f0000004180)={0x0, 0x1c9c380}) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f"], 0x1) shutdown(r0, 0x1) 2018/05/22 07:22:33 executing program 1: r0 = socket$inet(0x2, 0x4000004000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000010c0)='S', 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/22 07:22:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000000540)=""/185}, &(0x7f0000003bc0)=0x78) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x4010, r1, 0xffffffffffffffff) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0xfffffffffffffffc, &(0x7f00000003c0)={r2, r3/1000+30000}, 0x23b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r4, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) r5 = syz_open_dev$mice(&(0x7f0000003c40)='/dev/input/mice\x00', 0x0, 0x200602) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000300)={0x400000a8, 0x9, 0x7}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) ioctl$TIOCEXCL(r6, 0x540c) socket$inet6(0xa, 0x0, 0x8000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff, 0x0, r8}, {0x1fffc000, 0xc5a, 0x4, 0x9, 0x3, 0x8, 0x7}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000cc0)={&(0x7f0000000380)=[0xffffffff, 0x8001, 0x1, 0x2, 0x6, 0x4], 0x6, 0x0, 0x101, 0x3a, 0x9, 0x80000001, {0x101, 0x0, 0x5, 0x1, 0x20, 0x0, 0xfff, 0x1, 0xfff, 0xfffffffffffffffb, 0x80, 0x3ec, 0x6, 0x3, "257343ab5d4aeb1fbfa4f12e56c5ed22d9a2ee73a834b52a413ca6565f6cce05"}}) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r4, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) write$binfmt_aout(r0, &(0x7f0000000780)={{0x1cc, 0x12bd, 0x100000000, 0x3e, 0x345, 0xff, 0x198, 0x7}, "585386d8aec2c0d67c488edb5ad3ead12309d67a537645ec8b95f6a02b41c3548cc0aaeff6f0a074f0b0abcd682281db7fd4fbdef1eca7ffe80bfc62bd3109ab2b68c5369154d3a8d1428a47ae39bf13b26a91dc8a1029fe02638427906ef203b906981e08edac291847665b9eebbdb83acff237d94e538b8855008d249cc4fd7af997acbbae902bc13486639a3784f5d3ca93edebb88d3767b0dca52929196643d7f3352cf5d7e0376ba2b4a2889bead0d2859bda11c96de8ffa75e43bdeb9251a7d524c287e587f96b320164328aa8e13079d9361ba8d9c26c81e3b6ce4fd8d5fa93a0f20c50273c", [[], [], [], []]}, 0x509) 2018/05/22 07:22:34 executing program 0: r0 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/217) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0xffffffffffffffff}}) 2018/05/22 07:22:34 executing program 7: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@loopback={0x0, 0x1}, 0x31, r2}) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00006e9c68)}, 0x0) 2018/05/22 07:22:34 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[], 0x0) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x801}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00'}) close(r0) 2018/05/22 07:22:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x34}]}) 2018/05/22 07:22:34 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4ccf909bb03feb2d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={r2, 0x7fffffff}, 0x8) write$rdma_cm(r1, &(0x7f00000004c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000180000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYRES32=r3, @ANYBLOB="00005d000100000000dc4900"], 0xec) 2018/05/22 07:22:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x274, &(0x7f0000000340)}}], 0x1, 0x0) read(r1, &(0x7f0000000180)=""/153, 0x447) 2018/05/22 07:22:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000680)="c626262c8523bf012cf66f") fallocate(r0, 0x2, 0x8, 0x1000a) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x18) r2 = accept$alg(r0, 0x0, 0x0) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00bb370f38ad377c36980fd5f67e87b1c57ac3d0ce0d16b474f4b9e1fee7d9dd50878a7c9f8437673b28345e4e8bb10458763d8f536788b479062b32f0223d1123e2c3f546b368c163b7dee601b2a691dab9"], 0x12) recvmsg(r2, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x0) 2018/05/22 07:22:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, r1}, 0x6) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r3, &(0x7f0000000100), 0x361, 0x0) io_setup(0x56b, &(0x7f0000000100)=0x0) io_getevents(r4, 0xfff, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)={0x0, 0x989680}) 2018/05/22 07:22:34 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 5: r0 = socket$inet(0x10, 0x200000003, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000040)) r2 = socket(0xa, 0x200000000001, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000340)=0x78) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x1f, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffff}]}, &(0x7f0000000300)=0x10) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002d0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 2018/05/22 07:22:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x8000000034, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/179) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000580)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2), 0xffffffee) dup2(r2, r3) r4 = dup2(r1, r3) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2f, 'io', 0x20}, {0x2f, 'memory', 0x20}]}, 0xc) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 2: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @broadcast}, &(0x7f0000000080)=0x80) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1ff, 0x800) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x3ff, 0x400, 0xff}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x101) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) timer_create(0x5, &(0x7f0000000340)={0x0, 0x10, 0x3, @thr={&(0x7f0000000240)="1634dbd68705cf50d268b3ac086815047e5d7ae04a6418fb315690dd303dbc8e25b77b1cbb942f41d5e5fe9f9ede10944937d8b1915fbe2d1990b1fcd38129115f11b6e298798f1c93f4f686c3f6ed3d91cb6dcf7ffe5fed07735636945bc2cc3bac70eeb323319a03706fd66191a7d36e30746cdc0f3a3ab3321205256fb39e044900045f82", &(0x7f0000000300)="5c763175f8b42a3e"}}, &(0x7f0000000380)=0x0) timer_getoverrun(r2) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f00000003c0)=0x5, 0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000400)={0x3, 0x10000}) bind$nfc_llcp(r1, &(0x7f0000000440)={0x27, 0x1, 0x1, 0x6, 0xd6c3bd7, 0x5, "ca6593501a1bc2d06a5c391b6ecb93ac0f361a886d9c53545c2543d0d5503e0c76ff6d28abee3ee545e117901b5f0c4cfec3dd1fe235a1e56e4de660fcfdc2", 0x2e}, 0x60) r3 = shmget(0x3, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x3000) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000500), &(0x7f0000000540)=0x4) getsockname$netlink(r1, &(0x7f0000000580), &(0x7f00000005c0)=0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000680)={0x0, 0x6f, "f85c48900a6e265b44554f90642952160bffb38c1cc7978145134107dc4c8f64f62a2f0a1dfa8b1163f0d62f8318952368f22e4c3914a62f5387e8525c684fd9daf2eda8c0f8e5779961dc0af2075060f8e69f19e3cfe229bb5f2a69ae090a3120cc0c74c8a17154e765765e0aaa95"}, &(0x7f0000000700)=0x77) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000740)={r4, 0xffffffffffffff85}, 0x8) bind$ipx(r0, &(0x7f0000000780)={0x4, 0x9, 0x4, "ad1c03f460bb", 0xeb}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000880)={r0, r0, 0x9, 0x400, &(0x7f00000007c0)="e162d6fdb56c91532195768a6ea294f4ccdb3603242c4be36985606b1920b2300721846fcceba2a55fee9b3c68aac4fa9a5146fa0297424f339e73b2849dfdf7ed7dfd789238d2a1a31120b290ae2e7463272f5caca2bffa609f3518d6b5c1e94216d88591654927f2b5e91048d654a04912a5d26e206dfd8b37775340692fb06daadd7ff3c3780f1be65fdf6cdd058176ae52e7d559cfbe856e36b4bae36d68d42abd92770e627626c189", 0x401, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x7fffffff, "28f099ec42a5d925bcd61fcf50d9fb3ac5c8ea2a38cddfb5df1f1e9e1dfe988180bc8f335b090bafbf59b4e4d1590207e38faffa6edfb840f9fa4eacec75aad26db2cd3336d1"}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x81) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0x50, &(0x7f0000000900)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)=r5, 0x4) bind$alg(r1, &(0x7f0000000a00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$BLKRRPART(r1, 0x125f, 0x0) write$cgroup_pid(r1, &(0x7f0000000a80)={[0x39, 0x38, 0x36, 0x36]}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000ac0)={@empty, 0x6, 0x0, 0xff, 0x8, 0x4, 0x1, 0x3ff}, 0x20) r6 = add_key(&(0x7f0000000b00)='syzkaller\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000b80)="4df6a0617981267516aa3a1f95896247d276b1ac44123a869a9da5042206668b99469750a444fda90c5f86d92399b0d8eb48aaf4b300aec3c89048bf73d426a4f51d3f1d3faec5be3782ede1c23ddfe7f9e164143ccf8c6628ac73cb56ee48060e0419753a4cf52ed0f066c87794c25df140974e37c9ae079618", 0x7a, 0xfffffffffffffffa) r7 = geteuid() stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) 2018/05/22 07:22:35 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x108000005, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="88", 0x1}]) 2018/05/22 07:22:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="c6e00c669400000025000000000000009500000000000000907a8d647460554fdcc99a22c987086c55862c4000454a23818b741d22b8129ab3e6bb7a54867eb6adf4f633cc0073a64047b6348ec8c3a2c5835fe239e67cd33e27ff6c739fe6a144ef23adff7f9c94dc21266cc217491be3ed1b1b60ca717d06a47525e10056b6c8afc553892a1068a818085b2d0d76d42a6eebcc0663f6520ae333c5f19c4b4cf1c5b516fe8d149145c1d00ba5736690e9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x1}, 0x48) 2018/05/22 07:22:35 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={'tunl0\x00', 0x48d}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x103}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a313a20ac70a9a5b3bdfbcda370b7dbd754b637ebd73963e8ebb61175c5f35e697b567b9c08b599df5b5a989e88b03ac7a74a4ba2cf6e4fb4d9dacf20b9570122c2a8c2cbfb5925916a5c060bf1af9444cd80e38f9863eebcc6f9e2084d71dac88fbc5c70fd0990b48ba8a022240b60a3d5bdef11283042b3ff07c472317149580d55e7d6bb3717d3012900"], 0xfffffe7d) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xfffffffffffffffc) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r4) [ 555.411211] QAT: Invalid ioctl [ 555.411914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 555.430489] QAT: Invalid ioctl 2018/05/22 07:22:35 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x5) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') lsetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='security.capability\x00', &(0x7f0000000440), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000004380)='./file0\x00', &(0x7f0000004300)=""/39, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xb}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 2018/05/22 07:22:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="76ad4ac0b5327b6363004f59c0f1485916e00bc4e3d1de32a891414bfb2b43512e6c4b3e438059c263fe9f2f9c44d282b4f38d622c7f2c6a991502518e6cfa6171be05948a79f8feb4c24b05f52cc33f7557668310cab392b9d3bbbeacf8cb122df1df0715e87d0e37274a42924ccd0a072e803ad74889999beea442fe3e87") ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000180)) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000280)=""/244, &(0x7f0000000140)=0xf4) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) close(r2) r3 = msgget(0x2, 0x481) msgctl$IPC_RMID(r3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:35 executing program 0: socket(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x23, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x7, @empty={[0xfe80]}}]}, 0x30}, 0x1}, 0x0) 2018/05/22 07:22:35 executing program 3: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x50, &(0x7f0000000200)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r0, 0xfe2d) ioctl$int_in(r1, 0x5473, &(0x7f0000000040)=0x166cbdba) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)={0x2007}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x76f, 0x8}, 0xc) signalfd(r0, &(0x7f0000392ff8)={0xffffffffffff0000}, 0x8) rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4}, &(0x7f0000044000)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xb6f0, &(0x7f0000000180), 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x800, &(0x7f0000000040), 0x8) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 2018/05/22 07:22:35 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x29, 0x1ff, 0x4, 0x80000001, 0x4c6}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 555.687432] binder: 32637:32638 unknown command 0 [ 555.699389] binder: 32637:32638 ioctl c0306201 20a20000 returned -22 2018/05/22 07:22:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) getpgid(0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) sendmmsg$unix(r0, &(0x7f0000000f40), 0x0, 0x5) 2018/05/22 07:22:35 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:35 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="e26cc478e2fb037f5e0a82b6de86090000000000000000") sendfile(r1, r1, &(0x7f0000000440)=0x8000, 0x200) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="6b124cdf85af0cb33fc853") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40400, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000dc5f98)) 2018/05/22 07:22:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x202, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000200)={0xffff, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x2468, r4, 0x2, 0x1ff}) ftruncate(r1, 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'tunl0\x00', 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0xa, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000140)={r6, 0x1}) 2018/05/22 07:22:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xffffffff) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000015ffffffffffff800100000000000000000000000025eb1bf96915ee57bc8a64a9ea64759ecabf3a851e32ed2df87e309b00a701a24209fe19740b54c8e881b232ab9415008f785cb5778584f50fc6807b2cc588623f0eeec38b0bd7d06661d7c49c6766c6125c32f640934fb3d3b06e952a1ffd3cdd78ac17e54f56d27bfebb62eb8d78c6a85838072d23fa6c008465c67da24eb210432cac6c2096539bdf7dc4f47e076ef382985c3921b0e0acfcf5ff0d56651f821017fd92f2428d558996b6089c61"], 0x20) 2018/05/22 07:22:35 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) [ 555.970904] QAT: Invalid ioctl 2018/05/22 07:22:35 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000180), r0, &(0x7f00000001c0), 0x800, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000680)='\t\x00\x00\x00pp%\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x80800) ioctl(r0, 0x2, &(0x7f0000000200)="ffd5eaebe1733e329094b166c4861c1c2f474a756358e737013d9099255cac92e1849a6af5cd823914e7e10e86e3189280e90796431e0e221040c02e5f9ae5a9ef8aaf55f1cd69ba9c618acbaaa7cf794b366a4b672923b453686abe01e4a6abc267a14c22cbff63dff3763a2fd32761615dc8003bec1796446f5b0c5d617b5ab08062b411a73d04aba0a62da4419bac98e091c7d036a0d42589b750b8a1dff234501f17e453fe3e9169d69e709e400e4f3fe79bc0e24615f6eca2d35164b183ec9f2b2e5f25a39b8ed9") getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000080)=""/178, &(0x7f0000000140)=0xb2) 2018/05/22 07:22:35 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:35 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x26) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, &(0x7f0000000140)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') munlockall() r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0x0, r1}) syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) accept4$unix(r1, &(0x7f00000002c0), &(0x7f0000000000)=0x6e, 0x80000) [ 556.000918] QAT: Invalid ioctl 2018/05/22 07:22:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0xdc) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x202, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000200)={0xffff, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x2468, r4, 0x2, 0x1ff}) ftruncate(r1, 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'tunl0\x00', 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0xa, &(0x7f0000000040)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000140)={r6, 0x1}) 2018/05/22 07:22:35 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:35 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="060000000000000000000c000001"], 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000280001000000000000000000000000000800000001410000"], 0x1c}, 0x1}, 0x0) [ 556.150944] QAT: Invalid ioctl 2018/05/22 07:22:36 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400080, 0x40) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000001c0)={@remote, @broadcast, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) ioctl$TCSETSF(r2, 0x40085112, &(0x7f0000000040)={0x5}) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x204600) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000200)={0xffffffffffffff81, 0xfffffffffffffffa, 0x7fff, 'queue1\x00', 0x68d}) 2018/05/22 07:22:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:36 executing program 0: r0 = semget$private(0x0, 0x20000000104, 0x10) semtimedop(r0, &(0x7f0000000000)=[{}, {0x0, 0x8}, {}], 0x3, &(0x7f0000034000)={0x77359400}) pselect6(0x40, &(0x7f0000000040)={0x19a7, 0x5, 0x5, 0x3, 0x7ff, 0x2, 0x0, 0x80}, &(0x7f0000000080)={0x2, 0x5, 0x8, 0x1, 0x1, 0x5, 0x400, 0x4}, &(0x7f00000000c0)={0xfffffffffffffe01, 0x9, 0x4000000000000000, 0x7d5, 0x5, 0x271500000000000, 0xb79, 0x3}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={0xc6}, 0x8}) semop(r0, &(0x7f0000035000)=[{0x4, 0x81}], 0x1) 2018/05/22 07:22:36 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0\x00') mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='esdos\x00', 0x1002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000340)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000ed6ffe)='..', &(0x7f0000000040)='../file0\x00') openat(0xffffffffffffff9c, &(0x7f00003e5000)='./file0\x00', 0x0, 0x0) lookup_dcookie(0xf34, &(0x7f00000000c0)=""/169, 0xa9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280), &(0x7f0000000300)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/05/22 07:22:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket(0xa, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/8, 0x8, 0x2, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0xffd1, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/251, 0xfb, 0x0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x6f3000) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000280)=0x44) 2018/05/22 07:22:36 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:36 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x381, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) 2018/05/22 07:22:36 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:36 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:36 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:37 executing program 7: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0001705f66696c657300") getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7ff, 0x2, 0x0, 0x80000000, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) 2018/05/22 07:22:37 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000000)="32074ac51bd30433098a940e9a81622b", 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="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", 0x5b1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) sendto$packet(r2, &(0x7f0000000040)="d7c578a042dedfe142cd6a230e54a39259d71ef83f0d9b239d86", 0x1a, 0x20000040, &(0x7f0000000200)={0x11, 0xf8, r4, 0x1, 0xffff, 0x6, @random="f9bd6d6ac89e"}, 0x14) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/22 07:22:37 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 7: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:37 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)="bbbd56d36665b74b8e2e22f41a6abccf0a7500dcbedc553dcdcdbd1843e98c61655165cbc65f5a889410e0d2f4a12f1507c2f5559f32d963bbd1e4f670a53760f51643c578d18a7e2a2a6d035473571d1ccd9ed4a9f637eb717f62a7418e4977ba1d44605bb9d03eb6989263e42879db24d62808e2b26262d49466ff183044835ff5fa395aec2ad648cb308d0ec07562d0c7cc43441c9c4d89798d4dc4d2639911b89c5f74eb", 0xa6) 2018/05/22 07:22:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 7: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:37 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = getpid() get_robust_list(r1, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000200), 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000000)=0xfffffffffffffe4c) 2018/05/22 07:22:37 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 7: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 4: r0 = memfd_create(&(0x7f0000000100)="5c25242c2c7d2eb0637f7573657577e4e4a19400", 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x33}, 0x4) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r1, 0xc0189436, &(0x7f0000000340)) 2018/05/22 07:22:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:37 executing program 7: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:38 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffff32, 0x1) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/129, 0x81}, {&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f0000001740)=""/108, 0x6c}, {&(0x7f00000017c0)=""/60, 0x3c}], 0x9, &(0x7f00000018c0)=""/221, 0xdd, 0x1}, 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x101, 0x3ff}, 'port1\x00', 0x21, 0x0, 0x1, 0x6d18, 0x2, 0x0, 0x6, 0x0, 0x4, 0x101}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000180)={{0x7fffffff}}) 2018/05/22 07:22:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:38 executing program 7: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:38 executing program 4: r0 = semget$private(0x0, 0x3, 0xc) semop(r0, &(0x7f000002efe2)=[{0x0, 0x9}], 0x1) semop(r0, &(0x7f000001a000)=[{}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{}, {}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000500)=[0x0]) 2018/05/22 07:22:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:38 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:38 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x4000000001) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x7fff, 0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000002000)}) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xa1, 0x40000) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/05/22 07:22:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4080, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="81000700050004e80700010005000300ff01"], &(0x7f0000000080)=0x16) getsockname$packet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000440)=0x14) connect(r0, &(0x7f0000000380)=@hci={0x1f, r2, 0x1}, 0x159) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x3, 0x1}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x0, 0x9, 0x10000, 0x7, 0x800, 0x0, 0x3b9, {r3, @in6={{0xa, 0x4e20, 0x7fff, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffe}}, 0x5a8, 0x1ff, 0x0, 0xbe8, 0x80}}, &(0x7f0000000280)=0xb0) r4 = shmget$private(0x0, 0x2000, 0x1b22, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) fcntl$getown(r0, 0x9) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x20001000, 0x2000, 0x4, 0x6, 0x80000001, 0x0, 0x6, 0x11f056ce, 0x1}, 0x10) 2018/05/22 07:22:39 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) [ 559.984352] binder: 412:414 Acquire 1 refcount change on invalid ref 0 ret -22 [ 560.003834] binder: 412:414 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 2018/05/22 07:22:39 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x40, 0x1, 0x6afa1d8, 0x2, 0x9, 0x2, 0x20, {0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x97a8, 0x8001, 0xb33f, 0x5, 0xe8}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x80000001, 0x4, 0x1, 0x1, 0xc1dc, 0x1, 0x1f, r1}, &(0x7f00000002c0)=0x20) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000100)=0x7fff, 0xe7042021) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000540)='syz_tun\x00', 0x10) sendto$unix(r2, &(0x7f0000000580)="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", 0x5dd, 0x0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2018/05/22 07:22:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 560.037207] binder: 412:414 Release 1 refcount change on invalid ref 0 ret -22 [ 560.059810] binder: 412:421 Acquire 1 refcount change on invalid ref 0 ret -22 2018/05/22 07:22:39 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 560.094121] binder: 412:414 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 560.126436] binder: 412:426 Release 1 refcount change on invalid ref 0 ret -22 2018/05/22 07:22:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000140)={0x6, 0x9, 0xbf}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$UFFDIO_COPY(r0, 0xc00c55ca, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 2018/05/22 07:22:39 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x7ff}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x40, &(0x7f0000000180)=""/64}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r1, r1, 0x1, 0x2, &(0x7f0000000200)="a3aaf3e063dd784ef2eeb1ed5400d1e84a9178e871931438b88540ad52d7080e1a3bcf2c7dffdefcc0584e4d0962ecf40677ee4270fb357feddbcd10e683f8b0d56e0c976b8e713e38bdbccdf969e0028bda6ac52859f70b9369baa429708a026d2d009f651b2a57b07348533eeda2f7c77255e1d59a45ac3f0b949bbceee5b919bb447d", 0x800, 0x6, 0x40, 0x2, 0x80000000, 0x6, 0x777, "388f6156d691f789ac758b038d0b36ce92c3eafecef907bc947c1f0bc891b76503d827072474479f8b2f25f251a580c66679cfd4de37c910df63adab6a4ab82f04890698c1c3f73f1d334144fb45694b28ee373b87bf30cfd9767e6f1daf143d3a29f48b1cfd499bec467269186fd127e819f51e48fa9404853a3f824f292c57c655f22de1547e2a5ee170827d51e4ec6c234a9cbb9f6d6096edff5420252faf53157d4a5b2e142ddab292a1419f74284b539f8490293142bd449e4f3e4c6cc8afee0d1e3a"}) 2018/05/22 07:22:39 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:39 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x10800, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="400000ffb3"], &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/22 07:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x266a02, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x3, @loopback={0x0, 0x1}, 0x8b}, @in6={0xa, 0x4e20, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x4, @empty, 0x7}], 0x84) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r3}) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x842, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)="6e7f00000069625f932cfb8174c8948a485ad869d8d2fb7ca90ec83d461b115cca9402ed0521f490b72be0933050617d4c2487cf22a219b35158d607c48d1a1a87f61c3876b760feec67670bdfad77ba6032cec829d2a3f32021aeea105d678d120c0a5846ffacef8f09080e7e31a40f092acd67d4d7186e37617700609bb3ee94") fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x2, 0x2, 0x8, r0}) sendfile(r3, r3, &(0x7f0000000080)=0xffffffd, 0x7fffffff) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7f33, 0x29612ca5f49224ed) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xbdcf, 0x7fffffff, 0x58}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r2, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f0000000040)={0x1d}, 0x10) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x6, 0xfffffffffffffdf6) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 0: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ftruncate(r0, 0x1) pipe2(&(0x7f0000000000), 0x800) lseek(r0, 0x0, 0x3) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4800, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000000efcc)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}, 0x1}, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 2018/05/22 07:22:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x801, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000680)="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", &(0x7f0000001680)="c28e48b63fc51068b1fd985995f61dbf609de5052e5789838f720ca9ed9cd18047ddc5ec1ce42e7a66a92b0df34581e31a0d5e16f00f621cf8e0506a9f36d8a7e0f1e21155b9b5d9e1a2ca1db2b25ceb8e0530043e389b00bb959431109354ebaeee7b4ab9d3a1c53134aa801ddfef5f86f9ff7c5af2eb3415013f4c2b572e5efabf36f14e05d244a0debd3139d82620453cc441d2e5a1dcf179d41b53f8e0b64c68e1190c4f250fc350bd87f4eca48a4a1589ef5091545a11a47b723267fee7290d67f92bea473b4330cbc7f9d760f321bbd82af5c9029f23cdb4c5ea2cc7863ac8307ee72c103854e4d62d42d6f36eb42445240e8e5ec439e22d8f671f8c72bb99ee7328578931b954c6f3c287b7168cd944e812ddbea8557ccef38a46a59d9d30975830b8217251e9b7ae55c487cf2a6a1f1052b59b6de979c8f67f0fad0d1b0c24d19864b505d29f20f2bce70ae296338bf5794e4a301ab715e94c3c9fd92b84084771bd9fefd27b8e426e5b8b05bf89b81098d9eb24088fc62e5ae13c4b3a290b258e0525c9b3fd867be0ac01e0b5c67b22a2bae991461dc96cb77209a9ba3700acdca3a10cf3056e094b598089f9f230cfc7a0171135d177c7ff9e59b9227608065aabf2fea0caa2ebb810db37ba27f1f7dcc31aa9d50ae8f1b284ba077852c90c7e711cfa357739987e857c1edafbdc20fc375c2e7ff083beb9144d1f6af1d5f7aa322954ed56eb16b7eb90bcfa7a5b9630f58e689a40ea213445df02cb088a1a8a9734fbcb5284456901713812e522c18edc4c9b43da2cfa7f5e9a455cae0578b260461e2bcee188dcd67745a51ce7ebb19698e22aadca2e472f93cc70dfe9caba8ab6fb2db310aae069fc0077108a369efa402f62de257cdf40dbd2e38575d4f5c65351ce339db974dcc556599940fc34f1211ea9036726b1b954e1d297d7d0dc5893ca34103a7c1e135e98aeea3b3ee577a45ca187377e9ca0452e77743ceaa268654946e05294a7eefddfb321f263f845df0800e017ce43e66fd5f6f1193ffdaf08ba87933b21c9d9a5ff443d939bf21f4d0e730a928d915f3bc987bc14e9702146207e3d7778ab5e9e9734f4e12688ff8c3bf968c91e7eb5d2baca617487807730d2996507e3f9943900bda43280e48d3657c87f186e713187ab0143630aed9f14a18019086fd172cd4f69a1d3130611258000595d49a8684932df948f10423bc85237f1a18db6fe4520a6b5c7fca878320b77fca69bf186079a310e68baefc06d91191a8c7b40660f063d0295c88990343ccb96291dc821eae0637d6ad860eaf6f4bdcaf5240dbc9bea145d8d511f2688ae8149fa86b8beed891db731adfb856776d730caa5da27a604b72f85d5c48d8c6dd90c0eac76e4393808bf4781681d0e9206875bf87b44c7259b7113bbf9e6414ed751fff293d3835f3744ea703f932c4014e113dee611e835bbb78bdb8988337bf1f60577170417c10d3cfa3bd17bfe2d069b53822e59ec8de2bc58514a9a2106dc8157ba68b39cb25387b0b1f101876cce021896f3ee5062a6dd64604149cd949104d8c1831e9237413f997e46306512d7eb6f1434392543ad3a2ac005d1a462922112d5d29600112930d05294dc74fe5efb41109c62be1a7f54cff7973c5bb06c45140cd9dbab6bb4437b4828cfae5f0bad1f05f3406790fc4a681c6ff9cd21a188f93c54a1890cc9fe2847dbd521b56192f3daf0b5be6499a7edd0a73bb4ca55fdada9e5b6fa898a2d037a9b17df5ba076c582893b3a93d148bb7c72893cb8966ead0db2cf269abc7342ef138db0755f12cd1e06f26b31497283d0e8e4efcdc84b60af7e2c3f5fa9f8a22e44efd1795c438aac6515e3cbe300a0f280b184fe0d1d6997699e2fe37efbfc55005255a99918a220930db2e0efe723a3d13e0ffa766090a9f52fb8d71ebbc7d48188694cd2097c832022b5c62b2265227dd26b5f7aa00aeeca06f3f0a422c2ab3835a33ec89a050c6a0c96beb55bb0b4dfcb333d7d7769b341230dbf5de35ebd96acdddcca74b4e67fa62b150d875682594e50afb868f6c76e3c7346248c5aab58374b04124315b03a99c22fc190fbd1c00ee199b1082de461f74ff0730262dd9015cdcde4e278ee10f5bc388b1ff58c0acf54abf1ca948ea4731c9d103c211b66697df9828b93bbca4eba3af84ac461169c3c32be599886dcf37b88e87b1f7f554f5bc7fe92f03bd72431f78e2ecd66bcd15caa856bf001909f4dec8a2b8108108f438b866916e4db30c3cb5591b7f63b41a02dfa990a36f3166ce925da576236fd7f23dc893f76bbde64748faa97505cb4045b42d780948838e3c303265d369d7b0072face223947b694d5acfc730c46593b80bf1f546dbf06bee945660da2b566370240950e5da29186b49dc243a00663416ee0a336380411dd6c55a6059db2bf60279b287d2b00947f20814f4d607cfc9add262518e8463baaeb6091e38fad340c4094f219c9472011cf4443f9f919ecc63913f9ef51c9bc60717b06671e5cb92f5f5911d087ce0b0318e879589015338a1f817cc7e75d535a83392191a03738519ec4b234893b9b581530d64cc7bb0a1ab0c4ab3cd6f2d2aebb2492a8697e9c2cfd214bed793ccb331f3545a7f3924c48daf93476c8b401ca803e9781cb84ecb7ff3fc7b710285e48b65ca8aa3f4726cb476e3d39bda2fb3d0e6c31d9db3f2e2e609fcd83e6a96b03c7c3a319dee7227a0d8f64658bd7779a12d1a852745e9b02d598623fe87b72e7aed06809dee1c461ad63d03f038c5a69a46f6496c52870b013785d26565ab9d8098ebac8836f1e1edbc7a5164731f484234343fb8595203a62772b3183f4dcf960471145c25ae0728ab7fea65bed54e06fb3a2008fa5f7c890aec7df6ef7f5d26df9d289c16cac68e8c850d83fc4415228a54324b0c860379d62972c02801f831b1435f252ae19d103a7f29795808b8ccb1792b4dcdc88d7ff933c994dcbaf0a39da1a1fb339d2481ec7b5d992ed5869435b57610d5c0f46cb658cef40176e3cc3ca03f99767c01e7659d84d9404a4e731327c27ff8fa2edc9da5e7911e2d4f2cc3c3a9795ac9cd9b3cb8fce1486f6588df245ac2a6e2bad0076a64941bc9a42efa4889f8db6fec8fd6ea29933ffe75c0d8828cb40db60e73d37a246fae2f1cef84f07b5f37a2cccf2eaf8f1ae8e3e7ddc30ecf166fe709019aaeade5efec6ca3120b64f41dfd1a0fa82cc99f189b2c63ec654b3fb2991e2b21fc55c48ed73097d32f74307f3e666a833e400e480d5612714ff6f3b80cdd30311457bd9d34362d478f3a3a0ad633d5dc37b7f723d2b0be4acf7c49f87bb5966f5c0bbdeb6925bd00e118bcec9a2c2ebf8828d63092c20864042387b6d6932a12f983da89df17151bcb3e87640e72fc8472d734d9471f276e45ba330cfb95fe3288e6189305cb918087e44e20aa953b27417356be3908f175fe5a41532d99afbffb9090adfb9168ed399393e76b605a734ed6ffe42871a81872653237a6dfe08c426b3c192489eb8b632671266a6a8567b705fe9f51fff3b2928e2f521a88c6bbf6edf9a1a9205418049cad988787d207e1076b5d698d89bda722aaedce2a7385dc2b51463716097a7d03294bf8a3f45825fc9e9a2561879e2c8bc6b78a3f9de055a3b5a9e59dff0e1dc82df5a9ea89ba8278cadce5867a518737939c0e8c5b589f5fe734e368b52f5f2ba1f80f94511649c1ba93396020e730ea131c5913370b3d8f18558db9a1958c903a528d552faf208d701eaf01a1794e164b0d67885915f732ff46d178c07abd6ae524aa1bc06d5c024e214bc27d0aabd5b206be2a8e6ee0e64001aeec969317e99dee87af762b1d84bf66348fd71e534a7964ebd826b33242e866c7f4ae48480bdbae399e358e012bab7657a7ad035de32f7b4546f82b5f48141bee8ec3c76c1bd8f91fb5c58fa8d826591731ff7862c7339053579f4c7c851325018887d237900e0ada5df15dbf6f5b5fcc07ee9bf72100df5a7c877e7c959abda714e678097bc37974495e4d7f709c9981b360fdcd342814febb8528687868a739889875c68b5580a60e2488223e68826157552a6a9ede3b162ab65d7c1e4081d3c133405b61594182c3a6754b3bc725ab903ae18c8058472fcd863406ee2aa454dc5920a3781121314d6480ddee66c2078fb39ff7075350da407b2c6919fda756f8c36e2368b24c32dcda1697c716e2c3a740aac6afa06481a1c27faee81e9e8d59ab925cdaae87d7d85c998a772c2f75ff52e4028b18d73437c0ce6429ceb141f92834e79c13ca00706e49aea5f65d24dff4c221bd6ef682cf65b110498621fa701f291bf6beaf00bdcaee136c694ba6a9a0fa3779c7b4eabada43b8fb888fd9a79341c278477b49dfd43e747b34fcbdaad788f638ddddf24af5552b691235c9e5cb658a7accbf9cd0b3662fc3c5c234c3364fa8716913ab1993f0a37384af987ac1d22d83ead6ef1a82dc4a1aa875f36b5f6fdc2228d38120a40c28f0d5acc39aae58a9ba75f221a97818bcc1cb003acf3dd06837042fad9c9603d0b5234a3abcaf12cb98ff52e53b56c4ee23bd270777e0044836851b5f69d807a5a02ca4ac654cdd4af1022db9a150f2fd1f06bd902ec2e9b8a7e8160030fe43dc79cdfd98466a005ee7afc2f2f4952cd0a24b0a83cf03d40a99a2c1e49eef5f3ffea79539bb731cabbfabf6a608ea7345cfbfcab1c19e7273855b9a8727610d30fbd3313054f1f906131801432038eb7f6471d02786aae124e1e39cb2420b23869897137b81623394df21fd93c7daae2d51c23977b96e3e3cce0b10073c1d2feb32f8d75abc957ddfb68c3371ac7753600ec350a77706b8f33e63354376890f61e4d84f8ad9d358eb9f9bad2cef6e137cb59a576024986b8cd1cf74adb6d1d08115790488d344f45bbdc7ba3dd224c832494794a19fd709a1a9d4158d9b88c2d32eb580f84ac84b65a18807df05ef23337cd5d834d756d96d933831eb4fd557d117c35b99e95f7661c9c9295374b1cc32334bc57d5bd65107a2388a036e210e36ce499203572d273cccd5d59ebeb5772646d17b4c8a6639cc5c242da86878895b546e3d145d63eb4d220d3362d3b0eb846d2b4920833904742eea5c4913ee9d053e25b3d94fbb827d38bbf40d208bb9c97cf5bbe3604383f103d5b4bcf978eae7b373bca986e27a24eb7d0bcdd22a309c447e9f70fbb6dce7a76b66ee5be0304ee88eacf84ac8d9214aa9ad1527b50d7aa6d195fa5262d991b97d9de81234898c8efb544d2b8a12d659816c45611d01a456e7adc7cf12fd75b4d172c3d1d2c83bc6f8d00f6362049d8c70c3201077d2dd7b94a8ec57aa946d8e8509288302081409199972e32ff083d39569db636882299c17fe1ac7c9b7ad65f976c5f9789281658d86822c6ea1fa07052db55a330f31e3f54119e35b755db1d8353f76c65b2742eb7de08967a13ade79edcef95b65a862120e5be7471c8335381d6461279d65425ac39f9a9397ec23f1ed50de30bf3f5038a972dd13c62c2ffaa092ec7fbba871123f77568cff439cfa8bbd976cbeba977e357e37f9560f8085f4233eef6b3c6f85bee472e4bce00fb8ae8727475fa4c0c8a633a32bedbb04d76bef205b3ba611ba4d175c95f7b8c3a70165c2c061eb4eb8631dab59c6e0e1799898529108349d2e325a6d4cf2a3f1e8531f4b2532c70f17a057161c653300c1c439a91fe9b7b5cb2f72cfa09634092bb1e886a68ebdae6079be0b4eb"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000100)={0x7b, &(0x7f0000000080)="726a6d8263262854f3d3a700341b536f0cb4d771b7a015416e6fe5b9f0cc1a9b05fcee6d358a6891f37441d41ac0b07c0a5d67386d74da5f81314ba882a67c28779dff6193b9bda439022ce1d9a8748bb22d441201e87055638fd60f7c89333b255bdd90fa986296dcace3451185a56600aa24c22cd2cc88e996be"}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000300)=0x8) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x805, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @loopback=0x7f000001}, 0x10) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3e, 0x80002) openat$cgroup_subtree(r2, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000300)={0x3f, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e23, 0x4, 'wrr\x00', 0x10, 0x7fff, 0x1d}, 0x2c) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r3, 0x37}) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x12, 0x21, &(0x7f0000000280)="06326fdbae8895acb3aa9ceab47341566d2750c92f3a3140c570c546dd13a3f344"}) sendto$inet(r1, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x0, 0x1, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x0, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40d) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000300), 0x189) 2018/05/22 07:22:40 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x0, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r1, 0x0, 0x0, 0x7) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 2018/05/22 07:22:41 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x0, 0x0) getsockopt(r0, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:41 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:41 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000000c0)) 2018/05/22 07:22:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) dup2(r3, r2) 2018/05/22 07:22:41 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:41 executing program 0: r0 = socket$kcm(0xa, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x6, &(0x7f00000000c0), 0x69b) 2018/05/22 07:22:41 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 562.197823] FAULT_INJECTION: forcing a failure. [ 562.197823] name failslab, interval 1, probability 0, space 0, times 1 [ 562.198219] FAULT_INJECTION: forcing a failure. [ 562.198219] name failslab, interval 1, probability 0, space 0, times 1 [ 562.209274] CPU: 0 PID: 582 Comm: syz-executor3 Not tainted 4.17.0-rc6+ #63 [ 562.209298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.238033] Call Trace: [ 562.240645] dump_stack+0x1b9/0x294 [ 562.244281] ? dump_stack_print_info.cold.2+0x52/0x52 [ 562.249496] should_fail.cold.4+0xa/0x1a [ 562.253573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 562.258692] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 562.263806] ? memset+0x31/0x40 [ 562.267111] ? find_held_lock+0x36/0x1c0 [ 562.271223] ? check_same_owner+0x320/0x320 [ 562.275555] ? rcu_note_context_switch+0x710/0x710 [ 562.280486] ? graph_lock+0x170/0x170 [ 562.284298] __should_failslab+0x124/0x180 [ 562.288557] should_failslab+0x9/0x14 [ 562.292361] __kmalloc_track_caller+0x2c4/0x760 [ 562.297044] ? lock_downgrade+0x8e0/0x8e0 [ 562.301195] ? snd_ctl_ioctl+0x25d/0x1120 [ 562.305369] memdup_user+0x2c/0xa0 [ 562.308912] snd_ctl_ioctl+0x25d/0x1120 [ 562.312890] ? snd_ctl_elem_add_user+0x170/0x170 [ 562.317662] ? __fget+0x40c/0x650 [ 562.321121] ? match_held_lock+0x881/0x8b0 [ 562.325360] ? expand_files.part.8+0x9a0/0x9a0 [ 562.329946] ? kasan_check_write+0x14/0x20 [ 562.334192] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 562.339132] ? wait_for_completion+0x870/0x870 [ 562.343722] ? snd_ctl_elem_add_user+0x170/0x170 [ 562.348485] do_vfs_ioctl+0x1cf/0x16a0 [ 562.352385] ? ioctl_preallocate+0x2e0/0x2e0 [ 562.356797] ? fget_raw+0x20/0x20 [ 562.360341] ? __sb_end_write+0xac/0xe0 [ 562.364325] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 562.369860] ? fput+0x130/0x1a0 [ 562.373142] ? ksys_write+0x1a6/0x250 [ 562.376948] ? security_file_ioctl+0x94/0xc0 [ 562.381381] ksys_ioctl+0xa9/0xd0 [ 562.384847] __x64_sys_ioctl+0x73/0xb0 [ 562.388764] do_syscall_64+0x1b1/0x800 [ 562.392654] ? finish_task_switch+0x1ca/0x840 [ 562.397166] ? syscall_return_slowpath+0x5c0/0x5c0 [ 562.402102] ? syscall_return_slowpath+0x30f/0x5c0 [ 562.407041] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 562.412417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.417278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.422469] RIP: 0033:0x455a09 [ 562.425746] RSP: 002b:00007fd300e7ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.433464] RAX: ffffffffffffffda RBX: 00007fd300e7b6d4 RCX: 0000000000455a09 [ 562.440731] RDX: 00000000200001c0 RSI: 00000000c4c85513 RDI: 0000000000000014 [ 562.448000] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 562.455278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 562.462554] R13: 00000000000002fa R14: 00000000006f8810 R15: 0000000000000000 [ 562.469859] CPU: 1 PID: 581 Comm: syz-executor5 Not tainted 4.17.0-rc6+ #63 [ 562.477005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.486365] Call Trace: [ 562.488961] dump_stack+0x1b9/0x294 [ 562.492583] ? dump_stack_print_info.cold.2+0x52/0x52 [ 562.497770] should_fail.cold.4+0xa/0x1a [ 562.503305] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 562.508400] ? lock_acquire+0x1dc/0x520 [ 562.512361] ? perf_trace_lock+0xd6/0x900 [ 562.516500] ? find_held_lock+0x36/0x1c0 [ 562.520562] ? check_same_owner+0x320/0x320 [ 562.524872] ? rcu_note_context_switch+0x710/0x710 [ 562.529790] ? graph_lock+0x170/0x170 [ 562.533577] __should_failslab+0x124/0x180 [ 562.537803] should_failslab+0x9/0x14 [ 562.541590] __kmalloc_track_caller+0x2c4/0x760 [ 562.546246] ? lock_downgrade+0x8e0/0x8e0 [ 562.550376] ? snd_ctl_ioctl+0x25d/0x1120 [ 562.554510] memdup_user+0x2c/0xa0 [ 562.558036] snd_ctl_ioctl+0x25d/0x1120 [ 562.561997] ? snd_ctl_elem_add_user+0x170/0x170 [ 562.566745] ? __fget+0x40c/0x650 [ 562.570186] ? match_held_lock+0x881/0x8b0 [ 562.574410] ? expand_files.part.8+0x9a0/0x9a0 [ 562.578978] ? kasan_check_write+0x14/0x20 [ 562.583201] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 562.588119] ? wait_for_completion+0x870/0x870 [ 562.592687] ? snd_ctl_elem_add_user+0x170/0x170 [ 562.597443] do_vfs_ioctl+0x1cf/0x16a0 [ 562.601320] ? ioctl_preallocate+0x2e0/0x2e0 [ 562.605725] ? fget_raw+0x20/0x20 [ 562.609165] ? __sb_end_write+0xac/0xe0 [ 562.613133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 562.618652] ? fput+0x130/0x1a0 [ 562.621918] ? ksys_write+0x1a6/0x250 [ 562.625706] ? security_file_ioctl+0x94/0xc0 [ 562.630102] ksys_ioctl+0xa9/0xd0 [ 562.633543] __x64_sys_ioctl+0x73/0xb0 [ 562.637417] do_syscall_64+0x1b1/0x800 [ 562.641290] ? finish_task_switch+0x1ca/0x840 [ 562.645774] ? syscall_return_slowpath+0x5c0/0x5c0 [ 562.650688] ? syscall_return_slowpath+0x30f/0x5c0 [ 562.655605] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 562.660959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.665790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.670966] RIP: 0033:0x455a09 [ 562.674137] RSP: 002b:00007fbb6fe58c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.681833] RAX: ffffffffffffffda RBX: 00007fbb6fe596d4 RCX: 0000000000455a09 [ 562.689089] RDX: 00000000200001c0 RSI: 00000000c4c85513 RDI: 0000000000000013 [ 562.696342] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 562.703597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 562.710851] R13: 00000000000002fa R14: 00000000006f8810 R15: 0000000000000000 2018/05/22 07:22:42 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r1, 0x0, 0x0, 0x7) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 2018/05/22 07:22:42 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000000c0)) 2018/05/22 07:22:42 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:42 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:42 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:42 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000000c0)) 2018/05/22 07:22:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r1, 0x0, 0x0, 0x7) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 2018/05/22 07:22:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:42 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f00000000c0)) 2018/05/22 07:22:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:43 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:43 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 2018/05/22 07:22:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) socket(0x1e, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5450, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) dup2(r3, r2) 2018/05/22 07:22:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r1, 0x0, 0x0, 0x7) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 2018/05/22 07:22:43 executing program 3 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5460, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:43 executing program 6: openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) 2018/05/22 07:22:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:43 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) fallocate(r1, 0x0, 0x0, 0x7) 2018/05/22 07:22:43 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:43 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) dup2(r3, r2) 2018/05/22 07:22:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40049409, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5452, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:44 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) 2018/05/22 07:22:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5452, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:44 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) dup2(r3, r2) 2018/05/22 07:22:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 2018/05/22 07:22:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc020660b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x80045500, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x41, 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000080)=""/114, 0x72, &(0x7f00000002c0)=""/4096}}, 0x68) 2018/05/22 07:22:44 executing program 7: socketpair(0x18, 0x7, 0x4, &(0x7f0000000040)) 2018/05/22 07:22:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:44 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:44 executing program 1: r0 = socket$inet(0x2, 0x805, 0x0) recvfrom(r0, &(0x7f0000000000)=""/3, 0x3, 0x0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x80) 2018/05/22 07:22:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105517, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:44 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/22 07:22:45 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) dup2(r3, r2) 2018/05/22 07:22:45 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 2018/05/22 07:22:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc020660b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:45 executing program 1: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0) 2018/05/22 07:22:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0505510, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:45 executing program 4: socket(0xa, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:45 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:45 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5451, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:45 executing program 4: socket(0xa, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045516, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:45 executing program 7: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="0001705f66696c657300") getdents(r0, &(0x7f0000000080)=""/162, 0xa2) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 2018/05/22 07:22:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x800455d1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:46 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:46 executing program 4: socket(0xa, 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) 2018/05/22 07:22:46 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCRTMSG(r1, 0x401870cc, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='dummy0\x00'}) 2018/05/22 07:22:46 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$void(r5, 0xc0045c7f) 2018/05/22 07:22:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000001800650002001000000061120000000000000c020000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f0000000100)=""/195}, 0x48) 2018/05/22 07:22:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:46 executing program 1: getpgrp(0x0) r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/104, &(0x7f00000001c0)=0x68) 2018/05/22 07:22:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5451, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:46 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:46 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000640)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) 2018/05/22 07:22:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) 2018/05/22 07:22:46 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5450, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 566.892551] IPVS: length: 104 != 24 2018/05/22 07:22:47 executing program 7: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/146, 0x410e}], 0x3f2) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, r1+30000000}}, &(0x7f00000002c0)) 2018/05/22 07:22:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x4020940d, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:47 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) 2018/05/22 07:22:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x4020940d, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:47 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) socket$inet_sctp(0x2, 0x0, 0x84) 2018/05/22 07:22:47 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) 2018/05/22 07:22:47 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551a, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551a, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2=0xe0000002, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/22 07:22:47 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:47 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 2018/05/22 07:22:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045877, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:47 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:48 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:48 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) socket$l2tp(0x18, 0x1, 0x1) 2018/05/22 07:22:48 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') close(r0) 2018/05/22 07:22:48 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) exit(0x0) 2018/05/22 07:22:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0505510, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 1: r0 = socket$inet(0x2, 0x805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980), 0x0, &(0x7f0000000000)=[@prinfo={0x14, 0x84, 0x5}], 0x14}], 0x1, 0x0) 2018/05/22 07:22:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40049409, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)) 2018/05/22 07:22:48 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:48 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) 2018/05/22 07:22:48 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5421, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:48 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x800000000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000d28000)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x403c5404, &(0x7f0000ff0000)) dup3(r1, r0, 0x0) 2018/05/22 07:22:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x80045500, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5460, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) socket$inet6_udp(0xa, 0x2, 0x0) 2018/05/22 07:22:49 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc00455d0, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551c, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) 2018/05/22 07:22:49 executing program 1: ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/22) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000000040)=""/143, 0x2000ffd5) 2018/05/22 07:22:49 executing program 7: r0 = socket$inet6(0xa, 0x202000000802, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/22 07:22:49 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0405519, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 7: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, r1}}) 2018/05/22 07:22:49 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) r4 = dup2(r1, r3) connect$rds(r4, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) 2018/05/22 07:22:49 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) 2018/05/22 07:22:49 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:49 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 7: syslog(0x9, &(0x7f0000000040)=""/143, 0xff95) 2018/05/22 07:22:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)=' ', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) listen(r0, 0xffffffffffffff7f) accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) 2018/05/22 07:22:49 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) dup2(r1, r3) 2018/05/22 07:22:49 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 2018/05/22 07:22:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045878, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:49 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:49 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x2, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000}) 2018/05/22 07:22:50 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) 2018/05/22 07:22:50 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x2, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0xa8) 2018/05/22 07:22:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x81785501, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:50 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2018/05/22 07:22:50 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:50 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:50 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045877, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x81785501, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:51 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0xda, 0x4, 0x100}, 0x2c) 2018/05/22 07:22:51 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/05/22 07:22:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551c, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5421, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000003b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000", @ANYBLOB="000000000000000008001b000000000051562d71a567d5a7763cd4ee56a7e858ee4ac52a2c26e1041189b04a82e1c5d900b606f52058154b50a1d965cfc51f74e17e59d6683e951bab5163650e0a61df8c5ed8960aa40ccad88fbfa802767c2adae5ddf348b06544549c708164b34b959d9400d9d38e2ce0e930313790a7976ff6e4788357ef01d08c372d0424d4c3c09d488e9d16"], 0x2}, 0x1}, 0x0) 2018/05/22 07:22:51 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x800455d1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:51 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105517, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:51 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:51 executing program 0: dup2(0xffffffffffffffff, 0xffffffffffffff9c) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:51 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0405519, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8000000108912, &(0x7f0000000280)="552cf66fc777937f04f5ecc2cdfcd3667ca2eb26cb1beb4ff56f9a2ea8dc52136f739f952040128069d51d853f5d570788b67dfb1863b3218f492706eeea3ee29addcc8442ba560932f59c4c2c58f9ec9515e8eabe1c315347cf1bb5141f7d5f3e02bbd5ff81b1a7b6b0ca4dfe304508491334aa6bbfb05cca6a6cf7d9803b103e4b0505924e5960464b70e50c6fb8d32787fe1e72c615ccd1558d1ff3c7396f4972cde45884fc28badb419c655f8810") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:51 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:51 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:51 executing program 6: socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:51 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1300, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:52 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) 2018/05/22 07:22:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045878, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:52 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x1000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x80000) 2018/05/22 07:22:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:52 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:52 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045516, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x80000) 2018/05/22 07:22:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/22 07:22:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc00455d0, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 0: syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2018/05/22 07:22:52 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/22 07:22:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/05/22 07:22:52 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4, 0x0, [], "3acb3d22"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfffffdfd, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:52 executing program 0: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) 2018/05/22 07:22:52 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:52 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 573.268144] IPVS: ftp: loaded support on port[0] = 21 2018/05/22 07:22:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:53 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4, 0x0, [], "3acb3d22"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 573.396094] IPVS: ftp: loaded support on port[0] = 21 2018/05/22 07:22:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff00000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1400, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="661f4aeabff76763e6b0b17d53db87e42f18c6d17f644dcad32985b35085914fc8d5ecace6504098fff24b08c1879b13368d4caa50f50c2e5f3f26c43c6f737144a08d2850d569f647448cb6f253d926ca54bad59f288832313514143375e3c33a10f50d133bd8dfa63221f03e3a26b37b5ddccde228", 0x76, 0x1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/22 07:22:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:53 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x100000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 2018/05/22 07:22:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:53 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4, 0x0, [], "3acb3d22"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff00000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:53 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000180)="04010000008b00ddb846070000fd5b4c0293ff000000000000005375a41640939029ef0712af3970307ff198c31a2126f295133e05e0f1a6e7b3c1f62e03f08faba46f8f2575eb15ce43af6a8e2f3bd2d5a1b8ad51eea0675389f7fd54482c03ac4db0960000000000000000000000", 0x6f, 0xfffffffffffffffc, &(0x7f0000000140)={0xa, 0x200000800, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) 2018/05/22 07:22:53 executing program 1: syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6, 0x0, [], "3acb3d224487"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:53 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x0) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x200000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24201, 0x0) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 2: setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r0 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:53 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000100)) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x600}) 2018/05/22 07:22:53 executing program 1: syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6, 0x0, [], "3acb3d224487"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:53 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x40000002f, &(0x7f0000000080)=0x40000000, 0x25a) sendto$unix(r0, &(0x7f0000000080), 0x7fff, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 2018/05/22 07:22:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 1: syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6, 0x0, [], "3acb3d224487"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:22:53 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000100)) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x600}) 2018/05/22 07:22:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x1000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:53 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:53 executing program 2: setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r0 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:53 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)={[0x30]}, 0x1) 2018/05/22 07:22:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) 2018/05/22 07:22:54 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x9000000}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 2018/05/22 07:22:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:54 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 1: syz_emit_ethernet(0x6d, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7, 0x0, [], "3acb3d224487b4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfffffdfd, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfffffdfd, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) 2018/05/22 07:22:55 executing program 2: setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r0 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r4) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/91, 0x5b}], 0x1) 2018/05/22 07:22:55 executing program 1: syz_emit_ethernet(0x6d, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7, 0x0, [], "3acb3d224487b4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x100000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 7: 2018/05/22 07:22:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x100000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x200000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:55 executing program 7: 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x200000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 0: 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff00000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 1: syz_emit_ethernet(0x6d, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7, 0x0, [], "3acb3d224487b4"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:55 executing program 7: 2018/05/22 07:22:55 executing program 1: 2018/05/22 07:22:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x1000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 0: 2018/05/22 07:22:55 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:55 executing program 7: 2018/05/22 07:22:55 executing program 1: 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfffffdfd, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 7: 2018/05/22 07:22:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x200000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:55 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:55 executing program 1: 2018/05/22 07:22:55 executing program 4: 2018/05/22 07:22:55 executing program 0: 2018/05/22 07:22:56 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:56 executing program 7: 2018/05/22 07:22:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x100000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 0: 2018/05/22 07:22:56 executing program 1: 2018/05/22 07:22:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff00000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000), 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:56 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:56 executing program 4: 2018/05/22 07:22:56 executing program 7: 2018/05/22 07:22:56 executing program 1: 2018/05/22 07:22:56 executing program 4: 2018/05/22 07:22:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x1000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x200000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 0: 2018/05/22 07:22:56 executing program 1: 2018/05/22 07:22:56 executing program 4: 2018/05/22 07:22:56 executing program 7: 2018/05/22 07:22:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000), 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:56 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:56 executing program 0: 2018/05/22 07:22:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff00000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 7: 2018/05/22 07:22:56 executing program 1: 2018/05/22 07:22:56 executing program 0: 2018/05/22 07:22:56 executing program 4: 2018/05/22 07:22:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x1000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:56 executing program 7: 2018/05/22 07:22:57 executing program 0: 2018/05/22 07:22:57 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000), 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:57 executing program 1: 2018/05/22 07:22:57 executing program 4: 2018/05/22 07:22:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 7: 2018/05/22 07:22:57 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 4: 2018/05/22 07:22:57 executing program 1: 2018/05/22 07:22:57 executing program 0: 2018/05/22 07:22:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfffffdfd, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 7: 2018/05/22 07:22:57 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:57 executing program 4: 2018/05/22 07:22:57 executing program 0: 2018/05/22 07:22:57 executing program 1: 2018/05/22 07:22:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x100000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 7: 2018/05/22 07:22:57 executing program 4: 2018/05/22 07:22:57 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:57 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 1: 2018/05/22 07:22:57 executing program 7: 2018/05/22 07:22:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0xc0045878, 0xffffffffffffffff) 2018/05/22 07:22:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/05/22 07:22:57 executing program 1: socket$inet6(0xa, 0x1, 0x8010000400000084) 2018/05/22 07:22:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x100000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:57 executing program 4: add_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='\x00', 0x0) 2018/05/22 07:22:58 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000), 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f00004c4fe4), 0x1, 0x0, &(0x7f0000fedffe)="05"}) 2018/05/22 07:22:58 executing program 1: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) 2018/05/22 07:22:58 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x200000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfffffdfd, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x24}, 0x1}, 0x0) 2018/05/22 07:22:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff00000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 578.429228] binder: 1887:1895 ioctl c0306201 20008fd0 returned -11 [ 578.447867] binder: BINDER_SET_CONTEXT_MGR already set [ 578.500844] binder: 1887:1895 ioctl 40046207 0 returned -16 2018/05/22 07:22:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x100000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff00000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5421, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0405519, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x1000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x200000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x100000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0505510, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff00000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x100000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 6 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:58 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x1000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfffffdfd}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:58 executing program 7 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:22:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:59 executing program 1 (fault-call:2 fault-nth:0): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:22:59 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 579.359847] FAULT_INJECTION: forcing a failure. [ 579.359847] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 579.371952] CPU: 1 PID: 2004 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #63 [ 579.379149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.388509] Call Trace: [ 579.391108] dump_stack+0x1b9/0x294 [ 579.394728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 579.399908] ? update_load_avg+0x2d9/0x2570 [ 579.404223] should_fail.cold.4+0xa/0x1a [ 579.408301] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.413403] ? debug_check_no_locks_freed+0x310/0x310 [ 579.418631] ? rb_erase_cached+0xc6a/0x32a0 [ 579.422937] ? check_noncircular+0x20/0x20 [ 579.427166] ? __lock_acquire+0x7f5/0x5140 [ 579.431393] ? unwind_get_return_address+0x61/0xa0 [ 579.436313] ? __save_stack_trace+0x7e/0xd0 [ 579.440627] ? debug_check_no_locks_freed+0x310/0x310 [ 579.445823] ? graph_lock+0x170/0x170 [ 579.449613] ? kmem_cache_alloc+0x12e/0x760 [ 579.453925] ? __d_alloc+0xc0/0xd30 [ 579.457544] ? d_alloc+0x8e/0x370 [ 579.460987] __alloc_pages_nodemask+0x34e/0xd70 [ 579.465646] ? print_usage_bug+0xc0/0xc0 [ 579.469697] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 579.474697] ? __lock_is_held+0xb5/0x140 [ 579.478756] ? update_curr+0x1f8/0xbe0 [ 579.482637] ? graph_lock+0x170/0x170 [ 579.486424] ? print_usage_bug+0xc0/0xc0 [ 579.490475] ? account_entity_enqueue+0x3db/0x6f0 [ 579.495307] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 579.500847] alloc_pages_current+0x10c/0x210 [ 579.505248] skb_page_frag_refill+0x453/0x6a0 [ 579.509732] ? sock_kzfree_s+0x60/0x60 [ 579.513612] ? kasan_check_read+0x11/0x20 [ 579.517747] ? rcu_is_watching+0x85/0x140 [ 579.521883] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 579.527068] tun_build_skb.isra.50+0x341/0x1d50 [ 579.531737] ? tun_device_event+0x1020/0x1020 [ 579.536219] ? update_load_avg+0x2d9/0x2570 [ 579.540525] ? graph_lock+0x170/0x170 [ 579.544314] ? resched_curr+0x10f/0x190 [ 579.548278] ? print_usage_bug+0xc0/0xc0 [ 579.552323] ? dequeue_task_fair+0x9c0/0x9c0 [ 579.556723] ? debug_check_no_locks_freed+0x310/0x310 [ 579.561895] ? graph_lock+0x170/0x170 [ 579.565683] ? print_usage_bug+0xc0/0xc0 [ 579.569726] ? find_held_lock+0x36/0x1c0 [ 579.573776] ? print_usage_bug+0xc0/0xc0 [ 579.577818] ? find_held_lock+0x36/0x1c0 [ 579.581863] ? print_usage_bug+0xc0/0xc0 [ 579.585909] ? print_usage_bug+0xc0/0xc0 [ 579.589956] ? __lock_acquire+0x7f5/0x5140 [ 579.594184] ? debug_check_no_locks_freed+0x310/0x310 [ 579.599357] ? find_held_lock+0x36/0x1c0 [ 579.603407] ? print_usage_bug+0xc0/0xc0 [ 579.607456] ? debug_check_no_locks_freed+0x310/0x310 [ 579.612627] ? __lock_acquire+0x7f5/0x5140 [ 579.616861] tun_get_user+0xc04/0x4100 [ 579.620740] ? debug_check_no_locks_freed+0x310/0x310 [ 579.625922] ? debug_check_no_locks_freed+0x310/0x310 [ 579.631113] ? tun_build_skb.isra.50+0x1d50/0x1d50 [ 579.636031] ? graph_lock+0x170/0x170 [ 579.639828] ? graph_lock+0x170/0x170 [ 579.643613] ? lock_acquire+0x1dc/0x520 [ 579.647582] ? __fdget_pos+0x1a9/0x1e0 [ 579.651456] ? find_held_lock+0x36/0x1c0 [ 579.655524] ? lock_downgrade+0x8e0/0x8e0 [ 579.659662] ? kasan_check_read+0x11/0x20 [ 579.663797] ? rcu_is_watching+0x85/0x140 [ 579.667931] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 579.673110] ? tun_get+0x22b/0x360 [ 579.676638] ? tun_chr_close+0x180/0x180 [ 579.680690] tun_chr_write_iter+0xb9/0x154 [ 579.684913] do_iter_readv_writev+0x859/0xa50 [ 579.689394] ? vfs_dedupe_file_range+0xa00/0xa00 [ 579.694137] ? rw_verify_area+0x118/0x360 [ 579.698270] do_iter_write+0x185/0x5f0 [ 579.702141] ? dup_iter+0x270/0x270 [ 579.705757] vfs_writev+0x1c7/0x330 [ 579.709373] ? vfs_iter_write+0xb0/0xb0 [ 579.713334] ? wait_for_completion+0x870/0x870 [ 579.717915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.723437] ? __fdget_pos+0xd6/0x1e0 [ 579.727223] ? __fdget_raw+0x20/0x20 [ 579.730923] ? __sb_end_write+0xac/0xe0 [ 579.734885] do_writev+0x112/0x2f0 [ 579.738413] ? vfs_writev+0x330/0x330 [ 579.742198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 579.747730] __x64_sys_writev+0x75/0xb0 [ 579.751693] do_syscall_64+0x1b1/0x800 [ 579.755568] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 579.760397] ? syscall_return_slowpath+0x5c0/0x5c0 [ 579.765312] ? syscall_return_slowpath+0x30f/0x5c0 [ 579.770248] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 579.775611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.780450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.785624] RIP: 0033:0x4558c1 [ 579.788798] RSP: 002b:00007f1ed722bba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 579.796506] RAX: ffffffffffffffda RBX: 000000000000006e RCX: 00000000004558c1 [ 579.803768] RDX: 0000000000000001 RSI: 00007f1ed722bbf0 RDI: 00000000000000fc 2018/05/22 07:22:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x1000000, [], {0x77359400}}) [ 579.811028] RBP: 0000000020000100 R08: 00000000000000fc R09: 0000000000000000 [ 579.818285] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000013 [ 579.825546] R13: 0000000000000712 R14: 00000000006fea50 R15: 0000000000000000 [ 579.874748] FAULT_INJECTION: forcing a failure. [ 579.874748] name failslab, interval 1, probability 0, space 0, times 0 [ 579.886097] CPU: 1 PID: 2020 Comm: syz-executor1 Not tainted 4.17.0-rc6+ #63 [ 579.893302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.902762] Call Trace: [ 579.905382] dump_stack+0x1b9/0x294 [ 579.909036] ? dump_stack_print_info.cold.2+0x52/0x52 [ 579.914253] should_fail.cold.4+0xa/0x1a [ 579.918342] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.923470] ? find_held_lock+0x36/0x1c0 [ 579.927566] ? find_held_lock+0x36/0x1c0 [ 579.931670] ? check_same_owner+0x320/0x320 [ 579.936007] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 579.940962] ? rcu_note_context_switch+0x710/0x710 [ 579.945911] ? wait_for_completion+0x870/0x870 [ 579.950515] __should_failslab+0x124/0x180 [ 579.954775] should_failslab+0x9/0x14 [ 579.958598] kmem_cache_alloc+0x2af/0x760 [ 579.962777] getname_flags+0xd0/0x5a0 [ 579.966593] ? __sb_end_write+0xac/0xe0 [ 579.970588] getname+0x19/0x20 [ 579.973802] do_sys_open+0x39a/0x740 [ 579.977541] ? filp_open+0x80/0x80 [ 579.981095] ? __ia32_sys_read+0xb0/0xb0 [ 579.985184] __x64_sys_openat+0x9d/0x100 [ 579.989273] do_syscall_64+0x1b1/0x800 [ 579.993186] ? finish_task_switch+0x1ca/0x840 [ 579.997709] ? syscall_return_slowpath+0x5c0/0x5c0 [ 580.002663] ? syscall_return_slowpath+0x30f/0x5c0 [ 580.007621] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 580.013021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.017896] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/22 07:22:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x100000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x2000000, [], {0x77359400}}) [ 580.023102] RIP: 0033:0x455a09 [ 580.026304] RSP: 002b:00007f1dd01bec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.034035] RAX: ffffffffffffffda RBX: 00007f1dd01bf6d4 RCX: 0000000000455a09 [ 580.041320] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 580.048623] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 580.056030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 580.063330] R13: 00000000000004f1 R14: 00000000006fb738 R15: 0000000000000000 2018/05/22 07:22:59 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0x16, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:22:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x200000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:22:59 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:22:59 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:22:59 executing program 1 (fault-call:2 fault-nth:1): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:22:59 executing program 7 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 580.244260] FAULT_INJECTION: forcing a failure. [ 580.244260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.256125] CPU: 0 PID: 2057 Comm: syz-executor1 Not tainted 4.17.0-rc6+ #63 [ 580.262345] FAULT_INJECTION: forcing a failure. [ 580.262345] name failslab, interval 1, probability 0, space 0, times 0 [ 580.263313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.263322] Call Trace: [ 580.263352] dump_stack+0x1b9/0x294 [ 580.263379] ? dump_stack_print_info.cold.2+0x52/0x52 [ 580.263394] ? graph_lock+0x170/0x170 [ 580.263425] should_fail.cold.4+0xa/0x1a [ 580.303321] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.308433] ? debug_check_no_locks_freed+0x310/0x310 [ 580.313629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.319161] ? _parse_integer+0x13b/0x190 [ 580.323307] ? graph_lock+0x170/0x170 [ 580.327134] ? perf_trace_lock+0xd6/0x900 [ 580.331276] ? _kstrtoull+0x180/0x230 [ 580.335077] ? zap_class+0x720/0x720 [ 580.338786] ? perf_trace_lock+0xd6/0x900 [ 580.342934] ? find_held_lock+0x36/0x1c0 [ 580.346990] ? zap_class+0x720/0x720 [ 580.350706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.356236] ? should_fail+0x21b/0xbcd [ 580.360124] __alloc_pages_nodemask+0x34e/0xd70 [ 580.364788] ? find_held_lock+0x36/0x1c0 [ 580.368849] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 580.373865] ? find_held_lock+0x36/0x1c0 [ 580.377945] ? check_same_owner+0x320/0x320 [ 580.382266] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 580.387209] cache_grow_begin+0x72/0x6c0 [ 580.391275] kmem_cache_alloc+0x689/0x760 [ 580.395432] getname_flags+0xd0/0x5a0 [ 580.399229] ? __sb_end_write+0xac/0xe0 [ 580.403205] getname+0x19/0x20 [ 580.406397] do_sys_open+0x39a/0x740 [ 580.410200] ? filp_open+0x80/0x80 [ 580.413730] ? __ia32_sys_read+0xb0/0xb0 [ 580.417791] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 580.422643] __x64_sys_openat+0x9d/0x100 [ 580.426728] do_syscall_64+0x1b1/0x800 [ 580.430615] ? finish_task_switch+0x1ca/0x840 [ 580.435108] ? syscall_return_slowpath+0x5c0/0x5c0 [ 580.440040] ? syscall_return_slowpath+0x30f/0x5c0 [ 580.444968] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 580.450331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.455177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.460358] RIP: 0033:0x455a09 [ 580.463536] RSP: 002b:00007f1dd01bec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.471242] RAX: ffffffffffffffda RBX: 00007f1dd01bf6d4 RCX: 0000000000455a09 [ 580.478506] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 580.485766] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 580.493030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 580.500293] R13: 00000000000004f1 R14: 00000000006fb738 R15: 0000000000000001 [ 580.507577] CPU: 1 PID: 2060 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #63 [ 580.514778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.524142] Call Trace: [ 580.526747] dump_stack+0x1b9/0x294 [ 580.530392] ? dump_stack_print_info.cold.2+0x52/0x52 [ 580.535600] ? debug_check_no_locks_freed+0x310/0x310 [ 580.540819] should_fail.cold.4+0xa/0x1a [ 580.544890] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.550013] ? debug_check_no_locks_freed+0x310/0x310 [ 580.555211] ? rcu_pm_notify+0xc0/0xc0 [ 580.559107] ? zap_class+0x720/0x720 [ 580.562818] ? rcu_read_lock_sched_held+0x108/0x120 [ 580.567824] ? __alloc_pages_nodemask+0xacf/0xd70 [ 580.572651] ? graph_lock+0x170/0x170 [ 580.576440] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 580.581449] ? find_held_lock+0x36/0x1c0 [ 580.585503] __should_failslab+0x124/0x180 [ 580.589739] should_failslab+0x9/0x14 [ 580.593656] kmem_cache_alloc+0x47/0x760 [ 580.597716] __build_skb+0xa3/0x410 [ 580.601333] ? skb_try_coalesce+0x1c70/0x1c70 [ 580.605812] ? graph_lock+0x170/0x170 [ 580.609602] ? lock_acquire+0x1dc/0x520 [ 580.613563] ? tun_build_skb.isra.50+0x48b/0x1d50 [ 580.618401] build_skb+0x6f/0x2e0 [ 580.621843] ? __build_skb+0x410/0x410 [ 580.625726] tun_build_skb.isra.50+0x88e/0x1d50 [ 580.630390] ? tun_device_event+0x1020/0x1020 [ 580.634873] ? lock_acquire+0x1dc/0x520 [ 580.638840] ? alloc_set_pte+0x1013/0x1600 [ 580.643066] ? graph_lock+0x170/0x170 [ 580.646853] ? print_usage_bug+0xc0/0xc0 [ 580.650907] ? reacquire_held_locks+0xbc/0x3e0 [ 580.655475] ? alloc_set_pte+0x1013/0x1600 [ 580.659704] ? print_usage_bug+0xc0/0xc0 [ 580.663756] ? print_usage_bug+0xc0/0xc0 [ 580.667805] ? lock_downgrade+0x8e0/0x8e0 [ 580.671941] ? print_usage_bug+0xc0/0xc0 [ 580.675988] ? print_usage_bug+0xc0/0xc0 [ 580.680042] ? __lock_acquire+0x7f5/0x5140 [ 580.684260] ? debug_check_no_locks_freed+0x310/0x310 [ 580.689446] ? print_usage_bug+0xc0/0xc0 [ 580.693501] ? debug_check_no_locks_freed+0x310/0x310 [ 580.698679] ? __lock_acquire+0x7f5/0x5140 [ 580.702938] tun_get_user+0xc04/0x4100 [ 580.706818] ? debug_check_no_locks_freed+0x310/0x310 [ 580.712021] ? tun_build_skb.isra.50+0x1d50/0x1d50 [ 580.716936] ? graph_lock+0x170/0x170 [ 580.720723] ? zap_class+0x720/0x720 [ 580.724424] ? lock_acquire+0x1dc/0x520 [ 580.728391] ? find_held_lock+0x36/0x1c0 [ 580.732536] ? lock_downgrade+0x8e0/0x8e0 [ 580.736681] ? rcu_is_watching+0x85/0x140 [ 580.740819] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 580.746009] ? tun_get+0x22b/0x360 [ 580.749541] ? tun_chr_close+0x180/0x180 [ 580.753601] tun_chr_write_iter+0xb9/0x154 [ 580.757833] do_iter_readv_writev+0x859/0xa50 [ 580.762320] ? vfs_dedupe_file_range+0xa00/0xa00 [ 580.767068] ? rw_verify_area+0x118/0x360 [ 580.771207] do_iter_write+0x185/0x5f0 [ 580.775083] ? dup_iter+0x270/0x270 [ 580.778704] vfs_writev+0x1c7/0x330 [ 580.782321] ? vfs_iter_write+0xb0/0xb0 [ 580.786301] ? wait_for_completion+0x870/0x870 [ 580.790884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.796408] ? __fdget_pos+0xd6/0x1e0 [ 580.800197] ? __fdget_raw+0x20/0x20 [ 580.803900] ? __sb_end_write+0xac/0xe0 [ 580.807872] do_writev+0x112/0x2f0 [ 580.811403] ? vfs_writev+0x330/0x330 [ 580.815198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 580.820739] __x64_sys_writev+0x75/0xb0 [ 580.824703] do_syscall_64+0x1b1/0x800 [ 580.828579] ? finish_task_switch+0x1ca/0x840 [ 580.833065] ? syscall_return_slowpath+0x5c0/0x5c0 [ 580.837985] ? syscall_return_slowpath+0x30f/0x5c0 [ 580.842910] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 580.848270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.853109] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.858301] RIP: 0033:0x4558c1 [ 580.861475] RSP: 002b:00007f1ed722bba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 580.869176] RAX: ffffffffffffffda RBX: 000000000000006e RCX: 00000000004558c1 [ 580.876434] RDX: 0000000000000001 RSI: 00007f1ed722bbf0 RDI: 00000000000000fc [ 580.883697] RBP: 0000000020000100 R08: 00000000000000fc R09: 0000000000000000 2018/05/22 07:23:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x2, [], {0x77359400}}) 2018/05/22 07:23:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff00000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:00 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 580.890951] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000013 [ 580.898206] R13: 0000000000000712 R14: 00000000006fea50 R15: 0000000000000001 2018/05/22 07:23:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfffffdfd, [], {0x77359400}}) 2018/05/22 07:23:00 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x20000158, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:00 executing program 7 (fault-call:0 fault-nth:2): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:00 executing program 1 (fault-call:2 fault-nth:2): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) [ 581.009457] FAULT_INJECTION: forcing a failure. [ 581.009457] name failslab, interval 1, probability 0, space 0, times 0 [ 581.021171] CPU: 1 PID: 2074 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 581.028375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.037742] Call Trace: [ 581.040349] dump_stack+0x1b9/0x294 [ 581.043995] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.049194] ? __might_sleep+0x95/0x190 [ 581.053181] should_fail.cold.4+0xa/0x1a [ 581.057267] ? loop_control_ioctl+0x8c/0x500 [ 581.062604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.067723] ? mutex_trylock+0x2a0/0x2a0 [ 581.071781] ? graph_lock+0x170/0x170 [ 581.075568] ? find_held_lock+0x36/0x1c0 [ 581.079619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.085157] ? find_held_lock+0x36/0x1c0 [ 581.089212] ? __lock_is_held+0xb5/0x140 [ 581.093276] ? check_same_owner+0x320/0x320 [ 581.097599] ? rcu_note_context_switch+0x710/0x710 [ 581.102533] __should_failslab+0x124/0x180 [ 581.106758] should_failslab+0x9/0x14 [ 581.110545] kmem_cache_alloc_trace+0x2cb/0x780 [ 581.115213] loop_add+0x96/0x9c0 [ 581.118570] ? loop_lookup+0x102/0x220 [ 581.122443] ? loop_queue_rq+0x640/0x640 [ 581.126498] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 581.131677] loop_control_ioctl+0x178/0x500 [ 581.135987] ? loop_add+0x9c0/0x9c0 [ 581.139607] ? expand_files.part.8+0x9a0/0x9a0 [ 581.144182] ? kasan_check_write+0x14/0x20 [ 581.148411] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 581.153336] ? wait_for_completion+0x870/0x870 [ 581.157925] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 581.163104] ? loop_add+0x9c0/0x9c0 [ 581.166725] do_vfs_ioctl+0x1cf/0x16a0 [ 581.170614] ? ioctl_preallocate+0x2e0/0x2e0 [ 581.175017] ? fget_raw+0x20/0x20 [ 581.178465] ? __sb_end_write+0xac/0xe0 [ 581.182431] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 581.187955] ? fput+0x130/0x1a0 [ 581.191221] ? ksys_write+0x1a6/0x250 [ 581.195033] ? security_file_ioctl+0x94/0xc0 [ 581.199446] ksys_ioctl+0xa9/0xd0 [ 581.202891] __x64_sys_ioctl+0x73/0xb0 [ 581.206775] do_syscall_64+0x1b1/0x800 [ 581.210658] ? finish_task_switch+0x1ca/0x840 [ 581.215152] ? syscall_return_slowpath+0x5c0/0x5c0 [ 581.220070] ? syscall_return_slowpath+0x30f/0x5c0 [ 581.224994] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 581.230363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.235203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.240389] RIP: 0033:0x455a09 [ 581.243565] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.251263] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 2018/05/22 07:23:01 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 581.258521] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 581.265775] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 581.273035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 581.280379] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000000 [ 581.350331] FAULT_INJECTION: forcing a failure. [ 581.350331] name failslab, interval 1, probability 0, space 0, times 0 [ 581.361784] CPU: 0 PID: 2090 Comm: syz-executor1 Not tainted 4.17.0-rc6+ #63 [ 581.368985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.378345] Call Trace: [ 581.380957] dump_stack+0x1b9/0x294 [ 581.384608] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.389820] should_fail.cold.4+0xa/0x1a [ 581.393901] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/22 07:23:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x200000000000000, [], {0x77359400}}) [ 581.399024] ? debug_check_no_locks_freed+0x310/0x310 [ 581.404235] ? print_usage_bug+0xc0/0xc0 [ 581.408318] ? find_held_lock+0x36/0x1c0 [ 581.412411] ? check_same_owner+0x320/0x320 [ 581.416760] ? rcu_note_context_switch+0x710/0x710 [ 581.421707] ? graph_lock+0x170/0x170 [ 581.425529] __should_failslab+0x124/0x180 [ 581.429778] should_failslab+0x9/0x14 [ 581.433585] kmem_cache_alloc+0x2af/0x760 [ 581.437750] ? debug_check_no_locks_freed+0x310/0x310 [ 581.442959] get_empty_filp+0x125/0x520 [ 581.446959] ? proc_nr_files+0x60/0x60 2018/05/22 07:23:01 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:01 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 581.450858] ? lock_downgrade+0x8e0/0x8e0 [ 581.455024] ? graph_lock+0x170/0x170 [ 581.458838] ? kasan_check_read+0x11/0x20 [ 581.462994] ? rcu_is_watching+0x85/0x140 [ 581.467154] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 581.472360] path_openat+0x116/0x4e20 [ 581.476186] ? unwind_get_return_address+0x61/0xa0 [ 581.481129] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 581.486157] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 581.490947] ? find_held_lock+0x36/0x1c0 [ 581.495206] ? lock_downgrade+0x8e0/0x8e0 2018/05/22 07:23:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff00000000, [], {0x77359400}}) [ 581.499366] ? do_sys_open+0x39a/0x740 [ 581.503462] ? kasan_check_read+0x11/0x20 [ 581.507624] ? do_raw_spin_unlock+0x9e/0x2e0 [ 581.512051] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 581.516649] ? __lock_is_held+0xb5/0x140 [ 581.520736] ? _raw_spin_unlock+0x22/0x30 [ 581.524988] ? __alloc_fd+0x346/0x700 [ 581.528805] ? usercopy_warn+0x120/0x120 [ 581.532882] ? exit_files+0xb0/0xb0 [ 581.536521] do_filp_open+0x249/0x350 [ 581.540331] ? may_open_dev+0x100/0x100 [ 581.544326] ? get_unused_fd_flags+0x121/0x190 2018/05/22 07:23:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 581.548911] ? getname_flags+0xd0/0x5a0 [ 581.552887] ? __alloc_fd+0x700/0x700 [ 581.556692] ? __sb_end_write+0xac/0xe0 [ 581.560688] do_sys_open+0x56f/0x740 [ 581.564430] ? filp_open+0x80/0x80 [ 581.567981] ? __ia32_sys_read+0xb0/0xb0 [ 581.572064] __x64_sys_openat+0x9d/0x100 [ 581.576138] do_syscall_64+0x1b1/0x800 [ 581.580039] ? finish_task_switch+0x1ca/0x840 [ 581.584554] ? syscall_return_slowpath+0x5c0/0x5c0 [ 581.589504] ? syscall_return_slowpath+0x30f/0x5c0 [ 581.594454] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 581.599843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.604720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.609939] RIP: 0033:0x455a09 [ 581.613135] RSP: 002b:00007f1dd01bec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.620862] RAX: ffffffffffffffda RBX: 00007f1dd01bf6d4 RCX: 0000000000455a09 [ 581.628143] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 581.635434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 581.642733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/22 07:23:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x100000000000000, [], {0x77359400}}) [ 581.650019] R13: 00000000000004f1 R14: 00000000006fb738 R15: 0000000000000002 [ 581.685415] FAULT_INJECTION: forcing a failure. [ 581.685415] name failslab, interval 1, probability 0, space 0, times 0 [ 581.696948] CPU: 1 PID: 2109 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 581.704156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.713547] Call Trace: [ 581.716150] dump_stack+0x1b9/0x294 [ 581.719793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.724998] ? rcu_is_watching+0x85/0x140 [ 581.729175] should_fail.cold.4+0xa/0x1a [ 581.733256] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.738356] ? radix_tree_clear_tags+0xc0/0xc0 [ 581.742945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.748471] ? graph_lock+0x170/0x170 [ 581.752269] ? find_held_lock+0x36/0x1c0 [ 581.756325] ? __lock_is_held+0xb5/0x140 [ 581.760386] ? check_same_owner+0x320/0x320 [ 581.764699] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.770226] ? node_tag_clear+0xc0/0x1c0 [ 581.774279] ? rcu_note_context_switch+0x710/0x710 [ 581.779209] __should_failslab+0x124/0x180 [ 581.783523] should_failslab+0x9/0x14 [ 581.787312] kmem_cache_alloc_node_trace+0x26f/0x770 [ 581.792416] ? __fprop_inc_percpu_max+0x2c0/0x2c0 [ 581.797266] __kmalloc_node+0x33/0x70 [ 581.801078] blk_mq_alloc_tag_set+0x37d/0xab0 [ 581.805563] ? idr_alloc+0x145/0x1a0 [ 581.809273] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 581.814465] loop_add+0x2b4/0x9c0 [ 581.817908] ? loop_lookup+0x102/0x220 [ 581.821787] ? loop_queue_rq+0x640/0x640 [ 581.825845] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 581.831031] loop_control_ioctl+0x178/0x500 [ 581.835340] ? loop_add+0x9c0/0x9c0 [ 581.838958] ? expand_files.part.8+0x9a0/0x9a0 [ 581.843531] ? kasan_check_write+0x14/0x20 [ 581.847757] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 581.852680] ? wait_for_completion+0x870/0x870 [ 581.857256] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 581.862434] ? loop_add+0x9c0/0x9c0 [ 581.866050] do_vfs_ioctl+0x1cf/0x16a0 [ 581.869932] ? ioctl_preallocate+0x2e0/0x2e0 [ 581.874328] ? fget_raw+0x20/0x20 [ 581.877772] ? __sb_end_write+0xac/0xe0 [ 581.881740] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 581.887289] ? fput+0x130/0x1a0 [ 581.890556] ? ksys_write+0x1a6/0x250 [ 581.894368] ? security_file_ioctl+0x94/0xc0 [ 581.898771] ksys_ioctl+0xa9/0xd0 [ 581.902215] __x64_sys_ioctl+0x73/0xb0 [ 581.906092] do_syscall_64+0x1b1/0x800 [ 581.909971] ? finish_task_switch+0x1ca/0x840 [ 581.914458] ? syscall_return_slowpath+0x5c0/0x5c0 [ 581.919384] ? syscall_return_slowpath+0x30f/0x5c0 [ 581.924309] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 581.929667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.934504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.939681] RIP: 0033:0x455a09 [ 581.942867] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.950565] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 581.957822] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 581.965167] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 581.972425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 581.979683] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000001 2018/05/22 07:23:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x1000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:01 executing program 7: syz_emit_ethernet(0xae, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:01 executing program 1 (fault-call:2 fault-nth:3): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:01 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:01 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:01 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0x8f, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:01 executing program 7: syz_emit_ethernet(0x2000016e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 582.230623] FAULT_INJECTION: forcing a failure. [ 582.230623] name failslab, interval 1, probability 0, space 0, times 0 [ 582.242137] CPU: 0 PID: 2144 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 582.249336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.258702] Call Trace: [ 582.261306] dump_stack+0x1b9/0x294 [ 582.264948] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.270155] ? is_bpf_text_address+0xd7/0x170 [ 582.274664] should_fail.cold.4+0xa/0x1a [ 582.278738] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.283856] ? graph_lock+0x170/0x170 [ 582.287698] ? save_stack+0xa9/0xd0 [ 582.291349] ? find_held_lock+0x36/0x1c0 [ 582.295429] ? __lock_is_held+0xb5/0x140 [ 582.299519] ? check_same_owner+0x320/0x320 [ 582.303859] ? rcu_note_context_switch+0x710/0x710 [ 582.308813] __should_failslab+0x124/0x180 [ 582.313064] should_failslab+0x9/0x14 [ 582.316882] kmem_cache_alloc_node_trace+0x26f/0x770 [ 582.322010] ? kasan_unpoison_shadow+0x35/0x50 [ 582.326610] __kmalloc_node+0x33/0x70 [ 582.330433] blk_mq_alloc_tag_set+0x414/0xab0 [ 582.334940] ? idr_alloc+0x145/0x1a0 [ 582.338673] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 582.343877] loop_add+0x2b4/0x9c0 [ 582.347335] ? loop_lookup+0x102/0x220 [ 582.351227] ? loop_queue_rq+0x640/0x640 [ 582.355302] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 582.360522] loop_control_ioctl+0x178/0x500 [ 582.364863] ? loop_add+0x9c0/0x9c0 [ 582.368497] ? expand_files.part.8+0x9a0/0x9a0 [ 582.373090] ? kasan_check_write+0x14/0x20 [ 582.377335] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 582.382281] ? wait_for_completion+0x870/0x870 [ 582.386883] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 582.392088] ? loop_add+0x9c0/0x9c0 [ 582.395725] do_vfs_ioctl+0x1cf/0x16a0 [ 582.399642] ? ioctl_preallocate+0x2e0/0x2e0 [ 582.404062] ? fget_raw+0x20/0x20 [ 582.407508] ? __sb_end_write+0xac/0xe0 [ 582.411472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 582.416995] ? fput+0x130/0x1a0 [ 582.420263] ? ksys_write+0x1a6/0x250 [ 582.424059] ? security_file_ioctl+0x94/0xc0 [ 582.428465] ksys_ioctl+0xa9/0xd0 [ 582.431908] __x64_sys_ioctl+0x73/0xb0 [ 582.435780] do_syscall_64+0x1b1/0x800 [ 582.439658] ? syscall_return_slowpath+0x5c0/0x5c0 [ 582.444573] ? syscall_return_slowpath+0x30f/0x5c0 [ 582.449586] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 582.454936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.459767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.464937] RIP: 0033:0x455a09 [ 582.468107] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.475801] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 582.483062] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 582.490321] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 582.497573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 582.504826] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000002 2018/05/22 07:23:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:02 executing program 0 (fault-call:2 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:02 executing program 7: syz_emit_ethernet(0x7ffff000, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:02 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa06, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x600000000000000}}, 0x8b) 2018/05/22 07:23:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/.elinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 582.717431] FAULT_INJECTION: forcing a failure. [ 582.717431] name failslab, interval 1, probability 0, space 0, times 0 [ 582.728781] CPU: 1 PID: 2180 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 582.735967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.745323] Call Trace: [ 582.747928] dump_stack+0x1b9/0x294 [ 582.751569] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.756774] ? rcu_is_watching+0x85/0x140 [ 582.760934] should_fail.cold.4+0xa/0x1a [ 582.764991] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.770094] ? kernel_text_address+0x79/0xf0 [ 582.774493] ? __unwind_start+0x166/0x330 [ 582.778630] ? graph_lock+0x170/0x170 [ 582.782419] ? __save_stack_trace+0x7e/0xd0 [ 582.786735] ? find_held_lock+0x36/0x1c0 [ 582.790791] ? __lock_is_held+0xb5/0x140 [ 582.794856] ? check_same_owner+0x320/0x320 [ 582.799173] ? rcu_note_context_switch+0x710/0x710 [ 582.804097] __should_failslab+0x124/0x180 [ 582.808327] should_failslab+0x9/0x14 [ 582.812118] kmem_cache_alloc_node_trace+0x26f/0x770 [ 582.817214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.822748] ? find_next_bit+0x104/0x130 [ 582.826805] blk_mq_init_tags+0x79/0x2b0 [ 582.830857] blk_mq_alloc_rq_map+0x9f/0x220 [ 582.835170] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 582.839659] blk_mq_alloc_tag_set+0x612/0xab0 [ 582.844145] ? idr_alloc+0x145/0x1a0 [ 582.847854] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 582.853044] loop_add+0x2b4/0x9c0 [ 582.856485] ? loop_lookup+0x102/0x220 [ 582.860359] ? loop_queue_rq+0x640/0x640 [ 582.864418] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 582.869597] loop_control_ioctl+0x178/0x500 [ 582.873906] ? loop_add+0x9c0/0x9c0 [ 582.877522] ? expand_files.part.8+0x9a0/0x9a0 [ 582.882100] ? kasan_check_write+0x14/0x20 [ 582.886325] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 582.891249] ? wait_for_completion+0x870/0x870 [ 582.895819] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 582.900996] ? loop_add+0x9c0/0x9c0 [ 582.904616] do_vfs_ioctl+0x1cf/0x16a0 [ 582.908497] ? ioctl_preallocate+0x2e0/0x2e0 [ 582.912909] ? fget_raw+0x20/0x20 [ 582.916351] ? __sb_end_write+0xac/0xe0 [ 582.920319] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 582.925840] ? fput+0x130/0x1a0 [ 582.929108] ? ksys_write+0x1a6/0x250 [ 582.932899] ? security_file_ioctl+0x94/0xc0 [ 582.937297] ksys_ioctl+0xa9/0xd0 [ 582.940759] __x64_sys_ioctl+0x73/0xb0 [ 582.944636] do_syscall_64+0x1b1/0x800 [ 582.948616] ? finish_task_switch+0x1ca/0x840 [ 582.953104] ? syscall_return_slowpath+0x5c0/0x5c0 [ 582.958029] ? syscall_return_slowpath+0x30f/0x5c0 [ 582.962959] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 582.968318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.973160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.978338] RIP: 0033:0x455a09 [ 582.981513] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.989219] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 582.996473] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 583.003734] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 583.010990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/22 07:23:02 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 583.018254] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000003 [ 583.053449] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='//elinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:02 executing program 0 (fault-call:2 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:02 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x100000000000000}}, 0x8b) 2018/05/22 07:23:02 executing program 7: syz_emit_ethernet(0xfffffdef, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:02 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s.linux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 7: syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 583.372374] FAULT_INJECTION: forcing a failure. [ 583.372374] name failslab, interval 1, probability 0, space 0, times 0 [ 583.383719] CPU: 0 PID: 2237 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 583.390922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.400379] Call Trace: [ 583.403604] dump_stack+0x1b9/0x294 [ 583.407262] ? dump_stack_print_info.cold.2+0x52/0x52 [ 583.412481] should_fail.cold.4+0xa/0x1a [ 583.416540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 583.421644] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 583.426844] ? graph_lock+0x170/0x170 [ 583.430641] ? is_bpf_text_address+0xd7/0x170 [ 583.435124] ? find_held_lock+0x36/0x1c0 [ 583.439180] ? __lock_is_held+0xb5/0x140 [ 583.443267] ? check_same_owner+0x320/0x320 [ 583.447590] ? kasan_kmalloc+0xc4/0xe0 [ 583.451474] ? kmem_cache_alloc_node_trace+0x150/0x770 [ 583.456762] ? blk_mq_init_tags+0x79/0x2b0 [ 583.461077] ? rcu_note_context_switch+0x710/0x710 [ 583.465995] ? loop_add+0x2b4/0x9c0 [ 583.469617] ? loop_control_ioctl+0x178/0x500 [ 583.474100] ? do_vfs_ioctl+0x1cf/0x16a0 [ 583.478152] __should_failslab+0x124/0x180 [ 583.482379] should_failslab+0x9/0x14 [ 583.486173] kmem_cache_alloc_node_trace+0x26f/0x770 [ 583.491267] ? print_usage_bug+0xc0/0xc0 [ 583.495322] __kmalloc_node+0x33/0x70 [ 583.499123] sbitmap_init_node+0x290/0x460 [ 583.503361] sbitmap_queue_init_node+0xaa/0x7d0 [ 583.508033] ? sbitmap_init_node+0x460/0x460 [ 583.512438] ? rcu_read_lock_sched_held+0x108/0x120 [ 583.517452] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 583.522727] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.528255] ? find_next_bit+0x104/0x130 [ 583.532319] blk_mq_init_tags+0x11b/0x2b0 [ 583.536460] blk_mq_alloc_rq_map+0x9f/0x220 [ 583.540778] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 583.545263] blk_mq_alloc_tag_set+0x612/0xab0 [ 583.549834] ? idr_alloc+0x145/0x1a0 [ 583.553537] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 583.558728] loop_add+0x2b4/0x9c0 [ 583.562173] ? loop_lookup+0x102/0x220 [ 583.566046] ? loop_queue_rq+0x640/0x640 [ 583.570093] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 583.575353] loop_control_ioctl+0x178/0x500 [ 583.579669] ? loop_add+0x9c0/0x9c0 [ 583.583295] ? expand_files.part.8+0x9a0/0x9a0 [ 583.587864] ? kasan_check_write+0x14/0x20 [ 583.592083] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 583.597004] ? wait_for_completion+0x870/0x870 [ 583.601602] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 583.606781] ? loop_add+0x9c0/0x9c0 [ 583.610400] do_vfs_ioctl+0x1cf/0x16a0 [ 583.614279] ? ioctl_preallocate+0x2e0/0x2e0 [ 583.618688] ? fget_raw+0x20/0x20 [ 583.622140] ? __sb_end_write+0xac/0xe0 [ 583.626103] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 583.631628] ? fput+0x130/0x1a0 [ 583.634895] ? ksys_write+0x1a6/0x250 [ 583.638684] ? security_file_ioctl+0x94/0xc0 [ 583.643082] ksys_ioctl+0xa9/0xd0 [ 583.646554] __x64_sys_ioctl+0x73/0xb0 [ 583.650436] do_syscall_64+0x1b1/0x800 [ 583.654317] ? finish_task_switch+0x1ca/0x840 [ 583.658812] ? syscall_return_slowpath+0x5c0/0x5c0 [ 583.663733] ? syscall_return_slowpath+0x30f/0x5c0 [ 583.668656] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 583.674026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.678872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 583.684050] RIP: 0033:0x455a09 [ 583.687230] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.694943] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 583.702204] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 583.709465] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 583.716725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/22 07:23:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfffffdfd}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x6000000}}, 0x8b) [ 583.723983] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000004 [ 583.736517] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/s/linux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:03 executing program 7: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x100000000000000, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x1000000}}, 0x8b) 2018/05/22 07:23:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 0 (fault-call:2 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:03 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/.nforce\x00', 0x0, 0x0) 2018/05/22 07:23:03 executing program 7: syz_emit_ethernet(0xd, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x200000000000000, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x600}}, 0x8b) 2018/05/22 07:23:03 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux//nforce\x00', 0x0, 0x0) 2018/05/22 07:23:03 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 584.262929] FAULT_INJECTION: forcing a failure. [ 584.262929] name failslab, interval 1, probability 0, space 0, times 0 [ 584.274310] CPU: 0 PID: 2303 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 584.281517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.290881] Call Trace: [ 584.293497] dump_stack+0x1b9/0x294 [ 584.297151] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.302376] ? find_next_zero_bit+0x111/0x140 [ 584.306898] should_fail.cold.4+0xa/0x1a [ 584.310975] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.316112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.321757] ? graph_lock+0x170/0x170 [ 584.325557] ? find_held_lock+0x36/0x1c0 [ 584.329609] ? __lock_is_held+0xb5/0x140 [ 584.333672] ? check_same_owner+0x320/0x320 [ 584.337981] ? __kmalloc_node+0x33/0x70 [ 584.341952] ? rcu_note_context_switch+0x710/0x710 [ 584.346873] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 584.352153] __should_failslab+0x124/0x180 [ 584.356380] should_failslab+0x9/0x14 [ 584.360169] kmem_cache_alloc_node_trace+0x26f/0x770 [ 584.365260] ? __kmalloc_node+0x47/0x70 [ 584.369228] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.374234] ? find_next_bit+0x104/0x130 [ 584.378298] sbitmap_queue_init_node+0x3bd/0x7d0 [ 584.383051] ? sbitmap_init_node+0x460/0x460 [ 584.387446] ? rcu_read_lock_sched_held+0x108/0x120 [ 584.392449] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 584.397721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.403246] ? find_next_bit+0x104/0x130 [ 584.407312] blk_mq_init_tags+0x11b/0x2b0 [ 584.411454] blk_mq_alloc_rq_map+0x9f/0x220 [ 584.415778] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 584.420278] blk_mq_alloc_tag_set+0x612/0xab0 [ 584.424768] ? idr_alloc+0x145/0x1a0 [ 584.428474] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 584.433660] loop_add+0x2b4/0x9c0 [ 584.437096] ? loop_lookup+0x102/0x220 [ 584.440967] ? loop_queue_rq+0x640/0x640 [ 584.445023] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 584.450202] loop_control_ioctl+0x178/0x500 [ 584.454513] ? loop_add+0x9c0/0x9c0 [ 584.458124] ? expand_files.part.8+0x9a0/0x9a0 [ 584.462694] ? kasan_check_write+0x14/0x20 [ 584.466912] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 584.471833] ? wait_for_completion+0x870/0x870 [ 584.476401] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 584.481572] ? loop_add+0x9c0/0x9c0 [ 584.485182] do_vfs_ioctl+0x1cf/0x16a0 [ 584.489062] ? ioctl_preallocate+0x2e0/0x2e0 [ 584.493454] ? fget_raw+0x20/0x20 [ 584.496893] ? __sb_end_write+0xac/0xe0 [ 584.500853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 584.506368] ? fput+0x130/0x1a0 [ 584.509651] ? ksys_write+0x1a6/0x250 [ 584.513442] ? security_file_ioctl+0x94/0xc0 [ 584.517855] ksys_ioctl+0xa9/0xd0 [ 584.521308] __x64_sys_ioctl+0x73/0xb0 [ 584.525181] do_syscall_64+0x1b1/0x800 [ 584.529059] ? finish_task_switch+0x1ca/0x840 [ 584.533551] ? syscall_return_slowpath+0x5c0/0x5c0 [ 584.538471] ? syscall_return_slowpath+0x30f/0x5c0 [ 584.543399] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 584.548762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 584.553595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.558770] RIP: 0033:0x455a09 [ 584.561951] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.569644] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 584.576900] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 584.584182] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 584.591442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 584.598701] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000005 [ 584.609218] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:04 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:04 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforc.\x00', 0x0, 0x0) 2018/05/22 07:23:04 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff00000000, [], {0x77359400}}) 2018/05/22 07:23:04 executing program 0 (fault-call:2 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:04 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0x6}}, 0x8b) 2018/05/22 07:23:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x1000000, [], {0x77359400}}) 2018/05/22 07:23:04 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:04 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforc/\x00', 0x0, 0x0) 2018/05/22 07:23:04 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffff, 0xffffffffffffffff}}, 0x8b) 2018/05/22 07:23:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:04 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 584.870479] FAULT_INJECTION: forcing a failure. [ 584.870479] name failslab, interval 1, probability 0, space 0, times 0 [ 584.881869] CPU: 0 PID: 2355 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 584.889072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.898440] Call Trace: [ 584.901052] dump_stack+0x1b9/0x294 [ 584.904704] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.909904] ? find_next_zero_bit+0x111/0x140 [ 584.914422] should_fail.cold.4+0xa/0x1a [ 584.918505] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.923632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.929182] ? graph_lock+0x170/0x170 [ 584.933003] ? find_held_lock+0x36/0x1c0 [ 584.937085] ? __lock_is_held+0xb5/0x140 [ 584.941178] ? check_same_owner+0x320/0x320 [ 584.945514] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 584.950544] ? rcu_note_context_switch+0x710/0x710 [ 584.955473] ? __lockdep_init_map+0x105/0x590 [ 584.959969] __should_failslab+0x124/0x180 [ 584.964199] should_failslab+0x9/0x14 [ 584.967989] kmem_cache_alloc_node_trace+0x26f/0x770 [ 584.973086] ? init_wait_entry+0x1b0/0x1b0 [ 584.977307] ? __kmalloc_node+0x47/0x70 [ 584.981274] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.986288] sbitmap_queue_init_node+0x3bd/0x7d0 [ 584.991044] ? sbitmap_init_node+0x460/0x460 [ 584.995444] ? rcu_read_lock_sched_held+0x108/0x120 [ 585.000450] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 585.005718] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.011242] ? find_next_bit+0x104/0x130 [ 585.015307] blk_mq_init_tags+0x17c/0x2b0 [ 585.019448] blk_mq_alloc_rq_map+0x9f/0x220 [ 585.023760] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 585.028336] blk_mq_alloc_tag_set+0x612/0xab0 [ 585.032818] ? idr_alloc+0x145/0x1a0 [ 585.036522] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 585.041717] loop_add+0x2b4/0x9c0 [ 585.045160] ? loop_lookup+0x102/0x220 [ 585.049036] ? loop_queue_rq+0x640/0x640 [ 585.053092] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 585.058270] loop_control_ioctl+0x178/0x500 [ 585.062589] ? loop_add+0x9c0/0x9c0 [ 585.066208] ? expand_files.part.8+0x9a0/0x9a0 [ 585.070781] ? kasan_check_write+0x14/0x20 [ 585.075006] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 585.079953] ? wait_for_completion+0x870/0x870 [ 585.084533] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 585.089710] ? loop_add+0x9c0/0x9c0 [ 585.093325] do_vfs_ioctl+0x1cf/0x16a0 [ 585.097208] ? ioctl_preallocate+0x2e0/0x2e0 [ 585.101607] ? fget_raw+0x20/0x20 [ 585.105049] ? __sb_end_write+0xac/0xe0 [ 585.109024] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.114545] ? fput+0x130/0x1a0 [ 585.117811] ? ksys_write+0x1a6/0x250 [ 585.121603] ? security_file_ioctl+0x94/0xc0 [ 585.126000] ksys_ioctl+0xa9/0xd0 [ 585.129452] __x64_sys_ioctl+0x73/0xb0 [ 585.133330] do_syscall_64+0x1b1/0x800 [ 585.137206] ? finish_task_switch+0x1ca/0x840 [ 585.141687] ? syscall_return_slowpath+0x5c0/0x5c0 [ 585.146607] ? syscall_return_slowpath+0x30f/0x5c0 [ 585.151526] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 585.156882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.161715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.166888] RIP: 0033:0x455a09 2018/05/22 07:23:04 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x200000000000000], {0x77359400}}) [ 585.170065] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.177760] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 585.185100] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 585.192361] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 585.199614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 585.206866] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000006 [ 585.217386] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:04 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x2000000, [], {0x77359400}}) 2018/05/22 07:23:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff, [], {0x77359400}}) 2018/05/22 07:23:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:05 executing program 0 (fault-call:2 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:05 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x0) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:05 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)="2f73656c696e75782f656e666f72636514", 0x0, 0x0) 2018/05/22 07:23:05 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x200001cb) 2018/05/22 07:23:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x100000000000000], {0x77359400}}) 2018/05/22 07:23:05 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 585.513308] FAULT_INJECTION: forcing a failure. [ 585.513308] name failslab, interval 1, probability 0, space 0, times 0 [ 585.524672] CPU: 0 PID: 2421 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 585.531869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.541233] Call Trace: [ 585.543840] dump_stack+0x1b9/0x294 [ 585.547487] ? dump_stack_print_info.cold.2+0x52/0x52 [ 585.552695] ? finish_task_switch+0x1ca/0x840 [ 585.557207] ? finish_task_switch+0x182/0x840 [ 585.561706] should_fail.cold.4+0xa/0x1a [ 585.565758] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 585.570851] ? __schedule+0x809/0x1e30 [ 585.574729] ? __raw_spin_lock_init+0x1c/0x100 [ 585.579302] ? __sched_text_start+0x8/0x8 [ 585.583441] ? __lockdep_init_map+0x105/0x590 [ 585.587924] ? __lock_is_held+0xb5/0x140 [ 585.591972] ? __init_waitqueue_head+0x96/0x140 [ 585.596635] ? check_same_owner+0x320/0x320 [ 585.600950] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 585.605796] __should_failslab+0x124/0x180 [ 585.610040] should_failslab+0x9/0x14 [ 585.613840] kmem_cache_alloc_node_trace+0x26f/0x770 [ 585.618952] __kmalloc_node+0x33/0x70 [ 585.622755] blk_mq_alloc_rq_map+0xcc/0x220 [ 585.627065] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 585.631550] blk_mq_alloc_tag_set+0x612/0xab0 [ 585.636040] ? idr_alloc+0x145/0x1a0 [ 585.639752] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 585.644933] loop_add+0x2b4/0x9c0 [ 585.648375] ? loop_lookup+0x102/0x220 [ 585.652246] ? loop_queue_rq+0x640/0x640 [ 585.656301] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 585.661488] loop_control_ioctl+0x178/0x500 [ 585.665794] ? loop_add+0x9c0/0x9c0 [ 585.669408] ? expand_files.part.8+0x9a0/0x9a0 [ 585.673986] ? kasan_check_write+0x14/0x20 [ 585.678218] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 585.683138] ? wait_for_completion+0x870/0x870 [ 585.687726] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 585.692903] ? loop_add+0x9c0/0x9c0 [ 585.696518] do_vfs_ioctl+0x1cf/0x16a0 [ 585.700411] ? ioctl_preallocate+0x2e0/0x2e0 [ 585.704816] ? fget_raw+0x20/0x20 [ 585.708257] ? __sb_end_write+0xac/0xe0 [ 585.712230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 585.717753] ? fput+0x130/0x1a0 [ 585.721026] ? ksys_write+0x1a6/0x250 [ 585.724823] ? security_file_ioctl+0x94/0xc0 [ 585.729232] ksys_ioctl+0xa9/0xd0 [ 585.732676] __x64_sys_ioctl+0x73/0xb0 [ 585.736550] do_syscall_64+0x1b1/0x800 [ 585.740432] ? finish_task_switch+0x1ca/0x840 [ 585.744915] ? syscall_return_slowpath+0x5c0/0x5c0 [ 585.749842] ? syscall_return_slowpath+0x30f/0x5c0 [ 585.754776] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 585.760310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.765149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.770337] RIP: 0033:0x455a09 [ 585.773514] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.781215] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 585.788480] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 585.795747] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 585.803014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 585.810279] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000007 [ 585.827505] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)="2f73656c696e75782f656e666f72636504", 0x0, 0x0) 2018/05/22 07:23:05 executing program 0 (fault-call:2 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x2, [], {0x77359400}}) 2018/05/22 07:23:05 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x0) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:05 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x860, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x1000000], {0x77359400}}) 2018/05/22 07:23:05 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x7) 2018/05/22 07:23:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfffffdfd, [], {0x77359400}}) 2018/05/22 07:23:05 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:05 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) 2018/05/22 07:23:05 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x2000000], {0x77359400}}) [ 586.109306] FAULT_INJECTION: forcing a failure. [ 586.109306] name failslab, interval 1, probability 0, space 0, times 0 [ 586.120677] CPU: 1 PID: 2461 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 586.127881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.137245] Call Trace: [ 586.139851] dump_stack+0x1b9/0x294 [ 586.143500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 586.148696] ? is_bpf_text_address+0xd7/0x170 [ 586.153185] should_fail.cold.4+0xa/0x1a [ 586.157248] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 586.162345] ? graph_lock+0x170/0x170 [ 586.166137] ? save_stack+0xa9/0xd0 [ 586.169755] ? save_stack+0x43/0xd0 [ 586.173366] ? kasan_kmalloc+0xc4/0xe0 [ 586.177240] ? __kmalloc_node+0x47/0x70 [ 586.181201] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 586.185681] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 586.190338] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 586.194992] ? loop_add+0x2b4/0x9c0 [ 586.198610] ? loop_control_ioctl+0x178/0x500 [ 586.203098] ? do_vfs_ioctl+0x1cf/0x16a0 [ 586.207155] ? __lock_is_held+0xb5/0x140 [ 586.211205] ? __init_waitqueue_head+0x96/0x140 [ 586.215963] ? check_same_owner+0x320/0x320 [ 586.220287] ? rcu_note_context_switch+0x710/0x710 [ 586.225211] __should_failslab+0x124/0x180 [ 586.229448] should_failslab+0x9/0x14 [ 586.233240] kmem_cache_alloc_node_trace+0x26f/0x770 [ 586.238332] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.243863] ? kasan_unpoison_shadow+0x35/0x50 [ 586.248437] __kmalloc_node+0x33/0x70 [ 586.252238] blk_mq_alloc_rq_map+0x10d/0x220 [ 586.256636] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 586.261121] blk_mq_alloc_tag_set+0x612/0xab0 [ 586.265604] ? idr_alloc+0x145/0x1a0 [ 586.269309] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 586.274498] loop_add+0x2b4/0x9c0 [ 586.277940] ? loop_lookup+0x102/0x220 [ 586.281835] ? loop_queue_rq+0x640/0x640 [ 586.285892] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 586.291071] loop_control_ioctl+0x178/0x500 [ 586.295378] ? loop_add+0x9c0/0x9c0 [ 586.299000] ? expand_files.part.8+0x9a0/0x9a0 [ 586.303576] ? kasan_check_write+0x14/0x20 [ 586.307799] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 586.312721] ? wait_for_completion+0x870/0x870 [ 586.317292] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 586.322468] ? loop_add+0x9c0/0x9c0 [ 586.326085] do_vfs_ioctl+0x1cf/0x16a0 [ 586.329968] ? ioctl_preallocate+0x2e0/0x2e0 [ 586.334365] ? fget_raw+0x20/0x20 [ 586.337807] ? __sb_end_write+0xac/0xe0 [ 586.341783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 586.347308] ? fput+0x130/0x1a0 [ 586.350575] ? ksys_write+0x1a6/0x250 [ 586.354373] ? security_file_ioctl+0x94/0xc0 [ 586.358771] ksys_ioctl+0xa9/0xd0 [ 586.362233] __x64_sys_ioctl+0x73/0xb0 [ 586.366112] do_syscall_64+0x1b1/0x800 [ 586.369986] ? finish_task_switch+0x1ca/0x840 [ 586.374490] ? syscall_return_slowpath+0x5c0/0x5c0 [ 586.379411] ? syscall_return_slowpath+0x30f/0x5c0 [ 586.384330] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 586.389687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 586.394525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.399705] RIP: 0033:0x455a09 [ 586.402882] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/22 07:23:06 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x4c00, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:06 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x0) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 586.410579] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 586.417834] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 586.425098] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 586.432355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 586.439608] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000008 2018/05/22 07:23:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) [ 586.468295] blk-mq: reduced tag depth (128 -> 64) 2018/05/22 07:23:06 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:06 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x0, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:06 executing program 0 (fault-call:2 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:06 executing program 6: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000100)=0x80) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=""/76, &(0x7f00000002c0)=0x4c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x10000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x31f) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(r3, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x0) syncfs(r0) write$rdma_cm(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB="a02409f4"], 0x8b) 2018/05/22 07:23:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:06 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x2], {0x77359400}}) [ 586.825302] FAULT_INJECTION: forcing a failure. [ 586.825302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.837257] CPU: 1 PID: 2524 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 586.844519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.853884] Call Trace: [ 586.856491] dump_stack+0x1b9/0x294 [ 586.860136] ? dump_stack_print_info.cold.2+0x52/0x52 [ 586.865343] ? find_held_lock+0x36/0x1c0 [ 586.869421] should_fail.cold.4+0xa/0x1a [ 586.873505] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 586.878646] ? graph_lock+0x170/0x170 [ 586.882460] ? lock_downgrade+0x8e0/0x8e0 [ 586.886637] ? __lock_is_held+0xb5/0x140 [ 586.890718] ? check_same_owner+0x320/0x320 [ 586.895037] ? kernel_text_address+0x79/0xf0 [ 586.899439] ? rcu_note_context_switch+0x710/0x710 [ 586.904356] ? __kernel_text_address+0xd/0x40 [ 586.908850] ? __might_sleep+0x95/0x190 [ 586.912821] __alloc_pages_nodemask+0x34e/0xd70 [ 586.917487] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 586.922490] ? save_stack+0x43/0xd0 [ 586.926103] ? kasan_kmalloc+0xc4/0xe0 [ 586.929981] ? __kmalloc_node+0x47/0x70 [ 586.933946] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 586.938513] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 586.943171] ? blk_mq_alloc_tag_set+0x612/0xab0 [ 586.947829] ? loop_control_ioctl+0x178/0x500 [ 586.952411] ? do_vfs_ioctl+0x1cf/0x16a0 [ 586.956456] ? ksys_ioctl+0xa9/0xd0 [ 586.960069] ? __x64_sys_ioctl+0x73/0xb0 [ 586.964116] ? do_syscall_64+0x1b1/0x800 [ 586.968164] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.973512] ? graph_lock+0x170/0x170 [ 586.977299] ? __lock_is_held+0xb5/0x140 [ 586.981346] ? __init_waitqueue_head+0x96/0x140 [ 586.986015] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.991542] ? find_next_bit+0x104/0x130 [ 586.995597] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 587.000601] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 587.005437] blk_mq_alloc_rqs+0x333/0x8b0 [ 587.009575] ? __kmalloc_node+0x33/0x70 [ 587.013628] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 587.018902] ? blk_mq_alloc_rq_map+0x220/0x220 [ 587.023475] ? __kmalloc_node+0x47/0x70 [ 587.027437] ? blk_mq_alloc_rq_map+0x142/0x220 [ 587.032011] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 587.036589] blk_mq_alloc_tag_set+0x612/0xab0 [ 587.041070] ? idr_alloc+0x145/0x1a0 [ 587.044784] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 587.049979] loop_add+0x2b4/0x9c0 [ 587.053416] ? loop_lookup+0x102/0x220 [ 587.057293] ? loop_queue_rq+0x640/0x640 [ 587.061941] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 587.067122] loop_control_ioctl+0x178/0x500 [ 587.071433] ? loop_add+0x9c0/0x9c0 [ 587.075049] ? expand_files.part.8+0x9a0/0x9a0 [ 587.079619] ? kasan_check_write+0x14/0x20 [ 587.083842] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 587.088766] ? wait_for_completion+0x870/0x870 [ 587.093338] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 587.098512] ? loop_add+0x9c0/0x9c0 [ 587.102128] do_vfs_ioctl+0x1cf/0x16a0 [ 587.106013] ? ioctl_preallocate+0x2e0/0x2e0 [ 587.110417] ? fget_raw+0x20/0x20 [ 587.113866] ? __sb_end_write+0xac/0xe0 [ 587.117831] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 587.123352] ? fput+0x130/0x1a0 [ 587.126617] ? ksys_write+0x1a6/0x250 [ 587.130407] ? security_file_ioctl+0x94/0xc0 [ 587.134807] ksys_ioctl+0xa9/0xd0 [ 587.138252] __x64_sys_ioctl+0x73/0xb0 [ 587.142128] do_syscall_64+0x1b1/0x800 [ 587.146006] ? finish_task_switch+0x1ca/0x840 [ 587.150495] ? syscall_return_slowpath+0x5c0/0x5c0 [ 587.155412] ? syscall_return_slowpath+0x30f/0x5c0 [ 587.160332] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 587.165684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 587.170519] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/22 07:23:06 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x298) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2b10508e, 0x10000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x2a, 0x1}) lseek(r0, 0x0, 0x3) 2018/05/22 07:23:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) [ 587.176706] RIP: 0033:0x455a09 [ 587.179881] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.187579] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 587.194833] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 587.202089] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 587.209342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 587.216595] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000009 2018/05/22 07:23:06 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:06 executing program 0 (fault-call:2 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:06 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x0, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:07 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x700, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:07 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 587.498009] FAULT_INJECTION: forcing a failure. [ 587.498009] name failslab, interval 1, probability 0, space 0, times 0 [ 587.509354] CPU: 1 PID: 2561 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 587.516544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.525890] Call Trace: [ 587.528478] dump_stack+0x1b9/0x294 [ 587.532095] ? dump_stack_print_info.cold.2+0x52/0x52 [ 587.537270] ? lock_downgrade+0x8e0/0x8e0 [ 587.541408] should_fail.cold.4+0xa/0x1a [ 587.545464] ? __lock_is_held+0xb5/0x140 [ 587.549511] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 587.554603] ? graph_lock+0x170/0x170 [ 587.558390] ? __lock_is_held+0xb5/0x140 [ 587.562438] ? find_held_lock+0x36/0x1c0 [ 587.566487] ? __lock_is_held+0xb5/0x140 [ 587.570542] ? check_same_owner+0x320/0x320 [ 587.574850] ? loop_init_request+0x7b/0x170 [ 587.579160] ? rcu_note_context_switch+0x710/0x710 [ 587.584098] ? graph_lock+0x170/0x170 [ 587.587882] ? __lock_is_held+0xb5/0x140 [ 587.591942] __should_failslab+0x124/0x180 [ 587.596166] should_failslab+0x9/0x14 [ 587.599953] kmem_cache_alloc_node+0x272/0x780 [ 587.604521] ? mark_held_locks+0xc9/0x160 [ 587.608670] ? debug_mutex_init+0x1c/0x60 [ 587.612811] blk_alloc_queue_node+0xe5/0xe40 [ 587.617210] ? blk_init_allocated_queue+0x620/0x620 [ 587.622232] ? __mutex_init+0x1ef/0x280 [ 587.626194] ? __ia32_sys_membarrier+0x150/0x150 [ 587.630943] ? blk_mq_alloc_rq_map+0x142/0x220 [ 587.635534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.641109] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 587.645865] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 587.650526] ? idr_alloc+0x145/0x1a0 [ 587.654231] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 587.659415] blk_mq_init_queue+0x4b/0xb0 [ 587.663468] loop_add+0x32b/0x9c0 [ 587.666909] ? loop_lookup+0x102/0x220 [ 587.670784] ? loop_queue_rq+0x640/0x640 [ 587.674839] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 587.680021] loop_control_ioctl+0x178/0x500 [ 587.684356] ? loop_add+0x9c0/0x9c0 [ 587.687988] ? expand_files.part.8+0x9a0/0x9a0 [ 587.692562] ? kasan_check_write+0x14/0x20 [ 587.696786] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 587.701722] ? wait_for_completion+0x870/0x870 [ 587.706294] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 587.711482] ? loop_add+0x9c0/0x9c0 [ 587.715118] do_vfs_ioctl+0x1cf/0x16a0 [ 587.719001] ? ioctl_preallocate+0x2e0/0x2e0 [ 587.723403] ? fget_raw+0x20/0x20 [ 587.726855] ? __sb_end_write+0xac/0xe0 [ 587.730832] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 587.736354] ? fput+0x130/0x1a0 [ 587.739620] ? ksys_write+0x1a6/0x250 [ 587.743412] ? security_file_ioctl+0x94/0xc0 [ 587.747809] ksys_ioctl+0xa9/0xd0 [ 587.751251] __x64_sys_ioctl+0x73/0xb0 [ 587.755130] do_syscall_64+0x1b1/0x800 [ 587.759005] ? finish_task_switch+0x1ca/0x840 [ 587.763503] ? syscall_return_slowpath+0x5c0/0x5c0 [ 587.768418] ? syscall_return_slowpath+0x30f/0x5c0 [ 587.773337] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 587.778697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 587.783530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.788707] RIP: 0033:0x455a09 [ 587.791880] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/22 07:23:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux//nforce\x00', 0x0, 0x0) [ 587.799575] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 587.806830] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 587.814096] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 587.821351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 587.828609] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000a 2018/05/22 07:23:07 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffff85, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @perf_bp, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000c47443a1d916a51000005bff0d1b709614bb34000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000004000004000000004000000000000000000000000000000000000000000000000000000000000b523e61af69746d95c4d8c2100000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:07 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x84c, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/.nforce\x00', 0x0, 0x0) 2018/05/22 07:23:07 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:07 executing program 0 (fault-call:2 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:07 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x0, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x298) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2b10508e, 0x10000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x2a, 0x1}) lseek(r0, 0x0, 0x3) [ 588.191733] FAULT_INJECTION: forcing a failure. [ 588.191733] name failslab, interval 1, probability 0, space 0, times 0 [ 588.203112] CPU: 1 PID: 2607 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 588.210312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.219679] Call Trace: [ 588.222289] dump_stack+0x1b9/0x294 [ 588.225939] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.231149] should_fail.cold.4+0xa/0x1a [ 588.235222] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.240320] ? zap_class+0x720/0x720 [ 588.244033] ? graph_lock+0x170/0x170 [ 588.247831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.253361] ? find_next_zero_bit+0x111/0x140 [ 588.257850] ? find_held_lock+0x36/0x1c0 [ 588.261909] ? __lock_is_held+0xb5/0x140 [ 588.265977] ? check_same_owner+0x320/0x320 [ 588.270295] ? rcu_note_context_switch+0x710/0x710 [ 588.275212] ? lock_downgrade+0x8e0/0x8e0 [ 588.279362] __should_failslab+0x124/0x180 [ 588.283590] should_failslab+0x9/0x14 [ 588.287380] kmem_cache_alloc_trace+0x2cb/0x780 [ 588.292048] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 588.297250] bioset_create+0xa8/0x900 [ 588.301048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.306579] ? bioset_free+0x320/0x320 [ 588.310479] ? debug_mutex_init+0x1c/0x60 [ 588.314636] blk_alloc_queue_node+0x16e/0xe40 [ 588.319138] ? blk_init_allocated_queue+0x620/0x620 [ 588.324150] ? __mutex_init+0x1ef/0x280 [ 588.328120] ? __ia32_sys_membarrier+0x150/0x150 [ 588.332883] ? blk_mq_alloc_rq_map+0x142/0x220 [ 588.337477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.343012] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 588.347769] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 588.352439] ? idr_alloc+0x145/0x1a0 [ 588.356355] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 588.361543] blk_mq_init_queue+0x4b/0xb0 [ 588.365605] loop_add+0x32b/0x9c0 [ 588.369046] ? loop_lookup+0x102/0x220 [ 588.372925] ? loop_queue_rq+0x640/0x640 [ 588.376983] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 588.382166] loop_control_ioctl+0x178/0x500 [ 588.386476] ? loop_add+0x9c0/0x9c0 [ 588.390092] ? expand_files.part.8+0x9a0/0x9a0 [ 588.394678] ? kasan_check_write+0x14/0x20 [ 588.398905] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 588.403829] ? wait_for_completion+0x870/0x870 [ 588.408404] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 588.413594] ? loop_add+0x9c0/0x9c0 [ 588.417216] do_vfs_ioctl+0x1cf/0x16a0 [ 588.421102] ? ioctl_preallocate+0x2e0/0x2e0 [ 588.425503] ? fget_raw+0x20/0x20 [ 588.428962] ? __sb_end_write+0xac/0xe0 [ 588.432930] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 588.438455] ? fput+0x130/0x1a0 [ 588.441726] ? ksys_write+0x1a6/0x250 [ 588.445524] ? security_file_ioctl+0x94/0xc0 [ 588.449929] ksys_ioctl+0xa9/0xd0 [ 588.453379] __x64_sys_ioctl+0x73/0xb0 [ 588.457259] do_syscall_64+0x1b1/0x800 [ 588.461134] ? finish_task_switch+0x1ca/0x840 [ 588.465621] ? syscall_return_slowpath+0x5c0/0x5c0 [ 588.470544] ? syscall_return_slowpath+0x30f/0x5c0 [ 588.475468] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 588.480825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.485667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.490846] RIP: 0033:0x455a09 [ 588.494028] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.501729] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 588.508986] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 588.516258] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 588.523515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 588.530771] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000b 2018/05/22 07:23:08 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:08 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x80a, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:08 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000dfffed03753937111a7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130235de4c060e3585faee0383f55f8e747f486a1ace1e8d0652556aca"], @ANYRES32=0xffffffff, @ANYBLOB="ede87ba237160000933f57bdebdb37556aa37c09039f7402153528c12c3abf71bf2a625324657d218abb233708f6c90f782fc686c78f03b65399dc6120e91898b81dfa0d254cfb18967559ad1d2f040037c4401a4f8dcbdfa1a79fe182fcf58b956b742949f2e0084f789ea4d1fc3d2f1ce7181b2e637c5fe1389bd1669eadbad76d014c8e3e8b2e82259d0fc1769e2489ff607af0351c59811710f05a896cb2ffd32ce22394feb830726bf26744c674d3e5b305243f8da9682a2294"], 0x8b) 2018/05/22 07:23:08 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:08 executing program 0 (fault-call:2 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:08 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:08 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:08 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)="2f73656c696e75782f656e666f72636502", 0x0, 0x0) [ 588.712292] FAULT_INJECTION: forcing a failure. [ 588.712292] name failslab, interval 1, probability 0, space 0, times 0 [ 588.723783] CPU: 0 PID: 2640 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 588.730991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.740358] Call Trace: [ 588.742973] dump_stack+0x1b9/0x294 [ 588.746624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.751827] ? zap_class+0x720/0x720 [ 588.755568] should_fail.cold.4+0xa/0x1a 2018/05/22 07:23:08 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:08 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfdfdffff], {0x77359400}}) [ 588.759667] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.764792] ? mutex_trylock+0x2a0/0x2a0 [ 588.768871] ? graph_lock+0x170/0x170 [ 588.772686] ? find_held_lock+0x36/0x1c0 [ 588.776761] ? find_held_lock+0x36/0x1c0 [ 588.780839] ? __lock_is_held+0xb5/0x140 [ 588.784926] ? check_same_owner+0x320/0x320 [ 588.789262] ? print_usage_bug+0xc0/0xc0 [ 588.793336] ? graph_lock+0x170/0x170 [ 588.797185] ? __lock_is_held+0xb5/0x140 [ 588.801271] ? rcu_note_context_switch+0x710/0x710 [ 588.806228] __should_failslab+0x124/0x180 [ 588.810484] should_failslab+0x9/0x14 [ 588.814296] kmem_cache_alloc_node_trace+0x26f/0x770 [ 588.819403] ? mempool_free+0x370/0x370 [ 588.823383] mempool_create_node+0x84/0x610 [ 588.827698] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 588.832709] ? mempool_alloc_slab+0x60/0x60 [ 588.837029] ? mempool_free+0x370/0x370 [ 588.841097] ? mempool_alloc_slab+0x60/0x60 [ 588.845435] mempool_create+0x37/0x40 [ 588.849235] bioset_create+0x477/0x900 [ 588.853117] ? bioset_free+0x320/0x320 [ 588.856996] ? debug_mutex_init+0x1c/0x60 [ 588.861148] blk_alloc_queue_node+0x16e/0xe40 [ 588.865635] ? blk_init_allocated_queue+0x620/0x620 [ 588.870641] ? __mutex_init+0x1ef/0x280 [ 588.874606] ? __ia32_sys_membarrier+0x150/0x150 [ 588.879356] ? blk_mq_alloc_rq_map+0x142/0x220 [ 588.883929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.889467] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 588.894221] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 588.898888] ? idr_alloc+0x145/0x1a0 [ 588.902594] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 588.907778] blk_mq_init_queue+0x4b/0xb0 [ 588.911831] loop_add+0x32b/0x9c0 [ 588.915268] ? loop_lookup+0x102/0x220 [ 588.919148] ? loop_queue_rq+0x640/0x640 [ 588.923220] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 588.928574] loop_control_ioctl+0x178/0x500 [ 588.932881] ? loop_add+0x9c0/0x9c0 [ 588.936520] ? expand_files.part.8+0x9a0/0x9a0 [ 588.941095] ? kasan_check_write+0x14/0x20 [ 588.945336] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 588.950259] ? wait_for_completion+0x870/0x870 [ 588.954832] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 588.960018] ? loop_add+0x9c0/0x9c0 [ 588.963645] do_vfs_ioctl+0x1cf/0x16a0 [ 588.967535] ? ioctl_preallocate+0x2e0/0x2e0 [ 588.971949] ? fget_raw+0x20/0x20 [ 588.975393] ? __sb_end_write+0xac/0xe0 [ 588.979358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 588.984886] ? fput+0x130/0x1a0 [ 588.988154] ? ksys_write+0x1a6/0x250 [ 588.991949] ? security_file_ioctl+0x94/0xc0 [ 588.996350] ksys_ioctl+0xa9/0xd0 [ 588.999792] __x64_sys_ioctl+0x73/0xb0 [ 589.003668] do_syscall_64+0x1b1/0x800 [ 589.007545] ? finish_task_switch+0x1ca/0x840 [ 589.012038] ? syscall_return_slowpath+0x5c0/0x5c0 [ 589.016959] ? syscall_return_slowpath+0x30f/0x5c0 [ 589.021884] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 589.027250] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.032089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.037277] RIP: 0033:0x455a09 [ 589.040452] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.048154] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 589.055425] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:08 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:08 executing program 6: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000002c0)=""/234, &(0x7f0000000080)=0xea) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5d9201f5b4de959c", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18) [ 589.062716] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 589.069986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 589.077257] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000c [ 589.136225] FAULT_INJECTION: forcing a failure. [ 589.136225] name failslab, interval 1, probability 0, space 0, times 0 [ 589.147702] CPU: 1 PID: 2658 Comm: syz-executor4 Not tainted 4.17.0-rc6+ #63 [ 589.154910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.164280] Call Trace: [ 589.166903] dump_stack+0x1b9/0x294 [ 589.170562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.175793] should_fail.cold.4+0xa/0x1a [ 589.179892] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.185028] ? lock_acquire+0x1dc/0x520 [ 589.189048] ? perf_trace_lock+0xd6/0x900 [ 589.193205] ? find_held_lock+0x36/0x1c0 [ 589.197277] ? check_same_owner+0x320/0x320 [ 589.201595] ? rcu_note_context_switch+0x710/0x710 [ 589.206515] ? graph_lock+0x170/0x170 [ 589.210308] __should_failslab+0x124/0x180 [ 589.214536] should_failslab+0x9/0x14 [ 589.218328] __kmalloc_track_caller+0x2c4/0x760 [ 589.222994] ? lock_downgrade+0x8e0/0x8e0 [ 589.227135] ? snd_ctl_ioctl+0x25d/0x1120 [ 589.231277] memdup_user+0x2c/0xa0 [ 589.234810] snd_ctl_ioctl+0x25d/0x1120 [ 589.238778] ? snd_ctl_elem_add_user+0x170/0x170 [ 589.243532] ? __fget+0x40c/0x650 [ 589.246979] ? match_held_lock+0x881/0x8b0 [ 589.251223] ? expand_files.part.8+0x9a0/0x9a0 [ 589.255801] ? kasan_check_write+0x14/0x20 [ 589.260034] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 589.264974] ? wait_for_completion+0x870/0x870 [ 589.269551] ? snd_ctl_elem_add_user+0x170/0x170 [ 589.274308] do_vfs_ioctl+0x1cf/0x16a0 [ 589.278209] ? ioctl_preallocate+0x2e0/0x2e0 [ 589.282619] ? fget_raw+0x20/0x20 [ 589.286071] ? __sb_end_write+0xac/0xe0 [ 589.290046] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 589.295585] ? fput+0x130/0x1a0 [ 589.298872] ? ksys_write+0x1a6/0x250 [ 589.302683] ? security_file_ioctl+0x94/0xc0 [ 589.307100] ksys_ioctl+0xa9/0xd0 [ 589.310551] __x64_sys_ioctl+0x73/0xb0 [ 589.314526] do_syscall_64+0x1b1/0x800 [ 589.318407] ? finish_task_switch+0x1ca/0x840 [ 589.322897] ? syscall_return_slowpath+0x5c0/0x5c0 [ 589.327824] ? syscall_return_slowpath+0x30f/0x5c0 [ 589.332751] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 589.338113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.342951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.348128] RIP: 0033:0x455a09 [ 589.351306] RSP: 002b:00007fd858331c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.359028] RAX: ffffffffffffffda RBX: 00007fd8583326d4 RCX: 0000000000455a09 [ 589.366286] RDX: 00000000200001c0 RSI: 00000000c4c85513 RDI: 0000000000000013 [ 589.373544] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/22 07:23:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x2000000], {0x77359400}}) 2018/05/22 07:23:09 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000ac0)=@reject={0x9, 0x108, 0xfa00, {0xffffffff, 0x73, "d246f1", "bcb05dbb8467f2b52e54f8307de920b4a65214c0b0eab8cef51b26718b93e2921a4b3f930d09fe49b3e15280eba196fc461248aa994dc092839b71d48cd273726132ea5f6eb1e0d5bce90db97c178204eb6b584552c6903d7e5952a400c68ef0d5dad46fffcbbdf14ead49215bb067a483ccff55d1aebe57a7f6c7b924034d059fa75a67cea0e226990f775740c388856ff7c21981f27d0f4b244228cfced7294f1c0ba294abe1cda46b1908438b0d85c4244769a021cc184663716134c272cb64fa359ad7090e5c1d08900e3d0497ead14af74a26d8dab968deb8663b71e36725a59b00ef93aa161cadbefdda9a22551c657d42cb08337aacecc9620c045c54"}}, 0xfffffffffffffe3b) [ 589.380811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 589.388067] R13: 00000000000002fa R14: 00000000006f8810 R15: 0000000000000000 2018/05/22 07:23:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)="2f73656c696e75782f656e666f726365f6", 0x0, 0x0) 2018/05/22 07:23:09 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:09 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x2], {0x77359400}}) 2018/05/22 07:23:09 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a600000000f500000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB="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"], 0x8b) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) 2018/05/22 07:23:09 executing program 0 (fault-call:2 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:09 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:09 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x0, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:09 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:09 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:09 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 589.767718] FAULT_INJECTION: forcing a failure. [ 589.767718] name failslab, interval 1, probability 0, space 0, times 0 [ 589.779505] CPU: 0 PID: 2716 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 589.786909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.796281] Call Trace: [ 589.798891] dump_stack+0x1b9/0x294 [ 589.802543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.807758] ? zap_class+0x720/0x720 [ 589.811500] should_fail.cold.4+0xa/0x1a [ 589.815586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.820705] ? mutex_trylock+0x2a0/0x2a0 [ 589.824774] ? graph_lock+0x170/0x170 [ 589.828568] ? find_held_lock+0x36/0x1c0 [ 589.832620] ? find_held_lock+0x36/0x1c0 [ 589.836674] ? __lock_is_held+0xb5/0x140 [ 589.840751] ? check_same_owner+0x320/0x320 [ 589.845086] ? print_usage_bug+0xc0/0xc0 [ 589.849147] ? graph_lock+0x170/0x170 [ 589.852941] ? __lock_is_held+0xb5/0x140 [ 589.856998] ? rcu_note_context_switch+0x710/0x710 [ 589.861952] __should_failslab+0x124/0x180 [ 589.866208] should_failslab+0x9/0x14 [ 589.870039] kmem_cache_alloc_node_trace+0x26f/0x770 [ 589.875168] ? mempool_free+0x370/0x370 [ 589.879156] mempool_create_node+0x84/0x610 [ 589.883472] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 589.888489] ? mempool_alloc_slab+0x60/0x60 [ 589.892804] ? mempool_free+0x370/0x370 [ 589.896769] ? mempool_alloc_slab+0x60/0x60 [ 589.901085] mempool_create+0x37/0x40 [ 589.904881] bioset_create+0x477/0x900 [ 589.908779] ? bioset_free+0x320/0x320 [ 589.912660] ? debug_mutex_init+0x1c/0x60 [ 589.916802] blk_alloc_queue_node+0x16e/0xe40 [ 589.921293] ? blk_init_allocated_queue+0x620/0x620 [ 589.926302] ? __mutex_init+0x1ef/0x280 [ 589.930265] ? __ia32_sys_membarrier+0x150/0x150 [ 589.935022] ? blk_mq_alloc_rq_map+0x142/0x220 [ 589.939616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.945144] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 589.949891] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 589.954549] ? idr_alloc+0x145/0x1a0 [ 589.958256] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 589.963459] blk_mq_init_queue+0x4b/0xb0 [ 589.967521] loop_add+0x32b/0x9c0 [ 589.970965] ? loop_lookup+0x102/0x220 [ 589.974844] ? loop_queue_rq+0x640/0x640 [ 589.978911] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 589.984119] loop_control_ioctl+0x178/0x500 [ 589.988430] ? loop_add+0x9c0/0x9c0 [ 589.992058] ? expand_files.part.8+0x9a0/0x9a0 [ 589.996643] ? kasan_check_write+0x14/0x20 [ 590.000882] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 590.005810] ? wait_for_completion+0x870/0x870 [ 590.010383] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 590.015571] ? loop_add+0x9c0/0x9c0 [ 590.019189] do_vfs_ioctl+0x1cf/0x16a0 [ 590.023073] ? ioctl_preallocate+0x2e0/0x2e0 [ 590.027482] ? fget_raw+0x20/0x20 [ 590.030926] ? __sb_end_write+0xac/0xe0 [ 590.034892] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 590.040434] ? fput+0x130/0x1a0 [ 590.043727] ? ksys_write+0x1a6/0x250 [ 590.047532] ? security_file_ioctl+0x94/0xc0 [ 590.051936] ksys_ioctl+0xa9/0xd0 [ 590.055382] __x64_sys_ioctl+0x73/0xb0 [ 590.059265] do_syscall_64+0x1b1/0x800 [ 590.063142] ? finish_task_switch+0x1ca/0x840 [ 590.067625] ? syscall_return_slowpath+0x5c0/0x5c0 [ 590.072542] ? syscall_return_slowpath+0x30f/0x5c0 [ 590.077463] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 590.082826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.087662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.092838] RIP: 0033:0x455a09 [ 590.096023] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.103739] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 590.111000] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 590.118286] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 590.125550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 590.132827] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000d 2018/05/22 07:23:09 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)="2f73656c696e75782f656e666f726365ff", 0x0, 0x0) 2018/05/22 07:23:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:09 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00002000000000000000f4ff000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:09 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:09 executing program 0 (fault-call:2 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x200000000000000], {0x77359400}}) 2018/05/22 07:23:09 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551a, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:10 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYBLOB="944909ac47b327a4180a6ee6d18b9204bd0372ed5a8f6891145c15c1ffd046a20e02a2fe84c059bd11ca8330164d763baa748307b0c5a8d59122909918a2a134b2e84291c85d3c577a892f8c9681d4428e5fec5a4bf241b1493897459660e5813eeeae14bb58f25621be53c1ca940d66330c179fe0547d59ba31071d122491a768a14070ddec13449be74da5cc", @ANYPTR64, @ANYBLOB="c4be10f864f6212676ec4421a2b9", @ANYBLOB="fc36c98596600089252f4755f55d89cec9db425b0f344f27732d761645596a0c1b5dbe5c669220f1c5b9de65f4ea64b4b08222021d439841235b6da6c2217c3e11f781a81bec8f5e4dbb3e0fa093fa84111187c678c7416abac8b0df3664795e3a99bd620806a85bd755fe447ec90f488cf5d361bd97383bd3d92948d792c3bc7497b4f04a1cf0b544c63d71a90d3fbb096ec42eb3323807ede1cad2ed2b1e6ad8541117d610ffd7649d5cef4c2b857cf6139bbc80bd85873566d13f6da8719df231f8fd8c8883505fe57e9aec403324b642593cb1ec8942cf6768df4c45d814590f979e5ca2e3e8ee", @ANYPTR, @ANYRES64=r1, @ANYRES32=r1, @ANYPTR, @ANYPTR], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="69cc6d3f398779585299490e2e3855bacfd03533ede0", @ANYRES64=r1, @ANYPTR64], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="4416e545277a2f06681ef21499333cea3229723b4e744f666617c7ed086c0eddbc81c91293bf20f136354ea6694730cdeb683d492651991c5443c98069f6a833e9f198252c26798b5fe703328423bbd5db5922", @ANYRES32=r1, @ANYPTR64]], @ANYRES64=r0], 0x14) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfff, 0x80) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000200)={0x1, [0x598]}) 2018/05/22 07:23:10 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x2, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:10 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 590.536720] FAULT_INJECTION: forcing a failure. [ 590.536720] name failslab, interval 1, probability 0, space 0, times 0 [ 590.548096] CPU: 1 PID: 2768 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 590.555297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.564657] Call Trace: [ 590.567254] dump_stack+0x1b9/0x294 [ 590.570878] ? dump_stack_print_info.cold.2+0x52/0x52 [ 590.576069] ? is_bpf_text_address+0xd7/0x170 [ 590.580565] should_fail.cold.4+0xa/0x1a [ 590.584627] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 590.589729] ? graph_lock+0x170/0x170 [ 590.593640] ? save_stack+0xa9/0xd0 [ 590.597268] ? print_usage_bug+0xc0/0xc0 [ 590.601437] ? kasan_kmalloc+0xc4/0xe0 [ 590.605323] ? find_held_lock+0x36/0x1c0 [ 590.609390] ? __lock_is_held+0xb5/0x140 [ 590.613455] ? check_same_owner+0x320/0x320 [ 590.617775] ? rcu_note_context_switch+0x710/0x710 [ 590.622694] ? __lockdep_init_map+0x105/0x590 [ 590.627185] __should_failslab+0x124/0x180 [ 590.631429] ? mempool_free+0x370/0x370 [ 590.635393] should_failslab+0x9/0x14 [ 590.639188] kmem_cache_alloc+0x2af/0x760 [ 590.643340] ? init_wait_entry+0x1b0/0x1b0 [ 590.647572] ? mempool_free+0x370/0x370 [ 590.651539] mempool_alloc_slab+0x44/0x60 [ 590.655683] mempool_create_node+0x2cf/0x610 [ 590.660090] ? mempool_free+0x370/0x370 [ 590.664063] ? mempool_alloc_slab+0x60/0x60 [ 590.668380] mempool_create+0x37/0x40 [ 590.672190] bioset_create+0x477/0x900 [ 590.676074] ? bioset_free+0x320/0x320 [ 590.679970] ? debug_mutex_init+0x1c/0x60 [ 590.684117] blk_alloc_queue_node+0x16e/0xe40 [ 590.688610] ? blk_init_allocated_queue+0x620/0x620 [ 590.693642] ? __mutex_init+0x1ef/0x280 [ 590.697612] ? __ia32_sys_membarrier+0x150/0x150 [ 590.702369] ? blk_mq_alloc_rq_map+0x142/0x220 [ 590.706950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.712489] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 590.717244] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 590.721909] ? idr_alloc+0x145/0x1a0 [ 590.725620] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 590.730812] blk_mq_init_queue+0x4b/0xb0 [ 590.734869] loop_add+0x32b/0x9c0 [ 590.738314] ? loop_lookup+0x102/0x220 [ 590.742191] ? loop_queue_rq+0x640/0x640 [ 590.746337] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 590.751529] loop_control_ioctl+0x178/0x500 [ 590.755851] ? loop_add+0x9c0/0x9c0 [ 590.759472] ? expand_files.part.8+0x9a0/0x9a0 [ 590.764050] ? kasan_check_write+0x14/0x20 [ 590.768286] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 590.773213] ? wait_for_completion+0x870/0x870 [ 590.777797] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 590.783004] ? loop_add+0x9c0/0x9c0 [ 590.786633] do_vfs_ioctl+0x1cf/0x16a0 [ 590.790517] ? ioctl_preallocate+0x2e0/0x2e0 [ 590.794918] ? fget_raw+0x20/0x20 [ 590.798379] ? __sb_end_write+0xac/0xe0 [ 590.802350] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 590.807878] ? fput+0x130/0x1a0 [ 590.811148] ? ksys_write+0x1a6/0x250 [ 590.814944] ? security_file_ioctl+0x94/0xc0 [ 590.819351] ksys_ioctl+0xa9/0xd0 [ 590.822809] __x64_sys_ioctl+0x73/0xb0 [ 590.826688] do_syscall_64+0x1b1/0x800 [ 590.830579] ? finish_task_switch+0x1ca/0x840 [ 590.835072] ? syscall_return_slowpath+0x5c0/0x5c0 [ 590.840009] ? syscall_return_slowpath+0x30f/0x5c0 [ 590.844943] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 590.850318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.855172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.860361] RIP: 0033:0x455a09 [ 590.863541] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.871251] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 590.878513] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x100000000000000], {0x77359400}}) [ 590.885773] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 590.893041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 590.900391] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000e 2018/05/22 07:23:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5460, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:10 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x11, 0xb, 0x1ff) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x4) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="e99d4450302b20a9eee231a8769c174e1fb86c307f337c0090d1d0f56284135fe4580827a8897c6e8dfcfcfa755627b8327b39c390eadee06e14ba93a87ee4f18bdf36b0383e", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="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"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x20003) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) 2018/05/22 07:23:10 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:10 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:10 executing program 0 (fault-call:2 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:10 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x3, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x1000000], {0x77359400}}) 2018/05/22 07:23:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x81785501, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:10 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000f80)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000f40), 0x13f, 0x100f}}, 0x20) write$rdma_cm(r0, &(0x7f0000006b40)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000006b00)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000001100)=@listen={0x7, 0x0, 0xfa00, {r1, 0x7}}, 0x21a) 2018/05/22 07:23:10 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:10 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x2000000], {0x77359400}}) [ 591.350293] FAULT_INJECTION: forcing a failure. [ 591.350293] name failslab, interval 1, probability 0, space 0, times 0 [ 591.361641] CPU: 1 PID: 2831 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 591.368963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.378337] Call Trace: [ 591.380955] dump_stack+0x1b9/0x294 [ 591.384613] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.389830] ? __save_stack_trace+0x7e/0xd0 [ 591.394188] should_fail.cold.4+0xa/0x1a [ 591.398279] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.403427] ? kasan_kmalloc+0xc4/0xe0 [ 591.407520] ? kasan_slab_alloc+0x12/0x20 [ 591.411759] ? kmem_cache_alloc+0x12e/0x760 [ 591.416265] ? mempool_alloc_slab+0x44/0x60 [ 591.420580] ? mempool_create_node+0x2cf/0x610 [ 591.425163] ? mempool_create+0x37/0x40 [ 591.429144] ? bioset_create+0x477/0x900 [ 591.433212] ? graph_lock+0x170/0x170 [ 591.437007] ? do_vfs_ioctl+0x1cf/0x16a0 [ 591.441072] ? ksys_ioctl+0xa9/0xd0 [ 591.444694] ? __x64_sys_ioctl+0x73/0xb0 [ 591.448765] ? do_syscall_64+0x1b1/0x800 [ 591.452828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.458195] ? find_held_lock+0x36/0x1c0 [ 591.462255] ? __lock_is_held+0xb5/0x140 [ 591.466501] ? check_same_owner+0x320/0x320 [ 591.470823] ? rcu_note_context_switch+0x710/0x710 [ 591.475769] __should_failslab+0x124/0x180 [ 591.480183] ? mempool_free+0x370/0x370 [ 591.484153] should_failslab+0x9/0x14 [ 591.487948] kmem_cache_alloc+0x2af/0x760 [ 591.492108] ? init_wait_entry+0x1b0/0x1b0 [ 591.496355] ? mempool_alloc_slab+0x44/0x60 [ 591.500675] ? mempool_free+0x370/0x370 [ 591.504650] mempool_alloc_slab+0x44/0x60 [ 591.508805] mempool_create_node+0x2cf/0x610 [ 591.513215] ? mempool_free+0x370/0x370 [ 591.517184] ? mempool_alloc_slab+0x60/0x60 [ 591.521503] mempool_create+0x37/0x40 [ 591.525301] bioset_create+0x477/0x900 [ 591.529196] ? bioset_free+0x320/0x320 [ 591.533079] ? debug_mutex_init+0x1c/0x60 [ 591.537223] blk_alloc_queue_node+0x16e/0xe40 [ 591.541715] ? blk_init_allocated_queue+0x620/0x620 [ 591.546730] ? __mutex_init+0x1ef/0x280 [ 591.550705] ? __ia32_sys_membarrier+0x150/0x150 [ 591.555818] ? blk_mq_alloc_rq_map+0x142/0x220 [ 591.560410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.566041] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 591.570889] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 591.575730] ? idr_alloc+0x145/0x1a0 [ 591.579449] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 591.584652] blk_mq_init_queue+0x4b/0xb0 [ 591.588710] loop_add+0x32b/0x9c0 [ 591.592154] ? loop_lookup+0x102/0x220 [ 591.596049] ? loop_queue_rq+0x640/0x640 [ 591.600118] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 591.605303] loop_control_ioctl+0x178/0x500 [ 591.609617] ? loop_add+0x9c0/0x9c0 [ 591.613238] ? expand_files.part.8+0x9a0/0x9a0 [ 591.617832] ? kasan_check_write+0x14/0x20 [ 591.622060] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 591.626984] ? wait_for_completion+0x870/0x870 [ 591.631561] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 591.636743] ? loop_add+0x9c0/0x9c0 [ 591.640384] do_vfs_ioctl+0x1cf/0x16a0 [ 591.644280] ? ioctl_preallocate+0x2e0/0x2e0 [ 591.648696] ? fget_raw+0x20/0x20 [ 591.652147] ? __sb_end_write+0xac/0xe0 [ 591.656139] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 591.661961] ? fput+0x130/0x1a0 [ 591.665264] ? ksys_write+0x1a6/0x250 [ 591.669095] ? security_file_ioctl+0x94/0xc0 [ 591.673501] ksys_ioctl+0xa9/0xd0 [ 591.676959] __x64_sys_ioctl+0x73/0xb0 [ 591.680861] do_syscall_64+0x1b1/0x800 [ 591.684756] ? finish_task_switch+0x1ca/0x840 [ 591.689251] ? syscall_return_slowpath+0x5c0/0x5c0 [ 591.694179] ? syscall_return_slowpath+0x30f/0x5c0 [ 591.699125] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 591.704492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.709337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.714521] RIP: 0033:0x455a09 [ 591.717711] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.725415] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 591.732678] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 591.740734] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/22 07:23:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x1000000], {0x77359400}}) [ 591.747994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 591.755262] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000000f 2018/05/22 07:23:11 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0505510, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:11 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1000000, 0x0) 2018/05/22 07:23:11 executing program 0 (fault-call:2 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:11 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r2 = dup(r1) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x4b, 0x7f}) 2018/05/22 07:23:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:11 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:11 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x60, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:11 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1400, 0x0) 2018/05/22 07:23:11 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) r3 = memfd_create(&(0x7f0000000440)='*wlan0\x00', 0x1) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000004c0)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000480)={0x3763, 0x1, 0x7, 0xfffffffffffff2a5, 0x4786, 0x7}) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x4, 0xfc, 0x5, 0x0, 0x0, 0x1, 0x80002, 0x0, 0x6, 0x401, 0x200, 0x6, 0x0, 0xc91, 0x6, 0x7, 0x8000, 0x1, 0x3, 0x2, 0xc82b, 0x949, 0x1, 0xffffffff, 0x9, 0x3, 0x200, 0x3, 0x3, 0x4, 0x4, 0x9ce, 0x80, 0x5, 0x13e, 0x7, 0x0, 0x7f, 0x2, @perf_config_ext={0x100000000, 0x3}, 0x10, 0x10000, 0x1, 0x7, 0x0, 0x3, 0x56}, r2, 0x0, r1, 0x1) socketpair(0x11, 0x80003, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000400)={r5, &(0x7f0000000340)=""/177}) 2018/05/22 07:23:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551c, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfffffdfd], {0x77359400}}) [ 592.203060] FAULT_INJECTION: forcing a failure. [ 592.203060] name failslab, interval 1, probability 0, space 0, times 0 [ 592.214584] CPU: 1 PID: 2889 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 592.221767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.231122] Call Trace: [ 592.233717] dump_stack+0x1b9/0x294 [ 592.237361] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.242546] ? __save_stack_trace+0x7e/0xd0 [ 592.246873] should_fail.cold.4+0xa/0x1a [ 592.250928] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.256040] ? kasan_kmalloc+0xc4/0xe0 [ 592.259918] ? kasan_slab_alloc+0x12/0x20 [ 592.264058] ? kmem_cache_alloc+0x12e/0x760 [ 592.268371] ? mempool_alloc_slab+0x44/0x60 [ 592.272685] ? mempool_create_node+0x2cf/0x610 [ 592.277259] ? mempool_create+0x37/0x40 [ 592.281224] ? bioset_create+0x477/0x900 [ 592.285276] ? graph_lock+0x170/0x170 [ 592.289095] ? do_vfs_ioctl+0x1cf/0x16a0 [ 592.293145] ? ksys_ioctl+0xa9/0xd0 [ 592.296761] ? __x64_sys_ioctl+0x73/0xb0 [ 592.300813] ? do_syscall_64+0x1b1/0x800 [ 592.304870] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.310226] ? find_held_lock+0x36/0x1c0 [ 592.314284] ? __lock_is_held+0xb5/0x140 [ 592.318351] ? check_same_owner+0x320/0x320 [ 592.322669] ? rcu_note_context_switch+0x710/0x710 [ 592.327594] __should_failslab+0x124/0x180 [ 592.331914] ? mempool_free+0x370/0x370 [ 592.335880] should_failslab+0x9/0x14 [ 592.339672] kmem_cache_alloc+0x2af/0x760 [ 592.343815] ? init_wait_entry+0x1b0/0x1b0 [ 592.348044] ? mempool_alloc_slab+0x44/0x60 [ 592.352358] ? mempool_free+0x370/0x370 [ 592.356327] mempool_alloc_slab+0x44/0x60 [ 592.360466] mempool_create_node+0x2cf/0x610 [ 592.364867] ? mempool_free+0x370/0x370 [ 592.368831] ? mempool_alloc_slab+0x60/0x60 [ 592.373146] mempool_create+0x37/0x40 [ 592.376987] bioset_create+0x477/0x900 [ 592.380870] ? bioset_free+0x320/0x320 [ 592.384747] ? debug_mutex_init+0x1c/0x60 [ 592.388885] blk_alloc_queue_node+0x16e/0xe40 [ 592.393376] ? blk_init_allocated_queue+0x620/0x620 [ 592.398385] ? __mutex_init+0x1ef/0x280 [ 592.402351] ? __ia32_sys_membarrier+0x150/0x150 [ 592.407102] ? blk_mq_alloc_rq_map+0x142/0x220 [ 592.411682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.417211] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 592.421961] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 592.426620] ? idr_alloc+0x145/0x1a0 [ 592.430335] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 592.435538] blk_mq_init_queue+0x4b/0xb0 [ 592.439603] loop_add+0x32b/0x9c0 [ 592.443052] ? loop_lookup+0x102/0x220 [ 592.446926] ? loop_queue_rq+0x640/0x640 [ 592.450982] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 592.456164] loop_control_ioctl+0x178/0x500 [ 592.460474] ? loop_add+0x9c0/0x9c0 [ 592.464102] ? expand_files.part.8+0x9a0/0x9a0 [ 592.468673] ? kasan_check_write+0x14/0x20 [ 592.472896] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 592.477817] ? wait_for_completion+0x870/0x870 [ 592.482478] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 592.487655] ? loop_add+0x9c0/0x9c0 [ 592.491289] do_vfs_ioctl+0x1cf/0x16a0 [ 592.495176] ? ioctl_preallocate+0x2e0/0x2e0 [ 592.499578] ? fget_raw+0x20/0x20 [ 592.503027] ? __sb_end_write+0xac/0xe0 [ 592.507001] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 592.512543] ? fput+0x130/0x1a0 [ 592.515810] ? ksys_write+0x1a6/0x250 [ 592.519605] ? security_file_ioctl+0x94/0xc0 [ 592.524004] ksys_ioctl+0xa9/0xd0 [ 592.527454] __x64_sys_ioctl+0x73/0xb0 [ 592.531337] do_syscall_64+0x1b1/0x800 [ 592.535211] ? finish_task_switch+0x1ca/0x840 [ 592.539703] ? syscall_return_slowpath+0x5c0/0x5c0 [ 592.544622] ? syscall_return_slowpath+0x30f/0x5c0 [ 592.549544] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 592.554901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.559736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.564910] RIP: 0033:0x455a09 [ 592.568096] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.575790] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 592.583049] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 592.590332] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 592.597588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/22 07:23:12 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:12 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:12 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xfffffff6, 0x0) 2018/05/22 07:23:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc020660b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:12 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x20, {0x2, 0x4e23, @loopback=0x7f000001}, 'veth1_to_bridge\x00'}) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:12 executing program 0 (fault-call:2 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x100000000000000], {0x77359400}}) [ 592.604858] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000010 2018/05/22 07:23:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x800455d1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:12 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000000000000, 0x0) 2018/05/22 07:23:12 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:12 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8001, 0x800) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f00000000c0)=0x44) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0xda) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xd, 0x5, "085f10b0a18ec6c06ad075d3a369597a29fe09aa9b2cff6d886f1bab8dc789cf6ab3d3ffdfee3fca5a2f1060185cbe22f98ca73c6a08204dbea4506a13a1acc3", "f25098cfde4c35f6b464c266b54376c59d7c2cd45721e334b4064378a6c56b04", [0x80000001, 0x80]}) 2018/05/22 07:23:12 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40049409, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:12 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xfdffffff, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) [ 592.995257] FAULT_INJECTION: forcing a failure. [ 592.995257] name failslab, interval 1, probability 0, space 0, times 0 [ 593.006724] CPU: 0 PID: 2943 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 593.013922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.023292] Call Trace: [ 593.025909] dump_stack+0x1b9/0x294 [ 593.029564] ? dump_stack_print_info.cold.2+0x52/0x52 [ 593.034770] should_fail.cold.4+0xa/0x1a [ 593.038847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 593.043974] ? kmem_cache_alloc+0x12e/0x760 [ 593.048310] ? mempool_alloc_slab+0x44/0x60 [ 593.052650] ? mempool_create_node+0x2cf/0x610 [ 593.057249] ? mempool_create+0x37/0x40 [ 593.061238] ? bioset_create+0x477/0x900 [ 593.065308] ? blk_alloc_queue_node+0x16e/0xe40 [ 593.069985] ? blk_mq_init_queue+0x4b/0xb0 [ 593.074236] ? graph_lock+0x170/0x170 [ 593.078059] ? __x64_sys_ioctl+0x73/0xb0 [ 593.082126] ? do_syscall_64+0x1b1/0x800 [ 593.086191] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.091561] ? find_held_lock+0x36/0x1c0 [ 593.095615] ? __lock_is_held+0xb5/0x140 [ 593.099675] ? check_same_owner+0x320/0x320 [ 593.103997] ? __lock_is_held+0xb5/0x140 [ 593.108064] ? rcu_note_context_switch+0x710/0x710 [ 593.112989] __should_failslab+0x124/0x180 [ 593.117245] should_failslab+0x9/0x14 [ 593.121051] kmem_cache_alloc_node_trace+0x26f/0x770 [ 593.126157] ? init_wait_entry+0x1b0/0x1b0 [ 593.130395] ? mempool_alloc_slab+0x44/0x60 [ 593.134717] ? mempool_free+0x370/0x370 [ 593.138680] mempool_create_node+0x84/0x610 [ 593.142993] ? mempool_alloc_slab+0x60/0x60 [ 593.147306] ? mempool_free+0x370/0x370 [ 593.151265] ? mempool_alloc_slab+0x60/0x60 [ 593.155573] mempool_create+0x37/0x40 [ 593.159379] bioset_create+0x6b3/0x900 [ 593.163264] ? bioset_free+0x320/0x320 [ 593.167147] ? debug_mutex_init+0x1c/0x60 [ 593.171294] blk_alloc_queue_node+0x16e/0xe40 [ 593.175801] ? blk_init_allocated_queue+0x620/0x620 [ 593.180822] ? __mutex_init+0x1ef/0x280 [ 593.184789] ? __ia32_sys_membarrier+0x150/0x150 [ 593.189541] ? blk_mq_alloc_rq_map+0x142/0x220 [ 593.194117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.199647] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 593.204392] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 593.209055] ? idr_alloc+0x145/0x1a0 [ 593.212763] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 593.217944] blk_mq_init_queue+0x4b/0xb0 [ 593.221991] loop_add+0x32b/0x9c0 [ 593.225434] ? loop_lookup+0x102/0x220 [ 593.229307] ? loop_queue_rq+0x640/0x640 [ 593.233361] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.238551] loop_control_ioctl+0x178/0x500 [ 593.242877] ? loop_add+0x9c0/0x9c0 [ 593.246515] ? expand_files.part.8+0x9a0/0x9a0 [ 593.251091] ? kasan_check_write+0x14/0x20 [ 593.255317] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 593.260238] ? wait_for_completion+0x870/0x870 [ 593.264905] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.270091] ? loop_add+0x9c0/0x9c0 [ 593.274334] do_vfs_ioctl+0x1cf/0x16a0 [ 593.278217] ? ioctl_preallocate+0x2e0/0x2e0 [ 593.282614] ? fget_raw+0x20/0x20 [ 593.286070] ? __sb_end_write+0xac/0xe0 [ 593.290059] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 593.295590] ? fput+0x130/0x1a0 [ 593.298866] ? ksys_write+0x1a6/0x250 [ 593.302659] ? security_file_ioctl+0x94/0xc0 [ 593.307067] ksys_ioctl+0xa9/0xd0 [ 593.310513] __x64_sys_ioctl+0x73/0xb0 [ 593.314392] do_syscall_64+0x1b1/0x800 [ 593.318266] ? finish_task_switch+0x1ca/0x840 [ 593.322768] ? syscall_return_slowpath+0x5c0/0x5c0 [ 593.327694] ? syscall_return_slowpath+0x30f/0x5c0 [ 593.332618] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 593.337974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.342827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.348020] RIP: 0033:0x455a09 [ 593.351203] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.358898] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 593.366162] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 593.373416] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 593.380685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 593.387945] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000011 2018/05/22 07:23:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1400000000000000, 0x0) 2018/05/22 07:23:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5421, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x40000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:13 executing program 0 (fault-call:2 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:13 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:13 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8200) r1 = socket$rds(0x15, 0x5, 0x0) splice(r0, &(0x7f0000000100), r1, &(0x7f00000002c0), 0x5, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x1, 0x3, 0x401, 0x101, "6e3fc025d55bf998c7dfb372a20f56212d14c73174cd927aff2e78778d4c0d69"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB="00000000e757673b5ecbcdb314414a09f99ab6ad9d1463fa3096cc8646cd75"], 0x8b) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c6500000a0000000000000000000000000200000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68) 2018/05/22 07:23:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x8000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045877, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200000000000000, 0x0) 2018/05/22 07:23:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0189436, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x300000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 593.644510] FAULT_INJECTION: forcing a failure. [ 593.644510] name failslab, interval 1, probability 0, space 0, times 0 [ 593.656008] CPU: 0 PID: 2998 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 593.663211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.672581] Call Trace: [ 593.675193] dump_stack+0x1b9/0x294 [ 593.678843] ? dump_stack_print_info.cold.2+0x52/0x52 [ 593.684086] ? is_bpf_text_address+0xd7/0x170 [ 593.688633] ? kernel_text_address+0x79/0xf0 2018/05/22 07:23:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4, 0x0) [ 593.693072] should_fail.cold.4+0xa/0x1a [ 593.697159] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 593.702285] ? graph_lock+0x170/0x170 [ 593.706108] ? save_stack+0xa9/0xd0 [ 593.709757] ? print_usage_bug+0xc0/0xc0 [ 593.713836] ? kasan_kmalloc+0xc4/0xe0 [ 593.717742] ? find_held_lock+0x36/0x1c0 [ 593.721829] ? __lock_is_held+0xb5/0x140 [ 593.725903] ? check_same_owner+0x320/0x320 [ 593.730217] ? rcu_note_context_switch+0x710/0x710 [ 593.735145] ? __lockdep_init_map+0x105/0x590 [ 593.739641] __should_failslab+0x124/0x180 [ 593.743868] ? mempool_free+0x370/0x370 [ 593.747846] should_failslab+0x9/0x14 [ 593.751832] kmem_cache_alloc+0x2af/0x760 [ 593.755970] ? init_wait_entry+0x1b0/0x1b0 [ 593.760203] ? mempool_free+0x370/0x370 [ 593.764178] mempool_alloc_slab+0x44/0x60 [ 593.768321] mempool_create_node+0x2cf/0x610 [ 593.772726] ? mempool_free+0x370/0x370 [ 593.776690] ? mempool_alloc_slab+0x60/0x60 [ 593.781008] mempool_create+0x37/0x40 [ 593.784811] bioset_create+0x6b3/0x900 [ 593.788690] ? bioset_free+0x320/0x320 [ 593.792588] ? debug_mutex_init+0x1c/0x60 [ 593.796746] blk_alloc_queue_node+0x16e/0xe40 [ 593.801249] ? blk_init_allocated_queue+0x620/0x620 [ 593.806256] ? __mutex_init+0x1ef/0x280 [ 593.810221] ? __ia32_sys_membarrier+0x150/0x150 [ 593.814970] ? blk_mq_alloc_rq_map+0x142/0x220 [ 593.819634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.825163] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 593.829910] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 593.834566] ? idr_alloc+0x145/0x1a0 [ 593.838271] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 593.843626] blk_mq_init_queue+0x4b/0xb0 [ 593.847684] loop_add+0x32b/0x9c0 [ 593.851130] ? loop_lookup+0x102/0x220 [ 593.855019] ? loop_queue_rq+0x640/0x640 [ 593.859079] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.864256] loop_control_ioctl+0x178/0x500 [ 593.868568] ? loop_add+0x9c0/0x9c0 [ 593.872186] ? expand_files.part.8+0x9a0/0x9a0 [ 593.876771] ? kasan_check_write+0x14/0x20 [ 593.881000] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 593.885937] ? wait_for_completion+0x870/0x870 [ 593.890517] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 593.895717] ? loop_add+0x9c0/0x9c0 [ 593.899352] do_vfs_ioctl+0x1cf/0x16a0 [ 593.903232] ? ioctl_preallocate+0x2e0/0x2e0 [ 593.907631] ? fget_raw+0x20/0x20 [ 593.911084] ? __sb_end_write+0xac/0xe0 [ 593.915068] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 593.920600] ? fput+0x130/0x1a0 [ 593.923872] ? ksys_write+0x1a6/0x250 [ 593.927859] ? security_file_ioctl+0x94/0xc0 [ 593.932280] ksys_ioctl+0xa9/0xd0 [ 593.935812] __x64_sys_ioctl+0x73/0xb0 [ 593.939695] do_syscall_64+0x1b1/0x800 [ 593.943568] ? syscall_return_slowpath+0x5c0/0x5c0 [ 593.948487] ? syscall_return_slowpath+0x30f/0x5c0 [ 593.953590] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 593.958957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.963791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.968968] RIP: 0033:0x455a09 [ 593.972146] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.979858] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 593.987124] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 593.994394] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 594.001660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 594.008929] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000012 2018/05/22 07:23:13 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = getegid() getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r7 = getgid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000000500)=[r1, r2, r3, r4, r5, r6, r7, r8]) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vga_arbiter\x00', 0x40000, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0xe, &(0x7f0000000580)="b0916f553b25d8f42a66119be8465817b66818d806d67d4eddc333e9cd0dddc054f566012dfb38f8670b13932d799a3ba5ea63f093889a8d12d614497649da353da0ccdc1535f224321dc3095dd9745e47099430930b4481704f1f46755613cd15a86111cafd", 0x66) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4c000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:13 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2, 0x0) 2018/05/22 07:23:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:13 executing program 0 (fault-call:2 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:13 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5452, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x2000000, 0x0) 2018/05/22 07:23:14 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYRES64=r1, @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18) [ 594.360364] FAULT_INJECTION: forcing a failure. [ 594.360364] name failslab, interval 1, probability 0, space 0, times 0 [ 594.371729] CPU: 1 PID: 3055 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 594.378933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.388479] Call Trace: [ 594.391092] dump_stack+0x1b9/0x294 [ 594.394753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 594.399967] ? is_bpf_text_address+0xd7/0x170 [ 594.404671] should_fail.cold.4+0xa/0x1a [ 594.408761] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 594.414027] ? graph_lock+0x170/0x170 [ 594.417848] ? save_stack+0xa9/0xd0 [ 594.421492] ? print_usage_bug+0xc0/0xc0 [ 594.425555] ? kasan_kmalloc+0xc4/0xe0 [ 594.429437] ? find_held_lock+0x36/0x1c0 [ 594.433510] ? __lock_is_held+0xb5/0x140 [ 594.437575] ? check_same_owner+0x320/0x320 [ 594.441895] ? rcu_note_context_switch+0x710/0x710 [ 594.446840] ? __lockdep_init_map+0x105/0x590 [ 594.451332] __should_failslab+0x124/0x180 [ 594.455585] ? mempool_free+0x370/0x370 [ 594.459552] should_failslab+0x9/0x14 [ 594.463345] kmem_cache_alloc+0x2af/0x760 [ 594.467489] ? init_wait_entry+0x1b0/0x1b0 [ 594.471721] ? mempool_free+0x370/0x370 [ 594.475691] mempool_alloc_slab+0x44/0x60 [ 594.479835] mempool_create_node+0x2cf/0x610 [ 594.484257] ? mempool_free+0x370/0x370 [ 594.488223] ? mempool_alloc_slab+0x60/0x60 [ 594.492548] mempool_create+0x37/0x40 [ 594.496353] bioset_create+0x6b3/0x900 [ 594.500238] ? bioset_free+0x320/0x320 [ 594.504120] ? debug_mutex_init+0x1c/0x60 [ 594.508270] blk_alloc_queue_node+0x16e/0xe40 [ 594.512831] ? blk_init_allocated_queue+0x620/0x620 [ 594.517861] ? __mutex_init+0x1ef/0x280 [ 594.521845] ? __ia32_sys_membarrier+0x150/0x150 [ 594.526607] ? blk_mq_alloc_rq_map+0x142/0x220 [ 594.531201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.536733] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 594.541488] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 594.546151] ? idr_alloc+0x145/0x1a0 [ 594.549859] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 594.555050] blk_mq_init_queue+0x4b/0xb0 [ 594.559105] loop_add+0x32b/0x9c0 [ 594.562548] ? loop_lookup+0x102/0x220 [ 594.566434] ? loop_queue_rq+0x640/0x640 [ 594.570492] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 594.576199] loop_control_ioctl+0x178/0x500 [ 594.580514] ? loop_add+0x9c0/0x9c0 [ 594.584132] ? expand_files.part.8+0x9a0/0x9a0 [ 594.588714] ? kasan_check_write+0x14/0x20 [ 594.592940] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 594.597877] ? wait_for_completion+0x870/0x870 [ 594.602453] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 594.607635] ? loop_add+0x9c0/0x9c0 [ 594.611262] do_vfs_ioctl+0x1cf/0x16a0 [ 594.615154] ? ioctl_preallocate+0x2e0/0x2e0 [ 594.619588] ? fget_raw+0x20/0x20 [ 594.623043] ? __sb_end_write+0xac/0xe0 [ 594.627021] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 594.632554] ? fput+0x130/0x1a0 [ 594.635828] ? ksys_write+0x1a6/0x250 [ 594.639638] ? security_file_ioctl+0x94/0xc0 [ 594.644047] ksys_ioctl+0xa9/0xd0 [ 594.647496] __x64_sys_ioctl+0x73/0xb0 [ 594.651394] do_syscall_64+0x1b1/0x800 [ 594.655274] ? finish_task_switch+0x1ca/0x840 [ 594.659761] ? syscall_return_slowpath+0x5c0/0x5c0 [ 594.664683] ? syscall_return_slowpath+0x30f/0x5c0 [ 594.669608] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 594.674972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.679813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.684995] RIP: 0033:0x455a09 [ 594.688178] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.695877] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 594.703145] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:14 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:14 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 594.710416] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 594.717703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 594.724964] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000013 2018/05/22 07:23:14 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0978aee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045878, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x14000000, 0x0) 2018/05/22 07:23:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:14 executing program 0 (fault-call:2 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:14 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0xfffffffffffffddc) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000001100010fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:14 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffd, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:14 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1000000000000, 0x0) 2018/05/22 07:23:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:14 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xfdffffff00000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x80045500, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xf6ffffff, 0x0) 2018/05/22 07:23:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) [ 595.206683] FAULT_INJECTION: forcing a failure. [ 595.206683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.218555] CPU: 0 PID: 3136 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 595.225769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.235137] Call Trace: [ 595.237746] dump_stack+0x1b9/0x294 [ 595.241400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 595.246628] ? find_held_lock+0x36/0x1c0 [ 595.250742] should_fail.cold.4+0xa/0x1a 2018/05/22 07:23:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0045516, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:14 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 595.254824] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 595.259951] ? debug_check_no_locks_freed+0x310/0x310 [ 595.265155] ? lock_downgrade+0x8e0/0x8e0 [ 595.269328] ? kasan_check_read+0x11/0x20 [ 595.273488] ? rcu_is_watching+0x85/0x140 [ 595.277672] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 595.282885] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 595.288189] ? is_bpf_text_address+0xd7/0x170 [ 595.293676] ? kernel_text_address+0x79/0xf0 [ 595.298087] ? __unwind_start+0x166/0x330 [ 595.302234] ? __kernel_text_address+0xd/0x40 [ 595.306743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.312276] ? should_fail+0x21b/0xbcd [ 595.316244] ? __save_stack_trace+0x7e/0xd0 [ 595.320560] __alloc_pages_nodemask+0x34e/0xd70 [ 595.325228] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 595.330239] ? print_usage_bug+0xc0/0xc0 [ 595.334291] ? kasan_kmalloc+0xc4/0xe0 [ 595.338180] ? find_held_lock+0x36/0x1c0 [ 595.342238] ? __lock_is_held+0xb5/0x140 [ 595.346314] ? check_same_owner+0x320/0x320 [ 595.350826] cache_grow_begin+0x72/0x6c0 [ 595.354889] kmem_cache_alloc+0x689/0x760 [ 595.359044] ? init_wait_entry+0x1b0/0x1b0 [ 595.363288] ? mempool_free+0x370/0x370 [ 595.367256] mempool_alloc_slab+0x44/0x60 [ 595.371396] mempool_create_node+0x2cf/0x610 [ 595.375794] ? mempool_free+0x370/0x370 [ 595.379769] ? mempool_alloc_slab+0x60/0x60 [ 595.384091] mempool_create+0x37/0x40 [ 595.387894] bioset_create+0x6b3/0x900 [ 595.391778] ? bioset_free+0x320/0x320 [ 595.395675] ? debug_mutex_init+0x1c/0x60 [ 595.399831] blk_alloc_queue_node+0x16e/0xe40 [ 595.404335] ? blk_init_allocated_queue+0x620/0x620 [ 595.409347] ? __mutex_init+0x1ef/0x280 [ 595.413326] ? __ia32_sys_membarrier+0x150/0x150 [ 595.418083] ? blk_mq_alloc_rq_map+0x142/0x220 [ 595.422663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.428193] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 595.432941] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 595.437610] ? idr_alloc+0x145/0x1a0 [ 595.441404] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 595.446931] blk_mq_init_queue+0x4b/0xb0 [ 595.451083] loop_add+0x32b/0x9c0 [ 595.454526] ? loop_lookup+0x102/0x220 [ 595.458397] ? loop_queue_rq+0x640/0x640 [ 595.462454] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 595.467716] loop_control_ioctl+0x178/0x500 [ 595.472026] ? loop_add+0x9c0/0x9c0 [ 595.475646] ? expand_files.part.8+0x9a0/0x9a0 [ 595.480214] ? kasan_check_write+0x14/0x20 [ 595.484435] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 595.489363] ? wait_for_completion+0x870/0x870 [ 595.493932] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 595.499107] ? loop_add+0x9c0/0x9c0 [ 595.502740] do_vfs_ioctl+0x1cf/0x16a0 [ 595.506733] ? ioctl_preallocate+0x2e0/0x2e0 [ 595.511139] ? fget_raw+0x20/0x20 [ 595.514584] ? __sb_end_write+0xac/0xe0 [ 595.518546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 595.524076] ? fput+0x130/0x1a0 [ 595.527348] ? ksys_write+0x1a6/0x250 [ 595.531223] ? security_file_ioctl+0x94/0xc0 [ 595.535618] ksys_ioctl+0xa9/0xd0 [ 595.539060] __x64_sys_ioctl+0x73/0xb0 [ 595.542943] do_syscall_64+0x1b1/0x800 [ 595.546818] ? finish_task_switch+0x1ca/0x840 [ 595.551301] ? syscall_return_slowpath+0x5c0/0x5c0 [ 595.556482] ? syscall_return_slowpath+0x30f/0x5c0 [ 595.561407] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 595.566763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.571606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.576781] RIP: 0033:0x455a09 [ 595.579953] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.587645] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 595.594900] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 595.602171] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 595.609446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 595.616721] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000014 2018/05/22 07:23:15 executing program 0 (fault-call:2 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:15 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x80ffffff, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4000000, 0x0) 2018/05/22 07:23:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:15 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:15 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x4e23, 0x400, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x80) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001300), 0x80000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r4 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x2) write$cgroup_subtree(r4, &(0x7f00000002c0)={[{0x2d, 'memory', 0x20}]}, 0x8) 2018/05/22 07:23:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:15 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x300, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x14, 0x0) 2018/05/22 07:23:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 595.905454] FAULT_INJECTION: forcing a failure. [ 595.905454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.917345] CPU: 0 PID: 3188 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 595.924561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.933946] Call Trace: [ 595.936565] dump_stack+0x1b9/0x294 [ 595.940226] ? dump_stack_print_info.cold.2+0x52/0x52 [ 595.945450] ? find_held_lock+0x36/0x1c0 [ 595.949542] should_fail.cold.4+0xa/0x1a [ 595.953624] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 595.958758] ? debug_check_no_locks_freed+0x310/0x310 [ 595.963951] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 595.969159] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 595.974374] ? is_bpf_text_address+0xd7/0x170 [ 595.978876] ? kernel_text_address+0x79/0xf0 [ 595.983283] ? __unwind_start+0x166/0x330 [ 595.987424] ? __kernel_text_address+0xd/0x40 [ 595.991921] ? perf_trace_lock+0xd6/0x900 [ 595.996070] ? __save_stack_trace+0x7e/0xd0 [ 596.000393] ? zap_class+0x720/0x720 [ 596.004100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.009635] ? should_fail+0x21b/0xbcd [ 596.013526] __alloc_pages_nodemask+0x34e/0xd70 [ 596.018195] ? kmem_cache_alloc+0x12e/0x760 [ 596.022523] ? mempool_alloc_slab+0x44/0x60 [ 596.026852] ? mempool_create_node+0x2cf/0x610 [ 596.031422] ? mempool_create+0x37/0x40 [ 596.035403] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 596.040418] ? ksys_ioctl+0xa9/0xd0 [ 596.044050] ? do_syscall_64+0x1b1/0x800 [ 596.048113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.053469] ? find_held_lock+0x36/0x1c0 [ 596.057546] ? __lock_is_held+0xb5/0x140 [ 596.061621] ? check_same_owner+0x320/0x320 [ 596.065938] cache_grow_begin+0x72/0x6c0 [ 596.069992] kmem_cache_alloc+0x689/0x760 [ 596.074132] ? init_wait_entry+0x1b0/0x1b0 [ 596.078371] ? mempool_free+0x370/0x370 [ 596.082341] mempool_alloc_slab+0x44/0x60 [ 596.086475] mempool_create_node+0x2cf/0x610 [ 596.090881] ? mempool_free+0x370/0x370 [ 596.094841] ? mempool_alloc_slab+0x60/0x60 [ 596.099151] mempool_create+0x37/0x40 [ 596.102938] bioset_create+0x6b3/0x900 [ 596.106809] ? bioset_free+0x320/0x320 [ 596.110693] ? debug_mutex_init+0x1c/0x60 [ 596.114837] blk_alloc_queue_node+0x16e/0xe40 [ 596.119318] ? blk_init_allocated_queue+0x620/0x620 [ 596.124327] ? __mutex_init+0x1ef/0x280 [ 596.128556] ? __ia32_sys_membarrier+0x150/0x150 [ 596.133302] ? blk_mq_alloc_rq_map+0x142/0x220 [ 596.137872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.143394] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 596.148147] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 596.152815] ? idr_alloc+0x145/0x1a0 [ 596.156522] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 596.161704] blk_mq_init_queue+0x4b/0xb0 [ 596.165755] loop_add+0x32b/0x9c0 [ 596.169200] ? loop_lookup+0x102/0x220 [ 596.173077] ? loop_queue_rq+0x640/0x640 [ 596.177133] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.182307] loop_control_ioctl+0x178/0x500 [ 596.186612] ? loop_add+0x9c0/0x9c0 [ 596.190228] ? expand_files.part.8+0x9a0/0x9a0 [ 596.194823] ? kasan_check_write+0x14/0x20 [ 596.199409] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 596.204343] ? wait_for_completion+0x870/0x870 [ 596.208917] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.214104] ? loop_add+0x9c0/0x9c0 [ 596.217723] do_vfs_ioctl+0x1cf/0x16a0 [ 596.221601] ? ioctl_preallocate+0x2e0/0x2e0 [ 596.226001] ? fget_raw+0x20/0x20 [ 596.229452] ? __sb_end_write+0xac/0xe0 [ 596.233428] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 596.240134] ? fput+0x130/0x1a0 [ 596.243424] ? ksys_write+0x1a6/0x250 [ 596.247238] ? security_file_ioctl+0x94/0xc0 [ 596.251652] ksys_ioctl+0xa9/0xd0 [ 596.255097] __x64_sys_ioctl+0x73/0xb0 [ 596.258972] do_syscall_64+0x1b1/0x800 [ 596.262843] ? syscall_return_slowpath+0x5c0/0x5c0 [ 596.267759] ? syscall_return_slowpath+0x30f/0x5c0 [ 596.272681] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 596.278045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.282883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.288058] RIP: 0033:0x455a09 [ 596.291320] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.299190] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 2018/05/22 07:23:16 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:16 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x240, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000002c0)=""/184) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) [ 596.306459] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 596.313715] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 596.320971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 596.328230] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000015 2018/05/22 07:23:16 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffc0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:16 executing program 0 (fault-call:2 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:16 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:16 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4c00000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105517, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100000000000000, 0x0) 2018/05/22 07:23:16 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x31, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x600}, 0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:16 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x800000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xf6ffffff00000000, 0x0) 2018/05/22 07:23:16 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5451, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 596.708887] FAULT_INJECTION: forcing a failure. [ 596.708887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.720751] CPU: 1 PID: 3237 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 596.727944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.737301] Call Trace: [ 596.739891] dump_stack+0x1b9/0x294 [ 596.743514] ? dump_stack_print_info.cold.2+0x52/0x52 [ 596.748694] ? find_held_lock+0x36/0x1c0 [ 596.752757] should_fail.cold.4+0xa/0x1a [ 596.756809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.761906] ? debug_check_no_locks_freed+0x310/0x310 [ 596.767088] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 596.772272] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 596.777458] ? is_bpf_text_address+0xd7/0x170 [ 596.781944] ? kernel_text_address+0x79/0xf0 [ 596.786347] ? __unwind_start+0x166/0x330 [ 596.790487] ? __kernel_text_address+0xd/0x40 [ 596.794971] ? perf_trace_lock+0xd6/0x900 [ 596.799113] ? __save_stack_trace+0x7e/0xd0 [ 596.803425] ? zap_class+0x720/0x720 [ 596.807131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.812658] ? should_fail+0x21b/0xbcd [ 596.816544] __alloc_pages_nodemask+0x34e/0xd70 [ 596.821205] ? kmem_cache_alloc+0x12e/0x760 [ 596.825514] ? mempool_alloc_slab+0x44/0x60 [ 596.829824] ? mempool_create_node+0x2cf/0x610 [ 596.834392] ? mempool_create+0x37/0x40 [ 596.838354] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 596.843358] ? ksys_ioctl+0xa9/0xd0 [ 596.846976] ? do_syscall_64+0x1b1/0x800 [ 596.851031] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.856390] ? find_held_lock+0x36/0x1c0 [ 596.860443] ? __lock_is_held+0xb5/0x140 [ 596.864504] ? check_same_owner+0x320/0x320 [ 596.868822] cache_grow_begin+0x72/0x6c0 [ 596.872882] kmem_cache_alloc+0x689/0x760 [ 596.877027] ? init_wait_entry+0x1b0/0x1b0 [ 596.881253] ? mempool_free+0x370/0x370 [ 596.885215] mempool_alloc_slab+0x44/0x60 [ 596.889353] mempool_create_node+0x2cf/0x610 [ 596.893754] ? mempool_free+0x370/0x370 [ 596.897714] ? mempool_alloc_slab+0x60/0x60 [ 596.902031] mempool_create+0x37/0x40 [ 596.905823] bioset_create+0x6b3/0x900 [ 596.909700] ? bioset_free+0x320/0x320 [ 596.913574] ? debug_mutex_init+0x1c/0x60 [ 596.917712] blk_alloc_queue_node+0x16e/0xe40 [ 596.922199] ? blk_init_allocated_queue+0x620/0x620 [ 596.927289] ? __mutex_init+0x1ef/0x280 [ 596.931251] ? __ia32_sys_membarrier+0x150/0x150 [ 596.936003] ? blk_mq_alloc_rq_map+0x142/0x220 [ 596.940584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.946109] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 596.950857] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 596.955513] ? idr_alloc+0x145/0x1a0 [ 596.959222] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 596.964405] blk_mq_init_queue+0x4b/0xb0 [ 596.968456] loop_add+0x32b/0x9c0 [ 596.971896] ? loop_lookup+0x102/0x220 [ 596.975773] ? loop_queue_rq+0x640/0x640 [ 596.979829] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 596.985014] loop_control_ioctl+0x178/0x500 [ 596.989336] ? loop_add+0x9c0/0x9c0 [ 596.992957] ? expand_files.part.8+0x9a0/0x9a0 [ 596.997531] ? kasan_check_write+0x14/0x20 [ 597.001755] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 597.006678] ? wait_for_completion+0x870/0x870 [ 597.011248] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 597.016423] ? loop_add+0x9c0/0x9c0 [ 597.020041] do_vfs_ioctl+0x1cf/0x16a0 [ 597.023921] ? ioctl_preallocate+0x2e0/0x2e0 [ 597.028319] ? fget_raw+0x20/0x20 [ 597.031772] ? __sb_end_write+0xac/0xe0 [ 597.035738] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 597.041261] ? fput+0x130/0x1a0 [ 597.044527] ? ksys_write+0x1a6/0x250 [ 597.048322] ? security_file_ioctl+0x94/0xc0 [ 597.052722] ksys_ioctl+0xa9/0xd0 [ 597.056169] __x64_sys_ioctl+0x73/0xb0 [ 597.060793] do_syscall_64+0x1b1/0x800 [ 597.064670] ? finish_task_switch+0x1ca/0x840 [ 597.069159] ? syscall_return_slowpath+0x5c0/0x5c0 [ 597.074078] ? syscall_return_slowpath+0x30f/0x5c0 [ 597.079096] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 597.084461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.089297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.094477] RIP: 0033:0x455a09 [ 597.097653] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/22 07:23:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) [ 597.105352] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 597.112605] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 597.119861] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 597.127117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 597.134374] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000016 2018/05/22 07:23:16 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x10000, 0x0) ioctl$KDENABIO(r1, 0x4b36) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x7f) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x0, 0x3, 0xdc96}) 2018/05/22 07:23:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xffffffff00000000, 0x0) [ 597.308645] Unknown ioctl 35108 [ 597.336245] Unknown ioctl 1074310812 2018/05/22 07:23:17 executing program 0 (fault-call:2 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:17 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:17 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x600000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc00455d0, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0xf6ffffff00000000) 2018/05/22 07:23:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:17 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) [ 597.365876] Unknown ioctl 35108 2018/05/22 07:23:17 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x400000000000000) 2018/05/22 07:23:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x5450, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 597.533699] FAULT_INJECTION: forcing a failure. [ 597.533699] name failslab, interval 1, probability 0, space 0, times 0 [ 597.545188] CPU: 1 PID: 3304 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 597.552388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.561745] Call Trace: [ 597.564331] dump_stack+0x1b9/0x294 [ 597.567951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 597.573151] should_fail.cold.4+0xa/0x1a [ 597.577226] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 597.582345] ? trace_hardirqs_on+0xd/0x10 [ 597.586499] ? graph_lock+0x170/0x170 [ 597.590292] ? graph_lock+0x170/0x170 [ 597.594082] ? find_held_lock+0x36/0x1c0 [ 597.598133] ? __lock_is_held+0xb5/0x140 [ 597.602190] ? check_same_owner+0x320/0x320 [ 597.606501] ? rcu_note_context_switch+0x710/0x710 [ 597.611418] __should_failslab+0x124/0x180 [ 597.615642] should_failslab+0x9/0x14 [ 597.619429] kmem_cache_alloc_trace+0x2cb/0x780 [ 597.624084] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 597.629178] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 597.634184] wb_congested_get_create+0x1ca/0x450 [ 597.638930] ? wb_wakeup_delayed+0xf0/0xf0 [ 597.643152] ? __lockdep_init_map+0x105/0x590 [ 597.647644] wb_init+0x62e/0x9e0 [ 597.650999] ? bdi_put+0x180/0x180 [ 597.654533] ? mark_held_locks+0xc9/0x160 [ 597.658666] ? __x64_sys_ioctl+0x73/0xb0 [ 597.662717] ? __raw_spin_lock_init+0x1c/0x100 [ 597.667306] ? mark_held_locks+0xc9/0x160 [ 597.671450] ? __raw_spin_lock_init+0x1c/0x100 [ 597.676033] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 597.681042] ? lockdep_init_map+0x9/0x10 [ 597.685092] bdi_init+0x353/0x510 [ 597.688534] ? wb_init+0x9e0/0x9e0 [ 597.692066] ? bdi_alloc_node+0x67/0xe0 [ 597.696029] ? bdi_alloc_node+0x67/0xe0 [ 597.699991] ? rcu_read_lock_sched_held+0x108/0x120 [ 597.704996] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 597.710269] ? bioset_free+0x320/0x320 [ 597.714147] bdi_alloc_node+0x81/0xe0 [ 597.717937] blk_alloc_queue_node+0x1c1/0xe40 [ 597.722434] ? blk_init_allocated_queue+0x620/0x620 [ 597.727436] ? __mutex_init+0x1ef/0x280 [ 597.731400] ? __ia32_sys_membarrier+0x150/0x150 [ 597.736148] ? blk_mq_alloc_rq_map+0x142/0x220 [ 597.740721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.746251] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 597.751115] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 597.755769] ? idr_alloc+0x145/0x1a0 [ 597.759472] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 597.764656] blk_mq_init_queue+0x4b/0xb0 [ 597.768718] loop_add+0x32b/0x9c0 [ 597.772155] ? loop_lookup+0x102/0x220 [ 597.776031] ? loop_queue_rq+0x640/0x640 [ 597.780085] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 597.785263] loop_control_ioctl+0x178/0x500 [ 597.789569] ? loop_add+0x9c0/0x9c0 [ 597.793181] ? expand_files.part.8+0x9a0/0x9a0 [ 597.797751] ? kasan_check_write+0x14/0x20 [ 597.801982] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 597.806905] ? wait_for_completion+0x870/0x870 [ 597.811479] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 597.816655] ? loop_add+0x9c0/0x9c0 [ 597.820276] do_vfs_ioctl+0x1cf/0x16a0 [ 597.824164] ? ioctl_preallocate+0x2e0/0x2e0 [ 597.828568] ? fget_raw+0x20/0x20 [ 597.832013] ? __sb_end_write+0xac/0xe0 [ 597.835985] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 597.841513] ? fput+0x130/0x1a0 [ 597.844777] ? ksys_write+0x1a6/0x250 [ 597.848569] ? security_file_ioctl+0x94/0xc0 [ 597.852967] ksys_ioctl+0xa9/0xd0 [ 597.856421] __x64_sys_ioctl+0x73/0xb0 [ 597.860298] do_syscall_64+0x1b1/0x800 [ 597.864173] ? finish_task_switch+0x1ca/0x840 [ 597.868661] ? syscall_return_slowpath+0x5c0/0x5c0 [ 597.873577] ? syscall_return_slowpath+0x30f/0x5c0 [ 597.878499] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 597.883851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.888689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.893860] RIP: 0033:0x455a09 [ 597.897043] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.904741] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 597.911998] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 597.919258] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 597.926513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/22 07:23:17 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x164f, 0x100) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x100000001, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x28, 0x4) eventfd(0x4) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, r2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:17 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x8, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:17 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 597.933768] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000017 2018/05/22 07:23:17 executing program 0 (fault-call:2 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x14000000) 2018/05/22 07:23:17 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='coredump_filter\x00') getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x800, 0x5}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x7, 0x2, [0x40, 0x1]}, 0xc) 2018/05/22 07:23:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc0405519, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:17 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:17 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:17 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff00000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x1000000) [ 598.317557] FAULT_INJECTION: forcing a failure. [ 598.317557] name failslab, interval 1, probability 0, space 0, times 0 [ 598.328904] CPU: 0 PID: 3361 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 598.336231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.345598] Call Trace: [ 598.348201] dump_stack+0x1b9/0x294 [ 598.351845] ? dump_stack_print_info.cold.2+0x52/0x52 [ 598.357058] ? __percpu_counter_init+0x2aa/0x360 [ 598.361848] should_fail.cold.4+0xa/0x1a [ 598.365935] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 598.371050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.376627] ? wb_init+0x6ea/0x9e0 [ 598.380159] ? graph_lock+0x170/0x170 [ 598.383948] ? bdi_put+0x180/0x180 [ 598.387477] ? find_held_lock+0x36/0x1c0 [ 598.391538] ? __lock_is_held+0xb5/0x140 [ 598.395600] ? check_same_owner+0x320/0x320 [ 598.399917] ? rcu_note_context_switch+0x710/0x710 [ 598.404862] __should_failslab+0x124/0x180 [ 598.409097] should_failslab+0x9/0x14 [ 598.412893] kmem_cache_alloc_trace+0x2cb/0x780 [ 598.417554] ? bdi_alloc_node+0x67/0xe0 [ 598.421540] ? bdi_alloc_node+0x67/0xe0 [ 598.425536] ? rcu_read_lock_sched_held+0x108/0x120 [ 598.430578] blk_alloc_queue_stats+0x88/0x1b0 [ 598.435092] ? blk_stat_enable_accounting+0xe0/0xe0 [ 598.440121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.445662] blk_alloc_queue_node+0x1f6/0xe40 [ 598.450167] ? blk_init_allocated_queue+0x620/0x620 [ 598.455195] ? __mutex_init+0x1ef/0x280 [ 598.459178] ? __ia32_sys_membarrier+0x150/0x150 2018/05/22 07:23:18 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xa00, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) [ 598.463952] ? blk_mq_alloc_rq_map+0x142/0x220 [ 598.468560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.474111] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 598.478880] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 598.483546] ? idr_alloc+0x145/0x1a0 [ 598.487262] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 598.492450] blk_mq_init_queue+0x4b/0xb0 [ 598.496501] loop_add+0x32b/0x9c0 [ 598.499942] ? loop_lookup+0x102/0x220 [ 598.503821] ? loop_queue_rq+0x640/0x640 [ 598.507880] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 598.513061] loop_control_ioctl+0x178/0x500 [ 598.517373] ? loop_add+0x9c0/0x9c0 [ 598.520995] ? expand_files.part.8+0x9a0/0x9a0 [ 598.525576] ? kasan_check_write+0x14/0x20 [ 598.529798] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 598.534717] ? wait_for_completion+0x870/0x870 [ 598.539289] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 598.544473] ? loop_add+0x9c0/0x9c0 [ 598.548092] do_vfs_ioctl+0x1cf/0x16a0 [ 598.551976] ? ioctl_preallocate+0x2e0/0x2e0 [ 598.556374] ? fget_raw+0x20/0x20 [ 598.559817] ? __sb_end_write+0xac/0xe0 [ 598.563790] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 598.569324] ? fput+0x130/0x1a0 [ 598.572591] ? ksys_write+0x1a6/0x250 [ 598.576381] ? security_file_ioctl+0x94/0xc0 [ 598.580781] ksys_ioctl+0xa9/0xd0 [ 598.584224] __x64_sys_ioctl+0x73/0xb0 [ 598.588103] do_syscall_64+0x1b1/0x800 [ 598.591981] ? finish_task_switch+0x1ca/0x840 [ 598.596469] ? syscall_return_slowpath+0x5c0/0x5c0 [ 598.601398] ? syscall_return_slowpath+0x30f/0x5c0 [ 598.606322] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 598.611675] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/05/22 07:23:18 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 598.616515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.621702] RIP: 0033:0x455a09 [ 598.624892] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.632606] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 598.639866] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 598.647122] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 598.654379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 598.661638] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000018 2018/05/22 07:23:18 executing program 0 (fault-call:2 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x4020940d, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:18 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x600, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:18 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:18 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x200200) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x2) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/44) 2018/05/22 07:23:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x4) 2018/05/22 07:23:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:18 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4c00, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x14) 2018/05/22 07:23:18 executing program 6: r0 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="5706eebc0b94a6b7ad3f5bc8e6e43a95a8ddefa96dc9027ea79c300b3999c009a4f9a49f844303d3c7f87f5a9c52870c3db65eff432fd3dc055b839918c191cb9eda500e", 0x44, 0xfffffffffffffffc) r1 = getpgrp(0xffffffffffffffff) sched_getscheduler(r1) keyctl$update(0x2, r0, &(0x7f00000005c0)="aa16febb115ed90da92f9d94187202113202c1fc8778de40b75bc14050baf9990288b37e64e54453bf4a006f83c4615757244d6fdcbc5ca94ac73484af44d7cccff88320152fd139c12dfab45a1cf3ab8a9bc7c66c40a6e05cabf4491e5e01cd859bf7fb8a25e4", 0x67) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c, 0x800) getsockname$inet6(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000740)=0x1c) syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r2, &(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES32=r2, @ANYRES16=r4, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYPTR64, @ANYBLOB="88780d0643b4428b98c964fb8cd5c27c7a6462faa46dc3b7f6899971da46635660a90c3dc67b6fe29aa092ee475d6fdb8b2f586648c4f3efee05620e0d0904f51879919f8165b1e2f9fc86043e716e2e47c4d1d156a3ecf76f99c7190fd4a8dbdf4225e2a8e8c7f46920d7a8f82cdf6d05f9395ed3750cead703dcc6be9306a49ee75bf3ad602ea9fedcc25796e53efb7dcffa9f2f7d61b721e377c9f12334819411bb781e37a31b3355a81007f1634958520339ab233db130942523f183ed1ebc5e525f27d3068528c142f924a476ddb6c17f0964", @ANYBLOB="54042651020201ce2186da08bf7de84038db57ffeaa8cefbce37c597e313fa813aa589f4272833fc78037d4e6aac6780", @ANYRES32=r2, @ANYBLOB="97cf2fac122c33eb6287ef190b49d4aa166b0e45b1b6f4c7a85316ceedc662e9b5f6fbde69dc7427a3b9f539b0be889300c8d254c045a6ad4c47840dc1b22502acd607d702ca0ad7f5585222b9fd0bb96496ec2531baabc45724108cd231e728414d00334abfc4582daafbbc37c03ff57425b8beefada27aac392912193ec7da650e517e0fa295c4fe271d24", @ANYRES64=r4]], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="c1a6c5cd77080be74716d2ebe79a523f5c70fc4d9f363c6078ae112f87f5dff6de856aabb0565c4715be90fd7d547505b72a23cca18b5217141342620ad5e497ba801df0c76ca80e9ad4547c663d3a0c5793e83adc25862f7380d84d75241238d43c9761da683e19049a31a5f19a0516", @ANYRES64=r2], @ANYRES32=r2, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64]]], 0x1c) 2018/05/22 07:23:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:18 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 599.239951] FAULT_INJECTION: forcing a failure. [ 599.239951] name failslab, interval 1, probability 0, space 0, times 0 [ 599.251373] CPU: 1 PID: 3448 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 599.258571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.267916] Call Trace: [ 599.270497] dump_stack+0x1b9/0x294 [ 599.274121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 599.279304] ? pcpu_next_fit_region.constprop.23+0x334/0x410 [ 599.285096] should_fail.cold.4+0xa/0x1a [ 599.289146] ? kasan_check_write+0x14/0x20 [ 599.293366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 599.299154] ? graph_lock+0x170/0x170 [ 599.302941] ? wait_for_completion+0x870/0x870 [ 599.307509] ? graph_lock+0x170/0x170 [ 599.311294] ? find_next_zero_bit+0x111/0x140 [ 599.315776] ? find_held_lock+0x36/0x1c0 [ 599.319824] ? __lock_is_held+0xb5/0x140 [ 599.323879] ? check_same_owner+0x320/0x320 [ 599.328187] ? rcu_note_context_switch+0x710/0x710 [ 599.333109] ? pcpu_balance_workfn+0x16d0/0x16d0 [ 599.337850] ? trace_hardirqs_on+0xd/0x10 [ 599.341981] __should_failslab+0x124/0x180 [ 599.346207] should_failslab+0x9/0x14 [ 599.349992] kmem_cache_alloc_node_trace+0x26f/0x770 [ 599.355086] ? mark_held_locks+0xc9/0x160 [ 599.359225] blkg_alloc+0x11c/0x7f0 [ 599.362835] ? blkcg_reset_stats+0x3c0/0x3c0 [ 599.367229] ? __raw_spin_lock_init+0x1c/0x100 [ 599.371792] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 599.376799] ? __lockdep_init_map+0x105/0x590 [ 599.381282] ? kasan_check_write+0x14/0x20 [ 599.385501] ? percpu_ref_init+0x1f7/0x280 [ 599.389716] ? blk_delay_queue+0x1a0/0x1a0 [ 599.393932] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 599.399281] blkcg_init_queue+0x27/0x480 [ 599.403328] blk_alloc_queue_node+0x8bd/0xe40 [ 599.407816] ? blk_init_allocated_queue+0x620/0x620 [ 599.412821] ? __mutex_init+0x1ef/0x280 [ 599.416797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.422316] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 599.427058] ? idr_alloc+0x145/0x1a0 [ 599.430760] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 599.435935] blk_mq_init_queue+0x4b/0xb0 [ 599.439982] loop_add+0x32b/0x9c0 [ 599.443427] ? loop_lookup+0x102/0x220 [ 599.447294] ? loop_queue_rq+0x640/0x640 [ 599.451352] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 599.456526] loop_control_ioctl+0x178/0x500 [ 599.460827] ? loop_add+0x9c0/0x9c0 [ 599.464436] ? expand_files.part.8+0x9a0/0x9a0 [ 599.469007] ? kasan_check_write+0x14/0x20 [ 599.473235] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 599.478161] ? wait_for_completion+0x870/0x870 [ 599.482726] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 599.487908] ? loop_add+0x9c0/0x9c0 [ 599.491522] do_vfs_ioctl+0x1cf/0x16a0 [ 599.495407] ? ioctl_preallocate+0x2e0/0x2e0 [ 599.499798] ? fget_raw+0x20/0x20 [ 599.503237] ? __sb_end_write+0xac/0xe0 [ 599.507210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 599.512730] ? fput+0x130/0x1a0 [ 599.515994] ? ksys_write+0x1a6/0x250 [ 599.519783] ? security_file_ioctl+0x94/0xc0 [ 599.524190] ksys_ioctl+0xa9/0xd0 [ 599.527642] __x64_sys_ioctl+0x73/0xb0 [ 599.531512] do_syscall_64+0x1b1/0x800 [ 599.535388] ? finish_task_switch+0x1ca/0x840 [ 599.539883] ? syscall_return_slowpath+0x5c0/0x5c0 [ 599.544796] ? syscall_return_slowpath+0x30f/0x5c0 [ 599.549817] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 599.555275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 599.560126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 599.565310] RIP: 0033:0x455a09 [ 599.568483] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.576176] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 599.583429] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:19 executing program 0 (fault-call:2 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:19 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4c, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x1400000000000000) 2018/05/22 07:23:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1300, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:19 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@connect={0x6, 0x0, 0xfa00, {{0x401, 0xdf0, "fed131f2ebac6a39afd784fffdc78e553887a853e934cf06b065b557a1065b6e5ac312dd37a86597a605ce2d42df951f8f649898d05706dce5dc61fb51b654ce4ca6cd9956a38717f987b192dc61b5e96f9b7a4813636213b9cc6c4ec4ad972503b5f0e0b9e6cb3e688a61476811fdf2bea7fe913425654db869b331c388eab35a5a251c9062976568c8b074bc8a9cd6b677c77fef4df4691dd5287cef00a6e7d3b2cec33e70bdf44a0813756692da5a0e82288fcabad2f63a4ea26f1d5fd8c8978339d5f3420ea99dbe6725b5d0aeab48c8014b3584c9c31b6eedd25fe807eda88b2830e353f83e64ad60eddaedc05dea4624ef93fab6a1ba094c49d0101e68", 0xbc, 0x5, 0x2a80000000000, 0x7, 0x7, 0xfffffffffffffeff, 0x100000000, 0x1}, r1}}, 0xffffffffffffff39) 2018/05/22 07:23:19 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 599.590689] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 599.597950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 599.605204] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000019 2018/05/22 07:23:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:19 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2000000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:19 executing program 6: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x1, 0x2, &(0x7f0000000080)=[0x0], 0x1}, 0x20) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000002c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x2000000) 2018/05/22 07:23:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 599.801806] FAULT_INJECTION: forcing a failure. [ 599.801806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.813668] CPU: 0 PID: 3474 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 599.820871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.830245] Call Trace: [ 599.832855] dump_stack+0x1b9/0x294 [ 599.836509] ? dump_stack_print_info.cold.2+0x52/0x52 [ 599.841715] ? lock_downgrade+0x8e0/0x8e0 [ 599.845882] should_fail.cold.4+0xa/0x1a 2018/05/22 07:23:19 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 599.849955] ? print_usage_bug+0xc0/0xc0 [ 599.854037] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 599.859163] ? debug_check_no_locks_freed+0x310/0x310 [ 599.864380] ? mark_held_locks+0xc9/0x160 [ 599.868543] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 599.873147] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 599.878173] ? perf_trace_lock+0xd6/0x900 [ 599.882318] ? __percpu_counter_init+0x2aa/0x360 [ 599.887065] ? zap_class+0x720/0x720 [ 599.890769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.896290] ? should_fail+0x21b/0xbcd [ 599.900189] __alloc_pages_nodemask+0x34e/0xd70 [ 599.904882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.910409] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 599.915414] ? bdi_put+0x180/0x180 [ 599.918951] ? find_held_lock+0x36/0x1c0 [ 599.923001] ? __lock_is_held+0xb5/0x140 [ 599.927068] ? check_same_owner+0x320/0x320 [ 599.931381] cache_grow_begin+0x72/0x6c0 [ 599.935436] kmem_cache_alloc_trace+0x6a5/0x780 [ 599.940098] ? bdi_alloc_node+0x67/0xe0 [ 599.944065] ? bdi_alloc_node+0x67/0xe0 [ 599.948049] blk_alloc_queue_stats+0x88/0x1b0 [ 599.952542] ? blk_stat_enable_accounting+0xe0/0xe0 [ 599.957568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.963096] blk_alloc_queue_node+0x1f6/0xe40 [ 599.967581] ? blk_init_allocated_queue+0x620/0x620 [ 599.972584] ? __mutex_init+0x1ef/0x280 [ 599.976568] ? __ia32_sys_membarrier+0x150/0x150 [ 599.981326] ? blk_mq_alloc_rq_map+0x142/0x220 [ 599.985896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 599.991418] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 599.996160] ? blk_mq_alloc_tag_set+0x506/0xab0 [ 600.000814] ? idr_alloc+0x145/0x1a0 [ 600.004515] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 600.009700] blk_mq_init_queue+0x4b/0xb0 [ 600.013746] loop_add+0x32b/0x9c0 [ 600.017181] ? loop_lookup+0x102/0x220 [ 600.021062] ? loop_queue_rq+0x640/0x640 [ 600.025118] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 600.030290] loop_control_ioctl+0x178/0x500 [ 600.034595] ? loop_add+0x9c0/0x9c0 [ 600.038210] ? expand_files.part.8+0x9a0/0x9a0 [ 600.042793] ? kasan_check_write+0x14/0x20 [ 600.047017] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 600.051943] ? wait_for_completion+0x870/0x870 [ 600.056512] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 600.061864] ? loop_add+0x9c0/0x9c0 [ 600.065484] do_vfs_ioctl+0x1cf/0x16a0 [ 600.069372] ? ioctl_preallocate+0x2e0/0x2e0 [ 600.073781] ? fget_raw+0x20/0x20 [ 600.077221] ? __sb_end_write+0xac/0xe0 [ 600.081185] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 600.086712] ? fput+0x130/0x1a0 [ 600.089976] ? ksys_write+0x1a6/0x250 [ 600.093762] ? security_file_ioctl+0x94/0xc0 [ 600.098157] ksys_ioctl+0xa9/0xd0 [ 600.101594] __x64_sys_ioctl+0x73/0xb0 [ 600.105467] do_syscall_64+0x1b1/0x800 [ 600.109341] ? finish_task_switch+0x1ca/0x840 [ 600.113817] ? syscall_return_slowpath+0x5c0/0x5c0 [ 600.118731] ? syscall_return_slowpath+0x30f/0x5c0 [ 600.123645] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 600.128999] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.133841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.139025] RIP: 0033:0x455a09 [ 600.142207] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.149903] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 600.157160] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 600.164420] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 600.171675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 600.178928] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001a 2018/05/22 07:23:20 executing program 0 (fault-call:2 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:20 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:20 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x1000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x100000000000000) 2018/05/22 07:23:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:20 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffffc2, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0xffffffff00000000) 2018/05/22 07:23:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfdfdffff00000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:20 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x60000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:20 executing program 6: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000080)=0xc1) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x2, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, r0, 0x8000) [ 600.511377] FAULT_INJECTION: forcing a failure. [ 600.511377] name failslab, interval 1, probability 0, space 0, times 0 [ 600.522759] CPU: 0 PID: 3530 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 600.529971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.539444] Call Trace: [ 600.542051] dump_stack+0x1b9/0x294 [ 600.545697] ? dump_stack_print_info.cold.2+0x52/0x52 [ 600.551602] ? save_stack+0x43/0xd0 [ 600.555255] ? __kasan_slab_free+0x11a/0x170 2018/05/22 07:23:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x1400) [ 600.559678] ? kasan_slab_free+0xe/0x10 [ 600.563662] ? kfree+0xd9/0x260 [ 600.566958] ? throtl_pd_free+0x21/0x30 [ 600.570955] should_fail.cold.4+0xa/0x1a [ 600.575034] ? __x64_sys_ioctl+0x73/0xb0 [ 600.579114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 600.584240] ? print_usage_bug+0xc0/0xc0 [ 600.588299] ? do_raw_spin_lock+0xc1/0x200 [ 600.592527] ? graph_lock+0x170/0x170 [ 600.596325] ? trace_hardirqs_off+0xd/0x10 [ 600.600670] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 600.605780] ? find_held_lock+0x36/0x1c0 [ 600.609835] ? __lock_is_held+0xb5/0x140 [ 600.613914] ? check_same_owner+0x320/0x320 [ 600.618234] ? rcu_note_context_switch+0x710/0x710 [ 600.623161] ? blkcg_activate_policy+0x3db/0x580 [ 600.627914] __should_failslab+0x124/0x180 [ 600.632150] should_failslab+0x9/0x14 [ 600.635942] kmem_cache_alloc_trace+0x2cb/0x780 [ 600.640600] ? blk_throtl_init+0x3e6/0x630 [ 600.644829] ? blk_throtl_drain+0x7e0/0x7e0 [ 600.649157] ? blk_mq_can_queue+0x50/0x50 [ 600.653313] ? plug_ctx_cmp+0x110/0x110 [ 600.657278] blk_stat_alloc_callback+0x5b/0x280 [ 600.661939] blk_mq_init_allocated_queue+0x125/0x1580 [ 600.667138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.672682] ? blk_alloc_queue_node+0x8d3/0xe40 [ 600.677342] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 600.681821] ? __mutex_init+0x1ef/0x280 [ 600.685801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 600.691324] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 600.696069] ? idr_alloc+0x145/0x1a0 [ 600.699770] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 600.704946] blk_mq_init_queue+0x63/0xb0 [ 600.708993] loop_add+0x32b/0x9c0 [ 600.712435] ? loop_lookup+0x102/0x220 [ 600.716309] ? loop_queue_rq+0x640/0x640 [ 600.720483] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 600.725669] loop_control_ioctl+0x178/0x500 [ 600.729977] ? loop_add+0x9c0/0x9c0 [ 600.733594] ? expand_files.part.8+0x9a0/0x9a0 [ 600.738170] ? kasan_check_write+0x14/0x20 [ 600.742397] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 600.747318] ? wait_for_completion+0x870/0x870 [ 600.751890] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 600.757067] ? loop_add+0x9c0/0x9c0 [ 600.760684] do_vfs_ioctl+0x1cf/0x16a0 [ 600.764568] ? ioctl_preallocate+0x2e0/0x2e0 [ 600.768968] ? fget_raw+0x20/0x20 [ 600.772411] ? __sb_end_write+0xac/0xe0 [ 600.776376] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 600.781909] ? fput+0x130/0x1a0 [ 600.785175] ? ksys_write+0x1a6/0x250 [ 600.788966] ? security_file_ioctl+0x94/0xc0 [ 600.793361] ksys_ioctl+0xa9/0xd0 [ 600.796803] __x64_sys_ioctl+0x73/0xb0 [ 600.800678] do_syscall_64+0x1b1/0x800 [ 600.804547] ? finish_task_switch+0x1ca/0x840 [ 600.809053] ? syscall_return_slowpath+0x5c0/0x5c0 [ 600.813970] ? syscall_return_slowpath+0x30f/0x5c0 [ 600.818887] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 600.824261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 600.829104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 600.834283] RIP: 0033:0x455a09 [ 600.837462] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.845174] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 600.852429] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 600.859682] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 600.866942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 600.874205] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001b 2018/05/22 07:23:20 executing program 0 (fault-call:2 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x1000000000000) 2018/05/22 07:23:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xceffffff, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:20 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x2000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:20 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:20 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/25) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[], 0x0) 2018/05/22 07:23:20 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xa00000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xfffffdfd, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:20 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x200000000000000) 2018/05/22 07:23:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x100000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:20 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x20000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 601.169047] FAULT_INJECTION: forcing a failure. [ 601.169047] name failslab, interval 1, probability 0, space 0, times 0 [ 601.180742] CPU: 0 PID: 3586 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 601.187958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.197325] Call Trace: [ 601.199925] dump_stack+0x1b9/0x294 [ 601.203570] ? dump_stack_print_info.cold.2+0x52/0x52 [ 601.208789] ? __save_stack_trace+0x7e/0xd0 [ 601.213153] should_fail.cold.4+0xa/0x1a [ 601.217241] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 601.222354] ? save_stack+0x43/0xd0 [ 601.225967] ? kasan_kmalloc+0xc4/0xe0 [ 601.229840] ? throtl_pd_alloc+0xd7/0x970 [ 601.233984] ? blkcg_activate_policy+0xf4/0x580 [ 601.238645] ? __lock_is_held+0xb5/0x140 [ 601.242695] ? __lockdep_init_map+0x105/0x590 [ 601.247176] ? lockdep_init_map+0x9/0x10 [ 601.251229] ? init_timer_key+0x17f/0x470 [ 601.255366] ? throtl_pd_offline+0x210/0x210 [ 601.259776] ? init_timer_on_stack_key+0xe0/0xe0 [ 601.264531] ? __lock_is_held+0xb5/0x140 [ 601.268597] __should_failslab+0x124/0x180 [ 601.272822] should_failslab+0x9/0x14 [ 601.276608] kmem_cache_alloc_node_trace+0x5a/0x770 [ 601.281611] ? lock_acquire+0x1dc/0x520 [ 601.285574] ? blkcg_activate_policy+0x12c/0x580 [ 601.290317] throtl_pd_alloc+0xd7/0x970 [ 601.294278] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 601.299560] ? _raw_spin_unlock_irq+0x27/0x70 [ 601.304057] ? kasan_check_write+0x14/0x20 [ 601.308291] ? do_raw_spin_lock+0xc1/0x200 [ 601.312519] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 601.317781] blkcg_activate_policy+0x221/0x580 [ 601.322358] blk_throtl_init+0x3d0/0x630 [ 601.326401] ? blk_throtl_drain+0x7e0/0x7e0 [ 601.330711] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 601.335716] blkcg_init_queue+0x1ef/0x480 [ 601.339854] blk_alloc_queue_node+0x8bd/0xe40 [ 601.344353] ? blk_init_allocated_queue+0x620/0x620 [ 601.349361] ? __mutex_init+0x1ef/0x280 [ 601.353332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 601.359385] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 601.364131] ? idr_alloc+0x145/0x1a0 [ 601.367831] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 601.373013] blk_mq_init_queue+0x4b/0xb0 [ 601.377073] loop_add+0x32b/0x9c0 [ 601.380520] ? loop_lookup+0x102/0x220 [ 601.384392] ? loop_queue_rq+0x640/0x640 [ 601.388441] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 601.393614] loop_control_ioctl+0x178/0x500 [ 601.397920] ? loop_add+0x9c0/0x9c0 [ 601.401534] ? expand_files.part.8+0x9a0/0x9a0 [ 601.406107] ? kasan_check_write+0x14/0x20 [ 601.410340] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 601.415272] ? wait_for_completion+0x870/0x870 [ 601.419855] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 601.425044] ? loop_add+0x9c0/0x9c0 [ 601.428666] do_vfs_ioctl+0x1cf/0x16a0 [ 601.432540] ? ioctl_preallocate+0x2e0/0x2e0 [ 601.436942] ? fget_raw+0x20/0x20 [ 601.440379] ? __sb_end_write+0xac/0xe0 [ 601.444341] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.449861] ? fput+0x130/0x1a0 [ 601.453134] ? ksys_write+0x1a6/0x250 [ 601.456929] ? security_file_ioctl+0x94/0xc0 [ 601.461324] ksys_ioctl+0xa9/0xd0 [ 601.464764] __x64_sys_ioctl+0x73/0xb0 [ 601.468638] do_syscall_64+0x1b1/0x800 [ 601.472517] ? finish_task_switch+0x1ca/0x840 [ 601.476999] ? syscall_return_slowpath+0x5c0/0x5c0 [ 601.481921] ? syscall_return_slowpath+0x30f/0x5c0 [ 601.486836] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 601.492187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.497029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.502231] RIP: 0033:0x455a09 [ 601.505401] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.513096] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 601.520350] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 601.527601] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 601.534851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 601.542099] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001c 2018/05/22 07:23:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0xf6ffffff) 2018/05/22 07:23:21 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) membarrier(0x30, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x200000000000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:21 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:21 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:21 executing program 0 (fault-call:2 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x4000000) 2018/05/22 07:23:21 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xceffffff00000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:21 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) r2 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x9, 0x40000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x0, r3}) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x2) 2018/05/22 07:23:21 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 602.066624] FAULT_INJECTION: forcing a failure. [ 602.066624] name failslab, interval 1, probability 0, space 0, times 0 [ 602.077892] CPU: 0 PID: 3653 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 602.085105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.094471] Call Trace: [ 602.097075] dump_stack+0x1b9/0x294 [ 602.100702] ? dump_stack_print_info.cold.2+0x52/0x52 [ 602.105886] ? __save_stack_trace+0x7e/0xd0 [ 602.110210] should_fail.cold.4+0xa/0x1a [ 602.114268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 602.119361] ? save_stack+0x43/0xd0 [ 602.122979] ? kasan_kmalloc+0xc4/0xe0 [ 602.126868] ? throtl_pd_alloc+0xd7/0x970 [ 602.131033] ? blkcg_activate_policy+0xf4/0x580 [ 602.135705] ? __lock_is_held+0xb5/0x140 [ 602.139791] ? __lockdep_init_map+0x105/0x590 [ 602.144282] ? lockdep_init_map+0x9/0x10 [ 602.148333] ? init_timer_key+0x17f/0x470 [ 602.152470] ? throtl_pd_offline+0x210/0x210 [ 602.156867] ? init_timer_on_stack_key+0xe0/0xe0 [ 602.161620] ? __lock_is_held+0xb5/0x140 [ 602.165687] __should_failslab+0x124/0x180 [ 602.169917] should_failslab+0x9/0x14 [ 602.173709] kmem_cache_alloc_node_trace+0x5a/0x770 [ 602.178719] ? lock_acquire+0x1dc/0x520 [ 602.182698] ? blkcg_activate_policy+0x12c/0x580 [ 602.187450] throtl_pd_alloc+0xd7/0x970 [ 602.191436] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 602.196732] ? _raw_spin_unlock_irq+0x27/0x70 [ 602.201240] ? kasan_check_write+0x14/0x20 [ 602.205469] ? do_raw_spin_lock+0xc1/0x200 [ 602.209699] ? blk_throtl_dispatch_work_fn+0x480/0x480 [ 602.214985] blkcg_activate_policy+0x221/0x580 [ 602.220267] blk_throtl_init+0x3d0/0x630 [ 602.224327] ? blk_throtl_drain+0x7e0/0x7e0 [ 602.229529] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 602.234547] blkcg_init_queue+0x1ef/0x480 [ 602.238685] blk_alloc_queue_node+0x8bd/0xe40 [ 602.243177] ? blk_init_allocated_queue+0x620/0x620 [ 602.248196] ? __mutex_init+0x1ef/0x280 [ 602.252181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.257715] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 602.262465] ? idr_alloc+0x145/0x1a0 [ 602.266168] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 602.271349] blk_mq_init_queue+0x4b/0xb0 [ 602.275404] loop_add+0x32b/0x9c0 [ 602.278847] ? loop_lookup+0x102/0x220 [ 602.282723] ? loop_queue_rq+0x640/0x640 [ 602.286781] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 602.291972] loop_control_ioctl+0x178/0x500 [ 602.296295] ? loop_add+0x9c0/0x9c0 [ 602.299917] ? expand_files.part.8+0x9a0/0x9a0 [ 602.304494] ? kasan_check_write+0x14/0x20 [ 602.308728] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 602.313656] ? wait_for_completion+0x870/0x870 [ 602.318242] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 602.323439] ? loop_add+0x9c0/0x9c0 [ 602.327067] do_vfs_ioctl+0x1cf/0x16a0 [ 602.330953] ? ioctl_preallocate+0x2e0/0x2e0 [ 602.335361] ? fget_raw+0x20/0x20 [ 602.338810] ? __sb_end_write+0xac/0xe0 [ 602.342781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 602.348306] ? fput+0x130/0x1a0 [ 602.351573] ? ksys_write+0x1a6/0x250 [ 602.355367] ? security_file_ioctl+0x94/0xc0 [ 602.359777] ksys_ioctl+0xa9/0xd0 [ 602.363232] __x64_sys_ioctl+0x73/0xb0 [ 602.367112] do_syscall_64+0x1b1/0x800 [ 602.370990] ? finish_task_switch+0x1ca/0x840 [ 602.375490] ? syscall_return_slowpath+0x5c0/0x5c0 [ 602.380411] ? syscall_return_slowpath+0x30f/0x5c0 [ 602.385334] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 602.390698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.395533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.400715] RIP: 0033:0x455a09 [ 602.403890] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.411596] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 602.418861] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 602.426125] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 602.433389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 602.440652] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001d 2018/05/22 07:23:22 executing program 0 (fault-call:2 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:22 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0xfffffff6) 2018/05/22 07:23:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x1000000, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:22 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f00000002c0)={0x8, {{0xa, 0x4e21, 0x352, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, {{0xa, 0x4e23, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffffe4}}}, 0x108) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x2, &(0x7f0000000100)={0x413}, 0x8) 2018/05/22 07:23:22 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:22 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x400000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x8, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x2, 'fo\x00', 0x28, 0x3, 0x5a}, {@empty, 0x4e20, 0x5, 0x1, 0x7, 0x61}}, 0x44) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x190) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x304, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xffffffff, 0xfc04, 0xf3c, 0x6, 0x1000, 0x8, 0x6, 0x1285c, 0x5, 0xfffffffffffff802, 0x1}, 0xb) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={{0x6, 0x9, 0x0, 0x5, 0x7, 0x7}, 0x78c0}) 2018/05/22 07:23:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0xffffffce, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 602.662754] FAULT_INJECTION: forcing a failure. [ 602.662754] name failslab, interval 1, probability 0, space 0, times 0 [ 602.674488] CPU: 1 PID: 3699 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 602.681689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.691056] Call Trace: [ 602.693664] dump_stack+0x1b9/0x294 [ 602.697311] ? dump_stack_print_info.cold.2+0x52/0x52 [ 602.702523] ? blk_mq_realloc_hw_ctxs+0xf3/0x1250 [ 602.707397] should_fail.cold.4+0xa/0x1a 2018/05/22 07:23:22 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000000000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 602.711484] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 602.716603] ? lock_downgrade+0x8e0/0x8e0 [ 602.720767] ? graph_lock+0x170/0x170 [ 602.724593] ? find_held_lock+0x36/0x1c0 [ 602.726487] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003 fo [ 602.728671] ? __lock_is_held+0xb5/0x140 [ 602.737053] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003 fo [ 602.739358] ? check_same_owner+0x320/0x320 [ 602.739382] ? rcu_note_context_switch+0x710/0x710 [ 602.739404] __should_failslab+0x124/0x180 [ 602.759422] should_failslab+0x9/0x14 2018/05/22 07:23:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") [ 602.763232] kmem_cache_alloc_node_trace+0x26f/0x770 [ 602.768344] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.773876] ? find_next_bit+0x104/0x130 [ 602.777929] __kmalloc_node+0x33/0x70 [ 602.781727] blk_mq_realloc_hw_ctxs+0x28d/0x1250 [ 602.786486] ? blk_mq_free_map_and_requests+0x160/0x160 [ 602.791835] ? __kmalloc_node+0x33/0x70 [ 602.795812] ? __kmalloc_node+0x33/0x70 [ 602.799771] ? rcu_read_lock_sched_held+0x108/0x120 [ 602.804771] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 602.810043] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 602.815047] ? kasan_unpoison_shadow+0x35/0x50 [ 602.819612] ? kasan_kmalloc+0xc4/0xe0 [ 602.823496] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 602.828670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.834204] ? blk_alloc_queue_node+0x8d3/0xe40 [ 602.838867] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 602.843345] ? __mutex_init+0x1ef/0x280 [ 602.847327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.852865] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 602.857608] ? idr_alloc+0x145/0x1a0 [ 602.861304] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 602.866481] blk_mq_init_queue+0x63/0xb0 [ 602.870536] loop_add+0x32b/0x9c0 [ 602.873992] ? loop_lookup+0x102/0x220 [ 602.877959] ? loop_queue_rq+0x640/0x640 [ 602.882018] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 602.887204] loop_control_ioctl+0x178/0x500 [ 602.891511] ? loop_add+0x9c0/0x9c0 [ 602.895150] ? expand_files.part.8+0x9a0/0x9a0 [ 602.899718] ? kasan_check_write+0x14/0x20 [ 602.903941] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 602.908859] ? wait_for_completion+0x870/0x870 [ 602.913426] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 602.918612] ? loop_add+0x9c0/0x9c0 [ 602.922230] do_vfs_ioctl+0x1cf/0x16a0 [ 602.926104] ? ioctl_preallocate+0x2e0/0x2e0 [ 602.930501] ? fget_raw+0x20/0x20 [ 602.933942] ? __sb_end_write+0xac/0xe0 [ 602.937902] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 602.943421] ? fput+0x130/0x1a0 [ 602.946685] ? ksys_write+0x1a6/0x250 [ 602.950483] ? security_file_ioctl+0x94/0xc0 [ 602.954877] ksys_ioctl+0xa9/0xd0 [ 602.958326] __x64_sys_ioctl+0x73/0xb0 [ 602.962214] do_syscall_64+0x1b1/0x800 [ 602.966093] ? syscall_return_slowpath+0x5c0/0x5c0 [ 602.971038] ? syscall_return_slowpath+0x30f/0x5c0 [ 602.975977] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 602.981328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.986172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.991354] RIP: 0033:0x455a09 [ 602.994527] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.002227] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 2018/05/22 07:23:22 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 603.009481] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 603.016747] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 603.024013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 603.031279] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001e 2018/05/22 07:23:22 executing program 0 (fault-call:2 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x2, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:22 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffff00000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:22 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) 2018/05/22 07:23:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:22 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB="180004007b4a918c7f85a7c9eab3b510283391"], 0x8b) 2018/05/22 07:23:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfffffdfd, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:23 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x3000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x214d00, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) [ 603.398561] FAULT_INJECTION: forcing a failure. [ 603.398561] name failslab, interval 1, probability 0, space 0, times 0 [ 603.409894] CPU: 0 PID: 3752 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 603.417100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.426460] Call Trace: [ 603.429072] dump_stack+0x1b9/0x294 [ 603.432723] ? dump_stack_print_info.cold.2+0x52/0x52 [ 603.437946] ? lock_downgrade+0x8e0/0x8e0 [ 603.442112] should_fail.cold.4+0xa/0x1a 2018/05/22 07:23:23 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xb000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 603.446185] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 603.451304] ? graph_lock+0x170/0x170 [ 603.455127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.460679] ? pcpu_alloc+0x188/0x1380 [ 603.464584] ? find_held_lock+0x36/0x1c0 [ 603.468721] ? __lock_is_held+0xb5/0x140 [ 603.472813] ? check_same_owner+0x320/0x320 [ 603.477149] ? blk_mq_can_queue+0x50/0x50 [ 603.481325] ? rcu_note_context_switch+0x710/0x710 [ 603.486274] ? kobject_init+0x226/0x2d0 [ 603.490265] __should_failslab+0x124/0x180 [ 603.494519] should_failslab+0x9/0x14 2018/05/22 07:23:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff00000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 603.498338] kmem_cache_alloc_node_trace+0x26f/0x770 [ 603.503462] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 603.508498] ? find_next_bit+0x104/0x130 [ 603.512571] __kmalloc_node+0x33/0x70 [ 603.516365] blk_mq_init_allocated_queue+0x220/0x1580 [ 603.521541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.527068] ? blk_alloc_queue_node+0x8d3/0xe40 [ 603.531727] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 603.536215] ? __mutex_init+0x1ef/0x280 [ 603.540195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.545724] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 603.550472] ? idr_alloc+0x145/0x1a0 [ 603.554191] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 603.559383] blk_mq_init_queue+0x63/0xb0 [ 603.563433] loop_add+0x32b/0x9c0 [ 603.566879] ? loop_lookup+0x102/0x220 [ 603.570754] ? loop_queue_rq+0x640/0x640 [ 603.574801] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 603.579977] loop_control_ioctl+0x178/0x500 [ 603.584291] ? loop_add+0x9c0/0x9c0 [ 603.587910] ? expand_files.part.8+0x9a0/0x9a0 [ 603.592481] ? kasan_check_write+0x14/0x20 [ 603.596703] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 603.601629] ? wait_for_completion+0x870/0x870 [ 603.606207] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 603.611389] ? loop_add+0x9c0/0x9c0 [ 603.615011] do_vfs_ioctl+0x1cf/0x16a0 [ 603.618913] ? ioctl_preallocate+0x2e0/0x2e0 [ 603.623314] ? fget_raw+0x20/0x20 [ 603.626752] ? __sb_end_write+0xac/0xe0 [ 603.630744] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 603.636279] ? fput+0x130/0x1a0 [ 603.639557] ? ksys_write+0x1a6/0x250 [ 603.643354] ? security_file_ioctl+0x94/0xc0 [ 603.648102] ksys_ioctl+0xa9/0xd0 [ 603.651546] __x64_sys_ioctl+0x73/0xb0 [ 603.655509] do_syscall_64+0x1b1/0x800 [ 603.659387] ? finish_task_switch+0x1ca/0x840 [ 603.663877] ? syscall_return_slowpath+0x5c0/0x5c0 [ 603.668805] ? syscall_return_slowpath+0x30f/0x5c0 [ 603.673731] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 603.679085] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.683921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.689105] RIP: 0033:0x455a09 [ 603.692278] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.699970] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 603.707230] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 603.714487] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 603.721738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 603.728988] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000001f 2018/05/22 07:23:23 executing program 0 (fault-call:2 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xceffffff, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:23 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:23 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) setpriority(0x1, r1, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x279854ca1f35e382, 0x4) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000280)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0x17, &(0x7f0000000200)=0x3f, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:23 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 603.857189] Unknown ioctl -2138001791 [ 603.904372] Unknown ioctl -2146914560 2018/05/22 07:23:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) r2 = getpid() r3 = getpgrp(0x0) kcmp(r2, r3, 0x0, r1, r1) 2018/05/22 07:23:23 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x200000) ioctl$KDSETMODE(r0, 0x4b3a, 0x47) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB="000000006b3bd31242dc444d"], 0x8b) [ 603.990914] FAULT_INJECTION: forcing a failure. [ 603.990914] name failslab, interval 1, probability 0, space 0, times 0 [ 604.002262] CPU: 1 PID: 3802 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 604.009461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.018824] Call Trace: [ 604.021422] dump_stack+0x1b9/0x294 [ 604.025046] ? dump_stack_print_info.cold.2+0x52/0x52 [ 604.030226] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 604.035414] should_fail.cold.4+0xa/0x1a [ 604.039467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 604.044561] ? unwind_get_return_address+0x61/0xa0 [ 604.049491] ? __save_stack_trace+0x7e/0xd0 [ 604.053810] ? graph_lock+0x170/0x170 [ 604.057608] ? find_held_lock+0x36/0x1c0 [ 604.061664] ? __lock_is_held+0xb5/0x140 [ 604.065731] ? check_same_owner+0x320/0x320 [ 604.070067] ? rcu_note_context_switch+0x710/0x710 [ 604.075007] __should_failslab+0x124/0x180 [ 604.079241] should_failslab+0x9/0x14 [ 604.083037] kmem_cache_alloc_node_trace+0x26f/0x770 [ 604.088132] ? __kmalloc_node+0x33/0x70 [ 604.092096] ? __kmalloc_node+0x33/0x70 [ 604.096060] ? rcu_read_lock_sched_held+0x108/0x120 [ 604.101073] __kmalloc_node+0x33/0x70 [ 604.104869] sbitmap_init_node+0x290/0x460 [ 604.109101] blk_mq_realloc_hw_ctxs+0x71f/0x1250 [ 604.113865] ? blk_mq_free_map_and_requests+0x160/0x160 [ 604.119243] ? __kmalloc_node+0x33/0x70 [ 604.123212] ? __kmalloc_node+0x33/0x70 [ 604.127175] ? rcu_read_lock_sched_held+0x108/0x120 [ 604.132191] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 604.137831] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 604.142858] ? kasan_unpoison_shadow+0x35/0x50 [ 604.147449] ? kasan_kmalloc+0xc4/0xe0 [ 604.151339] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 604.156533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.162078] ? blk_alloc_queue_node+0x8d3/0xe40 [ 604.166740] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 604.171229] ? __mutex_init+0x1ef/0x280 [ 604.175212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.180736] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 604.185483] ? idr_alloc+0x145/0x1a0 [ 604.189194] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 604.194383] blk_mq_init_queue+0x63/0xb0 [ 604.198433] loop_add+0x32b/0x9c0 [ 604.201874] ? loop_lookup+0x102/0x220 [ 604.205748] ? loop_queue_rq+0x640/0x640 [ 604.209805] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 604.215006] loop_control_ioctl+0x178/0x500 [ 604.219330] ? loop_add+0x9c0/0x9c0 [ 604.222956] ? expand_files.part.8+0x9a0/0x9a0 [ 604.227542] ? kasan_check_write+0x14/0x20 [ 604.231774] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 604.236694] ? wait_for_completion+0x870/0x870 [ 604.241264] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 604.246440] ? loop_add+0x9c0/0x9c0 [ 604.250055] do_vfs_ioctl+0x1cf/0x16a0 [ 604.253937] ? ioctl_preallocate+0x2e0/0x2e0 [ 604.258335] ? fget_raw+0x20/0x20 [ 604.261778] ? __sb_end_write+0xac/0xe0 [ 604.265745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 604.271273] ? fput+0x130/0x1a0 [ 604.274539] ? ksys_write+0x1a6/0x250 [ 604.278335] ? security_file_ioctl+0x94/0xc0 [ 604.282747] ksys_ioctl+0xa9/0xd0 [ 604.286192] __x64_sys_ioctl+0x73/0xb0 [ 604.290069] do_syscall_64+0x1b1/0x800 [ 604.293946] ? finish_task_switch+0x1ca/0x840 [ 604.298431] ? syscall_return_slowpath+0x5c0/0x5c0 [ 604.303353] ? syscall_return_slowpath+0x30f/0x5c0 [ 604.308282] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 604.313638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 604.318486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.323670] RIP: 0033:0x455a09 [ 604.326851] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.334552] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 2018/05/22 07:23:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:23 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x1000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:23 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:24 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 604.341811] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 604.349071] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 604.356328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 604.363590] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000020 2018/05/22 07:23:24 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xb, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:24 executing program 0 (fault-call:2 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) 2018/05/22 07:23:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:24 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20000, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0xffffffffffffff00, &(0x7f0000000100)=0x1) 2018/05/22 07:23:24 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffff80, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:24 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xfdfdffff, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:24 executing program 1: r0 = socket(0x0, 0x1, 0x4000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:24 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x80ffffff00000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 604.757190] FAULT_INJECTION: forcing a failure. [ 604.757190] name failslab, interval 1, probability 0, space 0, times 0 [ 604.768654] CPU: 0 PID: 3859 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 604.775859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.785220] Call Trace: [ 604.787837] dump_stack+0x1b9/0x294 [ 604.791488] ? dump_stack_print_info.cold.2+0x52/0x52 [ 604.796704] should_fail.cold.4+0xa/0x1a [ 604.800785] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/22 07:23:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x7ff}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) [ 604.805912] ? is_bpf_text_address+0xd7/0x170 [ 604.810421] ? kernel_text_address+0x79/0xf0 [ 604.814870] ? graph_lock+0x170/0x170 [ 604.818717] ? unwind_get_return_address+0x61/0xa0 [ 604.823667] ? find_held_lock+0x36/0x1c0 [ 604.827748] ? __lock_is_held+0xb5/0x140 [ 604.831839] ? check_same_owner+0x320/0x320 [ 604.836172] ? __lock_is_held+0xb5/0x140 [ 604.840255] ? rcu_note_context_switch+0x710/0x710 [ 604.845205] __should_failslab+0x124/0x180 [ 604.849466] should_failslab+0x9/0x14 2018/05/22 07:23:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x2, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) [ 604.853283] kmem_cache_alloc_node_trace+0x26f/0x770 [ 604.858400] ? __lock_is_held+0xb5/0x140 [ 604.862493] blk_alloc_flush_queue+0xc5/0x3d0 [ 604.867005] ? blk_insert_flush+0xaf0/0xaf0 [ 604.871338] ? kasan_unpoison_shadow+0x35/0x50 [ 604.875935] ? kasan_kmalloc+0xc4/0xe0 [ 604.879844] ? __kmalloc_node+0x47/0x70 [ 604.883826] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 604.888842] ? blk_mq_sched_init_hctx+0x117/0x1a0 [ 604.893679] blk_mq_realloc_hw_ctxs+0x956/0x1250 [ 604.898438] ? blk_mq_free_map_and_requests+0x160/0x160 [ 604.903803] ? __kmalloc_node+0x33/0x70 [ 604.907770] ? rcu_read_lock_sched_held+0x108/0x120 [ 604.912781] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 604.918065] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 604.923081] ? kasan_unpoison_shadow+0x35/0x50 [ 604.927653] ? kasan_kmalloc+0xc4/0xe0 [ 604.931544] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 604.936736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.942274] ? blk_alloc_queue_node+0x8d3/0xe40 [ 604.947084] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 604.951564] ? __mutex_init+0x1ef/0x280 [ 604.955533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.961055] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 604.965800] ? idr_alloc+0x145/0x1a0 [ 604.969513] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 604.974701] blk_mq_init_queue+0x63/0xb0 [ 604.978746] loop_add+0x32b/0x9c0 [ 604.982189] ? loop_lookup+0x102/0x220 [ 604.986068] ? loop_queue_rq+0x640/0x640 [ 604.990141] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 604.995325] loop_control_ioctl+0x178/0x500 [ 604.999629] ? loop_add+0x9c0/0x9c0 [ 605.003242] ? expand_files.part.8+0x9a0/0x9a0 [ 605.007813] ? kasan_check_write+0x14/0x20 [ 605.012048] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 605.016978] ? wait_for_completion+0x870/0x870 [ 605.021548] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 605.026722] ? loop_add+0x9c0/0x9c0 [ 605.030335] do_vfs_ioctl+0x1cf/0x16a0 [ 605.034211] ? ioctl_preallocate+0x2e0/0x2e0 [ 605.038607] ? fget_raw+0x20/0x20 [ 605.042050] ? __sb_end_write+0xac/0xe0 [ 605.046022] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.051560] ? fput+0x130/0x1a0 [ 605.054836] ? ksys_write+0x1a6/0x250 [ 605.058627] ? security_file_ioctl+0x94/0xc0 [ 605.063042] ksys_ioctl+0xa9/0xd0 [ 605.066489] __x64_sys_ioctl+0x73/0xb0 [ 605.070366] do_syscall_64+0x1b1/0x800 [ 605.074240] ? finish_task_switch+0x1ca/0x840 [ 605.078723] ? syscall_return_slowpath+0x5c0/0x5c0 [ 605.083650] ? syscall_return_slowpath+0x30f/0x5c0 [ 605.088578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 605.093932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.098763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.103937] RIP: 0033:0x455a09 2018/05/22 07:23:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) [ 605.107110] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.114806] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 605.122058] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 605.129312] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 605.136568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 605.143827] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000021 2018/05/22 07:23:24 executing program 0 (fault-call:2 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:24 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:24 executing program 6: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x107, 0x80, 0x0, 0x33b, 0x1be, 0x1a1, 0x3d8, 0x5}, "fe206a2596cc3c86d678e76738310660337142a69c92b39be18f61cb0587c66f480db738ebff77dbd98c6b65e4aebda4ece720df5b1e31198b8437474495f5503f58b87ebadde2c1a19a9119255af9ec804ca5deff0017f52fb9077180687dd1780e9ef847061c6ffdff705ceb740bcfa480de56d62b102787f9defe60c0783d73a3eb5dcf8a6ee59d54dec8be70ef93ce7c54573942521c568bd59b8cf3cfa01166ef7df97f06055cb72cf71f167f046b1d4bfd62", [[], [], [], []]}, 0x4d5) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x48400, 0x0) 2018/05/22 07:23:24 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0xa000000, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xffffffce, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa5, "5feecd99c2a82944679ee6ed639445057eb42bfc73b8a35d93a25fcd79116ae8b9e5cedc194550074f1fb673998e4686f240e1ba277dcc4ed533eb91c359091ec5c57f5b9552f4c0c3850270b793c435301986b1048b870a60764160f36dfec63e014981eacdc1c10c06ccc1cd36eaff22364488c27c997212f50b61320e753aa6001dd845528e335f253542622546574800f714520cc7a606e9e76227b96f06f5ca2371b5"}, &(0x7f0000000140)=0xad) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xffffffff9d1a7c25, 0x8000, 0x7f, 0x400, r1}, &(0x7f00000001c0)=0x10) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x1000001f, &(0x7f0000000300)="c626262c8523bf012cf66f") r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000280)) bind(r3, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80) 2018/05/22 07:23:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:25 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffffc0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/4096) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f2fb8361eefb8ce84a8c506b99e1fd7fd1b830c5a35b5a03181ca03bec41c3fdc020fab0401814cd3863d0a997fcad52de2d687ec7b91ef158276ead7c1aeee96ee1aa13f45e3b86ed203daf76f96ad529108b65b1e37ba8d63338f5297") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x100ffe, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="e4986fd3847b568deb84ef64a5376d9bd3ea67dbb6431423e4bf1171b7c47ccb3a4c3d4d2f92d9947a4c0ae37aa301532457cb33f4b48d307ed7e49dfaeb76aca8972e79a53325b3bc6fe4e91de925a04abf57089bf12ce56d98bfa364e41b48be") 2018/05/22 07:23:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x100000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:25 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4c0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000003c0)={0xfffffffffffffff7, {{0xa, 0x4e21, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x80}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x3, 0xfff, 0x3, 0x4}, 0x1, 0xb6, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffffa, 0x0, 0x101, 0x81}) 2018/05/22 07:23:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:25 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 605.494162] FAULT_INJECTION: forcing a failure. [ 605.494162] name failslab, interval 1, probability 0, space 0, times 0 [ 605.505686] CPU: 0 PID: 3918 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 605.512893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.522261] Call Trace: [ 605.524868] dump_stack+0x1b9/0x294 [ 605.528519] ? dump_stack_print_info.cold.2+0x52/0x52 [ 605.533718] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 605.538926] should_fail.cold.4+0xa/0x1a [ 605.543006] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 605.548132] ? unwind_get_return_address+0x61/0xa0 [ 605.553080] ? __save_stack_trace+0x7e/0xd0 [ 605.557419] ? graph_lock+0x170/0x170 [ 605.561237] ? find_held_lock+0x36/0x1c0 [ 605.565308] ? __lock_is_held+0xb5/0x140 [ 605.569397] ? check_same_owner+0x320/0x320 [ 605.573733] ? rcu_note_context_switch+0x710/0x710 [ 605.578777] __should_failslab+0x124/0x180 [ 605.583026] should_failslab+0x9/0x14 [ 605.586835] kmem_cache_alloc_node_trace+0x26f/0x770 [ 605.591947] ? __kmalloc_node+0x33/0x70 [ 605.595921] ? __kmalloc_node+0x33/0x70 [ 605.599903] ? rcu_read_lock_sched_held+0x108/0x120 [ 605.604919] __kmalloc_node+0x33/0x70 [ 605.608715] sbitmap_init_node+0x290/0x460 [ 605.612954] blk_mq_realloc_hw_ctxs+0x71f/0x1250 [ 605.617706] ? blk_mq_free_map_and_requests+0x160/0x160 [ 605.623072] ? __kmalloc_node+0x33/0x70 [ 605.627041] ? __kmalloc_node+0x33/0x70 [ 605.631008] ? rcu_read_lock_sched_held+0x108/0x120 [ 605.636026] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 605.641292] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 605.646294] ? kasan_unpoison_shadow+0x35/0x50 [ 605.650864] ? kasan_kmalloc+0xc4/0xe0 [ 605.654758] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 605.659948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.665472] ? blk_alloc_queue_node+0x8d3/0xe40 [ 605.670129] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 605.674605] ? __mutex_init+0x1ef/0x280 [ 605.678574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.684094] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 605.688842] ? idr_alloc+0x145/0x1a0 [ 605.692541] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 605.697720] blk_mq_init_queue+0x63/0xb0 [ 605.701776] loop_add+0x32b/0x9c0 [ 605.705222] ? loop_lookup+0x102/0x220 [ 605.709100] ? loop_queue_rq+0x640/0x640 [ 605.713160] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 605.718348] loop_control_ioctl+0x178/0x500 [ 605.722659] ? loop_add+0x9c0/0x9c0 [ 605.726273] ? expand_files.part.8+0x9a0/0x9a0 [ 605.730847] ? kasan_check_write+0x14/0x20 [ 605.735070] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 605.739986] ? wait_for_completion+0x870/0x870 [ 605.744558] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 605.749735] ? loop_add+0x9c0/0x9c0 [ 605.753349] do_vfs_ioctl+0x1cf/0x16a0 [ 605.757235] ? ioctl_preallocate+0x2e0/0x2e0 [ 605.761631] ? fget_raw+0x20/0x20 [ 605.765069] ? __sb_end_write+0xac/0xe0 [ 605.769042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.774564] ? fput+0x130/0x1a0 [ 605.777826] ? ksys_write+0x1a6/0x250 [ 605.781610] ? security_file_ioctl+0x94/0xc0 [ 605.786004] ksys_ioctl+0xa9/0xd0 [ 605.789453] __x64_sys_ioctl+0x73/0xb0 [ 605.793324] do_syscall_64+0x1b1/0x800 [ 605.797192] ? finish_task_switch+0x1ca/0x840 [ 605.801672] ? syscall_return_slowpath+0x5c0/0x5c0 [ 605.806589] ? syscall_return_slowpath+0x30f/0x5c0 [ 605.811518] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 605.816876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.821712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.826895] RIP: 0033:0x455a09 [ 605.830241] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.837936] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 605.845193] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 605.852458] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 605.859713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 605.866978] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000022 2018/05/22 07:23:25 executing program 0 (fault-call:2 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:25 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xa00, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x200000000000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:25 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getsig(0x4202, r2, 0x1f, &(0x7f0000000080)) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000ea", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200) getdents(r1, &(0x7f0000000080)=""/99, 0x63) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:25 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:25 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4c00, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:25 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0xceffffff00000000, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) fallocate(r1, 0x0, 0x9, 0x100) 2018/05/22 07:23:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:25 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}], 0x1c) sendmmsg(r1, &(0x7f000000f9c0)=[{{&(0x7f00000001c0)=@un=@abs, 0x1a, &(0x7f0000000000), 0x1, &(0x7f00000012c0)}}], 0x33f, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, r2}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000180)={r3}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), 0x4) 2018/05/22 07:23:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) [ 606.218925] FAULT_INJECTION: forcing a failure. [ 606.218925] name failslab, interval 1, probability 0, space 0, times 0 [ 606.230290] CPU: 1 PID: 3978 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 606.237485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.246941] Call Trace: [ 606.249547] dump_stack+0x1b9/0x294 [ 606.253199] ? dump_stack_print_info.cold.2+0x52/0x52 [ 606.258402] ? __kernel_text_address+0xd/0x40 [ 606.262919] ? unwind_get_return_address+0x61/0xa0 [ 606.267869] should_fail.cold.4+0xa/0x1a [ 606.271978] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 606.277091] ? save_stack+0xa9/0xd0 [ 606.280724] ? graph_lock+0x170/0x170 [ 606.284535] ? blk_mq_realloc_hw_ctxs+0x956/0x1250 [ 606.289473] ? blk_mq_init_allocated_queue+0x2b8/0x1580 [ 606.294845] ? blk_mq_init_queue+0x63/0xb0 [ 606.299083] ? loop_add+0x32b/0x9c0 [ 606.302706] ? loop_control_ioctl+0x178/0x500 [ 606.307209] ? do_vfs_ioctl+0x1cf/0x16a0 [ 606.311280] ? find_held_lock+0x36/0x1c0 [ 606.315363] ? __lock_is_held+0xb5/0x140 [ 606.319871] ? check_same_owner+0x320/0x320 [ 606.324209] ? rcu_note_context_switch+0x710/0x710 [ 606.330019] __should_failslab+0x124/0x180 [ 606.334251] should_failslab+0x9/0x14 [ 606.338046] kmem_cache_alloc_node_trace+0x26f/0x770 [ 606.343145] ? __raw_spin_lock_init+0x1c/0x100 [ 606.347717] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 606.352728] __kmalloc_node+0x33/0x70 [ 606.356521] blk_alloc_flush_queue+0x178/0x3d0 [ 606.361094] ? blk_insert_flush+0xaf0/0xaf0 [ 606.365411] ? kasan_unpoison_shadow+0x35/0x50 [ 606.369981] ? kasan_kmalloc+0xc4/0xe0 [ 606.373861] ? __kmalloc_node+0x47/0x70 [ 606.377829] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 606.382846] ? blk_mq_sched_init_hctx+0x117/0x1a0 [ 606.387683] blk_mq_realloc_hw_ctxs+0x956/0x1250 [ 606.392454] ? blk_mq_free_map_and_requests+0x160/0x160 [ 606.397910] ? __kmalloc_node+0x33/0x70 [ 606.401880] ? rcu_read_lock_sched_held+0x108/0x120 [ 606.406886] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 606.412150] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 606.417248] ? kasan_unpoison_shadow+0x35/0x50 [ 606.421823] ? kasan_kmalloc+0xc4/0xe0 [ 606.425706] blk_mq_init_allocated_queue+0x2b8/0x1580 [ 606.430899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.436425] ? blk_alloc_queue_node+0x8d3/0xe40 [ 606.441092] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 606.445581] ? __mutex_init+0x1ef/0x280 [ 606.449574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.455097] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 606.459848] ? idr_alloc+0x145/0x1a0 [ 606.463552] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 606.468741] blk_mq_init_queue+0x63/0xb0 [ 606.472795] loop_add+0x32b/0x9c0 [ 606.476234] ? loop_lookup+0x102/0x220 [ 606.480112] ? loop_queue_rq+0x640/0x640 [ 606.484173] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 606.489353] loop_control_ioctl+0x178/0x500 [ 606.493662] ? loop_add+0x9c0/0x9c0 [ 606.497278] ? expand_files.part.8+0x9a0/0x9a0 [ 606.502027] ? kasan_check_write+0x14/0x20 [ 606.506253] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 606.511175] ? wait_for_completion+0x870/0x870 [ 606.515751] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 606.520927] ? loop_add+0x9c0/0x9c0 [ 606.524552] do_vfs_ioctl+0x1cf/0x16a0 [ 606.528448] ? ioctl_preallocate+0x2e0/0x2e0 [ 606.533031] ? fget_raw+0x20/0x20 [ 606.536480] ? __sb_end_write+0xac/0xe0 [ 606.540460] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 606.545982] ? fput+0x130/0x1a0 [ 606.549247] ? ksys_write+0x1a6/0x250 [ 606.553038] ? security_file_ioctl+0x94/0xc0 [ 606.557434] ksys_ioctl+0xa9/0xd0 [ 606.560887] __x64_sys_ioctl+0x73/0xb0 [ 606.564769] do_syscall_64+0x1b1/0x800 [ 606.568649] ? finish_task_switch+0x1ca/0x840 [ 606.573145] ? syscall_return_slowpath+0x5c0/0x5c0 [ 606.578065] ? syscall_return_slowpath+0x30f/0x5c0 [ 606.583074] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 606.588427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 606.593265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.598439] RIP: 0033:0x455a09 [ 606.601614] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.609352] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 606.616609] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 606.623868] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 606.631123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 606.638378] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000023 2018/05/22 07:23:26 executing program 0 (fault-call:2 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:26 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:26 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:26 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000100)=0x80, 0x800) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x27}, &(0x7f0000000300)=0x8) syz_emit_ethernet(0x60, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x40, 0x52, 0x66, 0xffffffffffffff81, 0xd5, 0x67, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x14}, {[@end]}}, @dccp={{0x4e21, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "d42467", 0x238cd054, "65f267"}, "db0e5ddb6b3a6d4124c3b16f750b5a2ef12c406f7de0add72ef652f26a6a6f6234a44ca4659b3f9e7bb7"}}}}}, &(0x7f0000000380)={0x1, 0x3, [0xdc, 0xfdd, 0xf41, 0x636]}) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0xffffffff7fffffff}, 0x8) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x4000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0x100000001, 0x20, 0x0, 0x7, 0x2}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") prctl$void(0x1e) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000140)=0x9, 0x4) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101000, 0x0) 2018/05/22 07:23:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff00000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) [ 606.847742] FAULT_INJECTION: forcing a failure. [ 606.847742] name failslab, interval 1, probability 0, space 0, times 0 [ 606.859075] CPU: 1 PID: 4006 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 606.866276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.875645] Call Trace: [ 606.878256] dump_stack+0x1b9/0x294 [ 606.881908] ? dump_stack_print_info.cold.2+0x52/0x52 [ 606.887137] should_fail.cold.4+0xa/0x1a [ 606.891222] ? debug_check_no_locks_freed+0x310/0x310 2018/05/22 07:23:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8915, &(0x7f0000000280)="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") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001500)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000001600)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001640)={@mcast2={0xff, 0x2, [], 0x1}, 0x3d, r1}) 2018/05/22 07:23:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:26 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 606.896434] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 606.901559] ? __might_sleep+0x95/0x190 [ 606.905551] ? rcu_note_context_switch+0x710/0x710 [ 606.910501] ? kasan_check_write+0x14/0x20 [ 606.914773] ? graph_lock+0x170/0x170 [ 606.918585] ? __might_sleep+0x95/0x190 [ 606.922576] ? find_held_lock+0x36/0x1c0 [ 606.926660] ? __lock_is_held+0xb5/0x140 [ 606.930753] ? check_same_owner+0x320/0x320 [ 606.935088] ? lock_downgrade+0x8e0/0x8e0 [ 606.939255] ? rcu_note_context_switch+0x710/0x710 [ 606.944203] __should_failslab+0x124/0x180 [ 606.948449] should_failslab+0x9/0x14 [ 606.952245] kmem_cache_alloc_node_trace+0x26f/0x770 [ 606.957342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 606.962869] ? find_next_bit+0x104/0x130 [ 606.966926] blk_mq_init_tags+0x79/0x2b0 [ 606.970983] blk_mq_alloc_rq_map+0x9f/0x220 [ 606.975300] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 606.980661] blk_mq_init_sched+0x1e2/0x530 [ 606.984895] elevator_init+0x3c8/0x500 [ 606.988770] ? elevator_get+0x180/0x180 [ 606.992733] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 606.997740] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 607.002231] blk_mq_sched_init+0x2b/0x40 [ 607.006282] blk_mq_init_allocated_queue+0xf19/0x1580 [ 607.011465] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 607.015952] ? __mutex_init+0x1ef/0x280 [ 607.019935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.025463] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 607.030215] ? idr_alloc+0x145/0x1a0 [ 607.033919] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 607.039105] blk_mq_init_queue+0x63/0xb0 [ 607.043161] loop_add+0x32b/0x9c0 [ 607.046599] ? loop_lookup+0x102/0x220 [ 607.050477] ? loop_queue_rq+0x640/0x640 [ 607.054531] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 607.060697] loop_control_ioctl+0x178/0x500 [ 607.065008] ? loop_add+0x9c0/0x9c0 [ 607.068631] ? expand_files.part.8+0x9a0/0x9a0 [ 607.073203] ? kasan_check_write+0x14/0x20 [ 607.077431] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 607.082351] ? wait_for_completion+0x870/0x870 [ 607.086924] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 607.092098] ? loop_add+0x9c0/0x9c0 [ 607.095716] do_vfs_ioctl+0x1cf/0x16a0 [ 607.099599] ? ioctl_preallocate+0x2e0/0x2e0 [ 607.103996] ? fget_raw+0x20/0x20 [ 607.107448] ? __sb_end_write+0xac/0xe0 [ 607.111417] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.116942] ? fput+0x130/0x1a0 [ 607.120214] ? ksys_write+0x1a6/0x250 [ 607.124009] ? security_file_ioctl+0x94/0xc0 [ 607.128416] ksys_ioctl+0xa9/0xd0 [ 607.131864] __x64_sys_ioctl+0x73/0xb0 [ 607.135746] do_syscall_64+0x1b1/0x800 [ 607.139624] ? finish_task_switch+0x1ca/0x840 [ 607.144107] ? syscall_return_slowpath+0x5c0/0x5c0 [ 607.149034] ? syscall_return_slowpath+0x30f/0x5c0 [ 607.153956] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 607.159309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.164144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.169321] RIP: 0033:0x455a09 [ 607.172496] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.180193] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 607.187448] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:26 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:26 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x1000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:26 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"], @ANYRES32=0xffffffff, @ANYBLOB="ff03cbf2"], 0x8b) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x309000) bind$ipx(r1, &(0x7f0000000080)={0x4, 0x8, 0x7, "b41d708c0c6d", 0x1}, 0x10) [ 607.194703] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 607.201957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 607.209212] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000024 2018/05/22 07:23:27 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:27 executing program 0 (fault-call:2 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:27 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x117041) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000080)=0x44) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r1, &(0x7f0000000380)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffff}, 0x0, 0xb}}, 0x20) write$rdma_cm(r1, &(0x7f00000003c0)=@bind={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @ib={0x1b, 0x8, 0x5, {"8f9eb4d80e79f2f7328de2edfef95e90"}, 0x101, 0xfffffffffffffbff, 0x1ff}}}, 0x90) 2018/05/22 07:23:27 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfdffffff, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfdfdffff, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xfffffffffffffffd, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@loopback={0x0, 0x1}, 0x26, r2}) 2018/05/22 07:23:27 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xceffffff, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:27 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:27 executing program 1: r0 = socket(0xb, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) [ 607.561826] FAULT_INJECTION: forcing a failure. [ 607.561826] name failslab, interval 1, probability 0, space 0, times 0 [ 607.573152] CPU: 1 PID: 4076 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 607.580351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.589717] Call Trace: [ 607.592325] dump_stack+0x1b9/0x294 [ 607.595970] ? dump_stack_print_info.cold.2+0x52/0x52 [ 607.601176] ? find_next_zero_bit+0x111/0x140 [ 607.605696] should_fail.cold.4+0xa/0x1a [ 607.609783] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 607.614915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.620456] ? graph_lock+0x170/0x170 [ 607.624261] ? find_held_lock+0x36/0x1c0 [ 607.628329] ? __lock_is_held+0xb5/0x140 [ 607.632406] ? check_same_owner+0x320/0x320 [ 607.636717] ? __kmalloc_node+0x33/0x70 [ 607.640684] ? rcu_note_context_switch+0x710/0x710 [ 607.645606] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 607.650877] __should_failslab+0x124/0x180 [ 607.655103] should_failslab+0x9/0x14 [ 607.658890] kmem_cache_alloc_node_trace+0x26f/0x770 [ 607.663984] ? __kmalloc_node+0x47/0x70 [ 607.667965] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 607.672970] ? find_next_bit+0x104/0x130 [ 607.677033] sbitmap_queue_init_node+0x3bd/0x7d0 [ 607.681785] ? sbitmap_init_node+0x460/0x460 [ 607.686184] ? rcu_read_lock_sched_held+0x108/0x120 [ 607.691191] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 607.696460] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 607.701989] ? find_next_bit+0x104/0x130 [ 607.706057] blk_mq_init_tags+0x11b/0x2b0 [ 607.710210] blk_mq_alloc_rq_map+0x9f/0x220 [ 607.714530] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 607.719891] blk_mq_init_sched+0x1e2/0x530 [ 607.724122] elevator_init+0x3c8/0x500 [ 607.728003] ? elevator_get+0x180/0x180 [ 607.731975] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 607.736979] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 607.741493] blk_mq_sched_init+0x2b/0x40 [ 607.745552] blk_mq_init_allocated_queue+0xf19/0x1580 [ 607.750738] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 607.755221] ? __mutex_init+0x1ef/0x280 [ 607.759209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.764734] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 607.769489] ? idr_alloc+0x145/0x1a0 [ 607.773202] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 607.778395] blk_mq_init_queue+0x63/0xb0 [ 607.782453] loop_add+0x32b/0x9c0 [ 607.785980] ? loop_lookup+0x102/0x220 [ 607.789856] ? loop_queue_rq+0x640/0x640 [ 607.793911] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 607.799351] loop_control_ioctl+0x178/0x500 [ 607.803665] ? loop_add+0x9c0/0x9c0 [ 607.807285] ? expand_files.part.8+0x9a0/0x9a0 [ 607.811861] ? kasan_check_write+0x14/0x20 [ 607.816098] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 607.821032] ? wait_for_completion+0x870/0x870 [ 607.825965] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 607.831144] ? loop_add+0x9c0/0x9c0 [ 607.834763] do_vfs_ioctl+0x1cf/0x16a0 [ 607.838650] ? ioctl_preallocate+0x2e0/0x2e0 [ 607.843144] ? fget_raw+0x20/0x20 [ 607.846597] ? __sb_end_write+0xac/0xe0 [ 607.850563] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.856085] ? fput+0x130/0x1a0 [ 607.859354] ? ksys_write+0x1a6/0x250 [ 607.863150] ? security_file_ioctl+0x94/0xc0 [ 607.867553] ksys_ioctl+0xa9/0xd0 [ 607.871014] __x64_sys_ioctl+0x73/0xb0 [ 607.874899] do_syscall_64+0x1b1/0x800 [ 607.878816] ? finish_task_switch+0x1ca/0x840 [ 607.883305] ? syscall_return_slowpath+0x5c0/0x5c0 [ 607.888235] ? syscall_return_slowpath+0x30f/0x5c0 [ 607.893160] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 607.898527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.903401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.908591] RIP: 0033:0x455a09 2018/05/22 07:23:27 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:27 executing program 6: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001200)='/dev/null\x00', 0x38000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="00100000f4f8ab2f126093016c6e5eb512bbea36d65ed17774f821ebb303f419f00834eea0488abf7f3e51f832c8f5ede45f7aa4c74c28281bf51124fc51144d08d7b52388791cb5394eb2e33105604f2bf25d4132c74ceae765c460afb95252a49e4dd78ebc5052f1f4d95e4fa6ebc274de09af922f01f46e4452c69466c95fa1b4e958ed85073342fb83220ab09c4b0b0683c3d35d3593b522d19819420606436f10e34ebef08143a05d2071adab98d0ac67585db9a057a8f5035f6eb00eb9cb4afc74b8ca2d94f75683514c8988c42bc6b0a94fd0986367b6be01f8b2fc0b532e3adf68c2b51011e3ccda17dec2fe7590c3d27fdd2c2c4ebef7ae7d1bd6b7f9c6efa5bf4d6789b7624d39b911b467fd771dc4c66a1a20a7a7cff68af67c8d8104d9528746ae0488da4781bddbf65f64588e01f1251041004e984df1ae9a5aa6840ac620fa916c1c6d9859a88225e0f6e8a9f545ba2e3a26c55b1fdd7bd9be1b5c06fcb47a4bf4a518fb4e6ef3d4520ff57ba937dc8f3d9536814286cf24f6c74cde15f4969f431e30b9d82e9f3830ea9076f276faadbcf943a91681ab99489a7e164536014f4ecee0c54aaa1f171be6e7b149adfa102eabc8fe977f7805274f2481d56b504fb97b11d67263e128e26daff3a2a1a1fe6a283f19364f169f8432c85476843fc283ecc9257e820c80720b3d4b4c2a57dbe23742bd420798e29fd403bcf0b303231cbbed72cfbcf60ecde986a9dca4b9acf7c234d72791d499d851916ab9026c1a0cbccc7bc9cd97eb3d213f5e53e4b4c55c14057a0323b3c79a3825cc6efce6d61866bffe9f20191fbeb2ca8f2574d1d12355765b7a3fa8c07e87e4529deef0e9409bb9c7c78e3c31eb7a0592dd5a85f2c0edc604af52630cc55b44e41bf1c29c0f7be62fb40a7bbc085642f0a6621dbeba383055b62a43ec41089fb3fe6b92b0e60bab27db1be1fac43bf7bf480d82ec37b392417403fc72bbb933be4005fd4d022284274d3d6b3a790658d413056d44befdcdd76ad92d40ca975708e128a8d44165ab6223e7ec61ab8ab58c28d4b9d378a5be623fc18812c4e21c219a0a1ad91f8395632ff0b231b24b3c5c1aa9545bcc12bf4ce180cbafd918e6fb61a7d14ea34e468623b11998c49f013bba8a9bd082c27bce747ccaa33f6b5b1ec6159ac4d63fe1df92e2e6b23c2bfcf74b4c281225d75e6e7bbaf6d01884a26f4e72db5a8985a2b0148cf30fbdf6a5a81807081191e86aaf52be0ac9b2f053571a24098a7a9a3448c28b48c2711de946d64102039c5e13342062a4d6638d600911a0f389da28d089fd384f23e229b295f9b999cdd6ac66cb0456f5a0162042f474c35877914fafe1af67d84f81b134ddf61c953ae239a4c7ad1c616102c5e46ec8a9a4b062efb7a50609125d2b5a0e4a7edcd565ce840ec1e3cf8034fb29a1fbc3292308a1586a080c5fd9a3f9ac9365ce951b4885e7812ce2a7f5da80d7cd11c86af90dd7dde832b0c3a9ae1d890b899d02a53b76e3677dd539519ecb8df378bff94c1ebc4be8f95081fd3caf7cb7a8481ef17cfc18fd23e72ac4858740e8ecab4f6f45cd134a2e2b71c8c4b99f2d7e13081fd31cbe5dca41e825cc614f615fab852214ce5e64347deaaa47eaf14ea73ccfe9659f7f14386b7652e3fb96ea5742bc181a6a5c5db2543a8263892d1c857de27217df50844bc8a6f8ceabc77c5084eaa3da688f732e594087e01b1bb3204ffab5186457545f3313749daac69550cfb8b8a4b6c96859d128d96ab745b68ad1e5685fe992446dcf49f65366cb0e0cb6108cbc7079abe9ddc4ca4570f3e9e90846155abc3499df0c09d1955c2c6ad46acbe21d6b0a0ecf694de26ee0d9abe01735aeb70aa4b5520cdd0474467591edb146d7e7a022458b64c19bfc29811a1b4c79ccc5c47aae27bbd894c21ecb9d51b263f71100917b2c149a5c76d1c39c029600ab3b578d5f2caef721a2dca09b8e25e556c3216344807c5b81ea6c638b1be94655a5d7492cd9b1478de9b3461015bdd694bfa4805fa61a52288f0ef78e36a46bce3df2c8cbd86d4a0a9be82b9d6bf8593cfb9c810199d7bcb5b6c4507095588cfb34c2d33fc6ec64093ad06f73cd4458852fb399a016eb7cd6e5bb930c6b91d1bb5303c9fd89bb76ff3cf8184ec72bc46f4288b91c42a61e6dd97d186107c650de6269d644b040d265e066b2e85dac61bda6aa6c164947e4595346910960f00006c45610d1bbebcbafe534c548738abbe611a6c14abb5c1e3b30ce54bf0fc987aba66bafe4295ae5f69726ca7cdd4570816e1e2f83ba86957b8d6eb2316ce7cdac7cf881bd5ed40a74dd4d9ed5646c8f0e821840bf10ef58a53e2be8293891cb20cda689e01abacdf94c785fdb4a14366512f0bf437c5bae833c666aee5933af5390d8a2a346d1ded7afcff6e43a8613b09c503cf6f64a360fc43a15a9b073172d59b9fa4b4282fc88170626b01b1a7aa1c9922607bcb096abf42c1f16af9d2ebd24afc7d10b8c3e5fd17ca5eb4e27a9eb26b2607b51c33eda8969159dccaa9ddb4e930c05e5e89fec19a0fa68e5f16a2a46f2dd059ef1c8b380fb19d23758627a22feffcc4a5dbb810319dce1d819a9a5bc8ebe69a3e4c536672aeb501959f21bcfa4ea2f19055272a1fbdd61752055441c1f1799c2ee242b678b0fb385235bcb3ea3b80e8fc4582ad8bad8869c38c9ea1787075027abb77955b6f87eec9a1b471927ce93ccedf4ccebb4bdd5da7e69b2c1efec1445dc56ca23cd927b27c4e1fc298d9fe7fe54ef70a20804bca0bc2bc0532154ceb8e02d55a8736cf97a3a314f0829b069a5ed6cd8eb64d5a4cf96c9db4ebcfe7bc79e03e7f47a91419a6270207812bf00b9043d805f3a3c34d38631ee62a40e6eec5eb5cd6ec80bdc8fb9f6e7deee7e39e99cced9c2b406809625e69978d094a5dca19d55b169108fc071ed9eec1931a3f102fa0384ef6fe71790de912dbc9e16b7c633a13d97254773aad5ffa8868b48251ae4012e7f78b27cddc935a389c02cd538722bf0ba5ce527c5feb8adf364c7da9553059219736d60e7e00276aab90156731dab716ac439779c3f8e412758c33cf35b9cad1bfe6c09a8802ceddb7189efea28249b3f73cc9e612a0f1e71d4156e2bd2eef0ed4a6fc19846501a5910596e94d07dde553970a36e68a7b8d5dfb2a3c2550aa24748d1650a49b46848e9c058fe93ab04d48d0d369bb79682d79d183595984f5f5455dc56d0c7821138563b5b67887ae7c928956882d9c1c60448543fcb35649d65ad4562a36a92371be574841fac9213d85eb7f4ae523f53721bd728d929b55bd8192ca93b13b7311321ee5388aeef2fa4061e84454e0241f58eaaa3f626051ee383746f1c96fbb20902dd0b63f46d6a441d445c19b918c8b08ea51474258bccea2341d692f044aa8af802b8a248d401abecabc5c26103017577045f11f521c44d4c9d532141fb1c0090fca80129c2c7986c17c5fbc350d1d80a8a8f425dca1f78a1e9edf4a5462f350b960393573a7900a1d0921c6384f3d2679f1ec6bea938b7dbd5a96c59802fc025075e5a3babc19bc5346b815262db36dbb5ae4dca7f5fc1a9688ca04d79866eebe2f48c5fbb1df1d07da038ccf10fb01f55904ad82b83eb86c95193422de31ad301356c20ded80a5e278094f373bce8848b62f0f797f6e97d2e4dbe89a1fc51ede3752bc01e2fec19b38e1a5b8ccaf013daf391090d296bd8d9a5b533b0a74f637a0858c394cd29bf132e650374ea3042eb7ad93cb62171c4b36a43b332e85d566b47b2cad7f5dc79e4b3c430dd5edc2de904b3a5cdc37093033ca3548ebf9f8b2fca92b333b9ea95bf472820e982a748b6168c0258423f4be8f58f3067da9205e0c3026e4d847c5dc8afebac533993fde52b5798e953ed6d01b7731fd92fadd4bd133c713013fcf15371e8fb9aa7878362fab9f6e9c6bf07cfddecae3f3d4dc0cba0d67166bed38d48c9b6b06cea5a845a0ec77a50a868609115e688e74a200a8de961c8b780bc5c2937ba3afb02c2cc76c38a77c32520dbc432c9495bbba6a8dd89f59bfb6b84f7b3c904540b79996a23780d7b207385c87084569d6dc4202c6f427b0bf0d75200405c7f77f9b5f0a4a2453ebd61fa7a6f22b798f83b8fcfa4c60a266c508e8028b961bd8306a503347e44716726af0f09231fc67b62f07fcb8072b2a2d471c98f18498aa695844d4a2e25f197d1163d5e04dcdd23d2f3848554190af96d9c5f84a801afa7f91769381954e88e3a37a7bd345aa03057dd3295b688742b9995409933c31876204fa7b133cf095d357d5f994474b3e4179a38842c63247cbe8233d7cdcba03d7f1848d74f0dfda191de5fbd7a3c6ffddfa1f6f187ee6501f4504938f3ae796b7cb9b2c02854a70a006f5c920596903a6abc28ca2ad0ff36385eeb554645842b2592975c562a5475fabc15ec8354177ddb7a657c5eb0d8c89911430369a85148ad1de475bcba1aa68edc5d1b52d39fac5a1488f1d90f661c956b59a2efb7aa0cb524135b07b702bd63390cae7677eb5e805892e7aaaa058f9712c8c3983e7b524553045abe117bc0cc404aa334ce7c3b4de5e7c85387e98565fbd6508c6ae0510d033570ff2e56c11bdf6113efecb5e18f566dd47fcc1fbf8317b18b71f98b7d8e330a1b9a692e41ee092844d5d618a735c0dbd67cc6833c171f121fe16d959c66bee3ee9ab8667cbefdce1bcc5cfb0717111d289b517c4b260d3c286c66e9c237739fdb1cdf874e55e2be4bf066cd539b298e70d364c5d81dfc60af04ed912be2f1408ac4e4c7e8fdf866ba3233f3c469725262fc2d9cba34cd4a5db63a04836836febf8a262b29710172d5184f303892cd27715e1d82d1264b3886530d0e9baf1de1ffb464872942b6471dd5b90006c85bccf0e4fd52fd29e730bf787bccf7d719c2b65fb72525031cdb3848eedbe817667f739c391d6b971e418a00b34576f03e898a0e91444a80e06af80825631ce1dda8fc7a259aa6509c081a74ac6fbb86938bec19f034456e9321d5ab3874ee6d0efe8b8e4d0c03b2b898418d607dad2b830a0afb6d5e5453547e17fbbe906890eb433708a5b2d4191e82761d7b04f51f8049377d83dfb783cdcb71830c9641a069095564910a20e3967bf10f08dceea242dbc240ddc2fb557d96a524b7d1a8c61b756ceee960856b30cf3385d37073dcb14aa170facf2d99938ac59a2537e3255e2786aef027207abb3a658492bbacf2458d4fc50628834082dd3e1de4477858d8e70bcfb49abf872d0b8d6359e525985fb8233b38724dba3ed3b4148ff8a7713d9621673880bf36461f44e19a368806fbdb3c2eb6dfac47f43a945ea060a08b792f639974aed9b6d9835aafb2311840f438afb47de3fde05c4b7e91600aef14197a35961e80cc583757b913278bba417269bc9d090dd843fc5ccd0f0a9bcb92134b5e91e4f3c44f29a40a82db109d6bc65b43665e66ceb37a317162d25d934c8d55c9049c4363ce35593d6a0f892574ab85a3be92d2f92a0cda51c827b012ae7e185788c31ad91b689d7712ba543867a909102554651f83394b9c9081db8884fad9e5f3ed46f53ad6bcf72b84e86f57c43a4465353e7d0238062acc52e557d681b561b48bde4680a132e12cae0f2a6a9862acf0979d97b7ede83ec1571e4e97eac2b551b7f3a61a049c89ee181360dd6ffd21479262f1c0a91c389411d2c9552d6d3a5ab18806f7807b8ea16d3c10bd6c78e4c7209df08ffdf75813afb8"], &(0x7f0000000080)=0x1008) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000f54fa8)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="649c2aafe04fb30100000001000000d2ba9a06ad46398502edc800c7119d4d54", 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001140)={r1, 0x400}, &(0x7f0000001180)=0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000011c0)={0x400, 0x7}) 2018/05/22 07:23:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 607.911777] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.919484] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 607.926753] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 607.934015] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 607.941278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 607.948534] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000025 2018/05/22 07:23:27 executing program 0 (fault-call:2 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:27 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffff80, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x2, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:27 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) 2018/05/22 07:23:27 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6b526262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xfffffdfd, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:28 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x4, 0x6, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) [ 608.402688] FAULT_INJECTION: forcing a failure. [ 608.402688] name failslab, interval 1, probability 0, space 0, times 0 [ 608.414091] CPU: 1 PID: 4147 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 608.421296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.430662] Call Trace: [ 608.433286] dump_stack+0x1b9/0x294 [ 608.436911] ? dump_stack_print_info.cold.2+0x52/0x52 [ 608.442091] ? find_next_zero_bit+0x111/0x140 [ 608.446586] should_fail.cold.4+0xa/0x1a [ 608.450640] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 608.455743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.461274] ? graph_lock+0x170/0x170 [ 608.465071] ? find_held_lock+0x36/0x1c0 [ 608.469128] ? __lock_is_held+0xb5/0x140 [ 608.473192] ? check_same_owner+0x320/0x320 [ 608.477506] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 608.482519] ? rcu_note_context_switch+0x710/0x710 [ 608.487445] ? __lockdep_init_map+0x105/0x590 [ 608.491935] __should_failslab+0x124/0x180 [ 608.496163] should_failslab+0x9/0x14 [ 608.499953] kmem_cache_alloc_node_trace+0x26f/0x770 [ 608.505050] ? init_wait_entry+0x1b0/0x1b0 [ 608.509277] ? __kmalloc_node+0x47/0x70 [ 608.513242] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 608.518349] sbitmap_queue_init_node+0x3bd/0x7d0 [ 608.523101] ? sbitmap_init_node+0x460/0x460 [ 608.527503] ? rcu_read_lock_sched_held+0x108/0x120 [ 608.532508] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 608.537779] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 608.543311] ? find_next_bit+0x104/0x130 [ 608.547375] blk_mq_init_tags+0x17c/0x2b0 [ 608.551520] blk_mq_alloc_rq_map+0x9f/0x220 [ 608.555842] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 608.561203] blk_mq_init_sched+0x1e2/0x530 [ 608.565437] elevator_init+0x3c8/0x500 [ 608.569320] ? elevator_get+0x180/0x180 [ 608.573287] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 608.578296] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 608.582787] blk_mq_sched_init+0x2b/0x40 [ 608.586840] blk_mq_init_allocated_queue+0xf19/0x1580 [ 608.592034] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 608.596519] ? __mutex_init+0x1ef/0x280 [ 608.600504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.606037] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 608.610806] ? idr_alloc+0x145/0x1a0 [ 608.614516] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 608.619708] blk_mq_init_queue+0x63/0xb0 [ 608.623761] loop_add+0x32b/0x9c0 [ 608.627202] ? loop_lookup+0x102/0x220 [ 608.631078] ? loop_queue_rq+0x640/0x640 [ 608.635134] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 608.640316] loop_control_ioctl+0x178/0x500 [ 608.644626] ? loop_add+0x9c0/0x9c0 [ 608.648242] ? expand_files.part.8+0x9a0/0x9a0 [ 608.652816] ? kasan_check_write+0x14/0x20 [ 608.657046] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 608.661972] ? wait_for_completion+0x870/0x870 [ 608.666558] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 608.671747] ? loop_add+0x9c0/0x9c0 [ 608.675364] do_vfs_ioctl+0x1cf/0x16a0 [ 608.679248] ? ioctl_preallocate+0x2e0/0x2e0 [ 608.683649] ? fget_raw+0x20/0x20 [ 608.687095] ? __sb_end_write+0xac/0xe0 [ 608.691063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 608.696588] ? fput+0x130/0x1a0 [ 608.699859] ? ksys_write+0x1a6/0x250 [ 608.703656] ? security_file_ioctl+0x94/0xc0 [ 608.708059] ksys_ioctl+0xa9/0xd0 [ 608.711504] __x64_sys_ioctl+0x73/0xb0 [ 608.715383] do_syscall_64+0x1b1/0x800 [ 608.719258] ? finish_task_switch+0x1ca/0x840 [ 608.723760] ? syscall_return_slowpath+0x5c0/0x5c0 [ 608.728688] ? syscall_return_slowpath+0x30f/0x5c0 [ 608.733608] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 608.738962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.743808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.748989] RIP: 0033:0x455a09 2018/05/22 07:23:28 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00"}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:28 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000002b00)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002ac0)={0xffffffff}, 0x111, 0xf}}, 0x20) write$rdma_cm(r0, &(0x7f0000002b40)=@notify={0xf, 0x8, 0xfa00, {r1, 0xd}}, 0x10) 2018/05/22 07:23:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) [ 608.752168] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.759954] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 608.767222] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 608.774485] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 608.781745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 608.789002] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000026 2018/05/22 07:23:28 executing program 0 (fault-call:2 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:28 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) fcntl$getown(r1, 0x9) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='coredump_filter\x00') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x3612, 0x2, 0x1c3, 0x8000000008f0, r4}, 0xffffff4d) 2018/05/22 07:23:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4, 0x0) 2018/05/22 07:23:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xffffffce, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xc0ffffff00000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:28 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x200000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x20000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x1, 0x1, 0x5, 0xcdf7, 0x5, 0x1, 0x5a4, 0x871, 0x3, 0x20}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x10001, 0x8000) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000080)=""/129, &(0x7f0000000000)=0x81) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xffffffffffffffff, 0x0) 2018/05/22 07:23:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 609.127662] FAULT_INJECTION: forcing a failure. [ 609.127662] name failslab, interval 1, probability 0, space 0, times 0 [ 609.139126] CPU: 1 PID: 4207 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 609.146317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.155662] Call Trace: [ 609.158245] dump_stack+0x1b9/0x294 [ 609.161864] ? dump_stack_print_info.cold.2+0x52/0x52 [ 609.167047] ? do_vfs_ioctl+0x1cf/0x16a0 [ 609.171095] ? ksys_ioctl+0xa9/0xd0 [ 609.174807] ? __x64_sys_ioctl+0x73/0xb0 [ 609.178854] ? do_syscall_64+0x1b1/0x800 [ 609.182904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.188262] should_fail.cold.4+0xa/0x1a [ 609.192315] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 609.197409] ? mark_held_locks+0xc9/0x160 [ 609.201546] ? graph_lock+0x170/0x170 [ 609.205337] ? __raw_spin_lock_init+0x1c/0x100 [ 609.209916] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 609.214932] ? __lockdep_init_map+0x105/0x590 [ 609.219422] ? __lockdep_init_map+0x105/0x590 [ 609.223907] ? __lock_is_held+0xb5/0x140 [ 609.227960] ? __init_waitqueue_head+0x96/0x140 [ 609.232649] ? check_same_owner+0x320/0x320 [ 609.236963] ? sbitmap_queue_init_node+0xc6/0x7d0 [ 609.241799] ? rcu_note_context_switch+0x710/0x710 [ 609.246719] __should_failslab+0x124/0x180 [ 609.250950] should_failslab+0x9/0x14 [ 609.254739] kmem_cache_alloc_node_trace+0x26f/0x770 [ 609.259830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 609.265359] ? find_next_bit+0x104/0x130 [ 609.269416] __kmalloc_node+0x33/0x70 [ 609.273225] blk_mq_alloc_rq_map+0xcc/0x220 [ 609.277542] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 609.282901] blk_mq_init_sched+0x1e2/0x530 [ 609.287135] elevator_init+0x3c8/0x500 [ 609.291015] ? elevator_get+0x180/0x180 [ 609.294983] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 609.299992] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 609.304489] blk_mq_sched_init+0x2b/0x40 [ 609.308545] blk_mq_init_allocated_queue+0xf19/0x1580 [ 609.313732] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 609.318220] ? __mutex_init+0x1ef/0x280 [ 609.322206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.327733] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 609.332483] ? idr_alloc+0x145/0x1a0 [ 609.336194] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 609.341379] blk_mq_init_queue+0x63/0xb0 [ 609.345435] loop_add+0x32b/0x9c0 [ 609.348876] ? loop_lookup+0x102/0x220 [ 609.352753] ? loop_queue_rq+0x640/0x640 [ 609.356811] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 609.361994] loop_control_ioctl+0x178/0x500 [ 609.366308] ? loop_add+0x9c0/0x9c0 [ 609.369923] ? expand_files.part.8+0x9a0/0x9a0 [ 609.374500] ? kasan_check_write+0x14/0x20 [ 609.378727] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 609.383660] ? wait_for_completion+0x870/0x870 [ 609.388245] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 609.393425] ? loop_add+0x9c0/0x9c0 [ 609.397052] do_vfs_ioctl+0x1cf/0x16a0 [ 609.400943] ? ioctl_preallocate+0x2e0/0x2e0 [ 609.405342] ? fget_raw+0x20/0x20 [ 609.408786] ? __sb_end_write+0xac/0xe0 [ 609.412755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.418288] ? fput+0x130/0x1a0 [ 609.421556] ? ksys_write+0x1a6/0x250 [ 609.425354] ? security_file_ioctl+0x94/0xc0 [ 609.429769] ksys_ioctl+0xa9/0xd0 [ 609.433237] __x64_sys_ioctl+0x73/0xb0 [ 609.437119] do_syscall_64+0x1b1/0x800 [ 609.441001] ? finish_task_switch+0x1ca/0x840 [ 609.445493] ? syscall_return_slowpath+0x5c0/0x5c0 [ 609.450424] ? syscall_return_slowpath+0x30f/0x5c0 [ 609.455348] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 609.460709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.465550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.470725] RIP: 0033:0x455a09 2018/05/22 07:23:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:29 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'vlan0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8000, @mcast1={0xff, 0x1, [], 0x1}, 0xec33}, @in6={0xa, 0x4e21, 0x8, @loopback={0x0, 0x1}, 0x80}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x9}}, 0x80000001, 0x9}, &(0x7f00000001c0)=0x90) 2018/05/22 07:23:29 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) [ 609.473899] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.481611] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 609.488872] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 609.496133] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 609.503400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 609.510659] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000027 2018/05/22 07:23:29 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xa000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xceffffff00000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0xffd, &(0x7f0000000100)="c626262c85d588ffd8efb9d3c9efa374efc46623bf01f7e96f44ea4694fde5485469228688e4333e7203e15b992ef208518fb1b502afc0c2151b69161a5a1183f8") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x6000, 0x5004, 0x2, 0x7, 0x3ff}) pipe(&(0x7f0000000000)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:29 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(0xffffffffffffffff) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:29 executing program 0 (fault-call:2 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:29 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") fstatfs(r0, &(0x7f0000000080)=""/210) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) [ 609.893743] FAULT_INJECTION: forcing a failure. [ 609.893743] name failslab, interval 1, probability 0, space 0, times 0 [ 609.905112] CPU: 1 PID: 4256 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 609.912330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.921687] Call Trace: [ 609.924290] dump_stack+0x1b9/0x294 [ 609.927925] ? dump_stack_print_info.cold.2+0x52/0x52 [ 609.933114] ? is_bpf_text_address+0xd7/0x170 [ 609.937690] should_fail.cold.4+0xa/0x1a [ 609.941741] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 609.946842] ? graph_lock+0x170/0x170 [ 609.950653] ? save_stack+0xa9/0xd0 [ 609.954269] ? save_stack+0x43/0xd0 [ 609.957885] ? kasan_kmalloc+0xc4/0xe0 [ 609.961774] ? __kmalloc_node+0x47/0x70 [ 609.965736] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 609.970227] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 609.975753] ? blk_mq_init_sched+0x1e2/0x530 [ 609.980152] ? elevator_init+0x3c8/0x500 [ 609.984213] ? blk_mq_sched_init+0x2b/0x40 [ 609.988438] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 609.993793] ? __lock_is_held+0xb5/0x140 [ 609.997844] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.003208] ? check_same_owner+0x320/0x320 [ 610.007524] ? rcu_note_context_switch+0x710/0x710 [ 610.012447] __should_failslab+0x124/0x180 [ 610.016680] should_failslab+0x9/0x14 [ 610.020469] kmem_cache_alloc_node_trace+0x26f/0x770 [ 610.025561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 610.031089] ? kasan_unpoison_shadow+0x35/0x50 [ 610.035667] __kmalloc_node+0x33/0x70 [ 610.039461] blk_mq_alloc_rq_map+0x10d/0x220 [ 610.043863] blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 610.049232] blk_mq_init_sched+0x1e2/0x530 [ 610.053473] elevator_init+0x3c8/0x500 [ 610.057348] ? elevator_get+0x180/0x180 [ 610.061311] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 610.066314] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 610.070805] blk_mq_sched_init+0x2b/0x40 [ 610.074857] blk_mq_init_allocated_queue+0xf19/0x1580 [ 610.080056] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 610.084542] ? __mutex_init+0x1ef/0x280 [ 610.088521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.094052] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 610.098805] ? idr_alloc+0x145/0x1a0 [ 610.102511] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 610.107697] blk_mq_init_queue+0x63/0xb0 [ 610.111746] loop_add+0x32b/0x9c0 [ 610.115187] ? loop_lookup+0x102/0x220 [ 610.119089] ? loop_queue_rq+0x640/0x640 [ 610.123146] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 610.128326] loop_control_ioctl+0x178/0x500 [ 610.132640] ? loop_add+0x9c0/0x9c0 [ 610.136263] ? expand_files.part.8+0x9a0/0x9a0 [ 610.140853] ? kasan_check_write+0x14/0x20 [ 610.145098] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 610.150026] ? wait_for_completion+0x870/0x870 [ 610.154603] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 610.159780] ? loop_add+0x9c0/0x9c0 [ 610.163405] do_vfs_ioctl+0x1cf/0x16a0 [ 610.167291] ? ioctl_preallocate+0x2e0/0x2e0 [ 610.171693] ? fget_raw+0x20/0x20 [ 610.175135] ? __sb_end_write+0xac/0xe0 [ 610.179108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 610.184635] ? fput+0x130/0x1a0 [ 610.187905] ? ksys_write+0x1a6/0x250 [ 610.191701] ? security_file_ioctl+0x94/0xc0 [ 610.196101] ksys_ioctl+0xa9/0xd0 [ 610.199562] __x64_sys_ioctl+0x73/0xb0 [ 610.203440] do_syscall_64+0x1b1/0x800 [ 610.207332] ? finish_task_switch+0x1ca/0x840 [ 610.211826] ? syscall_return_slowpath+0x5c0/0x5c0 [ 610.219011] ? syscall_return_slowpath+0x30f/0x5c0 [ 610.223942] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 610.229315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.234155] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.239332] RIP: 0033:0x455a09 2018/05/22 07:23:29 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'rose0\x00', r2}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) tgkill(r0, r3, 0x34) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000001c0)=0x1, &(0x7f00000002c0)=0x4) write$rdma_cm(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x100000000000000, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [], {0x77359400}}) [ 610.242511] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.250211] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 610.257472] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 610.264727] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 610.271990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 610.279251] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000028 2018/05/22 07:23:30 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:30 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xfffffffd, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xceffffff00000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:30 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000030c0)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000031c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003200)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000003300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003340)={{{@in=@multicast1=0xe0000001, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e20, 0x100000001, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x87, r2, r3}, {0x20, 0x0, 0x4, 0x4, 0xfffffffffffffffc, 0xda, 0x3ff, 0x7ff}, {0x4965, 0x2, 0x5, 0x6}, 0x6, 0x6e6bb1, 0x3, 0x1, 0x2, 0x1}, {{@in=@loopback=0x7f000001, 0x4d5, 0xff}, 0x2, @in6, 0x3500, 0x1, 0x3, 0x615, 0xaaa9, 0x8, 0x7}}, 0xe8) 2018/05/22 07:23:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:30 executing program 0 (fault-call:2 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:30 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:30 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x200000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) [ 610.858481] FAULT_INJECTION: forcing a failure. [ 610.858481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 610.870372] CPU: 0 PID: 4320 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 610.877552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.886901] Call Trace: [ 610.889497] dump_stack+0x1b9/0x294 [ 610.893119] ? dump_stack_print_info.cold.2+0x52/0x52 [ 610.898332] ? find_held_lock+0x36/0x1c0 [ 610.902395] should_fail.cold.4+0xa/0x1a [ 610.906451] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 610.911548] ? graph_lock+0x170/0x170 [ 610.915346] ? lock_downgrade+0x8e0/0x8e0 [ 610.919482] ? __lock_is_held+0xb5/0x140 [ 610.923534] ? check_same_owner+0x320/0x320 [ 610.927854] ? kernel_text_address+0x79/0xf0 [ 610.932261] ? rcu_note_context_switch+0x710/0x710 [ 610.937182] ? __kernel_text_address+0xd/0x40 [ 610.941666] ? __might_sleep+0x95/0x190 [ 610.945651] __alloc_pages_nodemask+0x34e/0xd70 [ 610.950312] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 610.955334] ? save_stack+0x43/0xd0 [ 610.958954] ? kasan_kmalloc+0xc4/0xe0 [ 610.962831] ? __kmalloc_node+0x47/0x70 [ 610.966799] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 610.971376] ? blk_mq_sched_alloc_tags.isra.13+0x7b/0x160 [ 610.976903] ? blk_mq_init_sched+0x1e2/0x530 [ 610.981295] ? blk_mq_sched_init+0x2b/0x40 [ 610.985515] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 610.990862] ? blk_mq_init_queue+0x63/0xb0 [ 610.995078] ? loop_add+0x32b/0x9c0 [ 610.998697] ? loop_control_ioctl+0x178/0x500 [ 611.003191] ? do_vfs_ioctl+0x1cf/0x16a0 [ 611.007254] ? ksys_ioctl+0xa9/0xd0 [ 611.010865] ? __x64_sys_ioctl+0x73/0xb0 [ 611.014916] ? do_syscall_64+0x1b1/0x800 [ 611.018959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.024319] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.029841] ? find_next_bit+0x104/0x130 [ 611.033887] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 611.038884] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 611.043711] blk_mq_alloc_rqs+0x333/0x8b0 [ 611.047848] ? __kmalloc_node+0x33/0x70 [ 611.051804] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 611.057063] ? blk_mq_alloc_rq_map+0x220/0x220 [ 611.061638] ? __kmalloc_node+0x47/0x70 [ 611.065597] ? blk_mq_alloc_rq_map+0x142/0x220 [ 611.070163] blk_mq_sched_alloc_tags.isra.13+0xd8/0x160 [ 611.075519] blk_mq_init_sched+0x1e2/0x530 [ 611.079739] elevator_init+0x3c8/0x500 [ 611.083607] ? elevator_get+0x180/0x180 [ 611.087575] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 611.092584] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 611.097065] blk_mq_sched_init+0x2b/0x40 [ 611.101108] blk_mq_init_allocated_queue+0xf19/0x1580 [ 611.106281] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 611.110759] ? __mutex_init+0x1ef/0x280 [ 611.114725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.120243] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 611.124982] ? idr_alloc+0x145/0x1a0 [ 611.128683] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 611.133855] blk_mq_init_queue+0x63/0xb0 [ 611.137901] loop_add+0x32b/0x9c0 [ 611.141335] ? loop_lookup+0x102/0x220 [ 611.145201] ? loop_queue_rq+0x640/0x640 [ 611.149246] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 611.154425] loop_control_ioctl+0x178/0x500 [ 611.158725] ? loop_add+0x9c0/0x9c0 [ 611.162342] ? expand_files.part.8+0x9a0/0x9a0 [ 611.166915] ? kasan_check_write+0x14/0x20 [ 611.171239] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 611.176161] ? wait_for_completion+0x870/0x870 [ 611.180724] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 611.185893] ? loop_add+0x9c0/0x9c0 [ 611.189502] do_vfs_ioctl+0x1cf/0x16a0 [ 611.193373] ? ioctl_preallocate+0x2e0/0x2e0 [ 611.197763] ? fget_raw+0x20/0x20 [ 611.201199] ? __sb_end_write+0xac/0xe0 [ 611.205250] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.210766] ? fput+0x130/0x1a0 [ 611.214039] ? ksys_write+0x1a6/0x250 [ 611.217824] ? security_file_ioctl+0x94/0xc0 [ 611.222213] ksys_ioctl+0xa9/0xd0 [ 611.225647] __x64_sys_ioctl+0x73/0xb0 [ 611.229518] do_syscall_64+0x1b1/0x800 [ 611.233386] ? finish_task_switch+0x1ca/0x840 [ 611.237868] ? syscall_return_slowpath+0x5c0/0x5c0 [ 611.242789] ? syscall_return_slowpath+0x30f/0x5c0 [ 611.247714] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 611.253065] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/05/22 07:23:31 executing program 1: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@local}}}, &(0x7f0000000180)=0xe8) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:31 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xffffffffffffffff, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x101001) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x188) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000440)={0x7, &(0x7f00000001c0)=[{0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000480)={r3, 0x2}) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:31 executing program 0 (fault-call:2 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) [ 611.257889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.263065] RIP: 0033:0x455a09 [ 611.266242] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.273948] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 611.281198] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 611.288458] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 611.295706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 611.302958] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000029 2018/05/22 07:23:31 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt(r0, 0xa000000, 0x6, &(0x7f0000000080)=""/229, &(0x7f0000000000)=0xe5) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x1ff, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:31 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x2}, 0x0, [], {0x77359400}}) [ 611.456375] FAULT_INJECTION: forcing a failure. [ 611.456375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.468362] CPU: 0 PID: 4344 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 611.475560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.484908] Call Trace: [ 611.487493] dump_stack+0x1b9/0x294 [ 611.491118] ? dump_stack_print_info.cold.2+0x52/0x52 [ 611.496300] ? find_held_lock+0x36/0x1c0 [ 611.500361] should_fail.cold.4+0xa/0x1a [ 611.504413] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 611.509507] ? graph_lock+0x170/0x170 [ 611.513300] ? lock_downgrade+0x8e0/0x8e0 [ 611.517443] ? __lock_is_held+0xb5/0x140 [ 611.521501] ? check_same_owner+0x320/0x320 [ 611.525813] ? rcu_note_context_switch+0x710/0x710 [ 611.530733] ? __might_sleep+0x95/0x190 [ 611.534700] __alloc_pages_nodemask+0x34e/0xd70 [ 611.539360] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 611.544364] ? memset+0x31/0x40 [ 611.547633] ? loop_init_request+0x7b/0x170 [ 611.551943] ? loop_info64_from_compat+0x940/0x940 [ 611.556861] ? do_vfs_ioctl+0x1cf/0x16a0 [ 611.560917] ? __x64_sys_ioctl+0x73/0xb0 [ 611.564971] ? do_syscall_64+0x1b1/0x800 [ 611.569026] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.574380] ? __lockdep_init_map+0x105/0x590 [ 611.578866] ? lockdep_init_map+0x9/0x10 [ 611.582917] ? blk_mq_init_request+0x1be/0x240 [ 611.587491] ? loop_info64_from_compat+0x940/0x940 [ 611.592422] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 611.597435] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 611.602281] blk_mq_alloc_rqs+0x333/0x8b0 [ 611.606427] ? blk_mq_alloc_rq_map+0x220/0x220 [ 611.611004] ? __kmalloc_node+0x47/0x70 [ 611.614974] ? blk_mq_alloc_rq_map+0x142/0x220 [ 611.619558] blk_mq_sched_alloc_tags.isra.13+0xd8/0x160 [ 611.624921] blk_mq_init_sched+0x1e2/0x530 [ 611.629151] elevator_init+0x3c8/0x500 [ 611.633033] ? elevator_get+0x180/0x180 [ 611.636997] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 611.642007] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 611.646509] blk_mq_sched_init+0x2b/0x40 [ 611.650560] blk_mq_init_allocated_queue+0xf19/0x1580 [ 611.655740] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 611.660226] ? __mutex_init+0x1ef/0x280 [ 611.664205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.669731] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 611.674481] ? idr_alloc+0x145/0x1a0 [ 611.678186] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 611.683367] blk_mq_init_queue+0x63/0xb0 [ 611.687417] loop_add+0x32b/0x9c0 [ 611.690863] ? loop_lookup+0x102/0x220 [ 611.694740] ? loop_queue_rq+0x640/0x640 [ 611.698794] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 611.703974] loop_control_ioctl+0x178/0x500 [ 611.708285] ? loop_add+0x9c0/0x9c0 [ 611.711907] ? expand_files.part.8+0x9a0/0x9a0 [ 611.716478] ? kasan_check_write+0x14/0x20 [ 611.720703] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 611.725632] ? wait_for_completion+0x870/0x870 [ 611.730210] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 611.735398] ? loop_add+0x9c0/0x9c0 [ 611.739019] do_vfs_ioctl+0x1cf/0x16a0 [ 611.742907] ? ioctl_preallocate+0x2e0/0x2e0 [ 611.747310] ? fget_raw+0x20/0x20 [ 611.750751] ? __sb_end_write+0xac/0xe0 [ 611.754723] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.760249] ? fput+0x130/0x1a0 [ 611.763526] ? ksys_write+0x1a6/0x250 [ 611.767408] ? security_file_ioctl+0x94/0xc0 [ 611.771810] ksys_ioctl+0xa9/0xd0 [ 611.775256] __x64_sys_ioctl+0x73/0xb0 [ 611.779136] do_syscall_64+0x1b1/0x800 [ 611.783018] ? syscall_return_slowpath+0x5c0/0x5c0 [ 611.787953] ? syscall_return_slowpath+0x30f/0x5c0 [ 611.792884] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 611.798259] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/05/22 07:23:31 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:31 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000040)={0x80000001, 0x7, 0x7ff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000000)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) prctl$setendian(0x14, 0x4000003) splice(r1, &(0x7f0000000100), r0, &(0x7f0000000180), 0x6, 0x4) [ 611.803097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.808270] RIP: 0033:0x455a09 [ 611.811443] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.819147] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 611.826407] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 611.833673] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 611.840927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 611.848183] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002a 2018/05/22 07:23:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) [ 611.926846] Unknown ioctl 1075359312 2018/05/22 07:23:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 611.969952] Unknown ioctl 1075359312 2018/05/22 07:23:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xffffffce}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:31 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4, 0x0) 2018/05/22 07:23:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000100000fa14c36cd1ad67c8b6a8a30af50a0ac75731533bf61bf58e4674fd98f7a920b0d7ab08b0e07c733b9a6693deeff9da6b4792ba8767608bffc9a70047fb806a", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000005c0)={0x12713, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000140)) r2 = msgget$private(0x0, 0x10) msgrcv(r2, &(0x7f0000000500)={0x0, ""/149}, 0x9d, 0x2, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x84, "636ae5c99f5e6384531383fe04f04a7fde28a5cbf7fce568e4328f8c79dbda89777e64a47974ce36bb787c7b66fd9cee86058627156a298244ad4649fdb8aebeb37638adc1bb2f55752882aa80a324777edba33e3eea03afdefb688e2c058c9275eec1c3c074b79eee84f4539148e24e61dc6bbd67b3c4eb7629d62cad7f2e930c7dec8a"}, &(0x7f00000000c0)=0x8c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e21, 0x3, @loopback={0x0, 0x1}, 0x7}}, [0x43486ad4, 0x9dc, 0x7fff, 0x9d, 0xcc, 0xffffffff, 0xf5a4, 0x10001, 0x2, 0xd38, 0x0, 0x6, 0x10001, 0x100, 0xcf38]}, &(0x7f0000000100)=0x100) socket$inet6_dccp(0xa, 0x6, 0x0) sendto$unix(r1, &(0x7f0000000600)="82dcf29ef266685b5d6e6f7db9c4cab71227b5438963dc9ed8ae8f252947c3c2122bd9fef936796391eb3fd5cb7b9502fcd2b8d2d00e44aadab9fa15d8d37c8c4415d4f917bb3fc6b420d9a3fd4e320b", 0x50, 0x80, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e) 2018/05/22 07:23:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:31 executing program 0 (fault-call:2 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:31 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x100000000000000}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x100000000000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:31 executing program 1: r0 = socket(0xa, 0x40000000000001, 0x0) ioctl(r0, 0x400000008912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:31 executing program 6: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000440)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x111580, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x14) getsockname(0xffffffffffffff9c, &(0x7f0000000600)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000680)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001d80)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000001e80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001f80)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000021c0)=0xe8) r11 = add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)="b39224e4de2ddfcab0fb6549fde48348d47e2f321d9e78263bd7696f3ecc7d53197b22beebc04e6fe3fa2f02cee273f0d3ea8cdc881abaef35e2aeb34bd2b9a5711e25c921cbf07d921d7897db54cd1e5407cad5e5ea32967687c3cd6590d37ec712f7e424e184063d693dea4d98f30bb7763de1263d7e9467ce7bbc71ae", 0x7e, 0xffffffffffffffff) keyctl$assume_authority(0x10, r11) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002200)={@multicast2, @local, 0x0}, &(0x7f0000002240)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002340)={{{@in=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000002440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002480)={0x0, @multicast2, @broadcast}, &(0x7f00000024c0)=0xc) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000480)={0x0, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}]}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002540)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3b7c5d455a3c734e, &(0x7f0000002580)={@loopback, @multicast2, 0x0}, &(0x7f00000025c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003800)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003900)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000003e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003e40)={&(0x7f0000003940)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r3, @ANYBLOB="100025bd7000fcdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="500102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000040000000000000000000000000000000000800030003000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400060001ff05000000050003af2a000000030001076c060000400008000800000008000100", @ANYRES32=r9, @ANYBLOB="300102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000008000100", @ANYRES32=r15, @ANYBLOB="8c0002004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c0004000004b4fe050000000500b0080000000002008192020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="4401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000800d9200400000002000007ff07000008000100", @ANYRES32=r19, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x4dc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 612.299938] FAULT_INJECTION: forcing a failure. [ 612.299938] name failslab, interval 1, probability 0, space 0, times 0 [ 612.311394] CPU: 1 PID: 4416 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 612.318598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.327962] Call Trace: [ 612.330551] dump_stack+0x1b9/0x294 [ 612.334171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 612.339360] should_fail.cold.4+0xa/0x1a [ 612.343416] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 612.348517] ? graph_lock+0x170/0x170 [ 612.352311] ? find_held_lock+0x36/0x1c0 [ 612.356366] ? __lock_is_held+0xb5/0x140 [ 612.360469] ? check_same_owner+0x320/0x320 [ 612.364792] ? loop_info64_from_compat+0x940/0x940 [ 612.369762] ? do_vfs_ioctl+0x1cf/0x16a0 [ 612.373818] ? rcu_note_context_switch+0x710/0x710 [ 612.378736] ? __lockdep_init_map+0x105/0x590 [ 612.383224] __should_failslab+0x124/0x180 [ 612.387453] should_failslab+0x9/0x14 [ 612.391242] kmem_cache_alloc_node_trace+0x26f/0x770 [ 612.396335] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 612.401356] ? blk_mq_hw_queue_to_node+0xd9/0x180 [ 612.406214] elevator_alloc+0x82/0x200 [ 612.410103] dd_init_queue+0x97/0x5e0 [ 612.413903] ? dd_exit_queue+0x240/0x240 [ 612.417961] ? __kmalloc_node+0x47/0x70 [ 612.421947] ? blk_mq_alloc_rq_map+0x142/0x220 [ 612.426523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.432056] ? blk_mq_sched_alloc_tags.isra.13+0xee/0x160 [ 612.437597] blk_mq_init_sched+0x27c/0x530 [ 612.441833] elevator_init+0x3c8/0x500 [ 612.445712] ? elevator_get+0x180/0x180 [ 612.449685] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 612.454695] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 612.459192] blk_mq_sched_init+0x2b/0x40 [ 612.463246] blk_mq_init_allocated_queue+0xf19/0x1580 [ 612.468434] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 612.472919] ? __mutex_init+0x1ef/0x280 [ 612.476902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.482433] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 612.487190] ? idr_alloc+0x145/0x1a0 [ 612.490899] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 612.496082] blk_mq_init_queue+0x63/0xb0 [ 612.500136] loop_add+0x32b/0x9c0 [ 612.503578] ? loop_lookup+0x102/0x220 [ 612.507463] ? loop_queue_rq+0x640/0x640 [ 612.511522] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 612.516706] loop_control_ioctl+0x178/0x500 [ 612.521034] ? loop_add+0x9c0/0x9c0 [ 612.524655] ? expand_files.part.8+0x9a0/0x9a0 [ 612.529244] ? kasan_check_write+0x14/0x20 [ 612.533482] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 612.538405] ? wait_for_completion+0x870/0x870 [ 612.542981] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 612.548166] ? loop_add+0x9c0/0x9c0 [ 612.551790] do_vfs_ioctl+0x1cf/0x16a0 [ 612.555697] ? ioctl_preallocate+0x2e0/0x2e0 [ 612.560102] ? fget_raw+0x20/0x20 [ 612.563548] ? __sb_end_write+0xac/0xe0 [ 612.567515] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 612.573046] ? fput+0x130/0x1a0 [ 612.576317] ? ksys_write+0x1a6/0x250 [ 612.580112] ? security_file_ioctl+0x94/0xc0 [ 612.584515] ksys_ioctl+0xa9/0xd0 [ 612.587968] __x64_sys_ioctl+0x73/0xb0 [ 612.591849] do_syscall_64+0x1b1/0x800 [ 612.595733] ? syscall_return_slowpath+0x5c0/0x5c0 [ 612.600654] ? syscall_return_slowpath+0x30f/0x5c0 [ 612.605588] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 612.610971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.615826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.621004] RIP: 0033:0x455a09 [ 612.624187] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.631884] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 612.639148] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 2018/05/22 07:23:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff00000000}, 0x0, [], {0x77359400}}) [ 612.646405] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 612.653662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 612.660927] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002b 2018/05/22 07:23:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], {0x77359400}}) 2018/05/22 07:23:32 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:32 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x6000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xceffffff}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:32 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000040)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x12) 2018/05/22 07:23:32 executing program 0 (fault-call:2 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40080, 0x0) syncfs(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0xffffffffffffff85, @local={0xfe, 0x80, [], 0xaa}, 0x401}, @in6={0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x400}, @in6={0xa, 0x4e20, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0xc637}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x0, @empty, 0x7fffffff}, @in6={0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0xa55c}], 0xcc) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x100}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x401, 0x3, 0x7, 0xffffffff, "25cd910cf2a54f288ed8bee55166674bedbc3aa2fd4af92fe3609d0f8b3aeee406b618f8e6d76bc989d4fde4", 0x387}, 0x0, 0x0, 0x8, r3, 0x4, 0x1, "9f42f751dbdcd7502ebc29b05546b99ff346b20b68592dc634a266c9593c4fbfea4adf9fee0a1b5d73ecd50282a7be0c8c8f0ea84dc21540c303cbf0d1801c4b", &(0x7f0000000100)='{]trustedusercpuset!user\x00', 0x19, [], [0xfffffffffffffffb, 0x5, 0x8, 0x5]}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000400)={0x2, r4, 0x10002, 0x200}) 2018/05/22 07:23:32 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0x1000000}, 0x0, [], {0x77359400}}) [ 612.959625] FAULT_INJECTION: forcing a failure. [ 612.959625] name failslab, interval 1, probability 0, space 0, times 0 [ 612.970935] CPU: 0 PID: 4470 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 612.978220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.987572] Call Trace: [ 612.990164] dump_stack+0x1b9/0x294 [ 612.993782] ? dump_stack_print_info.cold.2+0x52/0x52 [ 612.998967] should_fail.cold.4+0xa/0x1a [ 613.003028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 613.008120] ? blk_mq_sched_init+0x2b/0x40 [ 613.012348] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 613.017696] ? blk_mq_init_queue+0x63/0xb0 [ 613.021915] ? loop_add+0x32b/0x9c0 [ 613.025531] ? loop_control_ioctl+0x178/0x500 [ 613.030014] ? do_vfs_ioctl+0x1cf/0x16a0 [ 613.034066] ? ksys_ioctl+0xa9/0xd0 [ 613.037679] ? graph_lock+0x170/0x170 [ 613.041468] ? find_held_lock+0x36/0x1c0 [ 613.045519] ? __lock_is_held+0xb5/0x140 [ 613.049575] ? check_same_owner+0x320/0x320 [ 613.053879] ? __ia32_sys_membarrier+0x150/0x150 [ 613.058620] ? kasan_check_write+0x14/0x20 [ 613.062862] ? rcu_note_context_switch+0x710/0x710 [ 613.067780] ? kset_unregister+0x40/0x40 [ 613.071826] __should_failslab+0x124/0x180 [ 613.076053] should_failslab+0x9/0x14 [ 613.079843] kmem_cache_alloc_node_trace+0x26f/0x770 [ 613.084938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.090465] dd_init_queue+0x109/0x5e0 [ 613.094339] ? dd_exit_queue+0x240/0x240 [ 613.098392] ? __kmalloc_node+0x47/0x70 [ 613.102351] ? blk_mq_alloc_rq_map+0x142/0x220 [ 613.106922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.112443] ? blk_mq_sched_alloc_tags.isra.13+0xee/0x160 [ 613.117973] blk_mq_init_sched+0x27c/0x530 [ 613.122201] elevator_init+0x3c8/0x500 [ 613.126073] ? elevator_get+0x180/0x180 [ 613.130036] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 613.135039] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 613.139528] blk_mq_sched_init+0x2b/0x40 [ 613.143575] blk_mq_init_allocated_queue+0xf19/0x1580 [ 613.148758] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 613.153239] ? __mutex_init+0x1ef/0x280 [ 613.157211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.162735] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 613.167481] ? idr_alloc+0x145/0x1a0 [ 613.171182] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 613.176361] blk_mq_init_queue+0x63/0xb0 [ 613.180416] loop_add+0x32b/0x9c0 [ 613.183855] ? loop_lookup+0x102/0x220 [ 613.187727] ? loop_queue_rq+0x640/0x640 [ 613.191780] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 613.196954] loop_control_ioctl+0x178/0x500 [ 613.201262] ? loop_add+0x9c0/0x9c0 [ 613.204885] ? expand_files.part.8+0x9a0/0x9a0 [ 613.209461] ? kasan_check_write+0x14/0x20 [ 613.213690] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 613.218608] ? wait_for_completion+0x870/0x870 [ 613.223178] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 613.228350] ? loop_add+0x9c0/0x9c0 [ 613.231963] do_vfs_ioctl+0x1cf/0x16a0 [ 613.235845] ? ioctl_preallocate+0x2e0/0x2e0 [ 613.240248] ? fget_raw+0x20/0x20 [ 613.243687] ? __sb_end_write+0xac/0xe0 [ 613.247653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 613.253184] ? fput+0x130/0x1a0 [ 613.256457] ? ksys_write+0x1a6/0x250 [ 613.260250] ? security_file_ioctl+0x94/0xc0 [ 613.264645] ksys_ioctl+0xa9/0xd0 [ 613.268097] __x64_sys_ioctl+0x73/0xb0 [ 613.271981] do_syscall_64+0x1b1/0x800 [ 613.275854] ? syscall_return_slowpath+0x5c0/0x5c0 [ 613.280767] ? syscall_return_slowpath+0x30f/0x5c0 [ 613.285688] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 613.291043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.295877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.301052] RIP: 0033:0x455a09 2018/05/22 07:23:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], {0x77359400}}) 2018/05/22 07:23:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') accept4$inet(r0, 0x0, &(0x7f0000000080), 0x800) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:33 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="25000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) r1 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f00000002c0)="20590c158832ec47e28ff83926cbdc12523fc14feeaf9d00a99464fb2c483682a53c90c731b0953f991135e4c2d3b24316adefd4b802ae5c3f14cf0e9e14f224af6e0805c4ef8ba8c148fb3140e422c29049b9aaae726008549bd3493078b79cc94d8f3c3ac412d39b581a2bf7c41302d998944d7a82ee511e7c5df7645f2486355991e57ed54032771a331d0d100b288bb266d415ecc28854da80bae6bb520d27f63ced23dabd681fe3ed2bc4bde03f522cad0b1d1905f7b12b7e558ffcec0aabe4d6f0221c27c2238b2007faa8ccca6aaf1562610886426f31755a916a29bf48a5e48ec10e587ee85bc6218f7cc4edcc") [ 613.304233] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.311927] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 613.319181] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 613.326434] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 613.333697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 613.340951] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002c 2018/05/22 07:23:33 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x80, 0x100) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000100)={0x5, 0x64}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:33 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800000000000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:33 executing program 0 (fault-call:2 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 613.693803] FAULT_INJECTION: forcing a failure. [ 613.693803] name failslab, interval 1, probability 0, space 0, times 0 [ 613.705081] CPU: 1 PID: 4528 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 613.712259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.721599] Call Trace: [ 613.724178] dump_stack+0x1b9/0x294 [ 613.727803] ? dump_stack_print_info.cold.2+0x52/0x52 [ 613.733001] ? kasan_check_write+0x14/0x20 [ 613.737235] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 613.742160] should_fail.cold.4+0xa/0x1a [ 613.746218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 613.751317] ? graph_lock+0x170/0x170 [ 613.755099] ? elevator_init+0x293/0x500 [ 613.759278] ? find_held_lock+0x36/0x1c0 [ 613.763324] ? __lock_is_held+0xb5/0x140 [ 613.767373] ? check_same_owner+0x320/0x320 [ 613.771675] ? print_usage_bug+0xc0/0xc0 [ 613.775722] ? rcu_note_context_switch+0x710/0x710 [ 613.780639] __should_failslab+0x124/0x180 [ 613.784860] should_failslab+0x9/0x14 [ 613.788655] kmem_cache_alloc_node_trace+0x26f/0x770 [ 613.793745] __alloc_disk_node+0xc1/0x500 [ 613.797875] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 613.802555] ? trace_hardirqs_on+0xd/0x10 [ 613.806704] ? blk_queue_flag_set+0xf6/0x160 [ 613.811096] loop_add+0x40e/0x9c0 [ 613.814532] ? loop_queue_rq+0x640/0x640 [ 613.818604] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 613.823919] loop_control_ioctl+0x178/0x500 [ 613.828225] ? loop_add+0x9c0/0x9c0 [ 613.831839] ? expand_files.part.8+0x9a0/0x9a0 [ 613.836403] ? kasan_check_write+0x14/0x20 [ 613.840622] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 613.845533] ? wait_for_completion+0x870/0x870 [ 613.850098] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 613.855269] ? loop_add+0x9c0/0x9c0 [ 613.858888] do_vfs_ioctl+0x1cf/0x16a0 [ 613.862773] ? ioctl_preallocate+0x2e0/0x2e0 [ 613.867173] ? fget_raw+0x20/0x20 [ 613.870609] ? __sb_end_write+0xac/0xe0 [ 613.874570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 613.880084] ? fput+0x130/0x1a0 [ 613.883342] ? ksys_write+0x1a6/0x250 [ 613.887125] ? security_file_ioctl+0x94/0xc0 [ 613.891516] ksys_ioctl+0xa9/0xd0 [ 613.894957] __x64_sys_ioctl+0x73/0xb0 [ 613.898832] do_syscall_64+0x1b1/0x800 [ 613.902709] ? finish_task_switch+0x1ca/0x840 [ 613.907188] ? syscall_return_slowpath+0x5c0/0x5c0 [ 613.912099] ? syscall_return_slowpath+0x30f/0x5c0 [ 613.917020] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 613.922371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.927546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.932718] RIP: 0033:0x455a09 [ 613.935896] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/22 07:23:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfdfdffff}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:33 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x0, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:33 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1c000, 0x0) 2018/05/22 07:23:33 executing program 0 (fault-call:2 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:33 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4c00000000000000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) [ 613.943606] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 613.950855] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 613.958106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 613.965362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 613.972613] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002d 2018/05/22 07:23:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], {0x77359400}}) 2018/05/22 07:23:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc", 0xfffffdfd}, 0x0, [], {0x77359400}}) 2018/05/22 07:23:33 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xc0ffffff, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x3, 0x0) 2018/05/22 07:23:33 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x8b) [ 614.291579] FAULT_INJECTION: forcing a failure. [ 614.291579] name failslab, interval 1, probability 0, space 0, times 0 [ 614.302920] CPU: 1 PID: 4583 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 614.310114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.319458] Call Trace: [ 614.322044] dump_stack+0x1b9/0x294 [ 614.325666] ? dump_stack_print_info.cold.2+0x52/0x52 [ 614.330861] should_fail.cold.4+0xa/0x1a [ 614.334919] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 614.340016] ? blk_mq_sched_init+0x2b/0x40 [ 614.344244] ? blk_mq_init_allocated_queue+0xf19/0x1580 [ 614.349594] ? blk_mq_init_queue+0x63/0xb0 [ 614.353815] ? loop_add+0x32b/0x9c0 [ 614.357426] ? loop_control_ioctl+0x178/0x500 [ 614.361920] ? do_vfs_ioctl+0x1cf/0x16a0 [ 614.365970] ? ksys_ioctl+0xa9/0xd0 [ 614.369590] ? graph_lock+0x170/0x170 [ 614.373385] ? find_held_lock+0x36/0x1c0 [ 614.377443] ? __lock_is_held+0xb5/0x140 [ 614.381508] ? check_same_owner+0x320/0x320 [ 614.385818] ? __ia32_sys_membarrier+0x150/0x150 [ 614.390562] ? kasan_check_write+0x14/0x20 [ 614.394791] ? rcu_note_context_switch+0x710/0x710 [ 614.399719] ? kset_unregister+0x40/0x40 [ 614.403773] __should_failslab+0x124/0x180 [ 614.408006] should_failslab+0x9/0x14 [ 614.411806] kmem_cache_alloc_node_trace+0x26f/0x770 [ 614.416913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.422445] dd_init_queue+0x109/0x5e0 [ 614.426333] ? dd_exit_queue+0x240/0x240 [ 614.430402] ? __kmalloc_node+0x47/0x70 [ 614.434376] ? blk_mq_alloc_rq_map+0x142/0x220 [ 614.438957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.444484] ? blk_mq_sched_alloc_tags.isra.13+0xee/0x160 [ 614.450016] blk_mq_init_sched+0x27c/0x530 [ 614.454252] elevator_init+0x3c8/0x500 [ 614.458127] ? elevator_get+0x180/0x180 [ 614.462090] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 614.467103] ? blk_mq_map_swqueue+0x74b/0xaa0 [ 614.471592] blk_mq_sched_init+0x2b/0x40 [ 614.475645] blk_mq_init_allocated_queue+0xf19/0x1580 [ 614.480827] ? blk_mq_map_swqueue+0xaa0/0xaa0 [ 614.485312] ? __mutex_init+0x1ef/0x280 [ 614.489291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.494815] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 614.499569] ? idr_alloc+0x145/0x1a0 [ 614.503277] ? blk_mq_update_nr_hw_queues+0x4f0/0x4f0 [ 614.508459] blk_mq_init_queue+0x63/0xb0 [ 614.512524] loop_add+0x32b/0x9c0 [ 614.515963] ? loop_lookup+0x102/0x220 [ 614.519842] ? loop_queue_rq+0x640/0x640 [ 614.523899] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 614.529081] loop_control_ioctl+0x178/0x500 [ 614.533400] ? loop_add+0x9c0/0x9c0 [ 614.537020] ? expand_files.part.8+0x9a0/0x9a0 [ 614.541594] ? kasan_check_write+0x14/0x20 [ 614.545824] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 614.550748] ? wait_for_completion+0x870/0x870 [ 614.555330] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 614.560513] ? loop_add+0x9c0/0x9c0 [ 614.564131] do_vfs_ioctl+0x1cf/0x16a0 [ 614.568019] ? ioctl_preallocate+0x2e0/0x2e0 [ 614.572421] ? fget_raw+0x20/0x20 [ 614.575866] ? __sb_end_write+0xac/0xe0 [ 614.579834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 614.585357] ? fput+0x130/0x1a0 [ 614.588631] ? ksys_write+0x1a6/0x250 [ 614.592425] ? security_file_ioctl+0x94/0xc0 [ 614.596824] ksys_ioctl+0xa9/0xd0 [ 614.600270] __x64_sys_ioctl+0x73/0xb0 [ 614.604151] do_syscall_64+0x1b1/0x800 [ 614.608030] ? finish_task_switch+0x1ca/0x840 [ 614.612531] ? syscall_return_slowpath+0x5c0/0x5c0 [ 614.617453] ? syscall_return_slowpath+0x30f/0x5c0 [ 614.622376] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 614.627732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.632571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.637753] RIP: 0033:0x455a09 [ 614.640934] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.648634] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 614.655896] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 614.663152] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 614.670407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 614.677669] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002e 2018/05/22 07:23:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff, [], {0x77359400}}) 2018/05/22 07:23:34 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:34 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4000, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd], {0x77359400}}) 2018/05/22 07:23:34 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 2018/05/22 07:23:34 executing program 0 (fault-call:2 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:34 executing program 6: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb0a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/22 07:23:34 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x300, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000], {0x77359400}}) 2018/05/22 07:23:34 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pause() write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000100000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000900000000000000000000000000000000000000000000000000000000000000000000dfff0000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x8b) 2018/05/22 07:23:34 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x8, 0x8) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockname(r1, &(0x7f00000000c0)=@l2, &(0x7f0000000140)=0x80) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) 2018/05/22 07:23:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xffffffce, [], {0x77359400}}) 2018/05/22 07:23:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], {0x77359400}}) 2018/05/22 07:23:34 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:34 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4c, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) 2018/05/22 07:23:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x200000000000000, [], {0x77359400}}) [ 614.967702] FAULT_INJECTION: forcing a failure. [ 614.967702] name failslab, interval 1, probability 0, space 0, times 0 [ 614.979291] CPU: 0 PID: 4639 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 614.986492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.995855] Call Trace: [ 614.998457] dump_stack+0x1b9/0x294 [ 615.002104] ? dump_stack_print_info.cold.2+0x52/0x52 [ 615.007322] should_fail.cold.4+0xa/0x1a [ 615.011408] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/22 07:23:34 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000000)="72e8eab482fd9009dac3d4c0b66f02caf84730c1706956d599b99394ea8f61cd2bf8", 0x22) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x8, 0x9}, {0x2, 0xe9d}, {0x8, 0x4}, {0x8, 0x800000000}, {0xc, 0x7fff}, {0xa, 0x28}, {0x3, 0x2}, {0xb, 0x7fffffff}, {0x3, 0x3}], 0x9) [ 615.016536] ? graph_lock+0x170/0x170 [ 615.020352] ? find_held_lock+0x36/0x1c0 [ 615.024429] ? __lock_is_held+0xb5/0x140 [ 615.028510] ? check_same_owner+0x320/0x320 [ 615.032844] ? kasan_unpoison_shadow+0x35/0x50 [ 615.037438] ? rcu_note_context_switch+0x710/0x710 [ 615.042371] __should_failslab+0x124/0x180 [ 615.046609] should_failslab+0x9/0x14 [ 615.050405] kmem_cache_alloc_trace+0x2cb/0x780 [ 615.055063] ? part_uevent+0x120/0x120 [ 615.058939] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 615.064311] rand_initialize_disk+0x43/0xc0 [ 615.068635] __alloc_disk_node+0x2b4/0x500 [ 615.072856] ? disk_expand_part_tbl+0x3c0/0x3c0 [ 615.077513] ? blk_queue_flag_set+0xf6/0x160 [ 615.081909] loop_add+0x40e/0x9c0 [ 615.085351] ? loop_queue_rq+0x640/0x640 [ 615.089402] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 615.094576] loop_control_ioctl+0x178/0x500 [ 615.098883] ? loop_add+0x9c0/0x9c0 [ 615.102495] ? expand_files.part.8+0x9a0/0x9a0 [ 615.107066] ? kasan_check_write+0x14/0x20 [ 615.111289] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 615.116211] ? wait_for_completion+0x870/0x870 [ 615.120791] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 615.125989] ? loop_add+0x9c0/0x9c0 [ 615.129628] do_vfs_ioctl+0x1cf/0x16a0 [ 615.133518] ? ioctl_preallocate+0x2e0/0x2e0 [ 615.137933] ? fget_raw+0x20/0x20 [ 615.141391] ? __sb_end_write+0xac/0xe0 [ 615.145356] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.150879] ? fput+0x130/0x1a0 [ 615.154142] ? ksys_write+0x1a6/0x250 [ 615.157931] ? security_file_ioctl+0x94/0xc0 [ 615.162327] ksys_ioctl+0xa9/0xd0 [ 615.165766] __x64_sys_ioctl+0x73/0xb0 [ 615.169645] do_syscall_64+0x1b1/0x800 [ 615.173526] ? finish_task_switch+0x1ca/0x840 [ 615.178008] ? syscall_return_slowpath+0x5c0/0x5c0 [ 615.182938] ? syscall_return_slowpath+0x30f/0x5c0 [ 615.187874] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 615.193228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.198073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.203246] RIP: 0033:0x455a09 [ 615.206419] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/05/22 07:23:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff], {0x77359400}}) [ 615.214112] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 615.221363] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 615.228614] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 615.235867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 615.243124] R13: 00000000000002aa R14: 00000000006f8090 R15: 000000000000002f 2018/05/22 07:23:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0xfdfdffff00000000, [], {0x77359400}}) 2018/05/22 07:23:35 executing program 7: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x60, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x0, [], "3acb3d224487b4b9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000180)) 2018/05/22 07:23:35 executing program 0 (fault-call:2 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/22 07:23:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) 2018/05/22 07:23:35 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x4, 0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0xe002, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x80000) mmap(&(0x7f0000470000/0x2000)=nil, 0x2000, 0x5, 0x32, r1, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x2, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x30d, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x407, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x8000000000001001}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) close(r5) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14, 0x200, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x81) 2018/05/22 07:23:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, "174ea7076fc7900ba2e38ae3e167a20b454f48b22d9bb534c63ae72b534e71d44b6a9c28537505233f5d86fc"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], {0x77359400}}) [ 615.539407] FAULT_INJECTION: forcing a failure. [ 615.539407] name failslab, interval 1, probability 0, space 0, times 0 [ 615.550796] CPU: 1 PID: 4678 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 615.557994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.567354] Call Trace: [ 615.569948] dump_stack+0x1b9/0x294 [ 615.573584] ? dump_stack_print_info.cold.2+0x52/0x52 [ 615.578765] ? print_usage_bug+0xc0/0xc0 [ 615.582821] should_fail.cold.4+0xa/0x1a [ 615.586881] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 615.591980] ? graph_lock+0x170/0x170 [ 615.595773] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 615.600344] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 615.605454] ? find_held_lock+0x36/0x1c0 [ 615.609507] ? __lock_is_held+0xb5/0x140 [ 615.613571] ? check_same_owner+0x320/0x320 [ 615.617879] ? rcu_note_context_switch+0x710/0x710 [ 615.622792] ? print_usage_bug+0xc0/0xc0 [ 615.626837] ? zap_class+0x720/0x720 [ 615.630540] __should_failslab+0x124/0x180 [ 615.634768] should_failslab+0x9/0x14 [ 615.638554] kmem_cache_alloc_trace+0x2cb/0x780 [ 615.643203] ? graph_lock+0x170/0x170 [ 615.646988] ? print_usage_bug+0xc0/0xc0 [ 615.651061] device_create_groups_vargs+0xa7/0x270 [ 615.655980] device_create_vargs+0x46/0x60 [ 615.660214] bdi_register_va.part.10+0xbb/0x9b0 [ 615.664870] ? __lockdep_init_map+0x105/0x590 [ 615.669349] ? cgwb_kill+0x630/0x630 [ 615.673056] ? lockdep_init_map+0x9/0x10 [ 615.677112] ? __init_waitqueue_head+0x96/0x140 [ 615.681796] ? init_wait_entry+0x1b0/0x1b0 [ 615.686028] ? __lockdep_init_map+0x105/0x590 [ 615.690516] ? pm_runtime_init+0x451/0x540 [ 615.694737] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 615.700099] bdi_register+0x101/0x110 [ 615.703886] ? bdi_register_va+0x80/0x80 [ 615.707951] ? graph_lock+0x170/0x170 [ 615.711746] bdi_register_owner+0x5e/0x100 [ 615.715982] __device_add_disk+0xf07/0x1340 [ 615.720307] ? blk_alloc_devt+0x2a0/0x2a0 [ 615.724446] ? vsnprintf+0x242/0x1b40 [ 615.728236] ? pointer+0xa10/0xa10 [ 615.731785] ? __mutex_init+0x1ef/0x280 [ 615.735758] ? sprintf+0xa7/0xd0 [ 615.739120] ? scnprintf+0x120/0x120 [ 615.742820] ? __lockdep_init_map+0x105/0x590 [ 615.747306] device_add_disk+0x22/0x30 [ 615.751179] loop_add+0x70b/0x9c0 [ 615.754625] ? loop_queue_rq+0x640/0x640 [ 615.758677] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 615.763860] loop_control_ioctl+0x178/0x500 [ 615.768164] ? loop_add+0x9c0/0x9c0 [ 615.771781] ? expand_files.part.8+0x9a0/0x9a0 [ 615.776358] ? kasan_check_write+0x14/0x20 [ 615.780596] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 615.785513] ? wait_for_completion+0x870/0x870 [ 615.790084] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 615.795261] ? loop_add+0x9c0/0x9c0 [ 615.799484] do_vfs_ioctl+0x1cf/0x16a0 [ 615.803362] ? ioctl_preallocate+0x2e0/0x2e0 [ 615.807756] ? fget_raw+0x20/0x20 [ 615.811199] ? __sb_end_write+0xac/0xe0 [ 615.815164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 615.820685] ? fput+0x130/0x1a0 [ 615.823949] ? ksys_write+0x1a6/0x250 [ 615.827737] ? security_file_ioctl+0x94/0xc0 [ 615.832132] ksys_ioctl+0xa9/0xd0 [ 615.835572] __x64_sys_ioctl+0x73/0xb0 [ 615.839461] do_syscall_64+0x1b1/0x800 [ 615.843353] ? finish_task_switch+0x1ca/0x840 [ 615.847858] ? syscall_return_slowpath+0x5c0/0x5c0 [ 615.852796] ? syscall_return_slowpath+0x30f/0x5c0 [ 615.857731] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 615.863089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.867926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.873101] RIP: 0033:0x455a09 [ 615.876279] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.884497] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 615.891754] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 615.899012] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 615.906280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 615.913537] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000030 [ 615.921253] WARNING: CPU: 1 PID: 4678 at block/genhd.c:697 __device_add_disk+0x104a/0x1340 [ 615.929654] Kernel panic - not syncing: panic_on_warn set ... [ 615.929654] [ 615.937026] CPU: 1 PID: 4678 Comm: syz-executor0 Not tainted 4.17.0-rc6+ #63 [ 615.944194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.953538] Call Trace: [ 615.956118] dump_stack+0x1b9/0x294 [ 615.959735] ? dump_stack_print_info.cold.2+0x52/0x52 [ 615.964919] ? __device_add_disk+0xf50/0x1340 [ 615.969401] panic+0x22f/0x4de [ 615.972581] ? add_taint.cold.5+0x16/0x16 [ 615.976716] ? __warn.cold.8+0x148/0x1b3 [ 615.980764] ? __device_add_disk+0x104a/0x1340 [ 615.985356] __warn.cold.8+0x163/0x1b3 [ 615.989230] ? __device_add_disk+0x104a/0x1340 [ 615.993798] report_bug+0x252/0x2d0 [ 615.997414] do_error_trap+0x1de/0x490 [ 616.001288] ? math_error+0x420/0x420 [ 616.005076] ? __lockdep_init_map+0x105/0x590 [ 616.009557] ? pm_runtime_init+0x451/0x540 [ 616.013776] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 616.019136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.023965] do_invalid_op+0x1b/0x20 [ 616.027666] invalid_op+0x14/0x20 [ 616.031103] RIP: 0010:__device_add_disk+0x104a/0x1340 [ 616.036271] RSP: 0018:ffff88018df778a8 EFLAGS: 00010246 [ 616.041622] RAX: 0000000000040000 RBX: ffff8801c33d4cc0 RCX: ffffc90001ec8000 [ 616.048878] RDX: 0000000000040000 RSI: ffffffff8343a2fa RDI: 0000000000000005 [ 616.056130] RBP: ffff88018df77a78 R08: ffff8801d84f02c0 R09: ffffed003b5e46d2 [ 616.063386] R10: ffffed003b5e46d2 R11: ffff8801daf23693 R12: 00000000fffffff4 [ 616.070648] R13: ffff88018df77a50 R14: ffff8801c33d5220 R15: ffff8801c33d4cc4 [ 616.077919] ? __device_add_disk+0x104a/0x1340 [ 616.082493] ? __device_add_disk+0x104a/0x1340 [ 616.087062] ? blk_alloc_devt+0x2a0/0x2a0 [ 616.091201] ? vsnprintf+0x242/0x1b40 [ 616.094988] ? pointer+0xa10/0xa10 [ 616.098513] ? __mutex_init+0x1ef/0x280 [ 616.102473] ? sprintf+0xa7/0xd0 [ 616.105826] ? scnprintf+0x120/0x120 [ 616.109533] ? __lockdep_init_map+0x105/0x590 [ 616.114018] device_add_disk+0x22/0x30 [ 616.117892] loop_add+0x70b/0x9c0 [ 616.121331] ? loop_queue_rq+0x640/0x640 [ 616.125389] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 616.130565] loop_control_ioctl+0x178/0x500 [ 616.134870] ? loop_add+0x9c0/0x9c0 [ 616.138484] ? expand_files.part.8+0x9a0/0x9a0 [ 616.143055] ? kasan_check_write+0x14/0x20 [ 616.147275] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 616.152203] ? wait_for_completion+0x870/0x870 [ 616.156773] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 616.161946] ? loop_add+0x9c0/0x9c0 [ 616.165567] do_vfs_ioctl+0x1cf/0x16a0 [ 616.169445] ? ioctl_preallocate+0x2e0/0x2e0 [ 616.173845] ? fget_raw+0x20/0x20 [ 616.177284] ? __sb_end_write+0xac/0xe0 [ 616.181254] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 616.186772] ? fput+0x130/0x1a0 [ 616.190036] ? ksys_write+0x1a6/0x250 [ 616.193824] ? security_file_ioctl+0x94/0xc0 [ 616.198217] ksys_ioctl+0xa9/0xd0 [ 616.201661] __x64_sys_ioctl+0x73/0xb0 [ 616.205532] do_syscall_64+0x1b1/0x800 [ 616.209406] ? finish_task_switch+0x1ca/0x840 [ 616.213887] ? syscall_return_slowpath+0x5c0/0x5c0 [ 616.218802] ? syscall_return_slowpath+0x30f/0x5c0 [ 616.223720] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 616.229088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.234096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.239270] RIP: 0033:0x455a09 [ 616.242444] RSP: 002b:00007f1a4e401c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.250141] RAX: ffffffffffffffda RBX: 00007f1a4e4026d4 RCX: 0000000000455a09 [ 616.257391] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000013 [ 616.264644] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 616.271906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 616.279157] R13: 00000000000002aa R14: 00000000006f8090 R15: 0000000000000030 [ 616.287429] Dumping ftrace buffer: [ 616.291286] (ftrace buffer empty) [ 616.294979] Kernel Offset: disabled [ 616.298587] Rebooting in 86400 seconds..